[SECURITY] [DSA 5891-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5891-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 03, 2025 https://www.debian.org/security/faq -...

CVE-2025-1219 affecting package php for versions less than 8.1.32-1

CVE-2025-1219 affecting package php for versions less than 8.1.32-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-55549 affecting package libxslt for versions less than 1.1.43-1

CVE-2024-55549 affecting package libxslt for versions less than 1.1.43-1. An upgraded version of the package is available that resolves this issue...

[SECURITY] [DLA 4101-1] varnish security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4101-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk March 31, 2025 https://wiki.debian.org/LTS -...

Incorrect Privilege Assignment

Overview Affected versions of this package are vulnerable to Incorrect Privilege Assignment in the runsc process, which has "root-like" permissions. An attacker can expose files on the underlying filesystem by escalating privileges before a project is forked. Remediation Upgrade...

Incorrect Privilege Assignment

Overview Affected versions of this package are vulnerable to Incorrect Privilege Assignment in the runsc process, which has "root-like" permissions. An attacker can expose files on the underlying filesystem by escalating privileges before a project is forked. Remediation Upgrade...

CVE-2024-11053 affecting package mysql for versions less than 8.0.41-1

CVE-2024-11053 affecting package mysql for versions less than 8.0.41-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-6004 affecting package libssh for versions less than 0.10.6-1

CVE-2023-6004 affecting package libssh for versions less than 0.10.6-1. An upgraded version of the package is available that resolves this issue...

[SECURITY] [DLA 4094-1] mercurial security update

Debian LTS Advisory DLA-4094-1 [email protected] https://www.debian.org/lts/security/ Andreas Henriksson March 27, 2025 https://wiki.debian.org/LTS Package : mercurial Version : 5.6.1-4+deb11u1 CVE ID : CVE-2025-2361 Debian Bug : 1100899 A cross-site scripting vulnerability was discover...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation through the Admission Controller feature, by manipulating the filename to include attacker-controlled data. Remediation Upgrade github.com/kubernetes/ingress-nginx/internal/ingress/annotations/auth to version...

Debian dsa-5884 : libxslt1-dev - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5884 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5884-1 [email protected] https://www.debian.org/securit...

Debian dla-4086 : python-django-doc - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4086 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4086-1 [email protected] https://www.debian.org/lts/security/...

[SECURITY] [DSA 5880-1] freetype security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5880-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 17, 2025 https://www.debian.org/security/faq -...

CVE-2024-57882 affecting package kernel for versions less than 6.6.76.1-1

CVE-2024-57882 affecting package kernel for versions less than 6.6.76.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-56703 affecting package kernel for versions less than 6.6.78.1-3

CVE-2024-56703 affecting package kernel for versions less than 6.6.78.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2025-21638 affecting package kernel for versions less than 6.6.78.1-3

CVE-2025-21638 affecting package kernel for versions less than 6.6.78.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2025-21749 affecting package kernel for versions less than 6.6.78.1-3

CVE-2025-21749 affecting package kernel for versions less than 6.6.78.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2024-57850 affecting package kernel for versions less than 6.6.78.1-3

CVE-2024-57850 affecting package kernel for versions less than 6.6.78.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2025-21667 affecting package kernel for versions less than 6.6.76.1-1

CVE-2025-21667 affecting package kernel for versions less than 6.6.76.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-56582 affecting package kernel for versions less than 6.6.76.1-1

CVE-2024-56582 affecting package kernel for versions less than 6.6.76.1-1. An upgraded version of the package is available that resolves this issue...