Debian Security

Warning: Invalid argument supplied for foreach() in /var/www/vhosts/webfactories.de/httpdocs/modules/mod_jw_srfr/helper.php on line 42

Debian: DSA-5905-1 critical issue with GraphicsMagick DoS or Code Exec
Stay Vigilant with Timely Linux Security Advisories Apr 17, 2025 | 20:46 pm
Two vulnerabilities have been discovered in GraphicsMagick, a set of ommand-line applications to manipulate image files, which may result in denial of service or the execution of arbitrary code if malformed image files are processed.
Read more...
Debian DSA-5904-1: mod_auth_openidc Critical Info Disclosure Fix
Stay Vigilant with Timely Linux Security Advisories Apr 17, 2025 | 19:27 pm
It was discovered that mod_auth_openidc, an OpenID Certified authentication and authorization module for the Apache HTTP server that implements the OpenID Connect Relying Party functionality, was susceptible to information disclosure in some configurations
Read more...
Debian Bookworm: DSA-5903-1 critical: Chromium code execution risks
Stay Vigilant with Timely Linux Security Advisories Apr 17, 2025 | 06:24 am
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
Read more...
Debian: DSA-5902-1 critical: perl buffer overflow exploitation
Stay Vigilant with Timely Linux Security Advisories Apr 13, 2025 | 13:39 pm
Nathan Mills discovered a heap-based buffer overflow vulnerability in the implementation of the Perl programming language when transliterating non-ASCII bytes with tr///, which may result in denial of service, or potentially the execution of arbitrary code.
Read more...
Debian DSA-5901-1: addressing security vulnerabilities in mediawiki
Stay Vigilant with Timely Linux Security Advisories Apr 13, 2025 | 12:29 pm
Multiple security issues were discovered in MediaWiki, a website engine for collaborative work, which could result in information disclosure, cross-site scripting or restriction bypass.
Read more...
Debian: DSA-5900-1 critical: linux kernel privilege escalation and DoS
Stay Vigilant with Timely Linux Security Advisories Apr 12, 2025 | 14:25 pm
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
Read more...
Debian: DSA-5899-1 moderate: webkit2gtk denial of service and xss
Stay Vigilant with Timely Linux Security Advisories Apr 10, 2025 | 22:38 pm
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2024-54551
Read more...
Debian: DSA-5898-1 critical: chromium arbitrary code execution
Stay Vigilant with Timely Linux Security Advisories Apr 9, 2025 | 19:56 pm
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
Read more...
Debian: DSA-5897-1 critical: lemonldap-ng cross-site scripting threat
Stay Vigilant with Timely Linux Security Advisories Apr 8, 2025 | 16:57 pm
A cross-site scripting vulnerability has been discovered in Lemonldap::NG, a Web-SSO system compatible with OpenID-Connect, CAS and SAML, when using the "Choice" module: It permits to introduce HTML code into the login page and if the default Content-Security-Policy headers
Read more...
Debian: DSA-5896-1 critical: trafficserver denial of service
Stay Vigilant with Timely Linux Security Advisories Apr 5, 2025 | 13:15 pm
Several vulnerabilities were discovered in Apache Traffic Server, a reverse and forward proxy server, which could result in denial of service, HTTP request smuggling, cache poisoning or incomplete dropping of privileges.
Read more...
Debian DSA-5895-1: xz-utils moderate severity denial of service issue
Stay Vigilant with Timely Linux Security Advisories Apr 5, 2025 | 11:23 am
Harri K. Koskinen discovered a flaw in the multithreaded .xz decoder lzma_stream_decoder_mt in xz-utils, the XZ-format compression utilities, which may lead to denial of service (application crash) or the execution of arbitrary code.
Read more...
Debian 11: DSA-5894-1: jetty9 critical Denial of Service advisory
Stay Vigilant with Timely Linux Security Advisories Apr 4, 2025 | 22:32 pm
Jetty 9 is a Java based web server and servlet engine. Several security vulnerabilities have been discovered which may allow remote attackers to cause a denial of service by repeatedly sending crafted requests which can trigger OutofMemory errors and exhaust[…]
Read more...
Debian: DSA-5893-1 critical: tomcat10 file access and code execution
Stay Vigilant with Timely Linux Security Advisories Apr 4, 2025 | 22:19 pm
A security vulnerability was found in Tomcat 10, a Java based web server and servlet engine. A malicious user was able to view security sensitive files and/or inject content into those files when writes were enabled for the default servlet[…]
Read more...
Debian: DSA-5892-1 critical: atop data sanitization issue
Stay Vigilant with Timely Linux Security Advisories Apr 3, 2025 | 20:29 pm
It was discovered that Atop, a monitor tool for system resources and process activity, always tried to connect to the port of atopgpud (an additional daemon gathering GPU statistics not shipped in Debian) while performing insufficient sanitising of the data[…]
Read more...
Debian 12: DSA-5891-1 critical: thunderbird denial of service
Stay Vigilant with Timely Linux Security Advisories Apr 3, 2025 | 18:22 pm
Multiple security issues were discovered in Thunderbird, which could result in denial of service or the execution of arbitrary code. For the stable distribution (bookworm), these problems have been fixed in
Read more...
Debian: DSA-5890-1 critical: chromium arbitrary code execution
Stay Vigilant with Timely Linux Security Advisories Apr 3, 2025 | 08:06 am
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
Read more...
Debian 12: DSA-5889-1 critical: Firefox-ESR code execution threat
Stay Vigilant with Timely Linux Security Advisories Apr 2, 2025 | 18:19 pm
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or spoofing.
Read more...
Debian: DSA-5888-1: ghostscript Security Advisory Updates
Stay Vigilant with Timely Linux Security Advisories Mar 26, 2025 | 19:41 pm
Multiple security issues were discovered in Ghostscript, the GPL PostScript/PDF interpreter, which could result in denial of service and potentially the execution of arbitrary code if malformed document files are processed.
Read more...
Debian: DSA-5887-1: exim4 Security Advisory Updates
Stay Vigilant with Timely Linux Security Advisories Mar 26, 2025 | 14:41 pm
It was discovered that a use-after-free vulnerability in Exim4, a mail transport agent, may result in privilege escalation for a local attacker.
Read more...
Debian: DSA-5886-1: ruby-rack Security Advisory Updates
Stay Vigilant with Timely Linux Security Advisories Mar 25, 2025 | 19:30 pm
Multiple security issues were found in Rack, an interface for developing web applications in Ruby, which could result in log injection or information disclosure.
Read more...