Debian Security

Warning: Invalid argument supplied for foreach() in /var/www/vhosts/webfactories.de/httpdocs/modules/mod_jw_srfr/helper.php on line 42

Debian Node.js DSA-6272-1 Critical Denial of Service Issues
Stay Vigilant with Timely Linux Security Advisories May 14, 2026 | 21:02 pm
Multiple vulnerabilities were discovered in Node.js, which could result in denial of service or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 18.20.4+dfsg-1~deb12u2. We recommend that you upgrade your nodejs packages.
Read more...
Debian DSA-6271-1 gsasl Critical Denial of Service Vulnerability Fix
Stay Vigilant with Timely Linux Security Advisories May 14, 2026 | 14:38 pm
It was discovered that missing input sanitising in the DIGEST-MD5 parser of the GNU SASL library could result in denial of service. For the oldstable distribution (bookworm), this problem has been fixed in version 2.2.0-1+deb12u1. For the stable distribution (trixie),[…]
Read more...
Debian Trixie PostgreSQL-17 Key SQL Injection Vulnerability DSA-6270-1
Stay Vigilant with Timely Linux Security Advisories May 14, 2026 | 14:26 pm
Multiple security issues were discovered in PostgreSQL, which may result in authorisation bypass, execution of arbitrary code, information disclosure, privilege escalation, SQL injection or denial of service. For the stable distribution (trixie), these problems have been fixed in version 17.10-0+deb13u1.
Read more...
Debian DSA-6269-1 PostgreSQL 15 Serious SQL Injection Disruption
Stay Vigilant with Timely Linux Security Advisories May 14, 2026 | 14:25 pm
Multiple security issues were discovered in PostgreSQL, which may result in authorisation bypass, execution of arbitrary code, information disclosure, privilege escalation, SQL injection or denial of service. For the oldstable distribution (bookworm), these problems have been fixed in version 15.18-0+deb12u1.
Read more...
Debian Trixie FFmpeg Arbitrary Code Execution Fix DSA-6268-1
Stay Vigilant with Timely Linux Security Advisories May 14, 2026 | 13:46 pm
Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if malformed files/streams are processed. For the stable distribution (trixie), this problem has been fixed in[…]
Read more...
Debian DSA-6267-1 Thunderbird Important Arbitrary Code Execution
Stay Vigilant with Timely Linux Security Advisories May 14, 2026 | 12:05 pm
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. For the oldstable distribution (bookworm), these problems have been fixed in version 1:140.10.2esr-1~deb12u1. For the stable distribution (trixie), these problems have been fixed in
Read more...
Debian DSA-6266-1 nghttp2 Critical DoS Exploit CVE-2026-27135
Stay Vigilant with Timely Linux Security Advisories May 14, 2026 | 08:47 am
It was discovered that nghttp2, an implementation of the HTTP/2 protocol, could be crashed via an assertion failure. A remote attacker could exploit this to cause a DoS attack by sending a malformed frame immediately after triggering the termination path.[…]
Read more...
Debian exim4 Important Denial of Service Remote Code Execution DSA-6265-1
Stay Vigilant with Timely Linux Security Advisories May 12, 2026 | 14:23 pm
Several vulnerabilities were discovered in the Exim mail transport agent, which may result in remote code execution, denial of service or an information leak. For the oldstable distribution (bookworm), these problems have been fixed in version 4.96-15+deb12u9.
Read more...
Debian DSA-6264-1 Dnsmasq Important Denial of Service CVE-2026-2291
Stay Vigilant with Timely Linux Security Advisories May 11, 2026 | 19:11 pm
Multiple security vulnerabilities have been discovered in Dnsmasq, a lightweight DNS forwarder and DHCP server, which could result in cache poisoning, bypass of security controls, denial of service or local privilege escalation. For the oldstable distribution (bookworm), these problems have[…]
Read more...
