Debian dla-4440 : ffmpeg - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4440 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4440-1 [email protected]...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 : Rack vulnerabilities (USN-7960-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7960-1 advisory. It was discovered that Rack incorrectly handled certain query parameters. An attacker could...

[SECURITY] [DLA 4439-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4439-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort January 15, 2026 https://wiki.debian.org/LTS -...

Aimeos contains a SQL injection vulnerability in the json api 'sort' parameter

Aimeos 2021.10 LTS contains a SQL injection vulnerability in the json api 'sort' parameter that allows attackers to inject malicious database queries. Attackers can manipulate the sort parameter to reveal table and column names by sending crafted GET requests to the jsonapi/review endpoint...

[SECURITY] [DLA 4438-1] mongo-c-driver security update

Debian LTS Advisory DLA-4438-1 [email protected] https://www.debian.org/lts/security/ Roberto C. Sánchez January 14, 2026 https://wiki.debian.org/LTS Package : mongo-c-driver Version : 1.17.6-1+deb11u2 CVE ID : CVE-2025-12119 A vulnerability has been discovered in mongo-c-driver, the...

[SECURITY] [DLA 4436-1] linux-6.1 security update

Debian LTS Advisory DLA-4436-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings January 14, 2026 https://wiki.debian.org/LTS Package : linux-6.1 Version : 6.1.159-1deb11u1 CVE ID : CVE-2024-47666 CVE-2025-37899 CVE-2025-38057 CVE-2025-38556 CVE-2025-38593...

USN-7958-1 angular.js vulnerabilities

It was discovered that AngularJS did not properly sanitize certain xlink:href attributes. A remote attacker could possibly use this issue to perform cross site scripting. This issue only affected Ubuntu 16.04 LTS. CVE-2019-14863 It was discovered that AngularJS incorrectly handled certain regular...

Debian dla-4438 : libbson-1.0-0 - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4438 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4438-1 [email protected] https://www.debian.org/lts/security/...

Ubuntu 24.04 LTS : Erlang vulnerability (USN-7961-1)

The remote Ubuntu 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7961-1 advisory. It was discovered that Erlang incorrectly validated peer certificates when incorrect extended key usage was presented. A remote attacker could possibly use this...

Debian dla-4436 : linux-config-6.1 - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4436 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4436-1 [email protected]...

Debian dla-4434 : sogo - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4434 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4434-1 [email protected]...

CVE-2021-41144

OpenMage LTS is an e-commerce platform. Prior to versions 19.4.22 and 20.0.19, a layout block was able to bypass the block blacklist to execute remote code. Versions 19.4.22 and 20.0.19 contain a patch for this issue...

Debian dla-4435 : libsodium-dev - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4435 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-4435-1 [email protected] https://www.debian.org/lts/security/...

[SECURITY] [DLA 4432-1] curl security update

Debian LTS Advisory DLA-4432-1 [email protected] https://www.debian.org/lts/security/ Carlos Henrique Lima Melara January 04, 2026 https://wiki.debian.org/LTS Package : curl Version : 7.74.0-1.3+deb11u16 CVE ID : CVE-2025-9086 Debian Bug : A vulnerability was found in Curl, an easy-to-u...

Debian dla-4432 : curl - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4432 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4432-1 [email protected] https://www.debian.org/lts/security/...

Debian dla-4431 : gimp - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4431 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4431-1 [email protected]...

Debian dla-4430 : libnetsnmptrapd40 - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4430 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4430-1 [email protected] https://www.debian.org/lts/security/...

In GnuPG through 2.4.8, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For ExtendedLTS, 2.2.51 and later are fixed versions.)

...

[SECURITY] [DLA 4425-1] python-django security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4425-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb December 29, 2025 https://wiki.debian.org/LTS -...

Debian dla-4428 : mediawiki - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4428 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4428-1 [email protected]...