[Git][security-tracker-team/security-tracker][master] 32 commits: lts: async-http-client postponed in bookworm
Utkarsh Gupta (@utkarsh)
utkarsh at debian.org
Sat Oct 3 01:21:47 BST 2026
Utkarsh Gupta pushed to branch master at Debian Security Tracker / security-tracker
Commits:
1f3646f6 by Utkarsh Gupta at 2026-10-02T20:13:19+05:30
lts: async-http-client postponed in bookworm
- - - - -
c636118f by Utkarsh Gupta at 2026-10-02T20:16:01+05:30
lts: netdata not-affected in bookworm
- - - - -
384a9cf9 by Utkarsh Gupta at 2026-10-02T20:20:15+05:30
lts: nvidia-graphics-drivers-tesla-470 ignored in bookworm
- - - - -
860399c2 by Utkarsh Gupta at 2026-10-02T20:23:12+05:30
lts: triage pypdf2 in bookworm
- - - - -
5049f759 by Utkarsh Gupta at 2026-10-02T20:30:44+05:30
lts: apcupsd postponed in bookworm
- - - - -
5d5631d3 by Utkarsh Gupta at 2026-10-02T20:39:46+05:30
lts: barman postponed in bookworm
- - - - -
720ee23e by Utkarsh Gupta at 2026-10-02T20:50:51+05:30
lts: bluez-alsa ignored in bookworm
- - - - -
5fd83fa2 by Utkarsh Gupta at 2026-10-02T20:59:30+05:30
lts: dcmtk postponed in bookworm
- - - - -
3c01013b by Utkarsh Gupta at 2026-10-02T21:27:55+05:30
lts: evolution postponed in bookworm
- - - - -
097c2ebb by Utkarsh Gupta at 2026-10-02T21:31:25+05:30
lts: groff postponed in bookworm
- - - - -
f07a592b by Utkarsh Gupta at 2026-10-02T21:38:58+05:30
lts: hugo postponed in bookworm
- - - - -
042285fe by Utkarsh Gupta at 2026-10-02T21:42:32+05:30
lts: imagemagick postponed in bookworm
- - - - -
4df17ea3 by Utkarsh Gupta at 2026-10-02T21:51:35+05:30
lts: inetutils postponed in bookworm
- - - - -
22c5444d by Utkarsh Gupta at 2026-10-02T21:54:50+05:30
lts: iperf3 not-affected in bookworm
- - - - -
6b2218c5 by Utkarsh Gupta at 2026-10-02T22:01:29+05:30
lts: jawn postponed in bookworm
- - - - -
b5eceeb7 by Utkarsh Gupta at 2026-10-02T22:06:53+05:30
lts: libextractor postponed in bookworm
- - - - -
8f7605ec by Utkarsh Gupta at 2026-10-02T22:11:01+05:30
lts: libimager-perl postponed in bookworm
- - - - -
40a43cd7 by Utkarsh Gupta at 2026-10-02T22:13:33+05:30
lts: libmms postponed in bookworm
- - - - -
58535f1d by Utkarsh Gupta at 2026-10-02T22:17:25+05:30
lts: triage libslirp in bookworm
- - - - -
0a58f7ea by Utkarsh Gupta at 2026-10-02T22:19:52+05:30
lts: libstb postponed in bookworm
- - - - -
164d5d77 by Utkarsh Gupta at 2026-10-02T22:41:55+05:30
lts: libx11 postponed in bookworm
- - - - -
a585252a by Utkarsh Gupta at 2026-10-02T22:57:00+05:30
lts: libxpm postponed in bookworm
- - - - -
8efd1ca0 by Utkarsh Gupta at 2026-10-02T23:06:58+05:30
lts: libxrender postponed in bookworm
- - - - -
225ee92a by Utkarsh Gupta at 2026-10-02T23:12:21+05:30
lts: libxs-parse-keyword-perl not-affected in bookworm
- - - - -
9314aecb by Utkarsh Gupta at 2026-10-02T23:32:11+05:30
lts: libxtst postponed in bookworm
- - - - -
68c3bf78 by Utkarsh Gupta at 2026-10-02T23:52:49+05:30
lts: triage lwip in bookworm
- - - - -
c76e753f by Utkarsh Gupta at 2026-10-02T23:55:25+05:30
lts: lxc postponed in bookworm
- - - - -
1d199673 by Utkarsh Gupta at 2026-10-03T00:24:24+05:30
lts: mariadb-connector-java not-affected in bookworm
- - - - -
271e4b73 by Utkarsh Gupta at 2026-10-03T00:53:05+05:30
lts: modemmanager not-affected in bookworm
- - - - -
e61a87dd by Utkarsh Gupta at 2026-10-03T00:59:14+05:30
lts: mujs postponed in bookworm
- - - - -
a64de308 by Utkarsh Gupta at 2026-10-03T01:08:30+05:30
lts: mxml postponed in bookworm
- - - - -
296475ba by Utkarsh Gupta at 2026-10-03T01:23:54+05:30
lts: nanomsg postponed in bookworm
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1843,48 +1843,56 @@ CVE-2026-103001 (PyJWT is a Python implementation of JSON Web Token standards. F
CVE-2026-103000 (pypdf is a free and open-source pure-python PDF library. Prior to 6.19 ...)
- pypdf 6.19.0-1
- pypdf2 <removed>
+ [bookworm] - pypdf2 <not-affected> (Page label support introduced in pypdf 3.2.0)
NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-w23x-9jrw-r45c
NOTE: https://github.com/py-pdf/pypdf/pull/4096
NOTE: Fixed by: https://github.com/py-pdf/pypdf/commit/0d8b5a8832cde1ba308b5c27567b879b7b7eed4a (6.19.0)
CVE-2026-102999 (pypdf is a free and open-source pure-python PDF library. Prior to 6.19 ...)
- pypdf 6.19.0-1
- pypdf2 <removed>
+ [bookworm] - pypdf2 <not-affected> (Attachment retrieval API introduced in pypdf 3.5.0)
NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-v247-6f48-mgcj
NOTE: https://github.com/py-pdf/pypdf/pull/4081
NOTE: Fixed by: https://github.com/py-pdf/pypdf/commit/6b10556d13609a68f9ed18bb29fdd8bba88eb2c3 (6.19.0)
CVE-2026-102998 (pypdf is a free and open-source pure-python PDF library. Prior to 6.19 ...)
