Debian DLA-2915-1 : connman - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2915 advisory. Several issues were found in ConnMan, a connection manager for embedded devices, that could cause denial of service via service crash or excessive CPU usage. For...

Debian: Security Advisory (DLA-2913-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2913-1] xterm security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2913-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta February 07, 2022 https://wiki.debian.org/LTS -...

Debian DLA-2914-1 : zabbix - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2914 advisory. - After the initial setup process, some steps of setup.php file are reachable not only by super- administrators, but by unauthenticated users as well. Malicious actor can...

[SECURITY] [DLA 2912-1] libphp-adodb security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2912-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta February 06, 2022 https://wiki.debian.org/LTS -...

Debian DLA-2912-1 : libphp-adodb - LTS security update

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-2912 advisory. It was found that in libphp-adodb, a PHP database abstraction layer library, an attacker can inject values into the PostgreSQL connection string by bypassing adodbaddslashe...

Debian DLA-2911-1 : apng2gif - LTS security update

The remote Debian 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-2911 advisory. - An issue was discovered in apng2gif 1.7. There is an integer overflow resulting in a heap-based buffer over-read, related to the loadapng function and the...

Debian: Security Advisory (DLA-2910-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-2911-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2910-1] ldns security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2910-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb February 03, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2911-1] apng2gif security update

Debian LTS Advisory DLA-2911-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany February 04, 2022 https://wiki.debian.org/LTS Package : apng2gif Version : 1.8-0.1deb9u1 CVE ID : CVE-2017-6960 CVE-2017-6961 CVE-2017-6962 Debian Bug : 854447 Several vulnerabilities...

Debian DLA-2909-1 : strongswan - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2909 advisory. Zhuowei Zhang discovered a bug in the EAP authentication client code of strongSwan, an IKE/IPsec suite, that may allow to bypass the client and in some scenarios even the...

Debian: Security Advisory (DLA-2909-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2909-1] strongswan security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2909-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta February 03, 2022 https://wiki.debian.org/LTS -...

Debian DLA-2907-1 : apache2 - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2907 advisory. - A crafted URI sent to httpd configured as a forward proxy ProxyRequests on can cause a crash NULL pointer dereference or, for configurations mixing forward and...

Debian: Security Advisory (DLA-2907-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2907-1] apache2 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2907-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky February 01, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2906-1] python-django security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2906-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb February 01, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2905-1] apache-log4j1.2 security update

Debian LTS Advisory DLA-2905-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany January 31, 2022 https://wiki.debian.org/LTS Package : apache-log4j1.2 Version : 1.2.17-7+deb9u2 CVE ID : CVE-2021-4104 CVE-2022-23302 CVE-2022-23305 CVE-2022-23307 Debian Bug : 1004482...

Debian DLA-2905-1 : apache-log4j1.2 - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2905 advisory. - JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provi...