[SECURITY] [DLA 2767-1] libxml-security-java security update

Debian LTS Advisory DLA-2767-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany September 27, 2021 https://wiki.debian.org/LTS Package : libxml-security-java Version : 1.5.8-2+deb9u1 CVE ID : CVE-2021-40690 Debian Bug : 994569 Apache Santuario, XML Security for Jav...

Debian DLA-2766-1 : openssl - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2766 advisory. - ASN.1 strings are represented internally within OpenSSL as an ASN1STRING structure which contains a buffer holding the string data and a field holding the buffer length...

Debian: Security Advisory (DLA-2766-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2766-1] openssl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2766-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz September 27, 2021 https://wiki.debian.org/LTS -...

Debian DLA-2764-1 : tomcat8 - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2764 advisory. - Apache Tomcat 8.5.0 to 8.5.63, 9.0.0-M1 to 9.0.43 and 10.0.0-M1 to 10.0.2 did not properly validate incoming TLS packets. When Tomcat was configured to use NIO+OpenSSL or...

Debian DLA-2765-1 : mupdf - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2765 advisory. Multiple issues have been discovered in mupdf. CVE-2016-10246 Buffer overflow in the main function in jstestmain.c allows remote attackers to cause a denial of...

[SECURITY] [DLA 2765-1] mupdf security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2765-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky September 23, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2763-1] ruby-kaminari security update

Debian LTS Advisory DLA-2763-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany September 22, 2021 https://wiki.debian.org/LTS Package : ruby-kaminari Version : 0.17.0-3+deb9u1 CVE ID : CVE-2020-11082 Debian Bug : 961847 A security vulnerability has been found in...

Debian DLA-2763-1 : ruby-kaminari - LTS security update

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-2763 advisory. - In Kaminari before 1.2.1, there is a vulnerability that would allow an attacker to inject arbitrary code into pages with pagination links. This has been fixed in 1.2.1...

Debian DLA-2762-1 : grilo - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2762 advisory. - In GNOME grilo though 0.3.13, grl-net-wc.c does not enable TLS certificate verification on the SoupSessionAsync objects it creates, leaving users vulnerable to network MI...

[SECURITY] [DLA 2762-1] grilo security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2762-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz September 22, 2021 https://wiki.debian.org/LTS -...

Debian: Security Advisory (DLA-2760-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-2761-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2760-1 : nettle - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2760 advisory. Multiple vulnerabilities were discovered in nettle, a low level cryptographic library, which could result in denial of service remote crash in RSA decryption via...

Debian DLA-2759-1 : gnutls28 - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2759 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 70300 C Tenable Network Security...

[SECURITY] [DLA 2761-1] openssl1.0 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2761-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler September 18, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2760-1] nettle security update

Debian LTS Advisory DLA-2760-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany September 18, 2021 https://wiki.debian.org/LTS Package : nettle Version : 3.3-1+deb9u1 CVE ID : CVE-2021-3580 CVE-2021-20305 Debian Bug : 985652 989631 Multiple vulnerabilities were...

Debian: Security Advisory (DLA-2759-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2759-1] gnutls28 alternate chains verification

------------------------------------------------------------------------- Debian LTS Advisory DLA-2759-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler September 17, 2021 https://wiki.debian.org/LTS -...

Debian: Security Advisory (DLA-2758-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...