- pypdf 6.19.0-1
- pypdf2 <removed>
+ [bookworm] - pypdf2 <not-affected> (Appearance stream generation introduced in pypdf 3.10.0)
NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-php9-fj8v-98fj
NOTE: https://github.com/py-pdf/pypdf/pull/4087
NOTE: Fixed by: https://github.com/py-pdf/pypdf/commit/959467a9b95be83e2dc5ae873ece5f371263ede7 (6.19.0)
CVE-2026-102997 (pypdf is a free and open-source pure-python PDF library. Prior to 6.18 ...)
- pypdf 6.19.0-1
- pypdf2 <removed>
+ [bookworm] - pypdf2 <postponed> (Minor issue, DoS)
NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-jw7q-gvrg-4vj3
NOTE: https://github.com/py-pdf/pypdf/pull/4073
NOTE: Fixed by: https://github.com/py-pdf/pypdf/commit/d9d38cf99b115deb562d3b68f36c33027bc04f79 (6.18.1)
CVE-2026-102996 (pypdf is a free and open-source pure-python PDF library. Prior to 6.18 ...)
- pypdf 6.19.0-1
- pypdf2 <removed>
+ [bookworm] - pypdf2 <not-affected> (Per-glyph /Widths map introduced in pypdf 4.0.0)
NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-g9cg-prrw-2r8q
NOTE: https://github.com/py-pdf/pypdf/pull/4072
NOTE: Fixed by: https://github.com/py-pdf/pypdf/commit/0fb26eb8cdd01c44b3b2c9fe8329751be2f7cfd5 (6.18.1)
CVE-2026-102995 (pypdf is a free and open-source pure-python PDF library. Prior to 6.18 ...)
- pypdf 6.19.0-1
- pypdf2 <removed>
+ [bookworm] - pypdf2 <postponed> (Minor issue, DoS)
NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-fp3h-c4fm-7vvf
NOTE: https://github.com/py-pdf/pypdf/pull/4071
NOTE: Fixed by: https://github.com/py-pdf/pypdf/commit/319d0b823ce2c311a2435e9fd93c13994d32bb51 (6.18.1)
CVE-2026-102994 (pypdf is a free and open-source pure-python PDF library. Prior to 6.18 ...)
- pypdf 6.19.0-1
- pypdf2 <removed>
+ [bookworm] - pypdf2 <postponed> (Minor issue, DoS)
NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-5jq2-8x83-x246
NOTE: https://github.com/py-pdf/pypdf/pull/4055
NOTE: Fixed by: https://github.com/py-pdf/pypdf/commit/82501d2993c6387833c4949d205caeb188f8bb9e (6.18.0)
CVE-2026-102993 (pypdf is a free and open-source pure-python PDF library. Prior to 6.17 ...)
- pypdf 6.19.0-1
- pypdf2 <removed>
+ [bookworm] - pypdf2 <not-affected> (Page label support introduced in pypdf 3.2.0)
NOTE: https://github.com/py-pdf/pypdf/security/advisories/GHSA-qv6h-rv94-w285
NOTE: https://github.com/py-pdf/pypdf/pull/4047
NOTE: Fixed by: https://github.com/py-pdf/pypdf/commit/89db7c4fe9315ecc964bfdf05a4e8c4b94175163 (6.17.0)
@@ -2025,6 +2033,7 @@ CVE-2026-102089 (Kiteworks Email Protection Gateway before version 9.5.0 is vuln
CVE-2026-101887 (BlueALSA (bluez-alsa/bluealsad) contains a division-by-zero vulnerabil ...)
- bluez-alsa <unfixed>
[trixie] - bluez-alsa <no-dsa> (Minor issue)
+ [bookworm] - bluez-alsa <ignored> (LC3plus support not built; LC3plus library not packaged in Debian)
NOTE: Fixed by: https://github.com/arkq/bluez-alsa/commit/1a84465dd860d1be9dcf62339c6273e9e0632dd2
CVE-2026-101885 (ZeroClaw versions before 0.8.5 built with plugins-wasm feature contain ...)
NOT-FOR-US: ZeroClaw
@@ -2487,6 +2496,7 @@ CVE-2026-47604 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -2506,6 +2516,7 @@ CVE-2026-47603 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -2525,6 +2536,7 @@ CVE-2026-47602 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -2544,6 +2556,7 @@ CVE-2026-47601 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -2563,6 +2576,7 @@ CVE-2026-47600 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -2582,6 +2596,7 @@ CVE-2026-47599 (NVIDIA GPU Display Driver for Linux contains a vulnerability in
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -2601,6 +2616,7 @@ CVE-2026-47598 (NVIDIA GPU Display Driver for Linux contains a vulnerability in
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -2620,6 +2636,7 @@ CVE-2026-47597 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -2639,6 +2656,7 @@ CVE-2026-47596 (NVIDIA GPU Display Driver for Linux contains a vulnerability in
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -2658,6 +2676,7 @@ CVE-2026-47595 (NVIDIA GPU Display Driver for Linux contains a vulnerability in
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -2677,6 +2696,7 @@ CVE-2026-47594 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -2698,6 +2718,7 @@ CVE-2026-47592 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -2717,6 +2738,7 @@ CVE-2026-47591 (NVIDIA GPU Display Driver for Linux contains a vulnerability in
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -2736,6 +2758,7 @@ CVE-2026-47590 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -2755,6 +2778,7 @@ CVE-2026-47589 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -2774,6 +2798,7 @@ CVE-2026-47588 (NVIDIA GPU Display Driver for Linux contains a vulnerability whe
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -2793,6 +2818,7 @@ CVE-2026-47587 (NVIDIA GPU Display Driver for Linux contains a vulnerability whe
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -2812,6 +2838,7 @@ CVE-2026-47586 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -2863,6 +2890,7 @@ CVE-2026-47569 (NVIDIA GPU Display Driver for Linux contains a vulnerability in
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -2882,6 +2910,7 @@ CVE-2026-47568 (NVIDIA GPU Display Driver for Linux contains a vulnerability in
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -2901,6 +2930,7 @@ CVE-2026-47567 (NVIDIA GPU Display Driver for Linux contains a vulnerability in
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -2920,6 +2950,7 @@ CVE-2026-47566 (NVIDIA GPU Display Driver for Linux contains a vulnerability in
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -2939,6 +2970,7 @@ CVE-2026-47565 (NVIDIA GPU Display Driver for Linux contains a vulnerability in
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -2958,6 +2990,7 @@ CVE-2026-47563 (NVIDIA GPU Display Driver for Linux contains a vulnerability in
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -2977,6 +3010,7 @@ CVE-2026-47562 (NVIDIA GPU Display Driver for Linux contains a vulnerability in
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -2996,6 +3030,7 @@ CVE-2026-47561 (NVIDIA GPU Display Driver for Linux contains a vulnerability in
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3015,6 +3050,7 @@ CVE-2026-47560 (NVIDIA GPU Display Driver for Linux contains a vulnerability in