Debian DSA-6263-1 libpng1.6 Important Use-After-Free Vulnerability
Stay Vigilant with Timely Linux Security Advisories May 10, 2026 | 16:11 pm
A use-after-free was discovered in libpng, a library implementing an interface for reading and writing PNG (Portable Network Graphics) files. For the oldstable distribution (bookworm), this problem has been fixed in version 1.6.39-2+deb12u5. For the stable distribution (trixie), this problem[…]
Read more...
Debian DSA-6262-1 lcms2 Important Integer Overflow Advisory
Stay Vigilant with Timely Linux Security Advisories May 10, 2026 | 16:00 pm
Two integer overflows were discovered in the LittleCMS 2 colour management library. For the oldstable distribution (bookworm), this problem has been fixed in version 2.14-2+deb12u1. For the stable distribution (trixie), this problem has been fixed in
Read more...
Debian Bookworm Corosync Critical DoS Memory Disclosure DSA-6261-1
Stay Vigilant with Timely Linux Security Advisories May 10, 2026 | 11:21 am
Two security vulnerabilities were discovered in the Corosync cluster engine, which could result in denial of service or memory disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 3.1.7-1+deb12u2. For the stable distribution (trixie), these problems[…]
Read more...
Debian Bookworm Tor Important DoS Issues DSA-6260-1 CVE-2026-44597
Stay Vigilant with Timely Linux Security Advisories May 10, 2026 | 11:13 am
Multiple security vulnerabilities were discovered in Tor, a connection- based low-latency anonymous communication system, which could result in denial of service. For the oldstable distribution (bookworm), these problems have been fixed in version 0.4.9.8-0+deb12u1.
Read more...
Debian Bookworm DSA-6259-1 PyJWT Important Authentication Flaw
Stay Vigilant with Timely Linux Security Advisories May 9, 2026 | 11:35 am
It was discovered that PyJWT, a Python implementation of JSON web tokens insufficiently validated the "crit" header parameter, which could result in incomplete enforcement of authentication settings. For the oldstable distribution (bookworm), this problem has been fixed in version 2.6.0-1+deb12u1.
Read more...
Debian Bookworm Linux Important Local Escalation Fix DSA-6258-1
Stay Vigilant with Timely Linux Security Advisories May 9, 2026 | 08:25 am
Two vulnerabilities have been discovered in the Linux kernel that may lead to local privilege escalation. For the oldstable distribution (bookworm), these problems have been fixed in version 6.1.170-3. We recommend that you upgrade your linux packages.
Read more...
Debian Bookworm Postorius Important Cross-Site Scripting Fix DSA-6257-1
Stay Vigilant with Timely Linux Security Advisories May 8, 2026 | 18:54 pm
A cross-site scripting vulnerability was discovered in Postorius, the administrative web frontend for Mailman 3. For the oldstable distribution (bookworm), this problem has been fixed in version 1.3.8-3+deb12u1. For the stable distribution (trixie), this problem has been fixed in
Read more...
Debian DSA-6255-1 php8.2 Critical Security Issues Affecting Users
Stay Vigilant with Timely Linux Security Advisories May 8, 2026 | 18:49 pm
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in denial of service, SQL injection, cross-site scripting or the execution of arbitrary code. For the oldstable distribution (bookworm), these problems have[…]
Read more...
Debian firefox-esr Important Arbitrary Code Exec DSA-6254-1 CVE-2026-8090
Stay Vigilant with Timely Linux Security Advisories May 8, 2026 | 18:17 pm
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code. For the oldstable distribution (bookworm), these problems have been fixed in version 140.10.2esr-1~deb12u1.
Read more...
Debian Trixie Linux Kernel Critical Privilege Escalation DoS DSA-6253-1
Stay Vigilant with Timely Linux Security Advisories May 8, 2026 | 15:32 pm
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. For the stable distribution (trixie), these problems have been fixed in version 6.12.86-1.
Read more...