DEBIAN-CVE-2023-0049

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143...

[SECURITY] [DSA 5306-1] gerbv security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5306-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 27, 2022 https://www.debian.org/security/faq -...

DEBIAN-CVE-2022-43551

A vulnerability exists in curl 7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. However, the HSTS mechanism could be bypasse...

DEBIAN-CVE-2022-3104

An issue was discovered in the Linux kernel through 5.16-rc6. lkdtmARRAYBOUNDS in drivers/misc/lkdtm/bugs.c lacks check of the return value of kmalloc and will cause the null pointer dereference...

[SECURITY] [DSA 5300-1] pngcheck security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5300-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 12, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3236-1] openexr security update

Debian LTS Advisory DLA-3236-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany December 12, 2022 https://wiki.debian.org/LTS Package : openexr Version : 2.2.1-4.1+deb10u2 CVE ID : CVE-2020-16587 CVE-2020-16588 CVE-2020-16589 CVE-2021-3474 CVE-2021-3475 CVE-2021-34...

[SECURITY] [DSA 5298-1] cacti security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5298-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 09, 2022 https://www.debian.org/security/faq -...

DEBIAN-CVE-2022-4189

Insufficient policy enforcement in DevTools in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. Chromium security severity: Medium...

[SECURITY] [DSA 5290-1] commons-configuration2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5290-1 [email protected] https://www.debian.org/security/ Markus Koschany November 28, 2022 https://www.debian.org/security/faq -...

DEBIAN-CVE-2022-45887

An issue was discovered in the Linux kernel through 6.0.9. drivers/media/usb/ttusb-dec/ttusbdec.c has a memory leak because of the lack of a dvbfrontenddetach call...

[SECURITY] [DSA 5283-1] jackson-databind security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5283-1 [email protected] https://www.debian.org/security/ Markus Koschany November 17, 2022 https://www.debian.org/security/faq -...

DEBIAN-CVE-2022-23824

IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential information disclosure...

[SECURITY] [DLA 3182-1] vim security update

Debian LTS Advisory DLA-3182-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany November 08, 2022 https://wiki.debian.org/LTS Package : vim Version : 2:8.1.0875-5+deb10u3 CVE ID : CVE-2021-3927 CVE-2021-3928 CVE-2021-3974 CVE-2021-3984 CVE-2021-4019 CVE-2021-4069...

[SECURITY] [DSA 5271-1] libxml2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5271-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 05, 2022 https://www.debian.org/security/faq -...

DEBIAN-CVE-2022-3304

Use after free in CSS in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

Debian: Security Advisory (DSA-5264-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 5265-1] tomcat9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5265-1 [email protected] https://www.debian.org/security/ Markus Koschany October 29, 2022 https://www.debian.org/security/faq -...

DEBIAN-CVE-2022-37454

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface...

[SECURITY] [DSA 5259-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5259-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 19, 2022 https://www.debian.org/security/faq -...

CVE-2022-39285

ZoneMinder is a free, open source Closed-circuit television software application The file parameter is vulnerable to a cross site scripting vulnerability XSS by backing out of the current "tr" "td" brackets. This then allows a malicious user to provide code that will execute when a user views the...