#debian

Debian Linux Security Advisory 5753-1 - An integer overflow was discovered in aom, the AV1 Video Codec Library, which could potentially result in the execution of arbitrary code if a malformed media file is processed.

Debian Linux Security Advisory 5752-1 - Two vulnerabilities have been discovered in the IMAP implementation of large headers can result in high CPU usage, leading to denial of service.

Debian Linux Security Advisory 5751-1 - Joshua Rogers that incorrect parsing of ESI variables in the Squid proxy caching server could result in memory corruption.

Debian Linux Security Advisory 5750-1 - Support for the "strict kex" SSH extension has been backported to AsyncSSH (a Python implementation of the SSHv2 protocol) as hardening against the Terrapin attack.

Jobs Finder System version 1.0 suffers from a remote SQL injection vulnerability.

Human Resource Management System 2024 version 1.0 suffers from an ignored default credential vulnerability.

Bhojon Restaurant Management System version 3.0 suffers from an ignored default credential vulnerability.

Home Owners Collection Management System version 1.0 suffers from an ignored default credential vulnerability.

Bhojon Restaurant Management System version 3.0 suffers from an insecure direct object reference vulnerability.

Debian Linux Security Advisory 5749-1 - Chris Williams discovered a flaw in the handling of mounts for persistent directories in Flatpak, an application deployment framework for desktop apps. A malicious or compromised Flatpak app using persistent directories could take advantage of this flaw to access files outside of the sandbox.