Debian
CompanyVulnerabilities
29 CVEs in our records, 1 known exploited (on CISA's KEV list).
- CVE-2026-111497 Exploited added to KEV 27 Oct
Security timeline
- Vulnerability reported by Debian Security AdvisoriesDebian issues vim security update fixing 40 vulnerabilities
- Security update reported by Debian Security AdvisoriesDebian updates nss package to remove compromised eMudhra certificates
- Security update reported by Debian Security AdvisoriesDebian issues security update fixing multiple vulnerabilities in DPDK packet processing libraries
- Security update reported by Debian Security AdvisoriesDebian issues security update DSA-6598-1 for Thunderbird
Recent news
Debian issues vim security update fixing 40 vulnerabilities
Debian advisory DSA-6600-1 covers 40 CVEs in Vim, spanning path traversal in the tar and zip plugins, buffer overflows and underflows, out-of-bounds reads and writes, crashes, and command or code injection. Several issues are reachable through netrw, NetBeans, completion, spell files and tag files, so the risk comes from opening untrusted content. Systems running Vim should install the Debian update.
Debian updates nss package to remove compromised eMudhra certificates
Debian Security Advisory DSA-6599-1 provides updated nss packages that remove three eMudhra root certificates: eMudhra emSign Root CA - G3, eMudhra emSign Root CA - C1 and emSign ECC Root CA - C3. The advisory states that several eMudhra intermediate CA certificates were compromised, and the update removes the affected trust anchors from the system store.
Debian issues security update fixing multiple vulnerabilities in DPDK packet processing libraries
Debian Security Advisory DSA-6597-1 patches several vulnerabilities in the dpdk package, a library suite for fast packet processing. Depending on which features are enabled, crafted packets or malicious guest requests could trigger denial of service or memory corruption. Administrators running dpdk on Debian should apply the vendor update.
Debian issues security update DSA-6598-1 for Thunderbird
Debian Security Advisory DSA-6598-1 provides a security update for the Thunderbird mail client. It addresses multiple security issues that could allow arbitrary code execution or information disclosure. Administrators running Debian-based systems with Thunderbird should apply the update.