You are here
Debian Security
DSA-5923-1 net-tools - security update
Mohamed Maatallah discovered a stack-based buffer overflow in the
get_name() function in net-tools, a collection of programs for
controlling the network subsystem of the Linux kernel, which may result
in denial of service (application crash) or potentially the execution of
arbitrary code.
Categories: Security
DSA-5922-1 firefox-esr - security update
Multiple security issues have been found in the Mozilla Firefox web
browser, which could potentially result in the execution of arbitrary
code.
Categories: Security
DSA-5921-1 thunderbird - security update
Multiple security issues were discovered in Thunderbird, which could
result in spoofing of From: mail headers, execution of JavaScript or
information disclosure.
Categories: Security
DSA-5920-1 chromium - security update
Security issues were discovered in Chromium which could result
in the execution of arbitrary code, denial of service, or information
disclosure.
Categories: Security
DSA-5919-1 open-vm-tools - security update
It was discovered that insecure file handling in open-vm-tools, an open
source implementation of VMware Tools, may allow an unprivileged local
guest user to tamper local files to trigger insecure file operations
within that VM.
Categories: Security
DSA-5918-1 varnish - security update
Ben Kallus discovered that incorrect parsing of chunked transfer
encodings in the Varnish web accelerator may result in HTTP request
smuggling or cache poisoning.
Categories: Security
DSA-5917-1 libapache2-mod-auth-openidc - security update
A vulnerability has been discovered in mod_auth_openidc, an OpenID
Certified authentication and authorization module for the Apache HTTP
server that implements the OpenID Connect Relying Party functionality:
An unauthenticated attacker could crash the Apache httpd process by sending a POST request without a Content-Type header if the 'OIDCPreservePost' directive is enabled, resulting in denial of service.
Categories: Security
DSA-5916-1 chromium - security update
Security issues were discovered in Chromium which could result
in the execution of arbitrary code, denial of service, or information
disclosure.
Categories: Security
DSA-5915-1 vips - security update
A heap-based buffer overflow vulnerability was discovered in vips, an
fast image processing library designed with efficiency in mind, which
may result in denial of service (application crash) if a specially
crafted TIFF image file is processed.
Categories: Security
DSA-5914-1 chromium - security update
Security issues were discovered in Chromium which could result
in the execution of arbitrary code, denial of service, or information
disclosure.
Categories: Security
DSA-5913-1 openjdk-17 - security update
Several vulnerabilities have been discovered in the OpenJDK Java
runtime, which may result in denial of service, information disclosure
or bypass of sandbox restrictions.
Categories: Security
DSA-5912-1 thunderbird - security update
Multiple security issues were discovered in Thunderbird, which could
result in the execution of arbitrary code or information disclosure
Categories: Security
DSA-5911-1 request-tracker4 - security update
Multiple vulnerabilities have been discovered in Request Tracker, an
extensible trouble-ticket tracking system, which could result in
information disclosure, cross-site scripting and use of weak encryption
for S/MIME emails.
Categories: Security
DSA-5910-1 firefox-esr - security update
Multiple security issues have been found in the Mozilla Firefox web
browser, which could potentially result in the execution of arbitrary
code or a bypass of sandbox restrictions.
Categories: Security
DSA-5909-1 request-tracker5 - security update
Multiple vulnerabilities have been discovered in Request Tracker, an
extensible trouble-ticket tracking system, which could result in
information disclosure, cross-site scripting and use of weak encryption
for S/MIME emails.
Categories: Security
DSA-5908-1 libreoffice - security update
Juray Sarinay discovered that PDF documents signed with the
adbe.pkcs7.sha1 standard were incompletely validated by LibreOffice,
which could cause invalid signatures to be accepted as legitimate.
Categories: Security
DSA-5907-1 linux - security update
Several vulnerabilities have been discovered in the Linux kernel that
may lead to a privilege escalation, denial of service or information
leaks.
Categories: Security
DSA-5906-1 erlang - security update
Several vulnerabilities were discovered in the Erlang/OTP implementation
of the SSH protocol, which may result in denial of service or the
execution of arbitrary code.
Categories: Security
DSA-5905-1 graphicsmagick - security update
Two vulnerabilities have been discovered in GraphicsMagick, a set of
ommand-line applications to manipulate image files, which may result in
denial of service or the execution of arbitrary code if malformed image
files are processed.
Categories: Security
DSA-5904-1 libapache2-mod-auth-openidc - security update
It was discovered that mod_auth_openidc, an OpenID Certified
authentication and authorization module for the Apache HTTP server that
implements the OpenID Connect Relying Party functionality, was
susceptible to information disclosure in some configurations
Categories: Security
Pages
Co-authored by Creative Contingencies's Peter Lieverdink.