-
Stay Vigilant with Timely Linux Security Advisories
Sep 16, 2025 | 17:43 pm
It was discovered that Node sha.js, an implementation of the SHA family hash functions in pure JavaScript, performed incomplete type checks. For the oldstable distribution (bookworm), this problem has been fixed
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Sep 14, 2025 | 18:37 pm
It was discovered that cJSON, an ultralightweight JSON parser, performed insufficient input sanitising, which could result in out-of-bounds memory access.
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Sep 11, 2025 | 19:41 pm
Michael Hudak discovered a flaw in libjson-xs-perl, a module for manipulating JSON-formatted data. An integer buffer overflow causing a segfault when parsing specially crafted JSON, may allow an attacker to mount a denial-of-service attack or cause other unspecified impact.
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Sep 11, 2025 | 19:03 pm
Two vulnerabilities were discovered in cups, the Common UNIX Printing System, which may result in authentication bypass with AuthType Negotiate or in denial of service (daemon crash).
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Sep 11, 2025 | 17:36 pm
Multiple memory corruption vulnerbilities were discovered in imagemagick, a software suit used for editing and manipulating digital images, which could lead to information leak, denial of service, and potentially arbitrary code execution.
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Sep 11, 2025 | 02:17 am
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Sep 10, 2025 | 18:21 pm
Gregor Kopf of Secfault Security GmbH discovered that HSQLDB, a Java SQL database engine, allowed the execution of spurious scripting commands in .script and .log files. Hsqldb supports a "SCRIPT" keyword which is normally used to record the commands input[…]
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Sep 7, 2025 | 14:18 pm
Florian Stuhlmann discovered a SQL vulnerability in the ODBC plugin in the Shibboleth Service Provider which may result in information leak. For additional information please refer to the upstream advisory at
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Sep 5, 2025 | 20:23 pm
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Aug 30, 2025 | 18:05 pm
Two vulnerabilities were discovered in the Firebird database, which may result in denial of service or authentication bypass. For the stable distribution (trixie), these problems have been fixed in
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Aug 29, 2025 | 18:10 pm
Multiple vulnerabilities were discovered in Node.js, which could result in denial of service, HTTP request smuggling, privilege escalation, a side channel attack against PKCS#1 1.5 or a bypass of network import restrictions.
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Aug 29, 2025 | 07:24 am
A flaw was found in libxslt, the XSLT 1.0 processing library, where the attribute type, atype, flags are modified in a way that corrupts internal memory management. This is addressed by adding guards in libxml2, the GNOME XML library, preventing[…]
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Aug 28, 2025 | 18:51 pm
Michael Imfeld discovered an out-of-bounds read vulnerability in udisks2, a D-Bus service to access and manipulate storage devices, which may result in denial of service (daemon process crash), or in mapping an internal file descriptor from the daemon process onto[…]
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Aug 28, 2025 | 01:19 am
A security issues was discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Aug 27, 2025 | 21:07 pm
Multiple security issues were discovered in Unbound, a validating, recursive, caching DNS resolver, which may result in denial of service or cache poisoning via the "rebirthday attack".
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Aug 26, 2025 | 18:30 pm
Nikita Skorovoda discovered that Node cipher-base, an abstract base class for crypto-streams, performed incomplete type checks. For the oldstable distribution (bookworm), this problem has been fixed
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Aug 25, 2025 | 18:23 pm
Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if malformed files/streams are processed.
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Aug 24, 2025 | 12:51 pm
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. For the oldstable distribution (bookworm), these problems have been fixed
Read more...
-
Stay Vigilant with Timely Linux Security Advisories
Aug 22, 2025 | 18:42 pm
This update removes the usage of the C (Credential) flag for the binfmt_misc registration within the qemu-user package, as it allowed for privilege escalation when running a suid/sgid binary under qemu-user. This means suid/sgid foreign-architecture binaries are not running with
Read more...