About Security Vulnerabilities

[oktay454]

Hi,

1) How can I see which packages released by Proxmox are affected by security vulnerabilities, like the security-tracker.debian.org address?

2) Have these security vulnerabilities been closed?

CVE‑2026‑46316
https://github.com/V4bel/ITScape

CVE‑2026‑53359
https://github.com/V4bel/Januscape

CVE‑2026‑64561
https://github.com/V4bel/Zapscape

 

[d.oishi]

You may find the Proxmox VE security advisories listed below useful for reference.

Thread 'Proxmox Virtual Environment - Security Advisories'

Jan 1, 2024

This is the list of security advisories since 2024-01-01 for the Proxmox Virtual Environment.

For details about scope, coverage and timeline see the General FAQ about Proxmox Security Announcements.

• ProxmoxSecurityAdvisory
• Replies: 61
• Forum: Security Advisories

 

[Onslow]

2) Have these security vulnerabilities been closed?

There are some references in the changelog. E.g.

zgrep -E "(CVE-2026-46316|CVE-2026-53359|CVE-2026-64561)" /usr/share/doc/proxmox-kernel-6.8/changelog.Debian.gz
    - CVE-2026-64561
    role" for CVE-2026-53359.