Debian GNU/Linux 11 (Bullseye) and 12 (Bookworm):
[DSA 5698-1] ruby-rack security update
Debian GNU/Linux 12 (Bookworm):
[DSA 5699-1] redmine security update
[DSA 5697-1] chromium security update
[DSA 5699-1] redmine security update
- -------------------------------------------------------------------------
Debian Security Advisory DSA-5699-1 security@debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
May 24, 2024 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : redmine
CVE ID : CVE-2023-47258 CVE-2023-47259 CVE-2023-47260
Multiple cross-site scripting vulnerabilities were found in Redmine,
a project management web application.
For the stable distribution (bookworm), these problems have been fixed in
version 5.0.4-5+deb12u1.
We recommend that you upgrade your redmine packages.
For the detailed security status of redmine please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/redmine
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
[DSA 5698-1] ruby-rack security update
- -------------------------------------------------------------------------
Debian Security Advisory DSA-5698-1 security@debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
May 24, 2024 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : ruby-rack
CVE ID : CVE-2024-25126 CVE-2024-26141 CVE-2024-26146
Multiple security issues were found in Rack, an interface for developing
web applications in Ruby, which could result in denial of service.
For the oldstable distribution (bullseye), these problems have been fixed
in version 2.1.4-3+deb11u2.
For the stable distribution (bookworm), these problems have been fixed in
version 2.2.6.4-1+deb12u1.
We recommend that you upgrade your ruby-rack packages.
For the detailed security status of ruby-rack please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/ruby-rack
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
[DSA 5697-1] chromium security update
- -------------------------------------------------------------------------
Debian Security Advisory DSA-5697-1 security@debian.org
https://www.debian.org/security/ Andres Salomon
May 24, 2024 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : chromium
CVE ID : CVE-2024-5274
A security issue was discovered in Chromium, which could result
in the execution of arbitrary code, denial of service or information
disclosure. Google is aware that an exploit for CVE-2024-5274 exists
in the wild.
For the stable distribution (bookworm), this problem has been fixed in
version 125.0.6422.112-1~deb12u1.
We recommend that you upgrade your chromium packages.
For the detailed security status of chromium please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/chromium
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