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3034,6 +3070,7 @@ CVE-2026-47559 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3053,6 +3090,7 @@ CVE-2026-47558 (NVIDIA GPU Display Driver for Linux contains a vulnerability in
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3072,6 +3110,7 @@ CVE-2026-47557 (NVIDIA GPU Display Driver for Linux contains a vulnerability in
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3091,6 +3130,7 @@ CVE-2026-47556 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3110,6 +3150,7 @@ CVE-2026-47555 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3129,6 +3170,7 @@ CVE-2026-47554 (NVIDIA GPU Display Driver for Linux contains a vulnerability in
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3148,6 +3190,7 @@ CVE-2026-47553 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3167,6 +3210,7 @@ CVE-2026-47552 (NVIDIA GPU Display Driver for Linux contains a vulnerability in
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3186,6 +3230,7 @@ CVE-2026-47551 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3207,6 +3252,7 @@ CVE-2026-47549 (NVIDIA GPU Display Driver for Linux contains a vulnerability in
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3226,6 +3272,7 @@ CVE-2026-47548 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3245,6 +3292,7 @@ CVE-2026-47547 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3264,6 +3312,7 @@ CVE-2026-47546 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3283,6 +3332,7 @@ CVE-2026-47545 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3304,6 +3354,7 @@ CVE-2026-47543 (VIDIA GPU Display Driver for Windows and Linux contains a vulner
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3323,6 +3374,7 @@ CVE-2026-47542 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3344,6 +3396,7 @@ CVE-2026-47540 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3365,6 +3418,7 @@ CVE-2026-47538 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3384,6 +3438,7 @@ CVE-2026-47537 (NVIDIA GPU Display Driver for Linux contains a vulnerability in
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3407,6 +3462,7 @@ CVE-2026-47534 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3426,6 +3482,7 @@ CVE-2026-47533 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3445,6 +3502,7 @@ CVE-2026-47532 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3464,6 +3522,7 @@ CVE-2026-47531 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3483,6 +3542,7 @@ CVE-2026-47530 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3502,6 +3562,7 @@ CVE-2026-47529 (NVIDIA GPU Display Driver for Linux contains a vulnerability in
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3521,6 +3582,7 @@ CVE-2026-47528 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3540,6 +3602,7 @@ CVE-2026-47527 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3559,6 +3622,7 @@ CVE-2026-47526 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3578,6 +3642,7 @@ CVE-2026-47525 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3597,6 +3662,7 @@ CVE-2026-47524 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3616,6 +3682,7 @@ CVE-2026-47523 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3635,6 +3702,7 @@ CVE-2026-47522 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3660,6 +3728,7 @@ CVE-2026-47518 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3679,6 +3748,7 @@ CVE-2026-47517 (NVIDIA GPU Display Driver for Linux contains a vulnerability in
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3698,6 +3768,7 @@ CVE-2026-47516 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3717,6 +3788,7 @@ CVE-2026-47515 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3736,6 +3808,7 @@ CVE-2026-47514 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3755,6 +3828,7 @@ CVE-2026-47513 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3774,6 +3848,7 @@ CVE-2026-47512 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3793,6 +3868,7 @@ CVE-2026-47511 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3812,6 +3888,7 @@ CVE-2026-47510 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3831,6 +3908,7 @@ CVE-2026-47509 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3850,6 +3928,7 @@ CVE-2026-47508 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3869,6 +3948,7 @@ CVE-2026-47507 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3888,6 +3968,7 @@ CVE-2026-47506 (NVIDIA GPU Display Driver for Windows contains a vulnerability i
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3909,6 +3990,7 @@ CVE-2026-47504 (NVIDIA Linux GPU Display Driver contains a vulnerability in the
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3928,6 +4010,7 @@ CVE-2026-47503 (NVIDIA GPU Display Driver for Linux contains a vulnerability in
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3949,6 +4032,7 @@ CVE-2026-47501 (NVIDIA GPU Display Driver for Linux contains a vulnerability in
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3968,6 +4052,7 @@ CVE-2026-47500 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -3993,6 +4078,7 @@ CVE-2026-47496 (NVIDIA GPU Display Driver for Linux contains a vulnerability in
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -4014,6 +4100,7 @@ CVE-2026-47494 (NVIDIA GPU Display Driver for Linux contains a vulnerability whe
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -4035,6 +4122,7 @@ CVE-2026-47492 (NVIDIA GPU Display Driver for Windows and Linux contains a vulne
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -4054,6 +4142,7 @@ CVE-2026-47491 (NVIDIA GPU Display Driver for Linux contains a vulnerability in
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -4073,6 +4162,7 @@ CVE-2026-47489 (NVIDIA GPU Display Driver for Linux contains a vulnerability in
- nvidia-graphics-drivers-tesla-460 460.106.00-3
NOTE: 460.106.00-3 turned the package into a metapackage to aid switching to nvidia-graphics-drivers-tesla-470
- nvidia-graphics-drivers-tesla-470 <unfixed>
+ [bookworm] - nvidia-graphics-drivers-tesla-470 <ignored> (Non-free not supported)
- nvidia-graphics-drivers-tesla 525.147.05-6
NOTE: 525.147.05-6 turned the package into a metapackage to aid switching to nvidia-graphics-drivers
- nvidia-open-gpu-kernel-modules <unfixed> (bug #1149643)
@@ -4164,10 +4254,12 @@ CVE-2026-103437 (Improper neutralization of Script-Related HTML tags in a web pa
CVE-2026-103436 (apcupsd through 3.14.14 discloses uninitialized stack memory in getups ...)
