Debian Security

Warning: Invalid argument supplied for foreach() in /var/www/vhosts/webfactories.de/httpdocs/modules/mod_jw_srfr/helper.php on line 42

Debian Bookworm: DSA-5954-1 critical: sudo local privilege escalation
Stay Vigilant with Timely Linux Security Advisories Jun 30, 2025 | 14:23 pm
Rich Mirch discovered that sudo, a program designed to provide limited super user privileges to specific users, does not correctly handle the host (-h or --host) option. Due to a bug the host option was not restricted to listing privileges[…]
Read more...
Ubuntu USN-4957-1: Important fpm Vulnerability Announcement Explored
Stay Vigilant with Timely Linux Security Advisories Jun 29, 2025 | 18:56 pm
Several vulnerabilities were discovered in catdoc, a text extractor for MS-Office files, which may result in denial of service or the execution of arbitrary code if a specially crafted file is processed.
Read more...
Debian: DSA-5952-1 critical: chromium arbitrary code execution
Stay Vigilant with Timely Linux Security Advisories Jun 27, 2025 | 16:18 pm
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
Read more...
Debian Bookworm: DSA-5951-1 important: icu buffer overflow
Stay Vigilant with Timely Linux Security Advisories Jun 26, 2025 | 21:06 pm
A buffer overflow was discovered in the International Components for Unicode (ICU) library. For the stable distribution (bookworm), this problem has been fixed in
Read more...
Debian 12: DSA-5950-1 important: firefox-esr arbitrary code risk
Stay Vigilant with Timely Linux Security Advisories Jun 25, 2025 | 21:02 pm
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.
Read more...
Debian: DSA-5949-1 important: libxml2 memory vulnerabilities
Stay Vigilant with Timely Linux Security Advisories Jun 25, 2025 | 18:55 pm
Brief introduction Multiple memory related vulnerabilities, inlcuding use-after-free,
Read more...
Debian DSA-5947-1 important: xorg-server privilege escalation
Stay Vigilant with Timely Linux Security Advisories Jun 23, 2025 | 18:46 pm
Nils Emmerich discovered several vulnerabilities in the Xorg X server, which may result in privilege escalation if the X server is running privileged.
Read more...
Debian Bookworm: DSA-5946-1 critical: gdk-pixbuf memory disclosure
Stay Vigilant with Timely Linux Security Advisories Jun 22, 2025 | 18:11 pm
It was discovered that incorrect bounds validation in the GIF decoder of the GDK Pixbuf library may result in memory disclosure. For the stable distribution (bookworm), this problem has been fixed in
Read more...
Debian 12: DSA-5945-1 important: konsole telnet code execution
Stay Vigilant with Timely Linux Security Advisories Jun 20, 2025 | 19:41 pm
Dennis Dast discovered that the Konsole terminal emulator insecurely handled the telnet URI scheme, which could result in the execution of arbitrary code in some configurations.
Read more...
Debian 12: DSA-5944-1 critical: chromium arbitrary code execution
Stay Vigilant with Timely Linux Security Advisories Jun 19, 2025 | 03:44 am
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
Read more...
Debian: DSA-5943-1 libblockdev local privilege escalation
Stay Vigilant with Timely Linux Security Advisories Jun 17, 2025 | 20:27 pm
The Qualys Threat Research Unit (TRU) discovered a local privilege escalation vulnerability in libblockdev, a library for manipulating block devices. An "allow_active" user can exploit this flaw via the udisks daemon to obtain the full privileges of the root user.
Read more...
Ubuntu DSA-5943-2: Severe Firefox Buffer Overflow Vulnerability Fixed
Stay Vigilant with Timely Linux Security Advisories Jun 12, 2025 | 02:41 am
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
Read more...
Debian: DSA-5941-1 critical: gst-plugins-bad1.0 H.265 Denial of Service
Stay Vigilant with Timely Linux Security Advisories Jun 11, 2025 | 18:56 pm
Multiple vulnerabilities were discovered in the H.265 plugin for the GStreamer media framework, which may result in denial of service or potentially the execution of arbitrary code if a malformed media file is opened.
Read more...
Debian Bookworm: DSA-5940-1 critical: modsecurity-apache DoS issue
Stay Vigilant with Timely Linux Security Advisories Jun 8, 2025 | 20:28 pm
Several vulnerabilities were discovered in modsecurity-apache, an Apache module to tighten the Web application security, which may result in denial of service (high memory consumption).
Read more...
Debian: DSA-5939-1 gimp severe: denial of service, code execution
Stay Vigilant with Timely Linux Security Advisories Jun 6, 2025 | 18:28 pm
Several vulnerabilities were discovered in GIMP, the GNU Image Manipulation Program, which could result in denial of service or potentially the execution of arbitrary code if malformed XCF, TGA, DDS, FLI or ICO files are opened.
Read more...
Debian 10: DSA-5938-1 critical: tornado DoS due to logging
Stay Vigilant with Timely Linux Security Advisories Jun 6, 2025 | 18:27 pm
It was discovered that the Tornado Python web framework performed excessive logging when parsing some multipart/form-data requests, which could result in denial of service.
Read more...
Debian WebKitGTK DSA-5937-1: Addresses Critical Memory Corruption
Stay Vigilant with Timely Linux Security Advisories Jun 6, 2025 | 08:49 am
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-24223
Read more...
Debian DSA-5936-1: libfile-find-rule-perl critical risk of code execution
Stay Vigilant with Timely Linux Security Advisories Jun 5, 2025 | 14:49 pm
It was discovered that libfile-find-rule-perl, a module to search for files based on rules, is vulnerable to arbitrary code execution when grep() encounters a crafted file name.
Read more...
Debian: DSA-5935-1 severe: chromium code execution and info leak
Stay Vigilant with Timely Linux Security Advisories Jun 4, 2025 | 12:52 pm
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. Google is aware that an exploit for CVE-2025-5419 exists in the wild.
Read more...
Debian: DSA-5933-1 high: tcpdf denial of service and XSS
Stay Vigilant with Timely Linux Security Advisories Jun 1, 2025 | 12:34 pm
Multiple security issues were discovered in TCPDF, a PHP class for generating PDF files on-the-fly, which may result in denial of service, cross-site scripting or information disclosure.
Read more...