Debian: Security Advisory (DLA-3007-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-3008-1 : openssl - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-3008 advisory. The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is executed by update-ca-certificates, from ca-certificates, to...

[SECURITY] [DLA-3007-1] imagemagick security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3007-1 [email protected] https://www.debian.org/lts/security/ Andreas Rönnquist May 14, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3006-1] openjdk-8 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3006-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort May 14, 2022 https://wiki.debian.org/LTS -...

Debian: Security Advisory (DLA-3004-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-3005-1 : lrzip - LTS security update

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-3005 advisory. lrzip, a compression program, was found to have a heap memory corruption bug. For Debian 9 stretch, this problem has been fixed in version 0.631-1+deb9u3. We recommend that...

Debian DLA-3007-1 : imagemagick - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3007 advisory. CVE-2021-3596 A NULL pointer dereference flaw was found in ImageMagick in versions prior to 7.0.10-31 in ReadSVGImage in coders/svg.c. This issue is due to not...

Debian DLA-3006-1 : openjdk-8 - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3006 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JAXP. Supported versions that are affected are Oracle...

Debian DLA-3003-1 : ruby-nokogiri - LTS security update

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-3003 advisory. - Nokogiri is an open source XML and HTML library for Ruby. Nokogiri = 1.13.4. There are no known workarounds for this issue. CVE-2022-24836 Note that Nessus has not tested...

Debian: Security Advisory (DLA-3001-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-3002-1 : adminer - LTS security update

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-3002 advisory. - Improper Access Control in Adminer versions 1.12.0 to 4.6.2 fixed in version 4.6.3 allows an attacker to achieve Arbitrary File Read on the remote server by requesting th...

Debian DLA-3004-1 : htmldoc - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-3004 advisory. - There is a vulnerability in htmldoc 1.9.16. In imageloadjpeg function image.cxx when it calls malloc,'img-width' and 'img-height' they are large enough to cause an intege...

[SECURITY] [DLA 3001-1] libgoogle-gson-java security update

Debian LTS Advisory DLA-3001-1 [email protected] https://www.debian.org/lts/security/ Dominik George May 13, 2022 https://wiki.debian.org/LTS Package : libgoogle-gson-java Version : 2.4-1+deb9u1 CVE ID : CVE-2022-25647 Debian Bug : 1010670 It was discovered that the package...

[SECURITY] [DLA 3004-1] htmldoc security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3004-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb May 13, 2022 https://wiki.debian.org/LTS - -------------------------------------------------------------------------...

[SECURITY] [DLA 3003-1] ruby-nokogiri security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3003-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb May 13, 2022 https://wiki.debian.org/LTS - -------------------------------------------------------------------------...

[SECURITY] [DLA 3002-1] adminer security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3002-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb May 13, 2022 https://wiki.debian.org/LTS - -------------------------------------------------------------------------...

[SECURITY] [DLA 3000-1] waitress security update

Debian LTS Advisory DLA-3000-1 [email protected] https://www.debian.org/lts/security/ Stefano Rivera May 12, 2022 https://wiki.debian.org/LTS Package : waitress Version : 1.0.1-1+deb9u1 CVE ID : CVE-2019-16785 CVE-2019-16786 CVE-2019-16789 CVE-2019-16792 CVE-2022-24761 Debian Bug :...

Debian DLA-2999-1 : mutt - LTS security update

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-2999 advisory. - Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3 allows read past end of input line CVE-2022-1328 Note that Nessus has not...

Debian DLA-2991-1 : twisted - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2991 advisory. The Twisted Web HTTP 1.1 server, located in the twisted.web.http module, parsed several HTTP request constructs more leniently than permitted by RFC 7230. This non-conforma...

Debian DLA-2998-1 : kicad - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2998 advisory. - A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon ReadXYCoord coordinate parsing functionality of KiCad EDA 6.0.1 and...