Releases: HomeLabHD/synapse
Releases · HomeLabHD/synapse
Release list
latest-dev
📦 synapse — v0.0.0-dev+8614544
Release type: prerelease • Commit:
8614544
Security: 🛡️ ❌ Critical — 7 critical and 136 high vulnerabilities detected
Image Availability
| Registry | Image | Tags |
|---|---|---|
| Docker Hub | docker.io/hlhd/synapse |
dev-8614544 latest-dev |
| cr.pcfae.com | cr.pcfae.com/hlhd/synapse |
dev-8614544 latest-dev |
| GitHub Container Registry | ghcr.io/homelabhd/synapse |
dev-8614544 latest-dev |
Digest pull commands & supply chain artifacts
docker.io/hlhd/synapse
docker pull docker.io/hlhd/synapse@sha256:031573d6ae4b635ae794561dbc2e64d146e77c14ce6f3af1308586335372c096
cr.pcfae.com/hlhd/synapse
docker pull cr.pcfae.com/hlhd/synapse@sha256:031573d6ae4b635ae794561dbc2e64d146e77c14ce6f3af1308586335372c096
ghcr.io/homelabhd/synapse
docker pull ghcr.io/homelabhd/synapse@sha256:031573d6ae4b635ae794561dbc2e64d146e77c14ce6f3af1308586335372c096
Notable Changes
Features
- image: package a hardened synapse image with s3 media and the antispam hook (SoFMeRight)
Documentation
- refresh generated badges (stagefreight) ×2
- drop the decorative emoji from the title (SoFMeRight)
- follow the org readme structure and document configuration (SoFMeRight)
Maintenance
- governance reconcile from gitlab.prplanit.com/PrPlanIT/MaintenancePolicy (StageFreight) ×3
Security
🛡️ ❌ Critical — 7 critical and 136 high vulnerabilities detected
Vulnerability details (7 critical, 136 high, 173 medium, 106 low)
| Severity | CVE | Package | Installed | Fixed | Description |
|---|---|---|---|---|---|
| Critical | CVE-2026-6653 | libxml2 | 2.12.7+dfsg+really2.9.14-2.1+deb13u3 | — | Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper... |
| Critical | CVE-2026-13221 | perl-base | 5.40.1-6 | 5.40.1-6+deb13u1 | Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string... |
| Critical | CVE-2026-42496 | perl-base | 5.40.1-6 | 5.40.1-6+deb13u1 | Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory. _make_special_file() passes the tar header's linkname to symlink()... |
| Critical | CVE-2026-8376 | perl-base | 5.40.1-6 | 5.40.1-6+deb13u1 | Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit... |
| Critical | CVE-2025-68121 | stdlib | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may... |
| Critical | GO-2026-4337 | stdlib | go1.24.4 | 1.24.13 | During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may... |
| Critical | CVE-2026-27143 | stdlib | go1.24.4 | 1.25.9 | Arithmetic over induction variables in loops were not correctly checked for underflow or overflow. As a result, the compiler would allow for invalid indexing to occur at runtime, potentially... |
| High | CVE-2026-76642 | bsdutils | 1:2.41.5-0+deb13u1 | — | util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing... |
| High | CVE-2026-78408 | bsdutils | 1:2.41.5-0+deb13u1 | — | The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve()... |
| High | CVE-2026-78409 | bsdutils | 1:2.41.5-0+deb13u1 | — | The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW... |
| High | CVE-2026-78410 | bsdutils | 1:2.41.5-0+deb13u1 | — | A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount... |
| High | CVE-2026-12064 | curl | 8.14.1-2+deb13u4 | 8.21.0 | When a user invokes curl using a schemeless URL combined with --proto-default sftp (or scp), a disconnect occurs between the tool layer and libcurl... |
| High | CVE-2026-8286 | curl | 8.14.1-2+deb13u4 | 8.21.0 | A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it should not. |
| High | CVE-2026-8458 | curl | 8.14.1-2+deb13u4 | 8.21.0 | libcurl might in some circumstances reuse the wrong connection when asked to do Negotiate-authenticated ones, even when they are set to use different 'services'. libcurl features a pool of recent... |
