-
Stay Vigilant with Timely Linux Security Advisories
Dec 12, 2025 | 12:16 pm
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. An additional CVE (that has yet to be assigned) is fixed in this release; Google is aware of an[…]
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Dec 10, 2025 | 22:27 pm
Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if malformed files/streams are processed. For the oldstable distribution (bookworm), this problem has been fixed in[…]
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Dec 10, 2025 | 22:23 pm
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, sandbox escape, same-origin policy bypass or privilege escalation. For the oldstable distribution (bookworm), these problems have been fixed[…]
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Dec 10, 2025 | 09:49 am
Insufficient validation of incoming notifies over TCP in PDNS Recursor, a resolving name server, could result in denial of service. For the stable distribution (trixie), this problem has been fixed in version 5.2.7-0+deb13u1. We recommend that you upgrade your pdns-recursor[…]
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Dec 10, 2025 | 08:54 am
Several vulnerabilities were reported in the libpng PNG library, which could lead to information leaks, denial of service or potentially the execution of arbitrary code if a specially crafted image is processed. For the oldstable distribution (bookworm), these problems have[…]
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Dec 9, 2025 | 23:42 pm
Multiple security issues were discovered in the WordPress blogging tool, which could result in cross-site scripting or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 6.1.9+dfsg1-0+deb12u1. We recommend that you upgrade your wordpress packages.
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Dec 9, 2025 | 17:17 pm
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-13947 Janet Black discovered that a website may be able to exfiltrate sensitive system information.
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Dec 7, 2025 | 16:24 pm
Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if malformed files/streams are processed. For the stable distribution (trixie), this problem has been fixed in[…]
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Dec 4, 2025 | 21:28 pm
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 143.0.7499.40-1~deb12u1.
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Dec 4, 2025 | 20:33 pm
It was discovered that incorrect handling of promiscuous NS RRSets in Unbound, a validating, recursive, caching DNS resolver, could result in cache poisoning. For the stable distribution (trixie), this problem has been fixed in version 1.22.0-2+deb13u1.
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Dec 4, 2025 | 00:06 am
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-43392 Tom Van Goethem discovered that a website may exfiltrate image data cross-origin.
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Dec 3, 2025 | 21:31 pm
It was discovered that openvpn, a virtual private network application, does not properly handle HMAC verification checks. A remote attacker can take advantage of this flaw to bypass source IP address validation. For the oldstable distribution (bookworm), this problem has[…]
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Dec 2, 2025 | 21:58 pm
Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in memory disclosure, denial of service or privilege escalation. For the oldstable distribution (bookworm), these problems have been fixed in version 4.17.5+72-g01140da4e8-1.
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Dec 2, 2025 | 21:57 pm
Two security vulnerabilities were discovered in the Containerd container runtime, which may result in denial of service or local privilege escalation. For the oldstable distribution (bookworm), these problems have been fixed in version 1.6.20~ds1-1+deb12u2.
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Nov 30, 2025 | 15:12 pm
It was discovered that missing validation of the device ID during handshakes in KDE Connect, a tool to integrate smart phones to a desktop, could allow an attacker to impersonate another device. The oldstable distribution (bookworm) is not affected. For[…]
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Nov 27, 2025 | 20:47 pm
It was discovered that a buffer overflow in the TGA parser of Krita, a creative application for raster images, could potentially result in the execution of arbitrary code if malformed images are opened. For the oldstable distribution (bookworm), this problem[…]
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Nov 27, 2025 | 19:41 pm
Several security vulnerabilities were discovered in the server of the Tryton application platform, which could lead to information disclosure. For the oldstable distribution (bookworm), this problem has been fixed in version 6.0.29-2+deb12u4. For the stable distribution (trixie), this problem has[…]
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Nov 26, 2025 | 22:25 pm
It was discovered that missing validation of the device ID during handshakes in KDE Connect, a tool to integrate smart phones to a desktop, could allow an attacker to impersonate another device. The oldstable distribution (bookworm) is not affected. For[…]
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Nov 25, 2025 | 20:54 pm
A vulnerability was discovered in pdfminer, a tool for extracting information from PDF documents, which may result in the execution of arbitrary code if a specially crafted PDF file is processed. For the oldstable distribution (bookworm), this problem has been[…]
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Nov 25, 2025 | 20:05 pm
Abdulfatah Abdillahi discovered a cross-site scripting vulnerability in the web client of the Tryton application platform. For the oldstable distribution (bookworm), this problem has been fixed in version 6.0.28+ds1-2+deb12u2. For the stable distribution (trixie), this problem has been fixed in
Read more...