Debian Security

Debian Security Advisory: GIMP Denial of Service Vulnerabilities DSA-6014-1
Stay Vigilant with Timely Linux Security Advisories Sep 28, 2025 | 14:55 pm
Several vulnerabilities were discovered in GIMP, the GNU Image Manipulation Program, which could result in denial of service or potentially the execution of arbitrary code if malformed Farbfeld, Wireless Bitmap, DICOM or Apple Icon images are opened.
Read more...
Debian: Critical Symlink Bypass Vulnerability in node-tar-fs DSA-6013-1
Stay Vigilant with Timely Linux Security Advisories Sep 28, 2025 | 14:07 pm
It was discovered that the symlink validation in node-tar-fs, a Node.js module that provides filesystem-like access to tar files, could be bypassed.
Read more...
Debian: firefox-esr Important Connection Errors Fix DSA-6003-2
Stay Vigilant with Timely Linux Security Advisories Sep 28, 2025 | 11:04 am
Firefox 140.3.1 has been released, which fixes connection errors with some sites; if HTTP/3 connections failed, the fallback is now handled more gracefully.
Read more...
Debian: nncp Important Path Traversal Threat DSA-6012-1 CVE-2025-60020
Stay Vigilant with Timely Linux Security Advisories Sep 26, 2025 | 21:20 pm
Eugene Medvedev discovered that nncp, a package facilitating secure store-and-forward file and mail exchange, was susceptible to path traversal with the freq and file commands.
Read more...
Debian: DSA-6011-1 ThunderBird Critical Exec Code Threats CVE-2025-10527
Stay Vigilant with Timely Linux Security Advisories Sep 25, 2025 | 18:52 pm
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. Debian follows the Thunderbird upstream releases. Support for the
Read more...
Debian: Chromium Important Security Issues DSA-6010-1 CVE-2025-10890-10892
Stay Vigilant with Timely Linux Security Advisories Sep 25, 2025 | 06:36 am
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
Read more...
Debian: libxslt Critical Regression Disordered IDs DSA-5979-2
Stay Vigilant with Timely Linux Security Advisories Sep 24, 2025 | 19:56 pm
The update for libxslt announced in DSA 5979-1 introduced a regression while back porting the upstream deterministic generate-id implementation, which makes the generated IDs may remain in a non-deterministic order.
Read more...
Debian: linux Critical Escalation Denial of Service DSA-6008-1
Stay Vigilant with Timely Linux Security Advisories Sep 22, 2025 | 21:10 pm
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
Read more...
Debian: linux Critical Privilege Escalation Vulnerabilities DSA-6009-1
Stay Vigilant with Timely Linux Security Advisories Sep 22, 2025 | 21:10 pm
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
Read more...
Debian: FFmpeg Critical Denial of Service & Code Exec DSA-6007-1
Stay Vigilant with Timely Linux Security Advisories Sep 21, 2025 | 14:27 pm
Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if malformed files/streams are processed.
Read more...