| High | CVE-2026-8927 | curl | 8.14.1-2+deb13u4 | 8.21.0 | When reusing a libcurl handle for sequential transfers driven by environment-variable proxy configuration, libcurl fails to clear the proxy authentication state between requests... |
| High | CVE-2026-41992 | gzip | 1.13-1 | 1.13-1+deb13u1 | GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single... |
| High | CVE-2026-54369 | libacl1 | 2.3.2-2+b1 | — | acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that... |
| High | CVE-2026-76642 | libblkid1 | 2.41.5-0+deb13u1 | — | util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing... |
| High | CVE-2026-78408 | libblkid1 | 2.41.5-0+deb13u1 | — | The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve()... |
| High | CVE-2026-78409 | libblkid1 | 2.41.5-0+deb13u1 | — | The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW... |
| High | CVE-2026-78410 | libblkid1 | 2.41.5-0+deb13u1 | — | A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount... |
| High | CVE-2026-12064 | libcurl4t64 | 8.14.1-2+deb13u4 | — | When a user invokes curl using a schemeless URL combined with --proto-default sftp (or scp), a disconnect occurs between the tool layer and libcurl... |
| High | CVE-2026-8286 | libcurl4t64 | 8.14.1-2+deb13u4 | — | A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it should not. |
| High | CVE-2026-8458 | libcurl4t64 | 8.14.1-2+deb13u4 | — | libcurl might in some circumstances reuse the wrong connection when asked to do Negotiate-authenticated ones, even when they are set to use different 'services'. libcurl features a pool of recent... |
| High | CVE-2026-8927 | libcurl4t64 | 8.14.1-2+deb13u4 | — | When reusing a libcurl handle for sequential transfers driven by environment-variable proxy configuration, libcurl fails to clear the proxy authentication state between requests... |
| High | CVE-2026-76642 | liblastlog2-2 | 2.41.5-0+deb13u1 | — | util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing... |
| High | CVE-2026-78408 | liblastlog2-2 | 2.41.5-0+deb13u1 | — | The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve()... |
| High | CVE-2026-78409 | liblastlog2-2 | 2.41.5-0+deb13u1 | — | The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW... |
| High | CVE-2026-78410 | liblastlog2-2 | 2.41.5-0+deb13u1 | — | A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount... |
| High | CVE-2026-76642 | libmount1 | 2.41.5-0+deb13u1 | — | util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing... |
| High | CVE-2026-78408 | libmount1 | 2.41.5-0+deb13u1 | — | The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve()... |
| High | CVE-2026-78409 | libm... |
dev-8614544
📦 synapse — v0.0.0-dev+8614544
Release type: prerelease • Commit:
8614544
Security: 🛡️ ❌ Critical — 7 critical and 136 high vulnerabilities detected
Image Availability
| Registry | Image | Tags |
|---|---|---|
| Docker Hub | docker.io/hlhd/synapse |
dev-8614544 latest-dev |
| cr.pcfae.com | cr.pcfae.com/hlhd/synapse |
dev-8614544 latest-dev |
| GitHub Container Registry | ghcr.io/homelabhd/synapse |
dev-8614544 latest-dev |
Digest pull commands & supply chain artifacts
docker.io/hlhd/synapse
docker pull docker.io/hlhd/synapse@sha256:031573d6ae4b635ae794561dbc2e64d146e77c14ce6f3af1308586335372c096
cr.pcfae.com/hlhd/synapse
docker pull cr.pcfae.com/hlhd/synapse@sha256:031573d6ae4b635ae794561dbc2e64d146e77c14ce6f3af1308586335372c096
ghcr.io/homelabhd/synapse
docker pull ghcr.io/homelabhd/synapse@sha256:031573d6ae4b635ae794561dbc2e64d146e77c14ce6f3af1308586335372c096
Notable Changes
Features
- image: package a hardened synapse image with s3 media and the antispam hook (SoFMeRight)
Documentation
- refresh generated badges (stagefreight) ×2
- drop the decorative emoji from the title (SoFMeRight)
- follow the org readme structure and document configuration (SoFMeRight)
Maintenance
- governance reconcile from gitlab.prplanit.com/PrPlanIT/MaintenancePolicy (StageFreight) ×3
