Debian DLA-2758-1 : sssd - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2758 advisory. - A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs- fetch and cache-expire subcommands. This flaw allows an attacke...

[SECURITY] [DLA 2758-1] sssd security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2758-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky September 15, 2021 https://wiki.debian.org/LTS -...

Command injection

A vulnerability has been identified in Desigo CC All versions with OIS Extension Module, GMA-Manager All versions with OIS running on Debian 9 or earlier, Operation Scheduler All versions with OIS running on Debian 9 or earlier, Siveillance Control All versions with OIS running on Debian 9 or...

Debian: Security Advisory (DLA-2757-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Siemens Siveillance OIS

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Siveillance OIS Vulnerability: OS Command Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to execute code on...

[SECURITY] [DLA 2757-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2757-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort September 13, 2021 https://wiki.debian.org/LTS -...

Debian DLA-2757-1 : thunderbird - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2757 advisory. - Mozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some of these bugs showed evidence of memory corruption and we presume that wi...

[SECURITY] [DLA 2753-2] qemu regression update

Debian LTS Advisory DLA-2753-2 [email protected] https://www.debian.org/lts/security/ Markus Koschany September 11, 2021 https://wiki.debian.org/LTS Package : qemu Version : 1:2.8+dfsg-6+deb9u16 CVE ID : CVE-2021-3592 Debian Bug : 994080 It was found that the patch for CVE-2021-3592...

Debian: Security Advisory (DLA-2756-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2756-1 : firefox-esr - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2756 advisory. Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code. For Debian 9 stretch, this...

Debian DLA-2745-1 : thunderbird - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2745 advisory. Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. For Debian 9 stretch, these problems have been fixe...

Debian DLA-2714-1 : linux-4.19 - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2714 advisory. Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. This update is no...

Debian: Security Advisory (DLA-2755-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2755-1] btrbk security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2755-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz September 05, 2021 https://wiki.debian.org/LTS -...

Debian: Security Advisory (DLA-2754-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2754-1] pywps security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2754-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA September 04, 2021 https://wiki.debian.org/LTS -...

Debian DLA-2753-1 : qemu - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2753 advisory. - A flaw was found in the USB redirector device usb-redir of QEMU. Small USB packets are combined into a single, large transfer request, to reduce the overhead and...

[SECURITY] [DLA 2753-1] qemu security update

Debian LTS Advisory DLA-2753-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany September 02, 2021 https://wiki.debian.org/LTS Package : qemu Version : 1:2.8+dfsg-6+deb9u15 CVE ID : CVE-2021-3527 CVE-2021-3592 CVE-2021-3594 CVE-2021-3595 CVE-2021-3682 CVE-2021-3713...

Debian DLA-2751-1 : postgresql-9.6 - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2751 advisory. PostgreSQL 9.6.23 fixes this security issue: Disallow SSL renegotiation more completely Michael Paquier SSL renegotiation has been disabled for some time, but the server...

Debian: Security Advisory (DLA-2752-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...