Debian DLA-2896-1 : ipython - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2896 advisory. It was discovered that there was a potential arbitrary code execution vulnerability in IPython, the interactive Python shell. This issue stemmed from IPython executing...

[SECURITY] [DLA 2885-1] qtsvg-opensource-src security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2885-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta January 17, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2884-1] wordpress security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2884-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta January 17, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2893-1] pillow security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2893-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort January 23, 2022 https://wiki.debian.org/LTS -...

Debian DLA-2885-1 : qtsvg-opensource-src - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2885 advisory. Multiple out-of-bounds error were discovered in qtsvg-opensource-src. The highest threat from CVE-2021-3481 at least is to data confidentiality the application...

Debian DLA-2884-1 : wordpress - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2884 advisory. - WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to improper sanitization in WPQuery, there c...

Debian DLA-2893-1 : pillow - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2893 advisory. - pathgetbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path. CVE-2022-22815 - pathgetbbox in path.c in Pillow before 9.0.0 has a buffer...

Debian: Security Advisory (DLA-2892-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2892-1] golang-1.7 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2892-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler January 21, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2891-1] golang-1.8 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2891-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler January 21, 2022 https://wiki.debian.org/LTS -...

Debian: Security Advisory (DLA-2890-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2890-1] libspf2 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2890-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz January 21, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA-2889-1] drupal7 security update

Package : drupal7 Version : 7.52-2+deb9u17 CVE ID : CVE-2021-41182 CVE-2021-41183 CVE-2016-7103 CVE-2010-5312 The Drupal project includes a very old version of jQuery. Security vulnerabilities leading to cross-site scripting attacks in different components of the jQuery UI libraries were found an...

Debian DLA-2887-1 : lighttpd - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2887 advisory. - An issue was discovered in modaliasphysicalhandler in modalias.c in lighttpd before 1.4.50. There is potential ../ path traversal of a single directory above an alias...

[SECURITY] [DLA 2888-1] nvidia-graphics-drivers security update

Debian LTS Advisory DLA-2888-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany January 18, 2022 https://wiki.debian.org/LTS Package : nvidia-graphics-drivers Version : 390.144-1deb9u1 CVE ID : CVE-2021-1056 CVE-2021-1076 CVE-2021-1093 CVE-2021-1094 CVE-2021-1095...

[SECURITY] [DLA 2879-1] lighttpd security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2879-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky January 14, 2022 https://wiki.debian.org/LTS -...

Debian DLA-2879-1 : ghostscript - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2879 advisory. - Ghostscript GhostPDL 9.50 through 9.53.3 has a use-after-free in sampleddatasample called from sampleddatacontinue and interp. CVE-2021-45944 - Ghostscript...

Debian: Security Advisory (DLA-2886-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2888-1 : nvidia-graphics-drivers - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2888 advisory. Multiple security vulnerabilities have been discovered in the NVIDIA binary driver and libraries that provide optimized hardware acceleration which may lead to...

Debian: Security Advisory (DLA-2883-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...