Debian Security

Debian Bookworm Chromium Important Code Exec Denial Service DSA-6164-1

Stay Vigilant with Timely Linux Security Advisories Mar 12, 2026 | 22:14 pm

Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 146.0.7680.71-1~deb12u1.

Debian DSA-6162-1 Linux Kernel Critical Privilege Escalation DoS

Stay Vigilant with Timely Linux Security Advisories Mar 12, 2026 | 21:41 pm

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. The Qualys Threat Research Unit (TRU) discovered several vulnerabilities in Apparmor. Details can be found in the Qualys[…]

Debian DSA-6163-1 Linux Critical Privilege Escalation DoS CVE-2023-53424

Stay Vigilant with Timely Linux Security Advisories Mar 12, 2026 | 21:31 pm

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. The Qualys Threat Research Unit (TRU) discovered several vulnerabilities in Apparmor. Details can be found in the Qualys[…]

Debian Trixie multipart Important DoS Flaw Fix DSA-6161-1 CVE-2026-28356

Stay Vigilant with Timely Linux Security Advisories Mar 12, 2026 | 19:47 pm

It was discovered that the parse_options_header() function of multipart, a Python multipart/form-data parser was susceptible to denial of service via malformed request headers or multipart/form-data streams. For the stable distribution (trixie), this problem has been fixed in version 1.2.1-2+deb13u1.

Debian Bookworm Netty Important DDoS Request Smuggling CVE-2025-55163

Stay Vigilant with Timely Linux Security Advisories Mar 11, 2026 | 22:20 pm

Several security vulnerabilities have been discovered in Netty, a Java NIO client/server socket framework. It was found that Netty was vulnerable to the MadeYouReset DDoS attack, a logical vulnerability in the HTTP/2 protocol itself and programming errors which enabled request[…]

Debian Oldstable Imagemagick Important Denial of Service Issues DSA-6159-1

Stay Vigilant with Timely Linux Security Advisories Mar 10, 2026 | 21:23 pm

Multiple security vulnerabilities were discovered in imagemagick, a software suite used for editing and manipulating digital images, which could lead to information leaks, bypass of security policies, denial of service or arbitrary code execution. For the oldstable distribution (bookworm), these[…]

Debian 8 imagemagick Important Info Leak DoS CVE-2026-24481 DSA-6158-1

Stay Vigilant with Timely Linux Security Advisories Mar 9, 2026 | 21:21 pm

Multiple security vulnerabilities were discovered in imagemagick, a software suite used for editing and manipulating digital images, which could lead to information leaks, bypass of security policies, denial of service or arbitrary code execution. For the stable distribution (trixie), these[…]

Debian DSA-6157-1 Chromium Critical Code Exec DoS Issues CVE-2026-3536

Stay Vigilant with Timely Linux Security Advisories Mar 6, 2026 | 06:43 am

Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 145.0.7632.159-1~deb12u1.

Debian DSA-6156-1 GIMP Critical DoS Vulnerability Code Exploits

Stay Vigilant with Timely Linux Security Advisories Mar 3, 2026 | 22:05 pm

Several vulnerabilities were discovered in GIMP, the GNU Image Manipulation Program, which could result in denial of service or potentially the execution of arbitrary code if malformed XWD, ICNS, PGM or ICO files are opened. For the oldstable distribution (bookworm),[…]

Debian DSA-6155-1 spip Important SQL Injection XSS Attack

Stay Vigilant with Timely Linux Security Advisories Mar 3, 2026 | 10:30 am

It was discovered that SPIP, a website engine for publishing, would allow a malicious user to access protected information, and perform various SQL injection, Cross-Side Scripting (XSS), and Server-Side Request Forgery (SSRF) attacks. In some cases this could result in[…]

Debian DSA-6154-1 PHP 8.2 Critical Denial of Service Memory Disclosure

Stay Vigilant with Timely Linux Security Advisories Mar 2, 2026 | 21:28 pm

Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in denial of service or memory disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 8.2.30-1~deb12u1.

Debian Bookworm LXD Important Arbitrary Command Execution DSA-6153-1

Stay Vigilant with Timely Linux Security Advisories Mar 1, 2026 | 16:40 pm

Two security issues were discovered in LXD, a system container and virtual machine manager, which could result the in execution of arbitrary commands via malformed images. For the oldstable distribution (bookworm), these problems have been fixed in version 5.0.2-5+deb12u3.

Debian DSA-6152-1 Thunderbird Important Info Disclosure Code Execution

Stay Vigilant with Timely Linux Security Advisories Feb 28, 2026 | 13:31 pm

Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 1:140.8.0esr-1~deb12u1. For the stable distribution (trixie), these problems have[…]

Debian Bookworm DSA-6151-1 Chromium Critical Arbitrary Code Risk

Stay Vigilant with Timely Linux Security Advisories Feb 27, 2026 | 00:35 am

Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 145.0.7632.116-1~deb12u1.

Debian Oldstable Python-Django Moderate SQL Injection and DoS DSA-6150-1

Stay Vigilant with Timely Linux Security Advisories Feb 26, 2026 | 21:47 pm

Multiple security issues were found in Django, a Python web development framework, which could result in denial of service, information disclosure or SQL injection. For the oldstable distribution (bookworm), these problems have been fixed in version 3:3.2.25-0+deb12u2.

Debian Bookworm DSA-6149-1 NSS Critical Integer Overflow CVE-2026-2781

Stay Vigilant with Timely Linux Security Advisories Feb 26, 2026 | 19:46 pm

Clay Ver Valen discovered an integer overflow in the AES-GCM implementation of the Mozilla Network Security Service libraries. For the oldstable distribution (bookworm), this problem has been fixed in version 2:3.87.1-1+deb12u2. For the stable distribution (trixie), this problem has been[…]

Debian DSA-6148-1 firefox-esr Critical Code Execution Risks

Stay Vigilant with Timely Linux Security Advisories Feb 25, 2026 | 19:04 pm

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, sandbox escape, bypass of the same-origin policy, information disclosure or privilege escalation. For the oldstable distribution (bookworm), these[…]

Debian 2026 DSA-6146-1 Chromium Important Security Risk Update

Stay Vigilant with Timely Linux Security Advisories Feb 20, 2026 | 18:01 pm

Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 145.0.7632.109-1~deb12u3.

Debian DSA-6145-1 Nova Image Resize Issue CVE-2026-24708

Stay Vigilant with Timely Linux Security Advisories Feb 19, 2026 | 20:53 pm

Dan Smith discovered that nova, a cloud computing fabric controller, calls qemu-img without format restrictions for resize, which may result in unsafe image resize operations that could destroy data on the host system. Only compute nodes using the Flat image[…]

Debian trixie inetutils Critical Telnetd Authentication Bypass DSA-6144-1

Stay Vigilant with Timely Linux Security Advisories Feb 19, 2026 | 20:41 pm

Ron Ben Yizhak discovered that the inetutils implementation of telnetd didn't sanitise the CREDENTIALS_DIRECTORY environment variable before passing it to the login binary. This could be exploited to bypass authentication and login as root. For the stable distribution (trixie), this[…]

Beitrag teilen

Das Neueste von Support

Ähnliche Artikel