- apcupsd <unfixed>
[trixie] - apcupsd <no-dsa> (Minor issue)
+ [bookworm] - apcupsd <postponed> (Minor issue; needs a malicious NIS server allowed by hosts.conf, localhost by default)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2493140
CVE-2026-103432 (apcupsd through 3.14.14 has an sscanf stack-based buffer overflow in g ...)
- apcupsd <unfixed>
[trixie] - apcupsd <no-dsa> (Minor issue)
+ [bookworm] - apcupsd <postponed> (Minor issue; needs a malicious NIS server allowed by hosts.conf, localhost by default)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2493140
CVE-2026-103399 (A flaw was found in SoupServer (libsoup). When an HTTP/1.x client send ...)
- libsoup3 3.8.0-1
@@ -4439,6 +4531,7 @@ CVE-2026-94204 (The central cloud storage backend for the entire dashcam platfor
CVE-2026-93853 (Unverified ownership in Barman snapshot backup deletion allows a princ ...)
- barman 3.20.1-1
[trixie] - barman <no-dsa> (Minor issue)
+ [bookworm] - barman <postponed> (Minor issue; GCP snapshot backups only, needs a separate catalog writer)
NOTE: https://www.enterprisedb.com/docs/security/advisories/cve202693853/
CVE-2026-93580 (The InPost PL WordPress plugin before 1.9.8 does not verify the authen ...)
NOT-FOR-US: WordPress plugin
@@ -4785,10 +4878,12 @@ CVE-2026-102842 (A vulnerability was identified in gedelumbung HospitalManagemen
CVE-2026-102805 (A flaw has been found in Nothings stb up to 1.16. This affects the fun ...)
- libstb <unfixed>
[trixie] - libstb <postponed> (Minor issue, revisit when fixed upstream)
+ [bookworm] - libstb <postponed> (Minor issue, revisit when fixed upstream)
NOTE: https://github.com/nothings/stb/issues/1964
CVE-2026-102804 (A vulnerability was detected in Nothings stb up to 2c980bb59875b0d3214 ...)
- libstb <unfixed>
[trixie] - libstb <postponed> (Minor issue, revisit when fixed upstream)
+ [bookworm] - libstb <postponed> (Minor issue, revisit when fixed upstream)
NOTE: https://github.com/nothings/stb/issues/1961
CVE-2026-102794 (A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0. This iss ...)
NOT-FOR-US: Ziroom ZHOME A0101
@@ -4811,16 +4906,19 @@ CVE-2026-102620 (A vulnerability was determined in Freedesktop Poppler 26.06.0/2
CVE-2026-101283 (iperf3 3.20\u20133.21 (esnet/iperf) has a pre-auth heap buffer overflo ...)
- iperf3 3.22-0.1 (bug #1149699)
[trixie] - iperf3 <no-dsa> (Minor issue)
+ [bookworm] - iperf3 <not-affected> (Vulnerable decrypt_rsa_message() code introduced in 3.20)
NOTE: https://github.com/esnet/iperf/releases/tag/3.22
NOTE: https://github.com/esnet/iperf/commit/e29f6504dcfac7d2961fed4fd66364115e36fe5a (3.22)
CVE-2026-101276 (iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use- ...)
- iperf3 3.22-0.1 (bug #1149699)
[trixie] - iperf3 <no-dsa> (Minor issue)
+ [bookworm] - iperf3 <not-affected> (Use-after-free needs worker threads, introduced in 3.16)
NOTE: https://github.com/esnet/iperf/releases/tag/3.22
NOTE: https://github.com/esnet/iperf/commit/9bea2d9a49d54870e2405c209fa60bf134a8a1a1 (3.22)
CVE-2026-102253 (iperf3 versions prior to 3.22 contains a denial of service vulnerabili ...)
- iperf3 3.22-0.1 (bug #1149699)
[trixie] - iperf3 <no-dsa> (Minor issue)
+ [bookworm] - iperf3 <not-affected> (Vulnerable UDP per-datagram loop introduced in 3.21)
NOTE: https://github.com/esnet/iperf/commit/a25378f8cbbaa7b3db5674ca3dcc19658ae65da3 (3.22)
NOTE: https://github.com/esnet/iperf/releases/tag/3.22
CVE-2026-102252 (A path traversal vulnerability (CWE-22) in the embedded VMDK filesyste ...)
@@ -5309,6 +5407,7 @@ CVE-2026-102639 (MobilityDB version 1.3.0 and earlier contains an out-of-bounds
CVE-2026-102635 (ImageMagick versions before 7.1.2-32 and 6.9.13-57 contain uninitializ ...)
- imagemagick <unfixed>
[trixie] - imagemagick <no-dsa> (Minor issue)
+ [bookworm] - imagemagick <postponed> (Minor issue)
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-rvv7-5mh8-vcfc
NOTE: https://github.com/ImageMagick/ImageMagick/commit/a0ca2c739c0216ff4efbd631d1ba7fd54dba1ff4 (7.1.2-32)
NOTE: https://github.com/ImageMagick/ImageMagick6/commit/95dc0fd21a684bfac2bdb6fb6638c0ab271adbe5 (6.9.13-57)
@@ -6116,6 +6215,7 @@ CVE-2026-84784 (Issue summary: A malicious remote peer may flood the local QUIC
CVE-2026-XXXX [groff issues]
- groff 1.24.2-1
[trixie] - groff <no-dsa> (Minor issue)
+ [bookworm] - groff <postponed> (Minor issue; command injection only via -Thtml/mmroff/pdfmom on untrusted input)
NOTE: https://cgit.git.savannah.gnu.org/cgit/groff.git/commit/?h=1.24.x&id=c0fc6947165cef2cefa1062f95f7eba989540081
NOTE: https://cgit.git.savannah.gnu.org/cgit/groff.git/commit/?h=1.24.x&id=7845666dc6d9699ab372ef71b906a1921cd3d0c5
NOTE: https://cgit.git.savannah.gnu.org/cgit/groff.git/commit/?h=1.24.x&id=6bca15dee3ee04b7529a000fb43cc72649aaee27
@@ -6568,23 +6668,28 @@ CVE-2026-95104 (Stack-based buffer overflow vulnerability exists in BUFFALO Wi-F
CVE-2026-94287 (A denial of service via unsigned underflow in libXpm's write path in l ...)
