Debian DLA-2986-1 : golang-1.8 - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2986 advisory. - Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption. CVE-2022-23772 -...

Debian: Security Advisory (DLA-2984-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-2983-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2983-1] abcm2ps security update

From: Anton Gladky [email protected] To: [email protected] Subject: SECURITY DLA 2983-1 abcm2ps security update - ------------------------------------------------------------------------- Debian LTS Advisory DLA-2983-1 [email protected]...

Debian DLA-2983-1 : abcm2ps - LTS security update

The remote Debian 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-2983 advisory. - Stack-based buffer overflow in the delayedoutput function in music.c in abcm2ps through 8.13.20 allows remote attackers to cause a denial of service application...

Debian DLA-2974-1 : fribidi - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2974 advisory. Several issues have been found in fribidi, a free Implementation of the Unicode BiDi algorithm. The issues are related to stack-buffer-overflow,...

Debian: Security Advisory (DLA-2974-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2974-1] fribidi security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2974-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz April 10, 2022 https://wiki.debian.org/LTS -...

Debian: Security Advisory (DLA-2981-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2982-1 : python-django - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2982 advisory. - An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. QuerySet.annotate, aggregate, and extra methods are subject to SQL injection...

[SECURITY] [DLA 2981-1] lrzip security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2981-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler April 13, 2022 https://wiki.debian.org/LTS -...

Debian DLA-2981-1 : lrzip - LTS security update

The remote Debian 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-2981 advisory. Several security vulnerabilities have been discovered in lrzip, a compression program. Invalid pointers, use-after-free and infinite loops would allow attackers to...

[SECURITY] [DLA 2980-1] zabbix security update

Debian LTS Advisory DLA-2980-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany April 12, 2022 https://wiki.debian.org/LTS Package : zabbix Version : 1:3.0.32+dfsg-0+deb9u3 CVE ID : CVE-2022-24349 CVE-2022-24917 CVE-2022-24919 Several security vulnerabilities have...

Debian DLA-2980-1 : zabbix - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2980 advisory. Several security vulnerabilities have been discovered in zabbix, a network monitoring solution. An authenticated user can create a link with reflected Javascript...

Debian: Security Advisory (DLA-2979-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2979-1] usbguard security update

Debian LTS Advisory DLA-2979-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany April 11, 2022 https://wiki.debian.org/LTS Package : usbguard Version : 0.6.2+ds1-2+deb9u1 CVE ID : CVE-2019-25058 Debian Bug : 1008026 A flaw was found in usbguard, an USB device...

[SECURITY] [DLA 2978-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2978-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort April 11, 2022 https://wiki.debian.org/LTS -...

Debian: Security Advisory (DLA-2975-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2973-1 : minidlna - LTS security update

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-2973 advisory. An issue has been found in minidlna, a lightweight DLNA/UPnP-AV server targeted at embedded systems. HTTP requests needed more checks to protect against DNS rebinding, thus...

Debian DLA-2978-1 : thunderbird - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2978 advisory. - regex is an implementation of regular expressions for the Rust language. The regex crate features built-in mitigations to prevent denial of service attacks cause...