[SECURITY] [DSA 5691-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5691-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 15, 2024 https://www.debian.org/security/faq -...

DEBIAN-CVE-2024-33873

HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5Dscattermem in H5Dscatgath.c...

DEBIAN-CVE-2024-32614

HDF5 Library through 1.14.3 has a SEGV in H5VMmemcpyvv in H5VM.c...

[SECURITY] [DSA 5674-1] pdns-recursor security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5674-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 25, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5670-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5670-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 22, 2024 https://www.debian.org/security/faq -...

DEBIAN-CVE-2024-26863

In the Linux kernel, the following vulnerability has been resolved: hsr: Fix uninit-value access in hsrgetnode KMSAN reported the following uninit-value access issue 1: ===================================================== BUG: KMSAN: uninit-value in hsrgetnode+0xa2e/0xa40 net/hsr/hsrframereg.c:2...

[SECURITY] [DSA 5661-1] php8.2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5661-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 15, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5654-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5654-1 [email protected] https://www.debian.org/security/ Andres Salomon April 03, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5652-1] py7zr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5652-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 02, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5647-1] samba security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5647-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 24, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5644-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5644-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 21, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5642-1] php-dompdf-svg-lib security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5642-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 20, 2024 https://www.debian.org/security/faq -...

DEBIAN-CVE-2024-28581

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to execute arbitrary code via the assignPixel function when reading images in TARGA format...

DEBIAN-CVE-2024-28578

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to execute arbitrary code via the Load function when reading images in RAS format...

[SECURITY] [DLA 3764-1] postgresql-11 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3764-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk March 18, 2024 https://wiki.debian.org/LTS -...

DEBIAN-CVE-2021-47122

In the Linux kernel, the following vulnerability has been resolved: net: caif: fix memory leak in caifdevicenotify In case of caifenrolldev fail, allocated linksupport won't be assigned to the corresponding structure. So simply free allocated pointer in case of error...

DEBIAN-CVE-2023-52505

In the Linux kernel, the following vulnerability has been resolved: phy: lynx-28g: serialize concurrent physetmodeext calls to shared registers The protocol converter configuration registers PCC8, PCCC, PCCD implemented by the driver, as well as others, control protocol converters from multiple...

DEBIAN-CVE-2021-46999

In the Linux kernel, the following vulnerability has been resolved: sctp: do asoc update earlier in sctpsfdodupcooka There's a panic that occurs in a few of envs, the call trace is as below: general protection fault, ... 0x29acd70f1000a: 0000 1 SMP PTI RIP:...

DEBIAN-CVE-2023-52443

In the Linux kernel, the following vulnerability has been resolved: apparmor: avoid crash when parsed profile name is empty When processing a packed profile in unpackprofile described like "profile :ns::samba-dcerpcd /usr/lib/samba/,samba/samba-dcerpcd ..." a string ":samba-dcerpcd" is unpacked a...

DEBIAN-CVE-2024-1674

Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...