Multer 安全漏洞

Multer is an expressjs open source middleware for Node.js. A security vulnerability exists in Multer versions 1.4.4-lts.1 through prior to 2.0.1, which stems from an upload file request with an empty string field name that could result in a denial of service...

Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-7550-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7550-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

[SECURITY] [DLA 4206-1] asterisk security update

Debian LTS Advisory DLA-4206-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany June 02, 2025 https://wiki.debian.org/LTS Package : asterisk Version : 1:16.28.0dfsg-0+deb11u7 CVE ID : CVE-2025-47779 CVE-2025-47780 Debian Bug : 1106528 1106530 Two security...

[SECURITY] [DLA 4203-1] kitty security update

Debian LTS Advisory DLA-4203-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost June 01, 2025 https://wiki.debian.org/LTS Package : kitty Version : 0.19.3-1+deb11u1 CVE ID : CVE-2022-41322 Debian Bug : 1020582 A vulnerability has been found in kitty, a fast, featurefu...

Debian dla-4205 : fonts-opensymbol - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4205 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4205-1 [email protected]...

[SECURITY] [DLA 4200-1] symfony security update

Debian LTS Advisory DLA-4200-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin May 31, 2025 https://wiki.debian.org/LTS Package : symfony Version : 4.4.19+dfsg-2+deb11u7 CVE ID : CVE-2024-50343 CVE-2024-50345 Security vulnerabilities were found in symfony, a PHP...

[SECURITY] [DLA 4198-1] espeak-ng security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4198-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz May 31, 2025 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 4196-1] kmail-account-wizard security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4196-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz May 30, 2025 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 4193-1] linux-6.1 security update

Debian LTS Advisory DLA-4193-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings May 30, 2025 https://wiki.debian.org/LTS Package : linux-6.1 Version : 6.1.137-1deb11u1 CVE ID : CVE-2023-52857 CVE-2023-52927 CVE-2023-53034 CVE-2024-24855 CVE-2024-26656 CVE-2024-26739...

[SECURITY] [DLA 4192-1] modsecurity-apache security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4192-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk May 29, 2025 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 4189-1] webpy security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4189-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk May 29, 2025 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 4186-1] php-twig security update

Debian LTS Advisory DLA-4186-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany May 28, 2025 https://wiki.debian.org/LTS Package : php-twig Version : 2.14.3-1+deb11u4 CVE ID : CVE-2024-51754 Twig is a template language for PHP. In a sandbox, an attacker can call...

[SECURITY] [DLA 4188-1] python-tornado security update

Debian LTS Advisory DLA-4188-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert May 29, 2025 https://wiki.debian.org/LTS Package : python-tornado Version : 6.1.0-1+deb11u2 CVE ID : CVE-2025-47287 Debian Bug : 1105886 Tornado is a scalable, non-blocking Python web...

[SECURITY] [DLA 4185-1] yelp-xsl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4185-1 [email protected] https://www.debian.org/lts/security/ Lucas Kanashiro May 28, 2025 https://wiki.debian.org/LTS -...

USN-7543-1: libsoup vulnerabilities

Jan Różański discovered that libsoup incorrectly handled certain headers when sending HTTP/2 requests over TLS. An attacker could possibly use this issue to cause a denial of service. This issue only affected libsoup3 in Ubuntu 24.04 LTS, Ubuntu 24.10, and Ubuntu 25.04. CVE-2025-32908 Jan Różańsk...

[SECURITY] [DLA 4183-1] setuptools security update

From: Lee Garrett [email protected] To: [email protected] Subject: SECURITY DLA 4183-1 setuptools security update - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4183-1 [email protected]...

Debian dla-4182 : syslog-ng - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4182 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4182-1 [email protected] https://www.debian.org/lts/security/...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : GNU C Library vulnerability (USN-7541-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7541-1 advisory. It was discovered that the GNU C Library incorrectly search LDLIBRARYPATH to determine which library to load when statically linked setuid...

Ubuntu 20.04 LTS : Linux kernel (Raspberry Pi) vulnerabilities (USN-7539-1)

"The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7539-1 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cau...

Ubuntu 18.04 LTS : Linux kernel (Raspberry Pi) vulnerabilities (USN-7540-1)

"The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7540-1 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cau...