[SECURITY] [DLA 2618-1] smarty3 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2618-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA April 05, 2021 https://wiki.debian.org/LTS -...

Debian DLA-2617-1 : php-nette security update

Cyku Hong from DEVCORE discovered that php-nette, a PHP MVC framework, is vulnerable to a code injection attack by passing specially formed parameters to URL that may possibly leading to remote code execution. For Debian 9 stretch, this problem has been fixed in version 2.4-20160731-1+deb9u1. We...

[SECURITY] [DLA 2617-1] php-nette security update

Debian LTS Advisory DLA-2617-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany April 04, 2021 https://wiki.debian.org/LTS Package : php-nette Version : 2.4-20160731-1+deb9u1 CVE ID : CVE-2020-15227 Cyku Hong from DEVCORE discovered that php-nette, a PHP MVC...

Debian: Security Advisory (DLA-2616-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2616-1] libxstream-java security update

Debian LTS Advisory DLA-2616-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany April 03, 2021 https://wiki.debian.org/LTS Package : libxstream-java Version : 1.4.11.1-1+deb9u2 CVE ID : CVE-2021-21341 CVE-2021-21342 CVE-2021-21343 CVE-2021-21344 CVE-2021-21345...

Debian DLA-2614-1 : busybox security update

The gunzip decompressor of Busybox, tiny utilities for small and embedded systems, mishandled the error bit on the huftbuild result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data. For Debian 9 stretch, this problem has been fixed in version 1:1.22.0-19+deb9u...

[SECURITY] [DLA 2614-1] busybox security update

Debian LTS Advisory DLA-2614-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany April 01, 2021 https://wiki.debian.org/LTS Package : busybox Version : 1:1.22.0-19+deb9u2 CVE ID : CVE-2021-28831 Debian Bug : 986217 The gunzip decompressor of Busybox, tiny utilities...

Debian DLA-2612-1 : leptonlib security update

Several issues have been found by ClusterFuzz in leptonlib, an image processing library. All issues are related to heap-based buffer over-read in several functions or a denial of service application crash with crafted data. For Debian 9 stretch, these problems have been fixed in version...

Debian DLA-2613-1 : underscore security update

node-underscore and libjs-underscore are vulnerable to Arbitrary Code Execution via the template function, particulary when a variable property is passed as an argument as it is not sanitized. For Debian 9 stretch, this problem has been fixed in version 1.8.3dfsg-1+deb9u1. We recommend that you...

Debian: Security Advisory (DLA-2613-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-2611-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2612-1] leptonlib security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2612-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz March 31, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2611-1] ldb security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2611-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz March 31, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2610-1] linux-4.19 security update

Debian LTS Advisory DLA-2610-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings March 30, 2021 https://wiki.debian.org/LTS Package : linux-4.19 Version : 4.19.181-1deb9u1 CVE ID : CVE-2020-27170 CVE-2020-27171 CVE-2021-3348 CVE-2021-3428 CVE-2021-26930 CVE-2021-26931...

Debian DLA-2609-1 : thunderbird security update

Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code or information disclosure. For Debian 9 stretch, these problems have been fixed in version 1:78.9.0-1deb9u1. We recommend that you upgrade your thunderbird packages. For the detailed...

Debian: Security Advisory (DLA-2609-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2609-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2609-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort March 26, 2021 https://wiki.debian.org/LTS -...

Debian DLA-2606-1 : lxml security update

An issue has been found in lxml, a pythonic binding for the libxml2 and libxslt libraries. Due to missing input sanitization, XSS is possible for the HTML5 formaction attribute. For Debian 9 stretch, this problem has been fixed in version 3.7.1-1+deb9u4. We recommend that you upgrade your lxml...

Debian DLA-2608-1 : jquery security update

Two vulnerabilities have been discovered in jquery's handling of untrusted HTML which may result in execution of untrusted code. For Debian 9 stretch, these problems have been fixed in version 3.1.1-2+deb9u2. We recommend that you upgrade your jquery packages. For the detailed security status of...

Debian: Security Advisory (DLA-2607-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...