Security Bugs

cpio Path traversal vulnerability

security

timidity embedded fork of libmikmod needs to be dealt with

stable testing unstable security

clamav-daemon any local user can shut clamd down via control socket

stable testing unstable security

src:freeimage freeimage: CVE-2024-28562 CVE-2024-28563 CVE-2024-28564 CVE-2024-28565 CVE-2024-28566 CVE-2024-28567 CVE-2024-28568 CVE-2024-28569 CVE-2024-28570 CVE-2024-28571 CVE-2024-28572 CVE-2024-28573 CVE-2024-28574 CVE-2024-28574 CVE-2024-28575 CVE-2024-28576 CVE-2024-28577 CVE-2024-28578 CVE-2024-28579 CVE-2024-28580 CVE-2024-28581 CVE-2024-28582 CVE-2024-28583 CVE-2024-28584

security

apt possible super minor security issue in apt-get source

security

src:gearmand gearmand contains a broken, oudated, embedded copy of AX_BOOST_BASE

security

pbuilder chroot's /tmp accessible to users when bootstrapping

stable testing unstable security

src:libstb libstb: CVE-2023-47212

security

kdeconnect kdeconnectd: should not listen on all interfaces by default

testing unstable security

swaylock Occassional unlock without password entered

testing unstable security

libapache2-mod-php Default php.conf serves php in userdirs as plaintext (potentially exposing passwords)

security

simple-cdd when set BOOT_TIMEOUT, md5sum of ./boot/grub/grub.cfg not match md5sum.txt which in iso

security

src:openssh OpenSSH should use stronger crypto algo and parameters respectively disable others

stable testing unstable security

ftp.debian.org code-signing: insufficient check that file["file"] doesn't escape package via symlinks

security

pyrad CVE-2013-0342: CreateID() creates serialized packet IDs for RADIUS

stable testing unstable security

finish-install write additional random seed to location for systemd systemd-random-seed.service

stable testing unstable security

libreswan, strongswan-starter libresawn, strongswan-starter: Permission mismatch for /etc/ipsec.secrets

security