Debian Security

Debian Bookworm Netty Important DDoS Request Smuggling CVE-2025-55163

Stay Vigilant with Timely Linux Security Advisories Mar 11, 2026 | 22:20 pm

Several security vulnerabilities have been discovered in Netty, a Java NIO client/server socket framework. It was found that Netty was vulnerable to the MadeYouReset DDoS attack, a logical vulnerability in the HTTP/2 protocol itself and programming errors which enabled request[…]

Debian Oldstable Imagemagick Important Denial of Service Issues DSA-6159-1

Stay Vigilant with Timely Linux Security Advisories Mar 10, 2026 | 21:23 pm

Multiple security vulnerabilities were discovered in imagemagick, a software suite used for editing and manipulating digital images, which could lead to information leaks, bypass of security policies, denial of service or arbitrary code execution. For the oldstable distribution (bookworm), these[…]

Debian 8 imagemagick Important Info Leak DoS CVE-2026-24481 DSA-6158-1

Stay Vigilant with Timely Linux Security Advisories Mar 9, 2026 | 21:21 pm

Multiple security vulnerabilities were discovered in imagemagick, a software suite used for editing and manipulating digital images, which could lead to information leaks, bypass of security policies, denial of service or arbitrary code execution. For the stable distribution (trixie), these[…]

Debian DSA-6157-1 Chromium Critical Code Exec DoS Issues CVE-2026-3536

Stay Vigilant with Timely Linux Security Advisories Mar 6, 2026 | 06:43 am

Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 145.0.7632.159-1~deb12u1.

Debian DSA-6156-1 GIMP Critical DoS Vulnerability Code Exploits

Stay Vigilant with Timely Linux Security Advisories Mar 3, 2026 | 22:05 pm

Several vulnerabilities were discovered in GIMP, the GNU Image Manipulation Program, which could result in denial of service or potentially the execution of arbitrary code if malformed XWD, ICNS, PGM or ICO files are opened. For the oldstable distribution (bookworm),[…]

Debian DSA-6155-1 spip Important SQL Injection XSS Attack

Stay Vigilant with Timely Linux Security Advisories Mar 3, 2026 | 10:30 am

It was discovered that SPIP, a website engine for publishing, would allow a malicious user to access protected information, and perform various SQL injection, Cross-Side Scripting (XSS), and Server-Side Request Forgery (SSRF) attacks. In some cases this could result in[…]

Debian DSA-6154-1 PHP 8.2 Critical Denial of Service Memory Disclosure

Stay Vigilant with Timely Linux Security Advisories Mar 2, 2026 | 21:28 pm

Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in denial of service or memory disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 8.2.30-1~deb12u1.

Debian Bookworm LXD Important Arbitrary Command Execution DSA-6153-1

Stay Vigilant with Timely Linux Security Advisories Mar 1, 2026 | 16:40 pm

Two security issues were discovered in LXD, a system container and virtual machine manager, which could result the in execution of arbitrary commands via malformed images. For the oldstable distribution (bookworm), these problems have been fixed in version 5.0.2-5+deb12u3.

Debian DSA-6152-1 Thunderbird Important Info Disclosure Code Execution

Stay Vigilant with Timely Linux Security Advisories Feb 28, 2026 | 13:31 pm

Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 1:140.8.0esr-1~deb12u1. For the stable distribution (trixie), these problems have[…]

Debian Bookworm DSA-6151-1 Chromium Critical Arbitrary Code Risk

Stay Vigilant with Timely Linux Security Advisories Feb 27, 2026 | 00:35 am

Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 145.0.7632.116-1~deb12u1.

Debian Oldstable Python-Django Moderate SQL Injection and DoS DSA-6150-1

Stay Vigilant with Timely Linux Security Advisories Feb 26, 2026 | 21:47 pm

Multiple security issues were found in Django, a Python web development framework, which could result in denial of service, information disclosure or SQL injection. For the oldstable distribution (bookworm), these problems have been fixed in version 3:3.2.25-0+deb12u2.

Debian Bookworm DSA-6149-1 NSS Critical Integer Overflow CVE-2026-2781

Stay Vigilant with Timely Linux Security Advisories Feb 26, 2026 | 19:46 pm

Clay Ver Valen discovered an integer overflow in the AES-GCM implementation of the Mozilla Network Security Service libraries. For the oldstable distribution (bookworm), this problem has been fixed in version 2:3.87.1-1+deb12u2. For the stable distribution (trixie), this problem has been[…]

Debian DSA-6148-1 firefox-esr Critical Code Execution Risks

Stay Vigilant with Timely Linux Security Advisories Feb 25, 2026 | 19:04 pm

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, sandbox escape, bypass of the same-origin policy, information disclosure or privilege escalation. For the oldstable distribution (bookworm), these[…]

Debian 2026 DSA-6146-1 Chromium Important Security Risk Update

Stay Vigilant with Timely Linux Security Advisories Feb 20, 2026 | 18:01 pm

Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 145.0.7632.109-1~deb12u3.

Debian DSA-6145-1 Nova Image Resize Issue CVE-2026-24708

Stay Vigilant with Timely Linux Security Advisories Feb 19, 2026 | 20:53 pm

Dan Smith discovered that nova, a cloud computing fabric controller, calls qemu-img without format restrictions for resize, which may result in unsafe image resize operations that could destroy data on the host system. Only compute nodes using the Flat image[…]

Debian trixie inetutils Critical Telnetd Authentication Bypass DSA-6144-1

Stay Vigilant with Timely Linux Security Advisories Feb 19, 2026 | 20:41 pm

Ron Ben Yizhak discovered that the inetutils implementation of telnetd didn't sanitise the CREDENTIALS_DIRECTORY environment variable before passing it to the login binary. This could be exploited to bypass authentication and login as root. For the stable distribution (trixie), this[…]

Debian libvpx Critical DoS Buffer Overflow CVE-2026-2447 DSA-6143-1

Stay Vigilant with Timely Linux Security Advisories Feb 19, 2026 | 20:23 pm

A buffer overflow was discovered in libvpx, a library implementing the VP8/VP9 open video codecs, which could result in denial of service or potentially the execution of arbitrary code. For the oldstable distribution (bookworm), these problems have been fixed in[…]

Debian gegl Important Buffer Overflow DoS Advisory DSA-6142-1 CVE-2026-2049

Stay Vigilant with Timely Linux Security Advisories Feb 19, 2026 | 19:59 pm

A heap-based buffer overflow was discovered in the RGBE/HDR parser of GEGL, a graph-based image processing library, which could result in denial of service or the execution of arbitrary code if malformed files are processed. For the oldstable distribution (bookworm),[…]

Debian Trixie Linux Critical Privilege Escalation DSA-6141-1

Stay Vigilant with Timely Linux Security Advisories Feb 18, 2026 | 15:42 pm

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. For the stable distribution (trixie), these problems have been fixed in version 6.12.73-1.

Debian gnutls28 Important Denial of Service Fix DSA-6140-1 CVE-2025-14831

Stay Vigilant with Timely Linux Security Advisories Feb 18, 2026 | 12:00 pm

Tim Scheckenbach reported a flaw in GnuTLS, a library implementing the TLS and SSL protocols. Processing of specially crafted certificates containing a large number of name constraints may result in denial of service (resource exhaustion). For the oldstable distribution (bookworm),[…]

Beitrag teilen

Das Neueste von Support

Ähnliche Artikel