- libxpm <unfixed> (bug #1149666)
[trixie] - libxpm <no-dsa> (Minor issue)
+ [bookworm] - libxpm <postponed> (Minor issue)
NOTE: https://gitlab.freedesktop.org/xorg/lib/libxpm/-/merge_requests/32
NOTE: Fixed by: https://gitlab.freedesktop.org/xorg/lib/libxpm/-/commit/6e42eb9e105ae17318f3ba5656d94cd3f80eeaa3
CVE-2026-94286 (An out-of-bounds read in libXtst's RECORD reply parser in libXtst befo ...)
- libxtst <unfixed> (bug #1149667)
[trixie] - libxtst <no-dsa> (Minor issue)
+ [bookworm] - libxtst <postponed> (Minor issue)
NOTE: https://gitlab.freedesktop.org/xorg/lib/libxtst/-/merge_requests/10
CVE-2026-94285 (An out-of-bounds read in libX11's byte-oriented codeset parser in libX ...)
- libx11 <unfixed> (bug #1149668)
[trixie] - libx11 <no-dsa> (Minor issue)
+ [bookworm] - libx11 <postponed> (Minor issue)
NOTE: https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/310
CVE-2026-94284 (An out-of-bounds read vulnerability in libX11's XIM trigger-key regist ...)
- libx11 <unfixed> (bug #1149668)
[trixie] - libx11 <no-dsa> (Minor issue)
+ [bookworm] - libx11 <postponed> (Minor issue)
NOTE: https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/310
CVE-2026-94283 (An out-of-bounds read vulnerability in libX11's XIM (X Input Method) a ...)
- libx11 <unfixed> (bug #1149668)
[trixie] - libx11 <no-dsa> (Minor issue)
+ [bookworm] - libx11 <postponed> (Minor issue)
NOTE: https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/310
CVE-2026-94194 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response S ...)
NOT-FOR-US: elixir-mint Mint
@@ -7014,6 +7119,7 @@ CVE-2026-100750 (Joomla Extension - regularlabs.com - LFI / SSRF in Modules Anyw
CVE-2026-85644 (XS::Parse::Infix versions from 0.40 through 0.49 for Perl treat a numb ...)
- libxs-parse-keyword-perl 0.51-1 (bug #1149243)
[trixie] - libxs-parse-keyword-perl <no-dsa> (Minor issue)
+ [bookworm] - libxs-parse-keyword-perl <not-affected> (Vulnerable code introduced in 0.40)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/43916020/
NOTE: https://metacpan.org/release/PEVANS/XS-Parse-Keyword-0.50/diff/PEVANS/XS-Parse-Keyword-0.49/src/infix.c
CVE-2026-91006 (Apache Karaf's instance-management service (InstanceServiceImpl) build ...)
@@ -7238,6 +7344,7 @@ CVE-2026-62439
CVE-2026-95622
- modemmanager <unfixed> (bug #1149673)
[trixie] - modemmanager <no-dsa> (Minor issue)
+ [bookworm] - modemmanager <not-affected> (Cell Broadcast support introduced in 1.24.0)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2540006
CVE-2026-91182
NOT-FOR-US: Red Hat open-cluster-management
@@ -7388,6 +7495,7 @@ CVE-2026-100741 (Eval injection in the JScript event-script dispatcher in Progre
CVE-2026-XXXX [Infinite loops and heap OOB read when parsing malformed ASF headers]
- libmms <unfixed> (bug #1149047)
[trixie] - libmms <no-dsa> (Minor issue)
+ [bookworm] - libmms <postponed> (Minor issue; client-side DoS when connecting to a malicious MMS server)
CVE-2026-XXXX [unbounded list indices from a Word document reach a wild pointer dereference in wvAssembleSimplePAP]
- wv <unfixed> (bug #1148725)
CVE-2026-XXXX [GHSA-h547-rmjf-5m2m: Table permission bypass using trailing newlines in table names]
@@ -7600,16 +7708,19 @@ CVE-2026-XXXX [TROVE-2026-053]
CVE-2026-95510 [use of uninitialized struct sigaction]
- inetutils <unfixed> (bug #1149672)
[trixie] - inetutils <no-dsa> (Minor issue)
+ [bookworm] - inetutils <postponed> (Minor issue)
NOTE: https://www.openwall.com/lists/oss-security/2026/09/26/1
NOTE: Introduced with: https://codeberg.org/inetutils/inetutils/commit/9476515fd31e416739d850c1948e9222a53deea9 (inetutils-1_9)
NOTE: Fixed by: https://codeberg.org/inetutils/inetutils/commit/f756321da9b964fc27fc43652b73913117883047
CVE-2026-100395 [lxc-copy host-context hostname update follows symlink]
- lxc <unfixed>
[trixie] - lxc <no-dsa> (Minor issue)
+ [bookworm] - lxc <postponed> (Minor issue; needs an admin to clone an untrusted container)
NOTE: https://github.com/lxc/lxc/security/advisories/GHSA-r23j-58gg-pjjc
CVE-2026-XXXX [GHSA-4xwm-pr6h-55r8: Untrusted pointer dereference in the LXC command socket handler]
- lxc <unfixed>
[trixie] - lxc <no-dsa> (Minor issue)
+ [bookworm] - lxc <postponed> (Minor issue; peer must be root or the monitor's own uid/gid)
NOTE: https://github.com/lxc/lxc/security/advisories/GHSA-4xwm-pr6h-55r8
CVE-2026-97163 (Joomla Extension - lomart.fr - Unauthenticated remote code installatio ...)
NOT-FOR-US: Joomla
@@ -7707,6 +7818,7 @@ CVE-2026-100695 (Adminer before 6.0.2 contains a cross-site scripting vulnerabil
CVE-2026-100694 (Hugo is a static site generator. In versions from v0.56.0 through v0.1 ...)
- hugo 0.166.0-1
[trixie] - hugo <no-dsa> (Minor issue)
+ [bookworm] - hugo <postponed> (Limited support, minor issue; raw HTML via Org content, needs untrusted authors)
NOTE: https://github.com/gohugoio/hugo/security/advisories/GHSA-pq74-mj4h-cjq2
CVE-2026-100693 (Hugo versions from v0.162.0 before v0.166.0 contain a case-sensitive v ...)
- hugo 0.166.0-1
@@ -7721,6 +7833,7 @@ CVE-2026-100692 (Hugo is a static site generator. In versions after v0.123.0 and
CVE-2026-100691 (Hugo versions 0.75.0 through 0.165.x contain a stored cross-site scrip ...)
