Debian Security

Debian libpng1.6 Critical DDoS Exec Vulnerability DSA-6189-1 Alert

Stay Vigilant with Timely Linux Security Advisories Mar 31, 2026 | 21:15 pm

Two security vulnerabilities were discovered in libpng, a library implementing an interface for reading and writing PNG (Portable Network Graphics) files, which could result in denial of service or potentially the execution of arbitrary code. For the oldstable distribution (bookworm),[…]

Debian DSA-6188-1 LXD Important Privilege Escalation Risk Fix

Stay Vigilant with Timely Linux Security Advisories Mar 31, 2026 | 20:52 pm

Multiple security issues were discovered in LXD, a system container and virtual machine manager, which could result in privilege escalation or the execution of arbitrary commands. For the oldstable distribution (bookworm), these problems have been fixed in version 5.0.2-5+deb12u4.

Debian DSA-6187-1 php-phpseclib3 Important AES-CBC Padding Oracle Attack

Stay Vigilant with Timely Linux Security Advisories Mar 29, 2026 | 19:07 pm

It was discovered that the AES-CBC implementation in the PHP Secure Communications Library was susceptible to a padding oracle timing attack. For the oldstable distribution (bookworm), these problems have been fixed in version 3.0.19-1+deb12u4. This update also fixes CVE-2023-52892. For[…]

Debian php-phpseclib Vulnerability DSA-6186-1 Critical Timing Attack Issue

Stay Vigilant with Timely Linux Security Advisories Mar 29, 2026 | 19:02 pm

It was discovered that the AES-CBC implementation in the PHP Secure Communications Library was susceptible to a padding oracle timing attack. For the oldstable distribution (bookworm), these problems have been fixed in version 2.0.42-1+deb12u3. This update also fixes CVE-2023-52892. For[…]

Debian Oldstable phpseclib Key Padding Attack Fix DSA-6185-1 CVE-2026-32935

Stay Vigilant with Timely Linux Security Advisories Mar 29, 2026 | 18:54 pm

It was discovered that the AES-CBC implementation in the PHP Secure Communications Library was susceptible to a padding oracle timing attack. For the oldstable distribution (bookworm), these problems have been fixed in version 1.0.20-1+deb12u3. This update also fixes CVE-2023-52892. For[…]

Debian Trixie DSA-6184-1 Incus Important Denial of Service CVE-2026-28384

Stay Vigilant with Timely Linux Security Advisories Mar 29, 2026 | 14:21 pm

Multiple security issues were discovered in Incus, a system container and virtual machine manager, which could result in denial of service or the execution of arbitrary commands. For the stable distribution (trixie), these problems have been fixed in version 6.0.4-2+deb13u5.

Debian DSA-6183-1 Node.js Important Denial of Service CVE-2026-21637

Stay Vigilant with Timely Linux Security Advisories Mar 29, 2026 | 13:22 pm

Multiple vulnerabilities were discovered in Node.js, which could result in denial of service, side channel attacks or information disclosure. For the stable distribution (trixie), these problems have been fixed in version 20.19.2+dfsg-1+deb13u2. We recommend that you upgrade your nodejs packages.

Debian Libxml-Parser-Perl Heap Overflow Issue DSA-6182-1 CVE-2006-10003

Stay Vigilant with Timely Linux Security Advisories Mar 28, 2026 | 21:13 pm

Joris van Rantwijk discovered that libxml-parser-perl, a Perl module for parsing XML files, is prone to a heap-based buffer overflow flaw when parsing an XML file with very deep element nesting. For the oldstable distribution (bookworm), this problem has been[…]

Debian Bookworm BIND9 Critical ACL Bypass DoS Vulnerabilities DSA-6181-1

Stay Vigilant with Timely Linux Security Advisories Mar 27, 2026 | 22:42 pm

Several vulnerabilities were discovered in BIND, a DNS server implementation, which may result in bypass of ACL restrictions or denial of service. For the oldstable distribution (bookworm), these problems have been fixed in version 1:9.18.47-1~deb12u1. The oldstable distribution is only

