Debian Security

Debian: vlc Critical Denial of Service and Code Execution DSA-6082-1

Stay Vigilant with Timely Linux Security Advisories Dec 14, 2025 | 19:42 pm

Multiple vulnerabilities were discovered in the VLC media player, which could result in denial of service or potentially the execution of arbitrary code if a malformed video file is opened. For the oldstable distribution (bookworm), this problem has been fixed[…]

Debian: Thunderbird Critical Arbitrary Code Exec DSA-6081-1 CVE-2025-14321

Stay Vigilant with Timely Linux Security Advisories Dec 14, 2025 | 11:11 am

Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. For the oldstable distribution (bookworm), these problems have been fixed in version 1:140.6.0esr-1~deb12u1. For the stable distribution (trixie), these problems have been fixed in

Debian: Chromium Important DSA-6080-1 Code Exec DoS Issues

Stay Vigilant with Timely Linux Security Advisories Dec 12, 2025 | 12:16 pm

Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. An additional CVE (that has yet to be assigned) is fixed in this release; Google is aware of an[…]

Debian: Important DoS Vulnerabilities in FFmpeg DSA-6080-1 Advisory

Stay Vigilant with Timely Linux Security Advisories Dec 10, 2025 | 22:27 pm

Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if malformed files/streams are processed. For the oldstable distribution (bookworm), this problem has been fixed in[…]

Debian: firefox-esr Critical Privilege Escalation DSA-6078-1 CVE-2025-14321

Stay Vigilant with Timely Linux Security Advisories Dec 10, 2025 | 22:23 pm

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, sandbox escape, same-origin policy bypass or privilege escalation. For the oldstable distribution (bookworm), these problems have been fixed[…]

Debian: pdns-recursor Critical Denial of Service Vulnerability DSA-6077-1

Stay Vigilant with Timely Linux Security Advisories Dec 10, 2025 | 09:49 am

Insufficient validation of incoming notifies over TCP in PDNS Recursor, a resolving name server, could result in denial of service. For the stable distribution (trixie), this problem has been fixed in version 5.2.7-0+deb13u1. We recommend that you upgrade your pdns-recursor[…]

Debian: libpng1.6 Critical Info Leak & DoS Vulnerabilities DSA-6076-1

Stay Vigilant with Timely Linux Security Advisories Dec 10, 2025 | 08:54 am

Several vulnerabilities were reported in the libpng PNG library, which could lead to information leaks, denial of service or potentially the execution of arbitrary code if a specially crafted image is processed. For the oldstable distribution (bookworm), these problems have[…]

Debian: WordPress Important XSS and Info Disclosure DSA-6075-1

Stay Vigilant with Timely Linux Security Advisories Dec 9, 2025 | 23:42 pm

Multiple security issues were discovered in the WordPress blogging tool, which could result in cross-site scripting or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 6.1.9+dfsg1-0+deb12u1. We recommend that you upgrade your wordpress packages.

Debian: webkit2gtk Critical Info Exfiltration DSA-6074-1 CVE-2025-13947

Stay Vigilant with Timely Linux Security Advisories Dec 9, 2025 | 17:17 pm

The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-13947 Janet Black discovered that a website may be able to exfiltrate sensitive system information.

Debian Trixie: FFmpeg Critical Denial of Service and Code Exec DSA-6073-1

Stay Vigilant with Timely Linux Security Advisories Dec 7, 2025 | 16:24 pm

Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if malformed files/streams are processed. For the stable distribution (trixie), this problem has been fixed in[…]

Debian: Chromium Critical Exec Abuse DoS Info Disclosure DSA-6072-1

Stay Vigilant with Timely Linux Security Advisories Dec 4, 2025 | 21:28 pm

Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 143.0.7499.40-1~deb12u1.

Debian: Unbound Critical Cache Poisoning Fix DSA-6071-1 CVE-2025-11411

Stay Vigilant with Timely Linux Security Advisories Dec 4, 2025 | 20:33 pm

It was discovered that incorrect handling of promiscuous NS RRSets in Unbound, a validating, recursive, caching DNS resolver, could result in cache poisoning. For the stable distribution (trixie), this problem has been fixed in version 1.22.0-2+deb13u1.

Debian: WebKitGTK Critical CVE-2025-43392 Exfiltration and Crash DSA-6070-1

Stay Vigilant with Timely Linux Security Advisories Dec 4, 2025 | 00:06 am

The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-43392 Tom Van Goethem discovered that a website may exfiltrate image data cross-origin.

Debian: OpenVPN Critical HMAC Flaw Bypass CVE-2025-13086 DSA-6069-1

Stay Vigilant with Timely Linux Security Advisories Dec 3, 2025 | 21:31 pm

It was discovered that openvpn, a virtual private network application, does not properly handle HMAC verification checks. A remote attacker can take advantage of this flaw to bypass source IP address validation. For the oldstable distribution (bookworm), this problem has[…]

Debian 11: Xen Critical Privilege Escalation DSA-6068-1 CVE-2024-28956

Stay Vigilant with Timely Linux Security Advisories Dec 2, 2025 | 21:58 pm

Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in memory disclosure, denial of service or privilege escalation. For the oldstable distribution (bookworm), these problems have been fixed in version 4.17.5+72-g01140da4e8-1.

Debian: Critical Denial of Service & Privilege Escalation DSA-6067-1

Stay Vigilant with Timely Linux Security Advisories Dec 2, 2025 | 21:57 pm

Two security vulnerabilities were discovered in the Containerd container runtime, which may result in denial of service or local privilege escalation. For the oldstable distribution (bookworm), these problems have been fixed in version 1.6.20~ds1-1+deb12u2.

Debian: gnome-shell-extension-gsconnect Critical Impersonation Fix DSA-6066-1

Stay Vigilant with Timely Linux Security Advisories Nov 30, 2025 | 15:12 pm

It was discovered that missing validation of the device ID during handshakes in KDE Connect, a tool to integrate smart phones to a desktop, could allow an attacker to impersonate another device. The oldstable distribution (bookworm) is not affected. For[…]

Ubuntu: GIMP Vulnerability Patch DSA-6065-2 CVE-2025-59821

Stay Vigilant with Timely Linux Security Advisories Nov 27, 2025 | 20:47 pm

It was discovered that a buffer overflow in the TGA parser of Krita, a creative application for raster images, could potentially result in the execution of arbitrary code if malformed images are opened. For the oldstable distribution (bookworm), this problem[…]

Debian: DSA-6064-1 tryton-server Critical Fix Information Disclosure

Stay Vigilant with Timely Linux Security Advisories Nov 27, 2025 | 19:41 pm

Several security vulnerabilities were discovered in the server of the Tryton application platform, which could lead to information disclosure. For the oldstable distribution (bookworm), this problem has been fixed in version 6.0.29-2+deb12u4. For the stable distribution (trixie), this problem has[…]

Debian: kdeconnect Critical Impersonation Threat DSA-6063-1 CVE-2025-66270

Stay Vigilant with Timely Linux Security Advisories Nov 26, 2025 | 22:25 pm

It was discovered that missing validation of the device ID during handshakes in KDE Connect, a tool to integrate smart phones to a desktop, could allow an attacker to impersonate another device. The oldstable distribution (bookworm) is not affected. For[…]

Beitrag teilen

Das Neueste von Support

Ähnliche Artikel