[SECURITY] [DLA 2958-1] usbredir security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2958-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta March 21, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2957-1] libpano13 security update

Debian LTS Advisory DLA-2957-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany March 20, 2022 https://wiki.debian.org/LTS Package : libpano13 Version : 2.9.19+dfsg-2+deb9u2 CVE ID : CVE-2021-33293 Debian Bug : 1008024 It was discovered that Panorama Tools, a toolk...

Debian DLA-2955-1 : bind9 - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2955 advisory. It was found that bind9, an internet domain name server, was vulnerable to cache poisoning. When using forwarders, bogus NS records supplied by, or via, those forwarders ma...

[SECURITY] [DLA 2955-1] bind9 security update

Debian LTS Advisory DLA-2955-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany March 18, 2022 https://wiki.debian.org/LTS Package : bind9 Version : 1:9.10.3.dfsg.P4-12.3+deb9u11 CVE ID : CVE-2021-25220 It was found that bind9, an internet domain name server, was...

[SECURITY] [DLA 2954-1] python-treq security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2954-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb March 18, 2022 https://wiki.debian.org/LTS -...

Debian DLA-2954-1 : python-treq - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2954 advisory. - treq is an HTTP library inspired by requests but written on top of Twisted's Agents. Treq's request methods treq.get, treq.post, etc. and treq.client.HTTPClient construct...

Debian: Security Advisory (DLA-2953-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2952-1] openssl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2952-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort March 17, 2022 https://wiki.debian.org/LTS -...

Debian: Security Advisory (DLA-2951-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2952-1 : openssl - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2952 advisory. - There is an overflow bug in the x6464 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests...

Debian DLA-2951-1 : flac - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2951 advisory. - In appendtoverifyfifointerleaved of streamencoder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosur...

Debian DLA-2953-1 : openssl1.0 - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2953 advisory. Tavis Ormandy discovered that the BNmodsqrt function of OpenSSL could be tricked into an infinite loop. This could result in denial of service via malformed certificates. F...

[SECURITY] [DLA 2951-1] flac security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2951-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta March 17, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2950-1] python-scrapy security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2950-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort March 16, 2022 https://wiki.debian.org/LTS -...

Debian DLA-2950-1 : python-scrapy - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2950 advisory. It was found that Scrapy, a framework for extracting data from websites, could send HTTP Authorization as well as cookies to other domains in case of redirections,...

Debian DLA-2947-1 : vim - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2947 advisory. Multiple security vulnerabilities have been discovered in vim, an enhanced vi editor. Buffer overflows, out-of-bounds reads and Null pointer dereferences may lead ...

[SECURITY] [DLA 2949-1] spip security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2949-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort March 15, 2022 https://wiki.debian.org/LTS -...

Debian DLA-2949-1 : spip - LTS security update

The remote Debian 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-2949 advisory. - SPIP before 3.2.14 and 4.x before 4.0.5 allows remote authenticated editors to execute arbitrary code. CVE-2022-26846 - SPIP before 3.2.14 and 4.x before 4.0.5...

[SECURITY] [UPDATE] [DLA 2948-1] debian-archive-keyring update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2948-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky March 13, 2022 https://wiki.debian.org/LTS -...

Debian: Security Advisory (DLA-2947-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...