[SECURITY] [DLA 2718-1] intel-microcode security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2718-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta July 23, 2021 https://wiki.debian.org/LTS - -----------------------------------------------------------------------...

Debian DLA-2718-1 : intel-microcode - LTS security update

The remote Debian 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-2718 advisory. This update ships updated CPU microcode for some types of Intel CPUs and provides mitigations for security vulnerabilities which could result in privilege escalati...

Debian DLA-2710-1 : rabbitmq-server - LTS security update

The remote Debian 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-2710 advisory. - An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF...

[SECURITY] [DLA 2720-1] aspell security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2720-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz July 26, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2710-2] rabbitmq-server regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2710-2 [email protected] https://www.debian.org/lts/security/ Abhijith PA July 25, 2021 https://wiki.debian.org/LTS -...

Debian DLA-2719-1 : ruby-actionpack-page-caching - LTS security update

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-2719 advisory. - There is a vulnerability in actionpackpage-caching gem v1.2.1 that allows an attacker to write arbitrary files to a web server, potentially resulting in remote code...

Debian: Security Advisory (DLA-2716-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2717-1 : redis - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2717 advisory. - Redis is an in-memory database that persists on disk. A vulnerability involving out-of-bounds read and integer overflow to buffer overflow exists starting with version 2....

Debian DLA-2716-1 : pillow - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2716 advisory. - In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer...

[SECURITY] [DLA 2716-1] pillow security update

Debian LTS Advisory DLA-2716-1 [email protected] https://www.debian.org/lts/security/ Neil Williams July 22, 2021 https://wiki.debian.org/LTS Package : pillow Version : 4.0.0-4+deb9u3 CVE ID : CVE-2020-35653 CVE-2021-25290 CVE-2021-28676 CVE-2021-28677 CVE-2021-34552 Debian Bug : 991293...

[SECURITY] [DLA 2717-1] redis security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2717-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb July 22, 2021 https://wiki.debian.org/LTS -...

Debian DLA-2713-1 : linux - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2713 advisory. - fs/seqfile.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an...

Debian: Security Advisory (DLA-2715-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2713-2] linux security update

Debian LTS Advisory DLA-2713-2 [email protected] https://www.debian.org/lts/security/ Ben Hutchings July 20, 2021 https://wiki.debian.org/LTS Package : linux Version : 4.9.272-2 CVE ID : CVE-2021-3609 CVE-2021-21781 CVE-2021-33909 CVE-2021-34693 Debian Bug : 990072 Several vulnerabiliti...

[SECURITY] [DLA 2713-1] linux security update

Debian LTS Advisory DLA-2713-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings July 20, 2021 https://wiki.debian.org/LTS Package : linux Version : 4.9.272-2 CVE ID : CVE-2021-3609 CVE-2021-21781 CVE-2021-33909 CVE-2021-34693 Debian Bug : 990072 Brief introduction...

[SECURITY] [DLA 2715-1] systemd security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2715-1 [email protected] https://www.debian.org/lts/security/ Salvatore Bonaccorso July 20, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2712-1] libjdom1-java security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2712-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb July 20, 2021 https://wiki.debian.org/LTS -...

Debian DLA-2712-1 : libjdom1-java - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2712 advisory. - An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request. CVE-2021-33813 Note that Nessus has not tested...

[SECURITY] [DLA 2710-1] rabbitmq-server security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2710-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA July 19, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2711-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2711-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort July 19, 2021 https://wiki.debian.org/LTS -...