Security Bugs

asterisk Asterisk security update drops supplementary group permissions

security

ftp.debian.org code-signing: insufficient check that file["file"] doesn't escape package via symlinks

security

simple-cdd when set BOOT_TIMEOUT, md5sum of ./boot/grub/grub.cfg not match md5sum.txt which in iso

security

libapache2-mod-php Default php.conf serves php in userdirs as plaintext (potentially exposing passwords)

security

src:libstb libstb: CVE-2023-47212

security

src:gearmand gearmand contains a broken, oudated, embedded copy of AX_BOOST_BASE

security

src:freeimage freeimage: CVE-2024-28562 CVE-2024-28563 CVE-2024-28564 CVE-2024-28565 CVE-2024-28566 CVE-2024-28567 CVE-2024-28568 CVE-2024-28569 CVE-2024-28570 CVE-2024-28571 CVE-2024-28572 CVE-2024-28573 CVE-2024-28574 CVE-2024-28574 CVE-2024-28575 CVE-2024-28576 CVE-2024-28577 CVE-2024-28578 CVE-2024-28579 CVE-2024-28580 CVE-2024-28581 CVE-2024-28582 CVE-2024-28583 CVE-2024-28584

security

src:libcrypto++ libcrypto++: CVE-2023-50981

security

src:libcrypto++ libcrypto++: CVE-2023-50979

security

src:libcrypto++ libcrypto++: CVE-2022-48570

security

src:hamster-time-tracker hamster-time-tracker: CVE-2023-36250

security

src:shiro shiro: CVE-2023-46750

security

src:grpc grpc: CVE-2023-32732

security

src:grpc grpc: CVE-2023-4785

security

src:grpc grpc: CVE-2023-33953

security

src:enigma enigma: Embded and use lua copy (outdated)

security

fakeroot Fw: fakeroot: Shared library and command injections in multiple arguments

security

thunderbird [CVE-2006-0836] Address Book Import Remote DoS Vulnerability

security

src:ippsample ippsample: CVE-2023-28428

security upstream

src:xorg-server

security