Debian Security

Debian 12 13 ruby-rack Critical XSS Directory Traversal DSA-6180-1

Stay Vigilant with Timely Linux Security Advisories Mar 26, 2026 | 21:45 pm

Two security issues (cross-site scripting and directory traversal) were found in Rack, an interface for developing web applications in Ruby. For the oldstable distribution (bookworm), these problems have been fixed in version 2.2.22-0+deb12u1. For the stable distribution (trixie), these problems[…]

Debian Bookworm Thunderbird Critical Info Leak and Code Exec DSA-6179-1

Stay Vigilant with Timely Linux Security Advisories Mar 26, 2026 | 20:00 pm

Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 1:140.9.0esr-1~deb12u1. For the stable distribution (trixie), these problems have[…]

Debian Bookworm Firefox ESR Critical Security Issues DSA-6178-1

Stay Vigilant with Timely Linux Security Advisories Mar 25, 2026 | 22:13 pm

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, sandbox escape, information disclosure, denial of service or privilege escalation. For the oldstable distribution (bookworm), these problems have[…]

Debian Bookworm Chromium Critical Code Exec Info Disclosure DSA-6177-1

Stay Vigilant with Timely Linux Security Advisories Mar 25, 2026 | 07:53 am

Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 146.0.7680.164-1~deb12u1.

Debian DSA-6176-1 strongSwan Critical DoS Integer Underflow CVE-2026-25075

Stay Vigilant with Timely Linux Security Advisories Mar 23, 2026 | 18:07 pm

Kazuma Matsumoto discovered an integer overflow bug in the EAP-TTLS plugin of strongSwan, an IKE/IPsec suite. The EAP-TTLS plugin doesn't check the length field in the header of attribute-value pairs (AVPs) tunneled in EAP-TTLS, which can cause an integer underflow[…]

Debian DSA-6175-1 libyaml-syck-perl Severe Denial of Service and Code Exec

Stay Vigilant with Timely Linux Security Advisories Mar 22, 2026 | 19:43 pm

Several vulnerabilities were discovered in libyaml-syck-perl, a Perl module providing a fast, lightweight YAML loader and dumper, which may result in denial of service and potentially arbitrary code execution. For the oldstable distribution (bookworm), this problem has been fixed in[…]

Ubuntu Jammy SPIP Security Vulnerability Identified as CVE-2023-4567

Stay Vigilant with Timely Linux Security Advisories Mar 22, 2026 | 09:40 am

Jul Blobul discovered that SPIP, a website engine for publishing, is prone to a privilege escalation vulnerability. For the stable distribution (trixie), this problem has been fixed in version 4.4.13+dfsg-0+deb13u1. We recommend that you upgrade your spip packages.

Debian Bookworm Freeciv Critical DoS Issue DSA-6173-1 CVE-2026-33250

Stay Vigilant with Timely Linux Security Advisories Mar 21, 2026 | 20:07 pm

Louis Moureaux discovered that incorrect packet processing in the game server of Freeciv, a free clone of the turn based strategy game Civilization, could result in denial of service. For the oldstable distribution (bookworm), this problem has been fixed in[…]

Debian webkit2gtk Critical Process Crash and DoS Advisory DSA-6172-1

Stay Vigilant with Timely Linux Security Advisories Mar 21, 2026 | 11:11 am

The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-43214 shandikri discovered that processing maliciously crafted web content may lead to an unexpected process crash.

Debian Bookworm Chromium Important Security Issues DSA-6171-1

Stay Vigilant with Timely Linux Security Advisories Mar 20, 2026 | 22:17 pm

Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 146.0.7680.153-1~deb12u1.

Debian DSA-6170-1 snapd Local Escalation CVE-2026-3888 Advisory

Stay Vigilant with Timely Linux Security Advisories Mar 19, 2026 | 22:32 pm

The Qualys Threat Research Unit (TRU) discovered a local privilege escalation vulnerability in snapd, a daemon and tooling that enable snap packages. Details can be found in the Qualys advisory at https://cdn2.qualys.com/advisory/2026/03/17/snap-confine-systemd-tmpfiles.txt For the oldstable distribution (bookworm), this problem has[…]

Debian Trixie ImageMagick Important Symlink Races Denial Service DSA-6169-1

Stay Vigilant with Timely Linux Security Advisories Mar 19, 2026 | 21:46 pm

Multiple security vulnerabilities were discovered in imagemagick, a software suite used for editing and manipulating digital images, which could lead to symlink races, information leaks, denial of service and potentially arbitrary code execution. For the stable distribution (trixie), these problems[…]

Debian Trixie Freetype Vulnerability Alert DoS DSA-6168-1

Stay Vigilant with Timely Linux Security Advisories Mar 18, 2026 | 21:37 pm

It was discovered that an integer overflow in the Freetype font engine could result in information disclosure or denial of service. The oldstable distribution (bookworm) is not affected. For the stable distribution (trixie), this problem has been fixed in version[…]

Debian GST-Plugins-Base1.0 Important Integer Overflow DoS CVE-2026-2921

Stay Vigilant with Timely Linux Security Advisories Mar 17, 2026 | 20:05 pm

An integer overflow was discovered in the RIFF parser of the GStreamer media framework, which may result in denial of service or potentially the execution of arbitrary code if a malformed media file is opened. For the oldstable distribution (bookworm),[…]

Debian DSA-6166-1 Node.js Critical Denial of Service Issues

Stay Vigilant with Timely Linux Security Advisories Mar 17, 2026 | 19:56 pm

Multiple vulnerabilities were discovered in Node.js, which could result in denial of service or information disclosure or bypass of file restrictions. For the stable distribution (trixie), these problems have been fixed in version 20.19.2+dfsg-1+deb13u1.

Debian Bookworm DSA-6165-1 Chromium Critical Exec Denial of Service CVEs

Stay Vigilant with Timely Linux Security Advisories Mar 16, 2026 | 04:39 am

Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. Google is aware that exploits for both CVEs exist in the wild. For the oldstable distribution (bookworm), these problems[…]

Debian Bookworm Chromium Important Code Exec Denial Service DSA-6164-1

Stay Vigilant with Timely Linux Security Advisories Mar 12, 2026 | 22:14 pm

Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 146.0.7680.71-1~deb12u1.

Debian DSA-6162-1 Linux Kernel Critical Privilege Escalation DoS

Stay Vigilant with Timely Linux Security Advisories Mar 12, 2026 | 21:41 pm

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. The Qualys Threat Research Unit (TRU) discovered several vulnerabilities in Apparmor. Details can be found in the Qualys[…]

Debian DSA-6163-1 Linux Critical Privilege Escalation DoS CVE-2023-53424

Stay Vigilant with Timely Linux Security Advisories Mar 12, 2026 | 21:31 pm

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. The Qualys Threat Research Unit (TRU) discovered several vulnerabilities in Apparmor. Details can be found in the Qualys[…]

Debian Trixie multipart Important DoS Flaw Fix DSA-6161-1 CVE-2026-28356

Stay Vigilant with Timely Linux Security Advisories Mar 12, 2026 | 19:47 pm

It was discovered that the parse_options_header() function of multipart, a Python multipart/form-data parser was susceptible to denial of service via malformed request headers or multipart/form-data streams. For the stable distribution (trixie), this problem has been fixed in version 1.2.1-2+deb13u1.

Beitrag teilen

Das Neueste von Support

Ähnliche Artikel