DEBIAN-CVE-2026-115822

Bulletin has no description...

DEBIAN-CVE-2026-115825

Bulletin has no description...

DEBIAN-CVE-2026-115824

Bulletin has no description...

DEBIAN-CVE-2026-115823

Bulletin has no description...

DEBIAN-CVE-2026-115817

Bulletin has no description...

DEBIAN-CVE-2026-116196

Bulletin has no description...

DEBIAN-CVE-2026-116194

Bulletin has no description...

DEBIAN-CVE-2026-116189

Bulletin has no description...

DEBIAN-CVE-2026-116191

Bulletin has no description...

DEBIAN-CVE-2026-116192

Bulletin has no description...

DEBIAN-CVE-2026-116190

Bulletin has no description...

DEBIAN-CVE-2026-116188

Bulletin has no description...

DEBIAN-CVE-2026-116158

Bulletin has no description...

DEBIAN-CVE-2026-116156

Bulletin has no description...

DEBIAN-CVE-2026-116159

Bulletin has no description...

DEBIAN-CVE-2026-116160

Bulletin has no description...

DEBIAN-CVE-2026-116157

Bulletin has no description...

DEBIAN-CVE-2026-116155

Bulletin has no description...

DEBIAN-CVE-2026-116151

Bulletin has no description...

DEBIAN-CVE-2026-116153

Bulletin has no description...

DEBIAN-CVE-2026-116150

Bulletin has no description...

DEBIAN-CVE-2026-116154

Bulletin has no description...

DEBIAN-CVE-2026-116149

Bulletin has no description...

DEBIAN-CVE-2026-116152

Bulletin has no description...

DEBIAN-CVE-2026-116147

Bulletin has no description...

DEBIAN-CVE-2026-116142

Bulletin has no description...

DEBIAN-CVE-2026-116145

Bulletin has no description...

DEBIAN-CVE-2026-116143

Bulletin has no description...

DEBIAN-CVE-2026-116148

Bulletin has no description...

DEBIAN-CVE-2026-116146

Bulletin has no description...

DEBIAN-CVE-2026-116144

Bulletin has no description...

DEBIAN-CVE-2026-116140

Bulletin has no description...

DEBIAN-CVE-2026-116141

Bulletin has no description...

DEBIAN-CVE-2026-115557

Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration...

DEBIAN-CVE-2026-114629

Web::Simple versions before 0.035 for Perl allocate a buffer sized by the Content-Length header for urlencoded body parameters. Web::Dispatch::ParamParser::getunpackedbodyfrom reads an application/x-www-form-urlencoded body using a single read call, with no cap and the return value ignored. Perl'...

DEBIAN-CVE-2026-116013

OpenResty lua-resty-dns before 0.24 contains an improper input validation vulnerability in parsesection and decodename that fails to check resource record lengths against the received message. Attackers controlling or spoofing a queried nameserver can send truncated record headers or RDATA, raisi...

DEBIAN-CVE-2026-116014

open62541 1.5.0 before 1.5.7 contains an integer overflow in UADataTypefromStructureDescription that wraps the 16-bit memSize field for large custom structure definitions. A malicious OPC UA server can supply DataType definitions via UAClientgetRemoteDataTypes, causing decodeBinaryStructure to...

DEBIAN-CVE-2026-115936

Bulletin has no description...

DEBIAN-CVE-2026-115893

Wasmtime is a runtime for WebAssembly. Prior to 36.0.19, 48.0.7, and 49.0.4, the Cranelift compiler backend on aarch64 can compile a Wasm brtable instruction with more than approximately 256,000 targets so that it has an incorrect conditional branch target. The branch can then jump to arbitrary...

DEBIAN-CVE-2026-115889

Wasmtime is a runtime for WebAssembly. Prior to 36.0.19 and 43.0.0, the Cranelift compiler backend bit-packs SSA value indices in a way that can silently overflow in release builds when compiling a sufficiently large or specially crafted Wasm function with many SSA values. The overflow can make...

DEBIAN-CVE-2026-109411

Bulletin has no description...

DEBIAN-CVE-2026-83813

Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.names.dns.DNSDatagramProtocol accepts a UDP DNS response for a pending query when its 16-bit transaction ID matches but does not verify that the response came from the queried host...

DEBIAN-CVE-2026-115778

Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.conch.telnet.Telnet.dataReceived appends every byte received after IAC SB to a persistent subnegotiation buffer until IAC SE is received, without applying a maximum length. Telnet...

DEBIAN-CVE-2026-115775

Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, the twisted.words.xish.domish ExpatElementStream parser allows an unauthenticated remote peer to keep a container element open while continuously adding child elements. The parser retains t...

DEBIAN-CVE-2026-115776

Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.words.protocols.irc.IRC.dataReceived retains all bytes received without a line feed in its per-connection buffer and applies no maximum line length. The twisted.words.service.IRCUse...

DEBIAN-CVE-2026-115877

Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.web.http.HTTPChannel.headerReceived rejects a NUL byte in an HTTP header value but accepts a bare carriage return or bare line feed. Because Twisted splits header lines only on CRLF...

DEBIAN-CVE-2026-115774

Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.mail.imap4.IMAP4Server reaches twisted.mail.imap4.parseNestedParens with a negative literal size in an authenticated SEARCH command after the client enters the selected mailbox stat...

DEBIAN-CVE-2026-113877

HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matched as regular expressions. languagematch interpolates each Accept-Language range into the pattern /^$range-/i without escaping it, so regular expression syntax in the header reaches the...

DEBIAN-CVE-2026-115580

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.2, an attacker can craft a PDF with a standard cross-reference table whose declared entry count exceeds what the file can contain, causing excessive processing and long runtimes when the file is opened. This issue is fixed in...

DEBIAN-CVE-2026-115585

pypdf is a free and open-source pure-python PDF library. Prior to 6.21.2, an incomplete remediation for repeated malformed cross-reference entries in GHSA-55h5-xmcq-c37v could still trigger a complete PDF stream reload during each recovery attempt even when a recovery cache was present, causing...