CLSA-2026-1792404857 Fix CVE(s): CVE-2026-19445

debian/rules: disable the build-time test suite on armel, which is built under emulation and too slow to run it...

CLSA-2026-1786492830 Fix CVE(s): CVE-2026-13221, CVE-2026-57432

Fix armel build under qemu-user emulation: skip process-title and threaded directory-handle tests that cannot pass under qemu-arm-static - debian/patches/debian/armel-skip-qemu-emulation-tests.diff: guard the argv0/$0 assertions in t/op/magic.t and dist/threads/t/join.t and the cloned-dir-iterato...

HTTPS Fetch, Linux dup2 Command Shell, Reverse TCP Stager

Fetch and execute an ARMLE payload from an HTTPS server. dup2 socket in r12, then execve. Connect back to the attacker Module Options msf use payload/cmd/linux/https/armle/shell/reversetcp msf payloadreversetcp show actions ...actions... msf payloadreversetcp set ACTION msf payloadreversetcp show...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

CVE-2021-4034 Precompiled builds for CVE-2021-4034. Of course...

CVE-2016-11056

Certain NETGEAR devices are affected by anonymous root access. This affects ReadyNAS Surveillance 1.1.1-3-armel and earlier and ReadyNAS Surveillance 1.4.1-3-amd64 and earlier...

CVE-2016-11056: Undefined Security Weakness

Certain NETGEAR devices are affected by anonymous root access. This affects ReadyNAS Surveillance 1.1.1-3-armel and earlier and ReadyNAS Surveillance 1.4.1-3-amd64 and earlier...

Debian DLA-2023-1 : openjdk-7 security update

Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in denial of service, sandbox bypass, information disclosure or the execution of arbitrary code. Updates for the amd64 architecture are already available, new packages for i386, armel...

[SECURITY] [DLA 1886-2] openjdk-7 regression update

Package : openjdk-7 Version : 7u231-2.6.19-1deb8u2 Debian Bug : 935082 750400 The latest security update of openjdk-7 caused a regression when applications relied on elliptic curve algorithms to establish SSL connections. Several duplicate classes were removed from rt.jar by the upstream develope...

Debian DLA-1886-2 : openjdk-7 regression update

The latest security update of openjdk-7 caused a regression when applications relied on elliptic curve algorithms to establish SSL connections. Several duplicate classes were removed from rt.jar by the upstream developers of OpenJDK because they were also present in sunec.jar. However Debian neve...

Debian DLA-1606-1 : gcc-4.9 bugfix update

This update fixes libstdc++ std::future support on armel, which is necessary to get firefox-esr and thunderbird updates built on that architecture. For Debian 8 'Jessie', this problem has been fixed in version 4.9.2-10+deb8u2. NOTE: Tenable Network Security has extracted the preceding description...

[SECURITY] [DLA 1606-1] gcc-4.9 bugfix update

Package : gcc-4.9 Version : 4.9.2-10+deb8u2 Debian Bug : 727621 This update fixes libstdc++ std::future support on armel, which is necessary to get firefox-esr and thunderbird updates built on that architecture. For Debian 8 "Jessie", this problem has been fixed in version 4.9.2-10+deb8u2. Furthe...

Tenda AC15 Router - Unauthenticated Remote Code Execution(CVE-2018-5767)

INTRODUCTION In this post we will be presenting a pre-authenticated remote code execution vulnerability present in Tenda’s AC15 router. We start by analysing the vulnerability, before moving on to our regular pattern of exploit development – identifying problems and then fixing those in turn to...

Debian DLA-636-2 : firefox-esr regression update

The update of firefox-esr to 45.4.0esr-1deb7u1 caused build failure on armel and armhf architectures. For Debian 7 'Wheezy', these problems have been fixed in version 45.4.0esr-1deb7u2. We recommend that you upgrade your firefox-esr packages. NOTE: Tenable Network Security has extracted the...

Debian GNU/Linux Data Compromise

The multiple vulnerabilities in the linux-headers-2.6.26-1-all-armel package of the Debian GNU/Linux operating system may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Debian GNU/Linux Remote Compromise Protected Information

The multiple vulnerabilities in the linux-headers-2.6.26-2-all-armel package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

[SECURITY] Debian 7 Wheezy LTS now supporting armel and armhf

Debian Long Term Support LTS is a project created to extend the life of all Debian stable releases to at least 5 years. Thanks to the LTS sponsors, Debians buildd maintainers and the Debian FTP Team are excited to announce that two new architectures, armel and armhf, are going to be supported in...

[SECURITY] Debian 7 Wheezy LTS now supporting armel and armhf

Debian Long Term Support LTS is a project created to extend the life of all Debian stable releases to at least 5 years. Thanks to the LTS sponsors, Debians buildd maintainers and the Debian FTP Team are excited to announce that two new architectures, armel and armhf, are going to be supported in...

[SECURITY] [DSA 3251-2] dnsmasq regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3251-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 07, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3251-2] dnsmasq regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3251-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 07, 2015 http://www.debian.org/security/faq -...

CVE-2012-1723

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.237 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to...