- hugo 0.166.0-1
[trixie] - hugo <no-dsa> (Minor issue)
+ [bookworm] - hugo <postponed> (Limited support, minor issue; unescaped lineAnchors, needs untrusted authors)
NOTE: https://github.com/gohugoio/hugo/security/advisories/GHSA-q4xf-287f-98r8
CVE-2026-100690 (Hugo versions from v0.161.0 through v0.165.0 run Node.js tools (css.Po ...)
- hugo 0.166.0-1
@@ -8258,6 +8371,7 @@ CVE-2026-100368 (CliInvoke is a .NET library for invoking command-line programs,
CVE-2026-100310 (GNU libextractor before 1.16 loads plugins from an untrusted search pa ...)
- libextractor 1:1.17-1
[trixie] - libextractor <no-dsa> (Minor issue)
+ [bookworm] - libextractor <postponed> (Minor issue; only matters for setgid consumers such as doodle)
NOTE: https://www.openwall.com/lists/oss-security/2026/09/25/25
NOTE: https://github.com/Haitam-lazaar/libextractor-privesc
NOTE: Fixed by: https://git.gnunet.org/gnunet/libextractor/commit/6edfa653c048800e24a17f7e8cc2bb42659b8d01.html
@@ -10644,6 +10758,7 @@ CVE-2026-97061 (Black Candy through 3.2.1 fails to scope playlist search queries
CVE-2026-97059 (DCMTK through 3.7.0 contains a heap over-read vulnerability in Concate ...)
- dcmtk <unfixed> (bug #1149131)
[trixie] - dcmtk <no-dsa> (Minor issue)
+ [bookworm] - dcmtk <postponed> (Minor issue; ConcatenationLoader API, not used by any DCMTK tool)
NOTE: https://support.dcmtk.org/redmine/issues/1281
NOTE: Fixed by: https://github.com/DCMTK/dcmtk/commit/18379d5b8d234977cc30644e9e70d76d89c87285
NOTE: Fixed by: https://github.com/DCMTK/dcmtk/commit/c33790827a192a598d20463af701a8b819f46ec1
@@ -10788,6 +10903,7 @@ CVE-2026-88390 (An out-of-bounds write vulnerability in jslGetTokenValueAsString
CVE-2026-88385 (Mini-XML 4.0.5 contains a memory leak vulnerability in mxml_load_data( ...)
- mxml 4.0.6-2
[trixie] - mxml <no-dsa> (Minor issue)
+ [bookworm] - mxml <postponed> (Minor issue)
NOTE: https://github.com/michaelrsweet/mxml/issues/356
NOTE: Fixed by: https://github.com/michaelrsweet/mxml/commit/83ef80ae3c5413b73f501edb59ee74e31ce399d0 (v4.0.6)
CVE-2026-88384 (OpenEXR 3.4.14 contains a NULL Pointer Dereference in the C++ attribut ...)
@@ -10850,6 +10966,7 @@ CVE-2026-88365 (minimp3 commit ea99364f contains an integer overflow vulnerabili
CVE-2026-88362 (MuJS e892c9fdb contains an incorrect numeric conversion vulnerability ...)
- mujs 1.3.10-2 (bug #1149057)
[trixie] - mujs <no-dsa> (Minor issue)
+ [bookworm] - mujs <postponed> (Minor issue)
NOTE: https://bugs.ghostscript.com/show_bug.cgi?id=709636
NOTE: Fixed by: https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mujs.git/commit/?id=8a32c397b28fe45747ac4e9e4f3dca049825eda7
CVE-2026-88361 (SumatraPDF 3.6.1 contains an integer overflow vulnerability in EngineM ...)
@@ -12189,6 +12306,7 @@ CVE-2026-97155 (Fabasoft Folio Client before 2026, a locally installed component
CVE-2026-97152 (Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely expl ...)
- nanomsg <unfixed> (bug #1148968)
[trixie] - nanomsg <no-dsa> (Minor issue)
+ [bookworm] - nanomsg <postponed> (Minor issue; ws:// listeners only, fortified build turns overflow into an abort)
NOTE: https://github.com/nanomsg/nanomsg/pull/1130
NOTE: Fixed by: https://github.com/nanomsg/nanomsg/commit/867c475cca52df0f705420dd7751da4ce5c2adfc (1.2.3)
NOTE: Fixed by: https://github.com/nanomsg/nanomsg/commit/6dac4ea9bd0f8cd215925aefd7fdcc62714f67d7 (1.2.3)
@@ -13087,6 +13205,7 @@ CVE-2026-61834 (scim-patch is a library for applying SCIM patch operations. Prio
CVE-2026-61814 (Jawn is an open source JSON parser. Prior to 1.7.0, Jawn's AsyncParser ...)
- jawn <unfixed>
[trixie] - jawn <no-dsa> (Minor issue)
+ [bookworm] - jawn <postponed> (Minor issue; needs AsyncParser, which no reverse dependency uses)
NOTE: https://github.com/typelevel/jawn/security/advisories/GHSA-w4cm-gvhj-cgw6
NOTE: Fixed by: https://github.com/typelevel/jawn/commit/cddcd5e3387c356b05953f7b2af103d309687e4b (v1.7.0)
CVE-2026-61695 (Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, an ...)
@@ -13100,6 +13219,7 @@ CVE-2026-5695 (Arbitrary file upload vulnerability due to a lack of proper valid
CVE-2026-59990 (Jawn is an open source JSON parser. Prior to 1.7.0, Jawn parse methods ...)
- jawn <unfixed>
[trixie] - jawn <no-dsa> (Minor issue)
+ [bookworm] - jawn <postponed> (Minor issue; DoS, only used in Debian by sbt-serialization)
NOTE: https://github.com/typelevel/jawn/security/advisories/GHSA-cc4v-rvgp-2pf3
NOTE: Fixed by: https://github.com/typelevel/jawn/commit/191cb3a44e77f1afab439ee636bf66bdf3c54a04 (v1.7.0)
NOTE: Fixed by: https://github.com/typelevel/jawn/commit/6219666641f9408498f85868f835e17bd8a72fed (v1.7.0)
@@ -13739,6 +13859,7 @@ CVE-2026-91024 (The Booking Manager WordPress plugin before 2.1.21 does not san
CVE-2026-91018 (lwIP (Lightweight IP)has a double free vulnerability, which could cras ...)
