Debian Security

Debian DSA-5961-1 slurm-wlm critical: improper permission escalation
Stay Vigilant with Timely Linux Security Advisories Jul 8, 2025 | 08:49 am
Sekou Diakite from HPE discovered a mistake with permission handling for Coordinators within the accounting system of Slurm Workload Manager, a cluster resource management and job scheduling system, that it could allow a Coordinator to promote a user to Administrator.
Read more...
Debian: DSA-5960-1 critical: djvulibre arbitrary code execution
Stay Vigilant with Timely Linux Security Advisories Jul 7, 2025 | 19:48 pm
Antonio Morales discovered an out-of-bounds write in the MMRDecoder::scanruns method in djvulibre, a library and set of tools to handle documents in the DjVu format, which may result in the execution of arbitrary code if a specially crafted document is[…]
Read more...
Debian Bookworm DSA-5959-1 Important: Thunderbird Arbitrary Code Execution
Stay Vigilant with Timely Linux Security Advisories Jul 6, 2025 | 18:29 pm
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. For the stable distribution (bookworm), these problems have been fixed in
Read more...
Debian 12: DSA-5958-1 critical: jpeg-xl buffer overflow
Stay Vigilant with Timely Linux Security Advisories Jul 4, 2025 | 07:06 am
Multiple vulnerabilities are discovered in jpeg-xl, the JPEG XL ("JXL") image coding library, including out of bounds read/write and stack based buffer overflow, which may cause excessive memory usage and denial of service attacks.
Read more...
Debian: DSA-5957-1 mediawiki critical: XSS and info disclosure issues
Stay Vigilant with Timely Linux Security Advisories Jul 3, 2025 | 18:21 pm
Multiple security issues were discovered in MediaWiki, a website engine for collaborative work, which could result in cross-site scripting, information disclosure, HTML injection or incorrect tracking of authentication events.
Read more...
Debian 12: DSA-5956-1 urgent: critical ring buffer overflow issue
Stay Vigilant with Timely Linux Security Advisories Jul 3, 2025 | 07:01 am
The embedded copy of pjproject is affected by a buffer overflow vulnerability, which affects applications that use PJSIP DNS resolver. For the stable distribution (bookworm), this problem has been fixed in
Read more...
Debian DSA-5955-1 CVE-2025-6554 critical: chromium code execution risk
Stay Vigilant with Timely Linux Security Advisories Jul 2, 2025 | 07:26 am
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. Google is aware that an exploit for CVE-2025-6554 exists in the wild.
Read more...
Debian Bookworm: DSA-5954-1 critical: sudo local privilege escalation
Stay Vigilant with Timely Linux Security Advisories Jun 30, 2025 | 14:23 pm
Rich Mirch discovered that sudo, a program designed to provide limited super user privileges to specific users, does not correctly handle the host (-h or --host) option. Due to a bug the host option was not restricted to listing privileges[…]
Read more...
Ubuntu USN-4957-1: Important fpm Vulnerability Announcement Explored
Stay Vigilant with Timely Linux Security Advisories Jun 29, 2025 | 18:56 pm
Several vulnerabilities were discovered in catdoc, a text extractor for MS-Office files, which may result in denial of service or the execution of arbitrary code if a specially crafted file is processed.
Read more...
Debian: DSA-5952-1 critical: chromium arbitrary code execution
Stay Vigilant with Timely Linux Security Advisories Jun 27, 2025 | 16:18 pm
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
Read more...