Debian DLA-2711-1 : thunderbird - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2711 advisory. Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. CVE-2021-30547 Description For Debian 9 stretch,...

[SECURITY] [DLA 2709-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2709-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort July 15, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2708-1] php7.0 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2708-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler July 15, 2021 https://wiki.debian.org/LTS -...

Debian DLA-2709-1 : firefox-esr - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2709 advisory. - Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted...

Debian: Security Advisory (DLA-2707-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2707-1 : sogo - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2707 advisory. - SOGo 2.x before 2.4.1 and 3.x through 5.x before 5.1.1 does not validate the signatures of any SAML assertions it receives. Any actor with network access to the deploymen...

[SECURITY] [DLA 2707-1] sogo security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2707-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky July 12, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2706-1] apache2 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2706-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort July 09, 2021 https://wiki.debian.org/LTS -...

Debian DLA-2706-1 : apache2 - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2706 advisory. Several vulnerabilities have been found in the Apache HTTP server, which could result in denial of service. In addition the implementation of the MergeSlashes opti...

[SECURITY] [DLA 2705-1] scilab security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2705-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky July 07, 2021 https://wiki.debian.org/LTS -...

Debian DLA-2705-1 : scilab - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2705 advisory. Multiple issues have been discovered in scilab, particularly in ezXML embedded library: CVE-2021-30485 Descriptionincorrect memory handling, leading to a NULL...

Debian DLA-2704-1 : libxstream-java - LTS security update

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-2704 advisory. A vulnerability in XStream, a Java library to serialize objects to and from XML, may allow a remote attacker to execute commands of the host only by manipulating the...

Debian: Security Advisory (DLA-2703-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2703-1 : ieee-data - LTS security update

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-2703 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 70300 C Tenable Network Security...

Debian: Security Advisory (DLA-2702-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2702-1 : djvulibre - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2702 advisory. An out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode in DjVuText.cpp via a crafted djvu file which may lead to crash and segmentation fault...

[SECURITY] [DLA 2702-1] djvulibre security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2702-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta July 03, 2021 https://wiki.debian.org/LTS - -----------------------------------------------------------------------...

[SECURITY] [DLA 2701-1] openexr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2701-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler July 03, 2021 https://wiki.debian.org/LTS -...

Debian DLA-2695-1 : klibc - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2695 advisory. - An issue was discovered in klibc before 2.0.9. Multiplication in the calloc function may result in an integer overflow and a subsequent heap buffer overflow...

Debian DLA-2701-1 : openexr - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2701 advisory. - A heap-based buffer overflow vulnerability exists in Academy Software Foundation OpenEXR 2.3.0 in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp that can...