[DSA 5859-1] chromium security update
[DLA 4042-1] asterisk security update
[SECURITY] [DSA 5859-1] chromium security update
- -------------------------------------------------------------------------
Debian Security Advisory DSA-5859-1 security@debian.org
https://www.debian.org/security/ Andres Salomon
February 05, 2025 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : chromium
CVE ID : CVE-2025-0444 CVE-2025-0445 CVE-2025-0451
Security issues were discovered in Chromium which could result
in the execution of arbitrary code, denial of service, or information
disclosure.
For the stable distribution (bookworm), these problems have been fixed in
version 133.0.6943.53-1~deb12u1.
We recommend that you upgrade your chromium packages.
For the detailed security status of chromium please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/chromium
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
[SECURITY] [DLA 4042-1] asterisk security update
-------------------------------------------------------------------------
Debian LTS Advisory DLA-4042-1 debian-lts@lists.debian.org
https://www.debian.org/lts/security/ Daniel Leidert
February 06, 2025 https://wiki.debian.org/LTS
-------------------------------------------------------------------------
Package : asterisk
Version : 1:16.28.0~dfsg-0+deb11u6
CVE ID : CVE-2024-53566
Debian Bug :
An issue has been found in asterisk, an Open Source Private Branch
Exchange.
CVE-2024-53566
It is possible to access files outside the configuration directory
via AMI and path traversal even when live_dangerously is not
enabled.
For Debian 11 bullseye, this problem has been fixed in version
1:16.28.0~dfsg-0+deb11u6.
We recommend that you upgrade your asterisk packages.
For the detailed security status of asterisk please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/asterisk
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
