CVE-2025-24522

KUNBUS Revolution Pi OS Bookworm 01/2025 is vulnerable because authentication is not configured by default for the Node-RED server. This can give an unauthenticated remote attacker full access to the Node-RED server where they can run arbitrary commands on the underlying operating system...

KUNBUS Revolution Pi OS Bookworm 安全漏洞

KUNBUS Revolution Pi OS Bookworm is an industrial-grade real-time operating system based on Debian Bookworm from KUNBUS. A security vulnerability exists in KUNBUS Revolution Pi OS Bookworm 01/2025 that stems from the Node-RED server not being configured for authentication by default, which could...

PT-2025-27987

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.147-1 Debian bookworm, 6.6.101 upstream, and SLE 15 SP4, SLE 15 SP5, SLE 15 SP6, and openSUSE Leap 15.4, 15.5. Description The Linux kernel contains a vulnerability related to a use-after-free condition in th...

[BSA-123] Security Update for python-django

Colin Watson uploaded new packages for python-django which fixed the following security problems: CVE-2025-26699 Potential denial-of-service vulnerability in django.utils.text.wrap. The wrap method and wordwrap template filter were subject to a potential denial-of-service attack when used with ve...

[SECURITY] [DSA 5889-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5889-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 02, 2025 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5868-1] openssh security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5868-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 18, 2025 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5843-2] rsync regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-5843-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 16, 2025 https://www.debian.org/security/faq -...

PT-2025-43559

Name of the Vulnerable Software and Affected Versions PDNS Recursor versions prior to 5.2.6-0+deb13u1 Description Insufficient validation of delegation information could lead to cache pollution in PDNS Recursor, a resolving name server. The changes required to address this are too extensive to...

[SECURITY] [DSA 5836-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5836-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 26, 2024 https://www.debian.org/security/faq -...

[BSA-120] Security Update for mosquitto

Philippe Coval uploaded new packages for mosquitto which fixed the following security problems: CVE-2024-8376 In Eclipse Mosquitto up to version 2.0.18a, an attacker can achieve memory leaking, segmentation fault or heap-use-after-free by sending specific sequences of "CONNECT", "DISCONNECT",...

Debian dsa-5792 : gir1.2-javascriptcoregtk-4.0 - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5792 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5792-1 [email protected] https://www.debian.org/securit...

Debian dsa-5789 : thunderbird - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5789 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5789-1 [email protected] https://www.debian.org/securit...

Debian dsa-5785 : mediawiki - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5785 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5785-1 [email protected] https://www.debian.org/security/ Moritz...

Debian dsa-5783 : firefox-esr - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5783 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5783-1 [email protected] https://www.debian.org/securit...

Debian dsa-5767 : thunderbird - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5767 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5767-1 [email protected] https://www.debian.org/securit...

Debian dsa-5764 : libcrypto3-udeb - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5764 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5764-1 [email protected] https://www.debian.org/security/...

Debian dsa-5744 : thunderbird - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5744 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5744-1 [email protected]...

Debian dsa-5742 : odoo-14 - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dsa-5742 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5742-1 [email protected] https://www.debian.org/security/...

Debian dsa-5740 : firefox-esr - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5740 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5740-1 [email protected]...

Debian dsa-5738 : openjdk-17-dbg - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5738 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5738-1 [email protected]...