Debian - SITE - Advanced Web Factories

Debian: Node.js Critical Risks Denial Service DSA-5991-1 CVE-2023-46809

Stay Vigilant with Timely Linux Security Advisories Aug 29, 2025 | 18:10 pm

Multiple vulnerabilities were discovered in Node.js, which could result in denial of service, HTTP request smuggling, privilege escalation, a side channel attack against PKCS#1 1.5 or a bypass of network import restrictions.

Debian: libxml2 Critical Memory Corruption Fix CVE-2025-7425 DSA-5990-1

Stay Vigilant with Timely Linux Security Advisories Aug 29, 2025 | 07:24 am

A flaw was found in libxslt, the XSLT 1.0 processing library, where the attribute type, atype, flags are modified in a way that corrupts internal memory management. This is addressed by adding guards in libxml2, the GNOME XML library, preventing[…]

Debian: udisks2 Critical Out-of-Bounds Read CVE-2025-8067

Stay Vigilant with Timely Linux Security Advisories Aug 28, 2025 | 18:51 pm

Michael Imfeld discovered an out-of-bounds read vulnerability in udisks2, a D-Bus service to access and manipulate storage devices, which may result in denial of service (daemon process crash), or in mapping an internal file descriptor from the daemon process onto[…]

Debian: Chromium Critical DSA-5988-1 Code Execution and DoS Threat

Stay Vigilant with Timely Linux Security Advisories Aug 28, 2025 | 01:19 am

A security issues was discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.

Debian: Unbound Severe Denial of Service Vulnerability DSA-5988-2

Stay Vigilant with Timely Linux Security Advisories Aug 27, 2025 | 21:07 pm

Multiple security issues were discovered in Unbound, a validating, recursive, caching DNS resolver, which may result in denial of service or cache poisoning via the "rebirthday attack".

Debian: node-cipher-base Critical Incomplete Type Check Issue DSA-5986-1

Stay Vigilant with Timely Linux Security Advisories Aug 26, 2025 | 18:30 pm

Nikita Skorovoda discovered that Node cipher-base, an abstract base class for crypto-streams, performed incomplete type checks. For the oldstable distribution (bookworm), this problem has been fixed

Debian 11: FFmpeg Critical Denial of Service and Code Exec DSA-5985-1

Stay Vigilant with Timely Linux Security Advisories Aug 25, 2025 | 18:23 pm

Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if malformed files/streams are processed.

Debian: Thunderbird Critical Arbitrary Code Execution DSA-5984-1

Stay Vigilant with Timely Linux Security Advisories Aug 24, 2025 | 12:51 pm

Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. For the oldstable distribution (bookworm), these problems have been fixed

Debian: qemu Critical Privilege Escalation Fix DSA-5983-1

Stay Vigilant with Timely Linux Security Advisories Aug 22, 2025 | 18:42 pm

This update removes the usage of the C (Credential) flag for the binfmt_misc registration within the qemu-user package, as it allowed for privilege escalation when running a suid/sgid binary under qemu-user. This means suid/sgid foreign-architecture binaries are not running with

Debian 5.7-2: Squid Critical Arbitrary Code Execution DSA-5982-1

Stay Vigilant with Timely Linux Security Advisories Aug 21, 2025 | 17:52 pm

Two security issues were discovered in the Squid proxy caching server, which could result in the execution of arbitrary code, information disclosure or denial of service.

Debian: Chromium Critical Exec Code Denial Service CVE-2025-9132 DSA-5981-1

Stay Vigilant with Timely Linux Security Advisories Aug 21, 2025 | 05:46 am

A security issues was discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.

Debian: Firefox-ESR Critical Arbitrary Code Execution DSA-5980-1

Stay Vigilant with Timely Linux Security Advisories Aug 20, 2025 | 18:39 pm

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, sandbox escape or bypass of the same-origin policy.

Debian Advisory DSA-5979-1 Addresses libxslt Critical Info Disclosure Issue

Stay Vigilant with Timely Linux Security Advisories Aug 19, 2025 | 07:37 am

Two vunlerabilities were found in libxslt, the XSLT 1.0 processing library, which may lead to information disclosure and DoS attack. CVE-2023-40403

Debian: WebKitGTK Critical Memory Crash and DoS DSA-5978-1 CVE-2025-6558

Stay Vigilant with Timely Linux Security Advisories Aug 18, 2025 | 17:21 pm

The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-6558

Debian Security Advisory: Important Log Integrity Concerns DSA-5977-1

Stay Vigilant with Timely Linux Security Advisories Aug 14, 2025 | 14:31 pm

Rajesh Pangare discovered two vulnerabilities in aide, an advanced intrusion detection system. A local attacker can take advantage of these flaws to hide the addition or removal of a file from the the report, tamper with the log output, or[…]

Debian: Chromium DSA-5976-1 Critical Code Exec & DoS Issues

Stay Vigilant with Timely Linux Security Advisories Aug 14, 2025 | 07:24 am

Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.

Debian: Linux Privilege Escalation DoS Issues DSA-5975-1 CVE IDs

Stay Vigilant with Timely Linux Security Advisories Aug 13, 2025 | 10:59 am

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.

Debian: pgpool-II Major Authentication Flaw & Data Leak DSA-5980-2

Stay Vigilant with Timely Linux Security Advisories Aug 13, 2025 | 07:15 am

Two security issues were found in pgpool-II, the connection pool server and replication proxy for PostgreSQL, which could result in authentication bypass and exposure of sensitive information.

Debian: Linux Kernel DSA-5973-1 Urgent Privilege Escalation Security Flaw

Stay Vigilant with Timely Linux Security Advisories Aug 12, 2025 | 19:07 pm

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.

Ubuntu: OpenJDK-17 Critical Vulnerability Notice DSA-5973-2

Stay Vigilant with Timely Linux Security Advisories Aug 12, 2025 | 17:58 pm

Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in denial of service, information disclosure or weakened TLS connections.

Beitrag teilen