Debian: Security Advisory (DLA-2735-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2734-1 : curl - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2734 advisory. - curl 7.7 through 7.76.1 suffers from an information disclosure when the -t command line option, known as CURLOPTTELNETOPTIONS in libcurl, is used to send...

Debian: Security Advisory (DLA-2737-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-2741-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-2734-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2741-1] commons-io security update

Debian LTS Advisory DLA-2741-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany August 12, 2021 https://wiki.debian.org/LTS Package : commons-io Version : 2.5-1+deb9u1 CVE ID : CVE-2021-29425 Lukas Euler discovered a path traversal vulnerability in commons-io, a Ja...

[SECURITY] [DLA 2740-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2740-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 12, 2021 https://wiki.debian.org/LTS -...

Debian DLA-2735-1 : ceph - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2735 advisory. - It was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions could steal dm-crypt encryption keys used in ceph disk...

Debian DLA-2740-1 : firefox-esr - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2740 advisory. - Mozilla developers reported memory safety bugs present in Firefox 90 and Firefox ESR 78.12. Some of these bugs showed evidence of memory corruption and we presum...

[SECURITY] [DLA 2739-1] libspf2 security update

Debian LTS Advisory DLA-2739-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany August 11, 2021 https://wiki.debian.org/LTS Package : libspf2 Version : 1.2.10-7+deb9u1 CVE ID : CVE-2021-20314 Philipp Jeitner and Haya Shulman discovered a stack-based buffer overflow...

Debian DLA-2738-1 : c-ares - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2738 advisory. An issue has been found in c-ares, an asynchronous name resolver. Missing input validation of host names returned by Domain Name Servers can lead to output of wrong...

[SECURITY] [DLA 2735-1] ceph security update

Debian LTS Advisory DLA-2735-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany August 09, 2021 https://wiki.debian.org/LTS Package : ceph Version : 10.2.11-2+deb9u1 CVE ID : CVE-2018-14662 CVE-2018-16846 CVE-2020-1760 CVE-2020-10753 CVE-2021-3524 Debian Bug : 9219...

[SECURITY] [DLA 2738-1] c-ares security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2738-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz August 10, 2021 https://wiki.debian.org/LTS -...

Debian DLA-2737-1 : openjdk-8 - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2737 advisory. - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking. Supported versions that are affected are Java SE...

[SECURITY] [DLA 2737-1] openjdk-8 security update

Debian LTS Advisory DLA-2737-1 [email protected] https://www.debian.org/lts/security/ Roberto C. Sánchez August 09, 2021 https://wiki.debian.org/LTS Package : openjdk-8 Version : 8u302-b08-1deb9u1 CVE ID : CVE-2021-2341 CVE-2021-2369 CVE-2021-2388 Several vulnerabilities have been...

[SECURITY] [DLA 2736-1] lynx security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2736-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb August 09, 2021 https://wiki.debian.org/LTS -...

Debian DLA-2733-1 : tomcat8 - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2733 advisory. - A vulnerability in the JNDI Realm of Apache Tomcat allows an attacker to authenticate using variations of a valid user name and/or to bypass some of the protecti...

Debian: Security Advisory (DLA-2733-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2733-1] tomcat8 security update

Debian LTS Advisory DLA-2733-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany August 05, 2021 https://wiki.debian.org/LTS Package : tomcat8 Version : 8.5.54-0+deb9u7 CVE ID : CVE-2021-30640 CVE-2021-33037 Debian Bug : 991046 991046 Several security vulnerabilitie...

ILM OpenEXR 代码问题漏洞

ILM OpenEXR is an image file format for High Dynamic Range HDR images from Industrial Light and Magic ILM. ILM OpenEXR suffers from a code issue vulnerability that stems from a flaw in the product's Imf25::Header::operator. The vulnerability can be exploited to execute malicious code. The followi...