Debian DLA-2588-1 : zeromq3 security update

Two security issues have been detected in zeromq3. CVE-2021-20234 Memory leak in client induced by malicious servers without CURVE/ZAP. From issue description 1. When a pipe processes a delimiter and is already not in active state but still has an unfinished message, the message is leaked...

[SECURITY] [DLA 2588-1] zeromq3 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2588-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky March 09, 2021 https://wiki.debian.org/LTS -...

Debian DLA-2587-1 : privoxy security update

Multiple vulnerabilites were discovered in privoxy, a web proxy with advanced filtering capabilities. CVE-2021-20272 An assertion failure could be triggered with a crafted CGI request leading to server crash. CVE-2021-20273 A crash can occur via a crafted CGI request if Privoxy is toggled off...

Debian: Security Advisory (DLA-2587-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2587-1] privoxy security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2587-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA March 09, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2553-2] xcftools regression update

Debian LTS Advisory DLA-2553-2 [email protected] https://www.debian.org/lts/security/ Markus Koschany March 08, 2021 https://wiki.debian.org/LTS Package : xcftools Version : 1.0.7-6+deb9u2 CVE ID : CVE-2019-5086 CVE-2019-5087 Debian Bug : 945317 The patch to address CVE-2019-5086 and...

Debian DLA-2585-1 : libupnp security update

libupnp, the portable SDK for UPnP Devices allows remote attackers to cause a denial of service crash via a crafted SSDP message due to a NULL pointer dereference in the functions FindServiceControlURLPath and FindServiceEventURLPath in genlib/servicetable/servicetable.c. For Debian 9 stretch, th...

Debian DLA-2584-1 : libcaca security update

A buffer overflow issue in cacaresize function in libcaca/caca/canvas.c may lead to local execution of arbitrary code in the user context. For Debian 9 stretch, this problem has been fixed in version 0.99.beta19-2.1deb9u2. We recommend that you upgrade your libcaca packages. For the detailed...

Debian DLA-2582-1 : mqtt-client security update

A vulnerability was discovered in mqtt-client wher unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive. For Debian 9 stretch, this problem has been fixed in version 1.14-1+deb9u1. We recommend that you upgrade your mqtt-client packages. For the...

Debian DLA-2583-1 : activemq security update

Multiple security issues were discovered in activemq, a message broker built around Java Message Service. CVE-2017-15709 When using the OpenWire protocol in activemq, it was found that certain system details such as the OS and kernel version are exposed as plain text. CVE-2018-11775 TLS hostname...

[SECURITY] [DLA 2584-1] libcaca security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2584-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA March 07, 2021 https://wiki.debian.org/LTS -...

Debian: Security Advisory (DLA-2583-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-2582-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2583-1] activemq security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2583-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA March 05, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2582-1] mqtt-client security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2582-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA March 05, 2021 https://wiki.debian.org/LTS -...

Debian DLA-2580-1 : adminer security update

Adminer is an open source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side request forgery vulnerability. Users of Adminer versions bundling all drivers e.g. adminer.php are affected. For Debian 9 stretch, this problem has been fixed ...

Debian DLA-2579-1 : spip security update

It was discovered that SPIP, a website engine for publishing, would allow a malicious user to perform cross-site scripting attacks, access sensitive information, or execute arbitrary code. For Debian 9 stretch, this problem has been fixed in version 3.1.4-4deb9u4+deb9u1. We recommend that you...

Debian DLA-2581-1 : wpa security update

A vulnerability was discovered in how p2p/p2ppd.c in wpasupplicant before 2.10 processes P2P Wi-Fi Direct provision discovery requests. It could result in denial of service or other impact potentially execution of arbitrary code, for an attacker within radio range. For Debian 9 stretch, this...

[SECURITY] [DLA 2581-1] wpa security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2581-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta March 03, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2580-1] adminer security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2580-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta March 03, 2021 https://wiki.debian.org/LTS -...