Security
🛡️ ❌ Critical — 7 critical and 136 high vulnerabilities detected
Vulnerability details (7 critical, 136 high, 173 medium, 106 low)
| Severity | CVE | Package | Installed | Fixed | Description |
|---|---|---|---|---|---|
| Critical | CVE-2026-6653 | libxml2 | 2.12.7+dfsg+really2.9.14-2.1+deb13u3 | — | Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper... |
| Critical | CVE-2026-13221 | perl-base | 5.40.1-6 | 5.40.1-6+deb13u1 | Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string... |
| Critical | CVE-2026-42496 | perl-base | 5.40.1-6 | 5.40.1-6+deb13u1 | Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory. _make_special_file() passes the tar header's linkname to symlink()... |
| Critical | CVE-2026-8376 | perl-base | 5.40.1-6 | 5.40.1-6+deb13u1 | Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit... |
| Critical | CVE-2025-68121 | stdlib | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may... |
| Critical | GO-2026-4337 | stdlib | go1.24.4 | 1.24.13 | During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may... |
| Critical | CVE-2026-27143 | stdlib | go1.24.4 | 1.25.9 | Arithmetic over induction variables in loops were not correctly checked for underflow or overflow. As a result, the compiler would allow for invalid indexing to occur at runtime, potentially... |
| High | CVE-2026-76642 | bsdutils | 1:2.41.5-0+deb13u1 | — | util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing... |
| High | CVE-2026-78408 | bsdutils | 1:2.41.5-0+deb13u1 | — | The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve()... |
| High | CVE-2026-78409 | bsdutils | 1:2.41.5-0+deb13u1 | — | The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW... |
| High | CVE-2026-78410 | bsdutils | 1:2.41.5-0+deb13u1 | — | A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount... |
| High | CVE-2026-12064 | curl | 8.14.1-2+deb13u4 | 8.21.0 | When a user invokes curl using a schemeless URL combined with --proto-default sftp (or scp), a disconnect occurs between the tool layer and libcurl... |
| High | CVE-2026-8286 | curl | 8.14.1-2+deb13u4 | 8.21.0 | A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it should not. |
| High | CVE-2026-8458 | curl | 8.14.1-2+deb13u4 | 8.21.0 | libcurl might in some circumstances reuse the wrong connection when asked to do Negotiate-authenticated ones, even when they are set to use different 'services'. libcurl features a pool of recent... |
| High | CVE-2026-8927 | curl | 8.14.1-2+deb13u4 | 8.21.0 | When reusing a libcurl handle for sequential transfers driven by environment-variable proxy configuration, libcurl fails to clear the proxy authentication state between requests... |
| High | CVE-2026-41992 | gzip | 1.13-1 | 1.13-1+deb13u1 | GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single... |
| High | CVE-2026-54369 | libacl1 | 2.3.2-2+b1 | — | acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that... |
| High | CVE-2026-76642 | libblkid1 | 2.41.5-0+deb13u1 | — | util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing... |
| High | CVE-2026-78408 | libblkid1 | 2.41.5-0+deb13u1 | — | The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve()... |
| High | CVE-2026-78409 | libblkid1 | 2.41.5-0+deb13u1 | — | The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW... |
| High | CVE-2026-78410 | libblkid1 | 2.41.5-0+deb13u1 | — | A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount... |
| High | CVE-2026-12064 | libcurl4t64 | 8.14.1-2+deb13u4 | — | When a user invokes curl using a schemeless URL combined with --proto-default sftp (or scp), a disconnect occurs between the tool layer and libcurl... |
| High | CVE-2026-8286 | libcurl4t64 | 8.14.1-2+deb13u4 | — | A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it should not. |
