#debian / Page 10

Multiple security vulnerabilities were discovered in Oj, a fast JSON parser and serializer for Ruby, which could result in denial of service or memory disclosure. For Debian 12 bookworm, these problems have been fixed in version 3.14.2-1+deb12u1.

Multiple vulnerabilities have been found in expat. CVE-2024-28757 A crafted XML document could trigger an entity expansion attack (billion laughs attack) when handled by an isolated external parser created via XML_ExternalEntityParserCreate bypassing ...

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, sandbox escape, information disclosure or privilege escalation. Debian follows the extended support ...

An issue has been found in pgextwlist, a Postgres extensions that implements extension whitelisting. The issue is related to substituting extension schemas or owners matching ['$']. Such substitutions are now simply rejected. For Debian 12 bookworm, ...

An issue has been found in mkvtoolnix, a set of command-line tools to work with Matroska files. The issue is related to a heap buffer overflow in the bundled avilib. The only way to avoid this issue is to update the software. For Debian 12 bookworm, ...

Learn how to install MongoDB on Debian 13 and configure for production use with our latest easy-to-follow guide.

Multiple security vulnerabilities were discovered in Tor, a connection- based low-latency anonymous communication system, would could result in denial of service. For the stable distribution (trixie), this problem has been fixed in version 0.4.9.13-0 ...

Multiple vulnerabilities were discovered in Django, the Python-based web development framework: CVE-2026-48587 Potential exposure of private data via whitespace padding in Vary header. django.middleware.cache.UpdateCacheMiddleware incorrectly ...

An issue has been found in libsmpp34, a library for Open PDU SMPP packaging and unpackaging. The issue is related to an out of bound read while processing attacker controlled SMPP PDUs, which could lead to memory corruption. The only way to avoid ...

Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit, which could result in denial of service, information disclosure or potentially recovery of private keys. Additional details can be found in the upstream ...