Debian

Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code or denial of

Han descubierto 3 nuevas vulnerabilidades en Webkit2gt, se recomienda actualizar a la versión 2.26.3-1~deb10u1.

Qualys discovered that the OpenSMTPD SMTP server performed insufficient validation of email addresses which could result in the execution of

Two security issues were found in the Python interface to the apt package manager; package downloads from unsigned repositories were

Several issues were discovered in the Tomcat servlet and JSP engine, which could result in session fixation attacks, information disclosure,

It was discovered that debian-lan-config, a FAI config space for the Debian-LAN system, configured too permissive ACLs for the Kerberos

Guido Vranken discovered an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli.

It was found that freeimage, a graphics library, was affected by the following two security issues.

It was discovered that the Title blacklist functionality in MediaWiki, a website engine for collaborative work, could by bypassed.

Stephan Zeisberg reported an out-of-bounds write vulnerability in the _sasl_add_string() function in cyrus-sasl2, a library implementing the Simple Authentication and

It was discovered that the lmtpd component of the Cyrus IMAP server created mailboxes with administrator privileges if the «fileinto»

It was discovered that debian-edu-config, a set of configuration files used for the Debian Edu blend, configured too permissive ACLs

It was discovered that python-ecdsa, a cryptographic signature library for Python, incorrectly handled certain signatures. A remote attacker could use

Several vulnerabilities have been discovered in the interpreter for the Ruby language, which could result in unauthorized access by bypassing

Several vulnerabilities have been discovered in the interpreter for the Ruby language, which could result in unauthorized access by bypassing

Multiple security issues have been found in Thunderbird which could potentially result in the execution of arbitrary code.

Two vulnerabilities were discovered in spamassassin, a Perl-based spam filter using text analysis.

This update ships updated CPU microcode for CFL-S (Coffe Lake Desktop) models of Intel CPUs which were not yet included

A vulnerability was discovered in the SPIP publishing system, which could result in unauthorised writes to the database by authors.

Multiple cross-site scripting and cross-site request forgery issues were discovered in the DAViCal CalDAV Server.