| High | CVE-2026-8458 | libcurl4t64 | 8.14.1-2+deb13u4 | — | libcurl might in some circumstances reuse the wrong connection when asked to do Negotiate-authenticated ones, even when they are set to use different 'services'. libcurl features a pool of recent... |
| High | CVE-2026-8927 | libcurl4t64 | 8.14.1-2+deb13u4 | — | When reusing a libcurl handle for sequential transfers driven by environment-variable proxy configuration, libcurl fails to clear the proxy authentication state between requests... |
| High | CVE-2026-76642 | liblastlog2-2 | 2.41.5-0+deb13u1 | — | util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing... |
| High | CVE-2026-78408 | liblastlog2-2 | 2.41.5-0+deb13u1 | — | The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve()... |
| High | CVE-2026-78409 | liblastlog2-2 | 2.41.5-0+deb13u1 | — | The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW... |
| High | CVE-2026-78410 | liblastlog2-2 | 2.41.5-0+deb13u1 | — | A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount... |
| High | CVE-2026-76642 | libmount1 | 2.41.5-0+deb13u1 | — | util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing... |
| High | CVE-2026-78408 | libmount1 | 2.41.5-0+deb13u1 | — | The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve()... |
| High | CVE-2026-78409 | libm... |
dev-c853881
📦 synapse — v0.0.0-dev+c853881
Release type: prerelease • Commit:
c853881
Security: 🛡️ ❌ Critical — 7 critical and 134 high vulnerabilities detected
Image Availability
| Registry | Image | Tags |
|---|---|---|
| Docker Hub | docker.io/hlhd/synapse |
dev-c853881 latest-dev |
| cr.pcfae.com | cr.pcfae.com/hlhd/synapse |
dev-c853881 latest-dev |
| GitHub Container Registry | ghcr.io/homelabhd/synapse |
dev-c853881 latest-dev |
Digest pull commands & supply chain artifacts
docker.io/hlhd/synapse
docker pull docker.io/hlhd/synapse@sha256:031573d6ae4b635ae794561dbc2e64d146e77c14ce6f3af1308586335372c096
cr.pcfae.com/hlhd/synapse
docker pull cr.pcfae.com/hlhd/synapse@sha256:031573d6ae4b635ae794561dbc2e64d146e77c14ce6f3af1308586335372c096
ghcr.io/homelabhd/synapse
docker pull ghcr.io/homelabhd/synapse@sha256:031573d6ae4b635ae794561dbc2e64d146e77c14ce6f3af1308586335372c096
Notable Changes
Features
- image: package a hardened synapse image with s3 media and the antispam hook (SoFMeRight)
Documentation
- refresh generated badges (stagefreight)
- drop the decorative emoji from the title (SoFMeRight)
- follow the org readme structure and document configuration (SoFMeRight)
Maintenance
- governance reconcile from gitlab.prplanit.com/PrPlanIT/MaintenancePolicy (StageFreight) ×2
Security
🛡️ ❌ Critical — 7 critical and 134 high vulnerabilities detected
Vulnerability details (7 critical, 134 high, 155 medium, 103 low)
| Severity | CVE | Package | Installed | Fixed | Description |
|---|---|---|---|---|---|
| Critical | CVE-2026-6653 | libxml2 | 2.12.7+dfsg+really2.9.14-2.1+deb13u3 | — | Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper... |
| Critical | CVE-2026-13221 | perl-base | 5.40.1-6 | — | Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string... |
| Critical | CVE-2026-42496 | perl-base | 5.40.1-6 | — | Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory. _make_special_file() passes the tar header's linkname to symlink()... |
| Critical | CVE-2026-8376 | perl-base | 5.40.1-6 | — | Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit... |
| Critical | CVE-2025-68121 | stdlib | v1.24.4 | 1.24.13, 1.25.7, 1.26.0-rc.3 | During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may... |
| Critical | GO-2026-4337 | stdlib | go1.24.4 | 1.24.13 | During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may... |
| Critical | CVE-2026-27143 | stdlib | go1.24.4 | 1.25.9 | Arithmetic over induction variables in loops were not correctly checked for underflow or overflow. As a result, the compiler would allow for invalid indexing to occur at runtime, potentially... |
