Multiple security issues were discovered in Incus, a system container and virtual machine manager, which could result in denial of service, For the stable distribution (trixie), these problems have been fixed in version 6.0.4-2+deb13u7. We recommend that you upgrade your[…]
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. For the oldstable distribution (bookworm), these problems have been fixed in version 6.1.170-1.
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. For the oldstable distribution (bookworm), these problems have been fixed in version 1:140.10.1esr-1~deb12u1. For the stable distribution (trixie), these problems have been fixed in
Multiple security vulnerabilities were discovered in Python aiohttp, an asynchronous HTTP client/server for asyncio, which could result in denial of service, HTTP request smuggling or information disclosure. For the stable distribution (trixie), these problems have been fixed in version 3.11.16-1+deb13u1.
Multiple security vulnerabilities were discovered in imagemagick, a software suite used for editing and manipulating digital images, which could lead to denial of service, information disclosure or potentially arbitrary code execution if malformed images are processed. For the stable distribution[…]
The oldstable (bookworm) backport of the security fix for CVE-2026-0394 introduced a regression in the passwd-file path normalization. Updated packages are now available to correct this issue. For the oldstable distribution (bookworm), this problem has been fixed in version 1:2.3.19.1+dfsg1-2.1+deb12u4.
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 147.0.7727.137-1~deb12u1.
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. For the stable distribution (trixie), these problems have been fixed in version 6.12.85-1.
Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in incorrect generation of cryptographic keys, denial of service, information disclosure, XEE/XEE attacks or incorrect validation of Kerberos credentials. For the oldstable distribution (bookworm), these problems have[…]
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information disclosure or sandbox escape. For the oldstable distribution (bookworm), these problems have been fixed in version 140.10.1esr-1~deb12u1.
Multiple vulnerabiliites have been discovered in PDNS Recursor, a resolving name server, which could result in denial of service. For the stable distribution (trixie), these problems have been fixed in version 5.2.9-0+deb13u1. We recommend that you upgrade your pdns-recursor packages.
Multiple security vulnerabilities were discovered in the dnsdist DNS loadbalancer, which could result in denial of service, information disclosure or ACL bypass. For the stable distribution (trixie), these problems have been fixed in version 4.9.14-0+deb13u1.
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-46299 Google Big Sleep discovered that processing maliciously crafted web content may disclose internal states of the app.
Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in incorrect generation of cryptographic keys, denial of service, information disclosure, XEE/XEE attacks or incorrect validation of Kerberos credentials. For the stable distribution (trixie), these problems have[…]
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 147.0.7727.116-1~deb12u1.
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. For the oldstable distribution (bookworm), these problems have been fixed in version 1:140.10.0esr-1~deb12u1. For the stable distribution (trixie), these problems have been fixed in
Multiple security issues were discovered in cpp-httplib, a C++ cross platform HTTP/HTTPS library, which could result in denial of service. For the stable distribution (trixie), these problems have been fixed in version 0.18.7-1+deb13u1. We recommend that you upgrade your cpp-httplib[…]
Multiple vulnerabilities were fixed in strongSwan, an IKE/IPsec suite. CVE-2026-35328 A vulnerability in libtls related to the processing of the supported_versions extension in TLS that can result in an infinite loop.
Maik Schaefer discovered that a TOCTOU race condition in PackageKit (a package management service over a DBus interface) could result in local privilege escalation. For the oldstable distribution (bookworm), this problem has been fixed in version 1.2.6-5+deb12u1.
Letzte Änderung am Freitag, 01 Januar 2016 20:59