Anzeige der Artikel nach Schlagwörtern: debian

Debian: DSA-4973-1: thunderbird security update

Advisories Sep 10, 2021 | 16:21 pm

Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. For the oldstable distribution (buster), this problem has been fixed

Debian: DSA-4972-1: ghostscript security update

Advisories Sep 10, 2021 | 08:16 am

It was discovered that Ghostscript, the GPL PostScript/PDF interpreter, does not properly validate access for the "%pipe%", "%handle%" and "%printer%" io devices, which could result in the execution of arbitrary code if a malformed Postscript file is processed (despite the[…]

Debian: DSA-4971-1: ntfs-3g security update

Advisories Sep 9, 2021 | 15:15 pm

Several vulnerabilities were discovered in NTFS-3G, a read-write NTFS driver for FUSE. A local user can take advantage of these flaws for local root privilege escalation.

Debian: DSA-4970-1: postorius security update

Advisories Sep 9, 2021 | 13:52 pm

Kevin Israel discovered that Postorius, the administrative web frontend for Mailman 3, didn't validate whether a logged-in user owns the email address when unsubscribing.

Debian: DSA-4969-1: firefox-esr security update

Advisories Sep 9, 2021 | 13:49 pm

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.

Debian: DSA-4968-1: haproxy security update

Advisories Sep 7, 2021 | 16:58 pm

Ori Hollander reported that missing header name length checks in the htx_add_header() and htx_add_trailer() functions in HAProxy, a fast and reliable load balancing reverse proxy, could result in request smuggling attacks or response splitting attacks.

Debian: DSA-4967-1: squashfs-tools security update

Advisories Sep 4, 2021 | 17:24 pm

Etienne Stalmans discovered that unsquashfs in squashfs-tools, the tools to create and extract Squashfs filesystems, does not validate filenames for traversal outside of the destination directory. An attacker can take advantage of this flaw for writing to arbitrary files to[…]

Debian: DSA-4966-1: gpac security update

Advisories Aug 31, 2021 | 17:07 pm

Multiple security issues were discovered in the GPAC multimedia framework which could result in denial of service or the execution of arbitrary code. The oldstable distribution (buster) is not affected.

Debian: DSA-4965-1: libssh security update

Advisories Aug 31, 2021 | 10:43 am

It was discovered that a buffer overflow in rekeying in libssh could result in denial of service or potentially the execution of arbitrary code.

Sequoia: A Deep Root In Linux's Filesystem Layer

Operating System: Debian ≈ Packet Storm Jul 21, 2021 | 16:10 pm

Qualys discovered a size_t-to-int conversion vulnerability in the Linux kernel's filesystem layer: by creating, mounting, and deleting a deep directory structure whose total path length exceeds 1GB, an unprivileged local attacker can write the 10-byte string "//deleted" to an offset[…]

Ubuntu Security Notice USN-4530-1

Operating System: Debian ≈ Packet Storm Sep 22, 2020 | 18:23 pm

Ubuntu Security Notice 4530-1 - Wolfgang Schweer discovered that Debian-LAN did not properly handle ACLs for the Kerberos admin server. A local attacker could possibly use this issue to change the passwords of other users, leading to root privilege escalation.

Debian Security Advisory 4633-1

Operating System: Debian ≈ Packet Storm Feb 25, 2020 | 15:20 pm

Debian Linux Security Advisory 4633-1 - Multiple vulnerabilities were discovered in cURL, an URL transfer library.

Debian Security Advisory 4629-1

Operating System: Debian ≈ Packet Storm Feb 19, 2020 | 15:38 pm

Debian Linux Security Advisory 4629-1 - Simon Charette discovered that Django, a high-level Python web development framework, did not properly handle input in its PostgreSQL module. A remote attacker could leverage this to perform SQL injection attacks.

Debian Security Advisory 4628-1

Operating System: Debian ≈ Packet Storm Feb 19, 2020 | 15:28 pm

Debian Linux Security Advisory 4628-1 - Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in information disclosure, denial of service or incorrect validation of path names.

Debian Security Advisory 4626-1

Operating System: Debian ≈ Packet Storm Feb 18, 2020 | 15:05 pm

Debian Linux Security Advisory 4626-1 - Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in information disclosure, denial of service or incorrect validation of path names.

Debian Security Advisory 4627-1

Operating System: Debian ≈ Packet Storm Feb 18, 2020 | 15:04 pm

Debian Linux Security Advisory 4627-1 - Cross site scripting, denial of service, and various other vulnerabilities have been discovered in the webkit2gtk web engine.

Debian Security Advisory 4625-1

Operating System: Debian ≈ Packet Storm Feb 17, 2020 | 18:02 pm

Debian Linux Security Advisory 4625-1 - Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code or denial of service.

Debian Security Advisory 4624-1

Operating System: Debian ≈ Packet Storm Feb 17, 2020 | 17:31 pm

Debian Linux Security Advisory 4624-1 - Several vulnerabilities were discovered in evince, a simple multi-page document viewer.

Debian Security Advisory 4621-1

Operating System: Debian ≈ Packet Storm Feb 17, 2020 | 16:41 pm

Debian Linux Security Advisory 4621-1 - Several vulnerabilities have been discovered in the OpenJDK Java runtime, resulting in denial of service, incorrect implementation of Kerberos GSSAPI and TGS requests or incorrect TLS handshakes.

Share This

Follow Us