| High | CVE-2026-76642 | bsdutils | 1:2.41.5-0+deb13u1 | — | util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing... |
| High | CVE-2026-78408 | bsdutils | 1:2.41.5-0+deb13u1 | — | The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve()... |
| High | CVE-2026-78409 | bsdutils | 1:2.41.5-0+deb13u1 | — | The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW... |
| High | CVE-2026-78410 | bsdutils | 1:2.41.5-0+deb13u1 | — | A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount... |
| High | CVE-2026-12064 | curl | 8.14.1-2+deb13u4 | 8.21.0 | When a user invokes curl using a schemeless URL combined with --proto-default sftp (or scp), a disconnect occurs between the tool layer and libcurl... |
| High | CVE-2026-8286 | curl | 8.14.1-2+deb13u4 | 8.21.0 | A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it should not. |
| High | CVE-2026-8458 | curl | 8.14.1-2+deb13u4 | 8.21.0 | libcurl might in some circumstances reuse the wrong connection when asked to do Negotiate-authenticated ones, even when they are set to use different 'services'. libcurl features a pool of recent... |
| High | CVE-2026-8927 | curl | 8.14.1-2+deb13u4 | 8.21.0 | When reusing a libcurl handle for sequential transfers driven by environment-variable proxy configuration, libcurl fails to clear the proxy authentication state between requests... |
| High | CVE-2026-41992 | gzip | 1.13-1 | — | GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single... |
| High | CVE-2026-54369 | libacl1 | 2.3.2-2+b1 | — | acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that... |
| High | CVE-2026-76642 | libblkid1 | 2.41.5-0+deb13u1 | — | util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing... |
| High | CVE-2026-78408 | libblkid1 | 2.41.5-0+deb13u1 | — | The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve()... |
| High | CVE-2026-78409 | libblkid1 | 2.41.5-0+deb13u1 | — | The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW... |
| High | CVE-2026-78410 | libblkid1 | 2.41.5-0+deb13u1 | — | A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount... |
| High | CVE-2026-12064 | libcurl4t64 | 8.14.1-2+deb13u4 | — | When a user invokes curl using a schemeless URL combined with --proto-default sftp (or scp), a disconnect occurs between the tool layer and libcurl... |
| High | CVE-2026-8286 | libcurl4t64 | 8.14.1-2+deb13u4 | — | A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it should not. |
| High | CVE-2026-8458 | libcurl4t64 | 8.14.1-2+deb13u4 | — | libcurl might in some circumstances reuse the wrong connection when asked to do Negotiate-authenticated ones, even when they are set to use different 'services'. libcurl features a pool of recent... |
| High | CVE-2026-8927 | libcurl4t64 | 8.14.1-2+deb13u4 | — | When reusing a libcurl handle for sequential transfers driven by environment-variable proxy configuration, libcurl fails to clear the proxy authentication state between requests... |
| High | CVE-2026-76642 | liblastlog2-2 | 2.41.5-0+deb13u1 | — | util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing... |
| High | CVE-2026-78408 | liblastlog2-2 | 2.41.5-0+deb13u1 | — | The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve()... |
| High | CVE-2026-78409 | liblastlog2-2 | 2.41.5-0+deb13u1 | — | The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW... |
| High | CVE-2026-78410 | liblastlog2-2 | 2.41.5-0+deb13u1 | — | A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount... |
| High | CVE-2026-76642 | libmount1 | 2.41.5-0+deb13u1 | — | util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing... |
| High | CVE-2026-78408 | libmount1 | 2.41.5-0+deb13u1 | — | The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve()... |
| High | CVE-2026-78409 | libmount1 | 2.41.5-0+deb13u1 | — | The X-mount.subdir option uses... |