Debian security note

What changed

• CVE-2015-0204 — Patch now

  The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downg

  Affected: 0 → 1.0.1k-1, 1.0.0a, 1.0.0b, 1.0.0c

• CVE-2026-96425 — Check if you run it

  Incorrect DBus policy for lomiri-download-manager allows arbitrary user to run arbitrary command as root over DBus

  Affected: 0.1.2-1, 0.1.2-2, 0.1.2-2.1~exp1, 0.2.1-3

• CVE-2026-84790 — Check if you run it

  OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field

  Affected: 2.6.11-1, 2.6.12-1, 2.6.13-1, 2.6.14-1

• CVE-2017-20286 — Check if you run it

  DevIL through 1.8.0 contains a heap-based buffer overflow in iGetPalette() in il_gif.cpp that allows attackers to write beyond a 768-byte palette buffer when loading GIF images.

  Affected: 1.7.8-10, 1.7.8-11, 1.7.8-12, 1.8.0.40.g6f3d5e9b+dfsg-1

• CVE-2026-8924 — Check if you run it

  A flaw in curl’s cookie parsing logic allows a malicious HTTP server to set "super cookies" that bypass the Public Suffix List check.

  Affected: 7.46.0 → 8.14.1-r3, 7.46.0 → 8.14.1-r4, 7.46.0 → 8.22.0-r0, 7.46.0 → 8.21.0-r0

• CVE-2026-92392 — Check if you run it

  HTTP/2 upload Use-After-Free

  Affected: 0 → 8.14.1-r3, 0 → 8.14.1-r4

• CVE-2026-8286 — Check if you run it

  A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it

  Affected: 7.30.0 → 8.14.1-r3, 7.30.0 → 8.14.1-r4, 7.30.0 → 8.22.0-r0, 7.30.0 → 8.21.0-r0

• CVE-2026-109946 — Check if you run it

  FreeRDP 3.11.0 before 3.32.0 does not validate that AVC444 and AVC444v2 region widths are even before YUV444 conversion, so an odd width reaches an assertion and aborts the client.

  Affected: 2.10.0+dfsg1-1, 2.10.0+dfsg1-1.1, 2.11.2+dfsg1-1, 3.15.0+dfsg-2.1

What we still do not know

Every changed record in this note has a version range.