Debian 12 13 ruby-rack Critical XSS Directory Traversal DSA-6180-1

Stay Vigilant with Timely Linux Security Advisories Mar 26, 2026 | 21:45 pm

Two security issues (cross-site scripting and directory traversal) were found in Rack, an interface for developing web applications in Ruby. For the oldstable distribution (bookworm), these problems have been fixed in version 2.2.22-0+deb12u1. For the stable distribution (trixie), these problems[…]

Debian Bookworm Thunderbird Critical Info Leak and Code Exec DSA-6179-1

Stay Vigilant with Timely Linux Security Advisories Mar 26, 2026 | 20:00 pm

Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 1:140.9.0esr-1~deb12u1. For the stable distribution (trixie), these problems have[…]

Debian Bookworm Firefox ESR Critical Security Issues DSA-6178-1

Stay Vigilant with Timely Linux Security Advisories Mar 25, 2026 | 22:13 pm

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, sandbox escape, information disclosure, denial of service or privilege escalation. For the oldstable distribution (bookworm), these problems have[…]

Debian Bookworm Chromium Critical Code Exec Info Disclosure DSA-6177-1

Stay Vigilant with Timely Linux Security Advisories Mar 25, 2026 | 07:53 am

Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 146.0.7680.164-1~deb12u1.

Debian DSA-6176-1 strongSwan Critical DoS Integer Underflow CVE-2026-25075

Stay Vigilant with Timely Linux Security Advisories Mar 23, 2026 | 18:07 pm

Kazuma Matsumoto discovered an integer overflow bug in the EAP-TTLS plugin of strongSwan, an IKE/IPsec suite. The EAP-TTLS plugin doesn't check the length field in the header of attribute-value pairs (AVPs) tunneled in EAP-TTLS, which can cause an integer underflow[…]

Debian DSA-6175-1 libyaml-syck-perl Severe Denial of Service and Code Exec

Stay Vigilant with Timely Linux Security Advisories Mar 22, 2026 | 19:43 pm

Several vulnerabilities were discovered in libyaml-syck-perl, a Perl module providing a fast, lightweight YAML loader and dumper, which may result in denial of service and potentially arbitrary code execution. For the oldstable distribution (bookworm), this problem has been fixed in[…]

Ubuntu Jammy SPIP Security Vulnerability Identified as CVE-2023-4567

Stay Vigilant with Timely Linux Security Advisories Mar 22, 2026 | 09:40 am

Jul Blobul discovered that SPIP, a website engine for publishing, is prone to a privilege escalation vulnerability. For the stable distribution (trixie), this problem has been fixed in version 4.4.13+dfsg-0+deb13u1. We recommend that you upgrade your spip packages.

Debian Bookworm Freeciv Critical DoS Issue DSA-6173-1 CVE-2026-33250

Stay Vigilant with Timely Linux Security Advisories Mar 21, 2026 | 20:07 pm

Louis Moureaux discovered that incorrect packet processing in the game server of Freeciv, a free clone of the turn based strategy game Civilization, could result in denial of service. For the oldstable distribution (bookworm), this problem has been fixed in[…]

Debian webkit2gtk Critical Process Crash and DoS Advisory DSA-6172-1

Stay Vigilant with Timely Linux Security Advisories Mar 21, 2026 | 11:11 am

The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-43214 shandikri discovered that processing maliciously crafted web content may lead to an unexpected process crash.

Debian Bookworm Chromium Important Security Issues DSA-6171-1

Stay Vigilant with Timely Linux Security Advisories Mar 20, 2026 | 22:17 pm

Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 146.0.7680.153-1~deb12u1.

Debian DSA-6170-1 snapd Local Escalation CVE-2026-3888 Advisory

Stay Vigilant with Timely Linux Security Advisories Mar 19, 2026 | 22:32 pm

The Qualys Threat Research Unit (TRU) discovered a local privilege escalation vulnerability in snapd, a daemon and tooling that enable snap packages. Details can be found in the Qualys advisory at https://cdn2.qualys.com/advisory/2026/03/17/snap-confine-systemd-tmpfiles.txt For the oldstable distribution (bookworm), this problem has[…]

Beitrag teilen

Das Neueste von Support

Ähnliche Artikel