[SECURITY] [DLA 3359-1] libapache2-mod-auth-mellon security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-3359-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta March 13, 2023 https://wiki.debian.org/LTS -...

Authorization Bypass

modsecurity-crs:buster is vulnerable to Authorization Bypass. Use of X.Filename instead of XFilename by an attacker may allow bypassing some PHP script uploads rules, because PHP automatically transforms dots into underscores in certain contexts where dots are invalid...

Denial Of Service (DoS)

modsecurity-crs:buster is vulnerable to Denial of Service DoS attacks. /rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf allows remote attackers to cause a denial of service ReDOS by entering a specially crafted string with nested repetition operators...

[SECURITY] [DLA 3358-1] mpv security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3358-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz March 12, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3354-1] kopanocore security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3354-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort March 06, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3347-2] spip regression update

Debian LTS Advisory DLA-3347-2 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin March 03, 2023 https://wiki.debian.org/LTS Package : spip Version : 3.2.4-1+deb10u11 It was discovered that the fix for CVE-2023-27372 broke deactivation of plugins with dependencies. Fo...

[SECURITY] [DLA 3351-1] apache2 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3351-1 [email protected] https://www.debian.org/lts/security/ Lee Garrett March 03, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3350-1] node-css-what security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3350-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucaries March 03, 2023 https://wiki.debian.org/LTS -...

Debian: Security Advisory (DLA-3348-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3348-1] syslog-ng security update

Debian LTS Advisory DLA-3348-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin March 01, 2023 https://wiki.debian.org/LTS Package : syslog-ng Version : 3.19.1-5+deb10u1 CVE ID : CVE-2022-38725 It was discovered that syslog-ng, a system logging daemon, had integer...

[SECURITY] [DLA 3347-1] spip security update

Debian LTS Advisory DLA-3347-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin February 27, 2023 https://wiki.debian.org/LTS Package : spip Version : 3.2.4-1+deb10u10 It was discovered that SPIP, a content management system, was vulnerable to SQL injection, remote...

[SECURITY] [DLA 3346-1] python-werkzeug security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3346-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler February 27, 2023 https://wiki.debian.org/LTS -...

Debian: Security Advisory (DLA-3345-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3345-1] php7.3 security update

Debian LTS Advisory DLA-3345-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin February 26, 2023 https://wiki.debian.org/LTS Package : php7.3 Version : 7.3.31-1deb10u3 CVE ID : CVE-2022-31631 CVE-2023-0567 CVE-2023-0568 CVE-2023-0662 Debian Bug : 1031368 Multiple...

Debian: Security Advisory (DLA-3343-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-3344-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Privilege Escalation

haproxy, buster is vulnerable to Privilege Escalation. An attacker is able to change their resource allocations, promote containers to privileged mode, or potentially add ssh authorized keys to a remote shell on the target machine by creating new files on the host system. In order for an attacker...

[SECURITY] [DLA 3343-1] mono security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3343-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk February 24, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3341-1] curl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3341-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk February 24, 2023 https://wiki.debian.org/LTS -...

Debian: Security Advisory (DLA-3338-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...