Security Bugs

gpsd should use systemd security features

security

ftp.debian.org RM: falcosecurity-libs [i386] -- ANAIS; Upstream build fails for i386, Debian package is no longer built for i386

security

pinentry-curses leaks keystrokes to the shell

security

src:php-twig php-twig: CVE-2024-51754 CVE-2024-51755

upstream security

asterisk Asterisk security update drops supplementary group permissions

security

freeradius Backport some security settings from upstream 3.2.5 release to mitigate BlastRADIUS

security

libreswan, strongswan-starter libresawn, strongswan-starter: Permission mismatch for /etc/ipsec.secrets

security

ftp.debian.org code-signing: insufficient check that file["file"] doesn't escape package via symlinks

security

simple-cdd when set BOOT_TIMEOUT, md5sum of ./boot/grub/grub.cfg not match md5sum.txt which in iso

security

libapache2-mod-php Default php.conf serves php in userdirs as plaintext (potentially exposing passwords)

security

kdeconnect kdeconnectd: should not listen on all interfaces by default

testing unstable security

src:libstb libstb: CVE-2023-47212

security

src:gearmand gearmand contains a broken, oudated, embedded copy of AX_BOOST_BASE

security

apt possible super minor security issue in apt-get source

security

src:freeimage freeimage: CVE-2024-28562 CVE-2024-28563 CVE-2024-28564 CVE-2024-28565 CVE-2024-28566 CVE-2024-28567 CVE-2024-28568 CVE-2024-28569 CVE-2024-28570 CVE-2024-28571 CVE-2024-28572 CVE-2024-28573 CVE-2024-28574 CVE-2024-28574 CVE-2024-28575 CVE-2024-28576 CVE-2024-28577 CVE-2024-28578 CVE-2024-28579 CVE-2024-28580 CVE-2024-28581 CVE-2024-28582 CVE-2024-28583 CVE-2024-28584

security

cpio Path traversal vulnerability

security

src:libcrypto++ libcrypto++: CVE-2023-50981

security

src:libcrypto++ libcrypto++: CVE-2023-50979

security