- lwip <unfixed> (bug #1148822)
[trixie] - lwip <no-dsa> (Minor issue)
+ [bookworm] - lwip <postponed> (Minor issue; needs an app-configured 6LoWPAN netif, no reverse dependencies)
NOTE: Fixed by: https://cgit.git.savannah.gnu.org/cgit/lwip.git/commit/?id=f873b6295933e4149a2132adf3e9a2d2a676a5ec
CVE-2026-90985 (The WPC Smart Compare for WooCommerce WordPress plugin before 6.6.1 do ...)
NOT-FOR-US: WordPress plugin
@@ -13798,6 +13919,7 @@ CVE-2026-87979 (The Paymob for WooCommerce WordPress plugin before 4.1.14 does n
CVE-2026-87121 (lwIPTCP/IP Stack MQTTis vulnerable to an out-of-bounds write, which ma ...)
- lwip <unfixed> (bug #1148822)
[trixie] - lwip <no-dsa> (Minor issue)
+ [bookworm] - lwip <ignored> (MQTT client app not built)
NOTE: Fixed by: https://cgit.git.savannah.gnu.org/cgit/lwip.git/commit/?id=68b2c1191886578d40342846db6ab9a0099c2f40
NOTE: Fixed by: https://cgit.git.savannah.gnu.org/cgit/lwip.git/commit/?id=f89407ea711879c04d91c92b35d67be78bbaf0f1
CVE-2026-87074 (The Forminator Forms WordPress plugin before 1.57.2.1 does not bind i ...)
@@ -14450,6 +14572,7 @@ CVE-2026-95511
CVE-2026-95508 (A heap-based buffer overflow was found in the DHCPv6 and TFTP response ...)
- libslirp 4.9.5-1 (bug #1148836)
[trixie] - libslirp <no-dsa> (Minor issue)
+ [bookworm] - libslirp <postponed> (Minor issue; overflow needs a non-default, very small interface MTU)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2537748
NOTE: Fixed by: https://gitlab.freedesktop.org/slirp/libslirp/-/commit/97f2dd0afea0db8b31135f768ecafe0775722a25 (v4.9.5)
NOTE: Fixed by: https://gitlab.freedesktop.org/slirp/libslirp/-/commit/5815f119c334c26e6e7a14ac87eca12b69918627 (v4.9.5)
@@ -14458,6 +14581,7 @@ CVE-2026-95508 (A heap-based buffer overflow was found in the DHCPv6 and TFTP re
CVE-2026-95507
- libslirp 4.9.5-1 (bug #1148835)
[trixie] - libslirp <no-dsa> (Minor issue)
+ [bookworm] - libslirp <not-affected> (Vulnerable NC-SI OEM handler code introduced in 4.8.0)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2537747
NOTE: Fixed by: https://gitlab.freedesktop.org/slirp/libslirp/-/commit/b4b2b07812fcadd2754281e5ae8d9fe2bfb3c96a (v4.9.5)
CVE-2026-95503 (A flaw was found in the Kerberos federation provider of Keycloak, an o ...)
@@ -14624,18 +14748,25 @@ CVE-2026-83660 (Adobe Campaign Classic (ACC) is affected by a Server-Side Reques
NOT-FOR-US: Adobe
CVE-2026-83603 (Netdata is an open source observability tool. Prior to 2.10.4, the set ...)
- netdata <removed>
+ [bookworm] - netdata <not-affected> (Vulnerable code not present; ndsudo helper introduced in 1.45.0)
CVE-2026-83602 (Netdata is an open source observability tool. From 2.0.0 until 2.11.0, ...)
- netdata <removed>
+ [bookworm] - netdata <not-affected> (Vulnerable code not present; /api/v3 introduced in 2.0.0)
CVE-2026-83601 (Netdata is an open source observability tool. Prior to 2.10.4, an auth ...)
- netdata <removed>
+ [bookworm] - netdata <not-affected> (Vulnerable code not present; streaming SLOT support introduced in 1.44.0)
CVE-2026-83600 (Netdata is an open source observability tool. Prior to 2.10.4, an auth ...)
- netdata <removed>
+ [bookworm] - netdata <not-affected> (Vulnerable code not present; streaming SLOT support introduced in 1.44.0)
CVE-2026-83599 (Netdata is an open source observability tool. Prior to 2.11.0, Netdata ...)
- netdata <removed>
+ [bookworm] - netdata <not-affected> (Vulnerable code not present; WebSocket server introduced in 2.6.0)
CVE-2026-83598 (Netdata is an open source observability tool. From rom 2.0.0 until 2.1 ...)
- netdata <removed>
+ [bookworm] - netdata <not-affected> (Windows-specific)
CVE-2026-83597 (Netdata is an open source observability tool. From version 2.0.0 until ...)
- netdata <removed>
+ [bookworm] - netdata <not-affected> (Windows-specific)
CVE-2026-82443 (Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forg ...)
NOT-FOR-US: Adobe
CVE-2026-82013 (Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forg ...)
@@ -15306,6 +15437,7 @@ CVE-2026-88978 (Hatchet is a platform for orchestrating background tasks, AI age
CVE-2026-88807 (A heap overflow in libXrender before 0.9.13 inRenderQueryPictFormats c ...)
- libxrender <unfixed> (bug #1148735)
[trixie] - libxrender <no-dsa> (Minor issue)
+ [bookworm] - libxrender <postponed> (Minor issue)
NOTE: https://gitlab.freedesktop.org/xorg/lib/libxrender/-/merge_requests/19
CVE-2026-88806 (A malicious X server could exploit a buffer overflow in libX11 before ...)
- libx11 <unfixed> (bug #1148733)
@@ -17417,12 +17549,14 @@ CVE-2026-77874 (IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5.SP1, and 3
CVE-2026-93019 (Imager versions before 1.036 for Perl exit the process reading a TGA w ...)
- libimager-perl 1.036+dfsg-1
[trixie] - libimager-perl <no-dsa> (Minor issue)
+ [bookworm] - libimager-perl <postponed> (Minor issue; crafted TGA colour-map length makes the process exit)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/43654761/
NOTE: https://github.com/tonycoz/imager/security/advisories/GHSA-p4vw-rc54-p2c2
NOTE: Fixed by: https://github.com/tonycoz/imager/commit/74ed50e0625f9f51054e595bb4a8da92c1e0d571 (v1.036)
CVE-2026-93018 (Imager versions before 1.036 for Perl disclose uninitialised heap memo ...)
