Debian DLA-2607-1 : firefox-esr security update

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information disclosure or spoofing attacks. For Debian 9 stretch, these problems have been fixed in version 78.9.0esr-1deb9u1. We recommend that you...

[SECURITY] [DLA 2607-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2607-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort March 25, 2021 https://wiki.debian.org/LTS -...

Debian: Security Advisory (DLA-2606-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2606-1] lxml security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2606-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz March 24, 2021 https://wiki.debian.org/LTS -...

Debian DLA-2605-1 : mariadb-10.1 security update

A remote code execution issue was discovered in MariaDB. An untrusted search path leads to eval injection, in which a database SUPER user can execute OS commands after modifying wsrepprovider and wsrepnotifycmd. For Debian 9 stretch, this problem has been fixed in version 10.1.48-0+deb9u2. We...

Debian DLA-2603-1 : libmediainfo security update

It was discovered that there were a number of vulnerabilities in libmediainfo, a library reading metadata such as track names, lengths, etc. from media files. For Debian 9 'Stretch', these problems have been fixed in version 0.7.91-1+deb9u1. We recommend that you upgrade your libmediainfo package...

Debian: Security Advisory (DLA-2603-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-2605-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2602-1] imagemagick security update

Debian LTS Advisory DLA-2602-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany March 23, 2021 https://wiki.debian.org/LTS Package : imagemagick Version : 8:6.9.7.4+dfsg-11+deb9u12 CVE ID : CVE-2020-25666 CVE-2020-25675 CVE-2020-25676 CVE-2020-27754 CVE-2020-27757...

[SECURITY] [DLA 2603-1] libmediainfo security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2603-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb March 23, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2605-1] mariadb-10.1 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2605-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky March 22, 2021 https://wiki.debian.org/LTS -...

Debian DLA-2604-1 : dnsmasq security update

Moshe Kol and Shlomi Oberman of JSOF discovered several vulnerabilities in dnsmasq, a small caching DNS proxy and DHCP/TFTP server. They could result in denial of service, cache poisoning or the execution of arbitrary code. For Debian 9 stretch, these problems have been fixed in version...

[SECURITY] [DLA 2604-1] dnsmasq security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2604-1 [email protected] https://www.debian.org/lts/security/ March 22, 2021 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package...

Debian DLA-2600-1 : pygments security update

It was discovered that there was a series of denial of service vulnerabilities in Pygments, a popular syntax highlighting library for Python. A number of regular expressions had exponential or cubic worst-case complexity which could cause a remote denial of service DoS when provided with maliciou...

Debian DLA-2601-1 : cloud-init security update

cloud-init has the ability to generate and set a randomized password for system users. This functionality is enabled at runtime by passing cloud-config data such as : chpasswd: list: | user1:RANDOM When used this way, cloud-init logs the raw, unhashed password to a world-readable local file. For...

[SECURITY] [DLA 2558-2] xterm regression update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2558-2 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta March 21, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2601-1] cloud-init security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2601-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta March 20, 2021 https://wiki.debian.org/LTS -...

Debian: Security Advisory (DLA-2601-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2600-1] pygments security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2600-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb March 19, 2021 https://wiki.debian.org/LTS -...

Debian DLA-2598-1 : squid3 security update

Due to improper input validation, Squid is vulnerable to an HTTP Request Smuggling attack. This problem allows a trusted client to perform HTTP Request Smuggling and access services otherwise forbidden by Squid security controls. For Debian 9 stretch, this problem has been fixed in version...