-
Stay Vigilant with Timely Linux Security Advisories
Feb 19, 2026 | 20:53 pm
Dan Smith discovered that nova, a cloud computing fabric controller, calls qemu-img without format restrictions for resize, which may result in unsafe image resize operations that could destroy data on the host system. Only compute nodes using the Flat image[…]
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Feb 19, 2026 | 20:41 pm
Ron Ben Yizhak discovered that the inetutils implementation of telnetd didn't sanitise the CREDENTIALS_DIRECTORY environment variable before passing it to the login binary. This could be exploited to bypass authentication and login as root. For the stable distribution (trixie), this[…]
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Feb 19, 2026 | 20:23 pm
A buffer overflow was discovered in libvpx, a library implementing the VP8/VP9 open video codecs, which could result in denial of service or potentially the execution of arbitrary code. For the oldstable distribution (bookworm), these problems have been fixed in[…]
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Feb 19, 2026 | 19:59 pm
A heap-based buffer overflow was discovered in the RGBE/HDR parser of GEGL, a graph-based image processing library, which could result in denial of service or the execution of arbitrary code if malformed files are processed. For the oldstable distribution (bookworm),[…]
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Feb 18, 2026 | 15:42 pm
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. For the stable distribution (trixie), these problems have been fixed in version 6.12.73-1.
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Feb 18, 2026 | 12:00 pm
Tim Scheckenbach reported a flaw in GnuTLS, a library implementing the TLS and SSL protocols. Processing of specially crafted certificates containing a large number of name constraints may result in denial of service (resource exhaustion). For the oldstable distribution (bookworm),[…]
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Feb 18, 2026 | 11:07 am
Several vulnerabilities were discovered in GIMP, the GNU Image Manipulation Program, which could result in denial of service or potentially the execution of arbitrary code if malformed PSD, PSP or ICO files are opened. For the oldstable distribution (bookworm), these[…]
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Feb 17, 2026 | 21:51 pm
A buffer overflow was discovered in libpng, a library implementing an interface for reading and writing PNG (Portable Network Graphics) files, which could result in denial of service or potentially the execution of arbitrary code. For the oldstable distribution (bookworm),[…]
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Feb 17, 2026 | 08:52 am
CERT Polska and nullcathedral discovered that roundcube, a skinnable AJAX based webmail solution for IMAP servers, did not correctly process and sanitize requests. This would allow an attacker to perform CSS injection attacks, or leak sensitive information. For the oldstable[…]
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Feb 15, 2026 | 21:52 pm
Multiple security issues were found in Django, a Python web development framework, which could result in denial of service, information disclosure, directory traversal or SQL injection. For the oldstable distribution (bookworm), these problems have been fixed in version 3:3.2.25-0+deb12u1. python-django-storages[…]
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Feb 15, 2026 | 00:17 am
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. Google is aware that an exploit for CVE-2026-2441 exists in the wild. For the oldstable distribution (bookworm), these problems[…]
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Feb 13, 2026 | 19:12 pm
Two vulnerabiliites have been discovered in PDNS Recursor, a resolving name server which result result in denial of service when processing a malformed zone file. For the stable distribution (trixie), these problems have been fixed in version 5.2.8-0+deb13u1.
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Feb 12, 2026 | 19:47 pm
Multiple security issues were discovered in PostgreSQL, which may result in memory disclosure or the execution of arbitrary code. For the oldstable distribution (bookworm), these problems have been fixed in version 15.16-0+deb12u1. We recommend that you upgrade your postgresql-15 packages.
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Feb 12, 2026 | 19:46 pm
A vulnerability has been discovered in Nginx, a high-performance web and reverse proxy server: If configured to proxy to an upstream TLS server, a man-in-the-middle injection attack was possible. For the oldstable distribution (bookworm), this problem has been fixed in[…]
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Feb 12, 2026 | 14:37 pm
Asim Viladi Oglu Manizada reported that HAProxy, a load balancing reverse proxy, does not properly validate an INITIAL QUIC packet with specially crafted data, which may result in denial of service (process crash). For the stable distribution (trixie), this problem[…]
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Feb 10, 2026 | 18:21 pm
Titouan Lazard discovered a buffer overflow vulnerability in munge, an authentication service to create and validate credentials, which may allow local users to leak the MUNGE cryptographic key and forge arbitrary credentials. Additional details can be found in the upstream[…]
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Feb 9, 2026 | 19:36 pm
Moritz Woermann discovered that missing input sanitising in Shaarli, a personal bookmarking service, could result in cross-site scripting. For the oldstable distribution (bookworm), this problem has been fixed in version 0.12.1+dfsg-8+deb12u2. For the stable distribution (trixie), this problem has been[…]
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Feb 9, 2026 | 19:19 pm
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. For the oldstable distribution (bookworm), these problems have been fixed in version 6.1.162-1.
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Feb 9, 2026 | 18:21 pm
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. For the stable distribution (trixie), these problems have been fixed in version 6.12.69-1.
Read more...