- libimager-perl 1.036+dfsg-1
[trixie] - libimager-perl <no-dsa> (Minor issue)
+ [bookworm] - libimager-perl <postponed> (Minor issue; off-by-one on paletted index discloses uninitialised heap)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/43654795/
NOTE: https://github.com/tonycoz/imager/security/advisories/GHSA-j7v7-cm4g-vrgf
NOTE: Fixed by: https://github.com/tonycoz/imager/commit/dcf0a52e2732399d42ab44d98af6934658d068ee (v1.036)
@@ -18193,6 +18327,7 @@ CVE-2026-85999 (Soup Sieve is a CSS selector library designed to be used with Be
NOTE: Fixed by: https://github.com/facelessuser/soupsieve/commit/cf198fcddc9230f06ed39f974eba0ce076b85cda (2.9)
CVE-2026-85721 (The AsyncHttpClient (AHC) library allows Java applications to easily e ...)
- async-http-client <unfixed> (bug #1148410)
+ [bookworm] - async-http-client <postponed> (Minor issue; client-side OOM needs a hostile or MITM server)
NOTE: https://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-7grg-jcf7-rpmx
NOTE: Fixed by: https://github.com/AsyncHttpClient/async-http-client/commit/5ee2841cbf268bba4a200578be3938ccfc6cc6d6 (async-http-client-project-2.16.1)
NOTE: Fixed by: https://github.com/AsyncHttpClient/async-http-client/commit/e9f2f7423e0f6503f529656f2955a1317e56ba14 (async-http-client-project-2.16.1)
@@ -18200,12 +18335,14 @@ CVE-2026-85721 (The AsyncHttpClient (AHC) library allows Java applications to ea
NOTE: Fixed by: https://github.com/AsyncHttpClient/async-http-client/commit/e1871a19972fb496be1b8ac6be11d79e22ff2162 (async-http-client-project-3.0.12)
CVE-2026-85720 (The AsyncHttpClient (AHC) library allows Java applications to easily e ...)
- async-http-client <unfixed> (bug #1148410)
+ [bookworm] - async-http-client <postponed> (Minor issue; only with origin auth via an HTTP proxy to an HTTPS origin)
NOTE: https://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-xr57-gcx8-52hf
NOTE: https://github.com/AsyncHttpClient/async-http-client/pull/2234
NOTE: Fixed by: https://github.com/AsyncHttpClient/async-http-client/commit/9dba5ac988b7e750551f59b2eab550b60ac8a0d6 (async-http-client-project-2.16.1)
NOTE: Fixed by: https://github.com/AsyncHttpClient/async-http-client/commit/d07dbc79f5cf378f63c246f6101d7579ace55acc (async-http-client-project-3.0.12)
CVE-2026-85719 (The AsyncHttpClient (AHC) library allows Java applications to easily e ...)
- async-http-client <unfixed> (bug #1148410)
+ [bookworm] - async-http-client <postponed> (Minor issue; only with an authenticated SOCKS proxy)
NOTE: https://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-x5w6-vm3f-pp6f
NOTE: Fixed by: https://github.com/AsyncHttpClient/async-http-client/commit/718ed2e86126663a88ea3db7a88cbbf93f0069b5 (async-http-client-project-2.16.1)
NOTE: Fixed by: https://github.com/AsyncHttpClient/async-http-client/commit/abaa8bd260beda3b85825ff95069ed11eaf4ca8d (async-http-client-project-2.16.1)
@@ -18414,6 +18551,7 @@ CVE-2026-61793 (Nuxt OG Image generates OG Images with Vue templates in Nuxt. Fr
CVE-2026-61700 (MariaDB Connector/J is used to connect applications developed in Java ...)
- mariadb-connector-java 2.7.15-1
[trixie] - mariadb-connector-java <no-dsa> (Minor issue)
+ [bookworm] - mariadb-connector-java <not-affected> (Only affects 3.x; 2.x already enforces allowLocalInfile)
NOTE: https://jira.mariadb.org/browse/CONJ-1318
NOTE: https://github.com/mariadb-corporation/mariadb-connector-j/security/advisories/GHSA-wxmm-q36w-r9xj
NOTE: Fixed by: https://github.com/mariadb-corporation/mariadb-connector-j/commit/0205d8be947918566cd9ce5a9db149541bbc8dee (3.5.9)
@@ -26906,6 +27044,7 @@ CVE-2026-91770 (IceHRM before 36.0.0 fails to validate employee ownership on sev
CVE-2026-91752 (GNU libextractor before 1.15 contains a stack-based buffer overflow vu ...)
- libextractor 1:1.17-1
[trixie] - libextractor <no-dsa> (Minor issue)
+ [bookworm] - libextractor <postponed> (Minor issue; plugins run out-of-process by default)
NOTE: https://github.com/Haitam-lazaar/libextractor-ole2-rce
NOTE: https://git.gnunet.org/gnunet/libextractor/commit/04004eb19033e093938138b09befdf31e71e8522.html
CVE-2026-91751 (Flextype CMS through 1.0.0-alpha.3 fails to properly validate id and n ...)
@@ -31981,6 +32120,7 @@ CVE-2026-88860 (Capgo fails to clean up channel permission overrides when a user
CVE-2026-88859 (A flaw was found in Evolution. A remote attacker can exploit this vuln ...)
- evolution <unfixed> (bug #1147400)
[trixie] - evolution <no-dsa> (Minor issue)
+ [bookworm] - evolution <postponed> (Minor issue; needs a click on a spoofed vCard button in HTML mail)
NOTE: https://gitlab.gnome.org/GNOME/evolution/-/work_items/3388
NOTE: Fixed by: https://gitlab.gnome.org/GNOME/evolution/-/commit/a6f37ef58f9889e361022d46e70b8a53b6f9fd97 (3.62.0)
CVE-2026-88790 (A security vulnerability has been detected in proma-ai Proma up to 0.1 ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/4b2b352337e21e0722803f7d7187ed7659b0f8d9...296475ba12119d1e65c31daadde55f08fa5f97d8
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/4b2b352337e21e0722803f7d7187ed7659b0f8d9...296475ba12119d1e65c31daadde55f08fa5f97d8
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261003/d0e58a33/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list