Debian - SITE - Advanced Web Factories

Ubuntu: GIMP Vulnerability Patch DSA-6065-2 CVE-2025-59821

Stay Vigilant with Timely Linux Security Advisories Nov 27, 2025 | 20:47 pm

It was discovered that a buffer overflow in the TGA parser of Krita, a creative application for raster images, could potentially result in the execution of arbitrary code if malformed images are opened. For the oldstable distribution (bookworm), this problem[…]

Debian: DSA-6064-1 tryton-server Critical Fix Information Disclosure

Stay Vigilant with Timely Linux Security Advisories Nov 27, 2025 | 19:41 pm

Several security vulnerabilities were discovered in the server of the Tryton application platform, which could lead to information disclosure. For the oldstable distribution (bookworm), this problem has been fixed in version 6.0.29-2+deb12u4. For the stable distribution (trixie), this problem has[…]

Debian: kdeconnect Critical Impersonation Threat DSA-6063-1 CVE-2025-66270

Stay Vigilant with Timely Linux Security Advisories Nov 26, 2025 | 22:25 pm

It was discovered that missing validation of the device ID during handshakes in KDE Connect, a tool to integrate smart phones to a desktop, could allow an attacker to impersonate another device. The oldstable distribution (bookworm) is not affected. For[…]

Debian: pdfminer Critical CVE-2025-64512 Code Execution Risk Advisory

Stay Vigilant with Timely Linux Security Advisories Nov 25, 2025 | 20:54 pm

A vulnerability was discovered in pdfminer, a tool for extracting information from PDF documents, which may result in the execution of arbitrary code if a specially crafted PDF file is processed. For the oldstable distribution (bookworm), this problem has been[…]

Debian: Tryton DSA-6061-1 Cross-Site Scripting Critical Update

Stay Vigilant with Timely Linux Security Advisories Nov 25, 2025 | 20:05 pm

Abdulfatah Abdillahi discovered a cross-site scripting vulnerability in the web client of the Tryton application platform. For the oldstable distribution (bookworm), this problem has been fixed in version 6.0.28+ds1-2+deb12u2. For the stable distribution (trixie), this problem has been fixed in

Debian DSA-6060-1: Chromium Critical Code Exec & Info Disclosure

Stay Vigilant with Timely Linux Security Advisories Nov 19, 2025 | 19:24 pm

Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. Google is aware that an exploit for CVE-2025-13223 exists in the wild. For the oldstable distribution (bookworm), these problems[…]

Debian: Thunderbird Critical Code Execution Flaws DSA-6059-1

Stay Vigilant with Timely Linux Security Advisories Nov 16, 2025 | 14:45 pm

Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. For the oldstable distribution (bookworm), these problems have been fixed

Debian: DSA-6058-1 lasso Critical Denial of Service CVE-2025-46404

Stay Vigilant with Timely Linux Security Advisories Nov 15, 2025 | 19:49 pm

Keane O'Kelley discovered several vulnerabilities in lasso, a library implementing Liberty Alliance and SAML protocols, which could result in denial of service or the execution of arbitrary code.

Debian: Critical Vulnerability in Privilege Escalation DSA-6080-1 Alert

Stay Vigilant with Timely Linux Security Advisories Nov 13, 2025 | 19:53 pm

A vulnerability was discovered in the ec2tokens and s3tokens APIs of Keystone, the OpenStack identity service, which may result in authorisation bypass or privilege escalation if /v3/ec2tokens or /v3/s3tokens are reachable by unauthenticated clients.

Debian DSA-6057-1 LXD Important Local Privilege Escalation CVE-2025-64507

Stay Vigilant with Timely Linux Security Advisories Nov 13, 2025 | 19:52 pm

It was discovered that LXD, a system container and virtual machine manager, is prone to a local privilege escalation vulnerability if unprivileged users are allowed to access LXD through lxd-user.

Debian: Chromium Critical Exec Code Risk DSA-6055-1 CVE-2025-13042

Stay Vigilant with Timely Linux Security Advisories Nov 13, 2025 | 09:31 am

A security issue was discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.

Debian: firefox-esr Important Threat of Code Execution DSA-6054-1

Stay Vigilant with Timely Linux Security Advisories Nov 12, 2025 | 22:30 pm

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or bypass of the same-origin policy.

Debian 6.1: Security Advisory DSA-6053-1 for Linux Critical Issues

Stay Vigilant with Timely Linux Security Advisories Nov 11, 2025 | 20:11 pm

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.

Debian: rust-sudo-rs Important Auth Bypass Risks DSA-6052-1

Stay Vigilant with Timely Linux Security Advisories Nov 11, 2025 | 19:23 pm

Two security issues were discovered in sudo-rs, a Rust-based implemention of sudo (and su), which could result in the local disclosure of partially typed passwords or an authentication bypass in some targetpw/rootpw configurations.

Debian: Incus Important Privilege Escalation CVE-2025-64507 DSA-6051-1

Stay Vigilant with Timely Linux Security Advisories Nov 10, 2025 | 19:49 pm

It was discovered that Incus, a system container and virtual machine manager, is prone to a local privilege escalation vulnerability unprivileged users are allowed access to Incus through incus-user.

Debian: Chromium Critical Security Issue DSA-6050-1 - CVE-2025-12725

Stay Vigilant with Timely Linux Security Advisories Nov 7, 2025 | 09:34 am

Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.

Debian: GIMP Critical Buffer Overflow DoS CVE-2025-10934

Stay Vigilant with Timely Linux Security Advisories Nov 4, 2025 | 19:46 pm

A buffer overflow was discovered in GIMP, the GNU Image Manipulation Program, which could result in denial of service or potentially the execution of arbitrary code if malformed XWD images are opened.

Debian: ruby-rack Critical Denial of Service Vulnerabilities DSA-6048-1

Stay Vigilant with Timely Linux Security Advisories Nov 3, 2025 | 22:02 pm

Multiple security issues were found in Rack, an interface for developing web applications in Ruby, which could result in denial of service or proxy bypass.