Debian Security

Warning: Invalid argument supplied for foreach() in /var/www/vhosts/webfactories.de/httpdocs/modules/mod_jw_srfr/helper.php on line 42

Debian Trixie Linux Major Denial of Service Privilege Escalation DSA-6295-1
Debian May 23, 2026 | 19:50 pm
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. For the stable distribution (trixie), these problems have been fixed in version 6.12.90-1. Additionally this update includes a[…]
Read more...
Debian libgcrypt Denial of Service Security Advisory DSA-6294-1
Debian May 22, 2026 | 21:50 pm
It was discovered that an incorrect implementation of ECDH encryption (with NIST, Brainpool, X448, or X25519 curves) within Libgcrypt could result in denial of service. For the oldstable distribution (bookworm), this problem has been fixed in version 1.10.1-3+deb12u1.
Read more...
Debian krb5 Important NegoEx Denial of Service Vuln DSA-6293-1
Debian May 22, 2026 | 21:32 pm
Cem Onat Karagun discovered two vulnerabilities in the NegoEx parsing in krb5, the MIT implementation of Kerberos. An unauthenticated remote attacker can take advantage of these flaws to cause a denial of service. For the oldstable distribution (bookworm), this problem[…]
Read more...
Debian Bookworm haveged Important Local Privilege Escalation Fix DSA-6292-1
Debian May 22, 2026 | 21:05 pm
Dirk Mueller discovered that a flaw in the function performing a credential check on the command socket of haveged, a userspace entropy daemon, may result in local privilege escalation. For the oldstable distribution (bookworm), this problem has been fixed in[…]
Read more...
Debian haproxy Important HTTP Request Smuggling CVE-2026-33555 DSA-6291-1
Debian May 22, 2026 | 20:18 pm
Martino Spagnuolo reported that the HTTP/3 parsing code in HAProxy, a fast and reliable load balancing reverse proxy, does not properly validate the received body size and the announced content-length header, which may result in HTTP request smuggling. For the[…]
Read more...
Debian Trixie NSS Major Denial of Service Uncontrolled Code Exec DSA-6290-1
Debian May 21, 2026 | 20:39 pm
Several vulnerabilities were discovered in NSS, a set of cryptographic libraries, which may result in or denial of service or potentially the execution of arbitrary code. For the stable distribution (trixie), these problems have been fixed in version 2:3.110-1+deb13u2.
Read more...
Debian OpenVPN Significant Denial of Service Packet Exposure DSA-6289-1
Debian May 21, 2026 | 20:38 pm
Two security vulnerabilities were discovered in OpenVPN, which could result in denial of service or a leak of packet data from a previous handshake. For the oldstable distribution (bookworm), these problems have been fixed in version 2.6.14-0+deb12u1.
Read more...
Debian ThunderBird Important Arbitrary Code Execution Vuln DSA-6288-1
Debian May 21, 2026 | 18:38 pm
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. For the oldstable distribution (bookworm), these problems have been fixed in version 1:140.11.0esr-1~deb12u1. For the stable distribution (trixie), these problems have been fixed in
Read more...
Debian DSA-6287-1 Chromium Important Code Exec Denial of Service
Debian May 21, 2026 | 18:18 pm
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 148.0.7778.178-1~deb12u1.
Read more...