[SECURITY] [DSA 4824-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4824-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 01, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4822-1] p11-kit security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4822-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 01, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4810-2] lxml regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4810-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 19, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4813-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4813-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 16, 2020 https://www.debian.org/security/faq -...

DEBIAN-CVE-2020-26970

When reading SMTP server status codes, Thunderbird writes an integer value to a position on the stack that is intended to contain just one byte. Depending on processor architecture and stack layout, this leads to stack corruption that may be exploitable. This vulnerability affects Thunderbird...

Debian DLA-2482-1 : debian-security-support security update

debian-security-support, the Debian security support coverage checker, has been updated in stretch-security. This marks the end of life of the mongodb package in stretch due to licence incompatibility. See https://lists.debian.org/debian-lts/2020/11/msg00058.html and https://bugs.debian.org/91553...

DLA-2482-1 debian-security-support - security update

Bulletin has no description...

[SECURITY] [DSA 4792-1] openldap security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4792-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 17, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4787-1] moin security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4787-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 09, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4785-1] raptor2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4785-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 07, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4785-1] raptor2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4785-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 07, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4784-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4784-1 [email protected] https://www.debian.org/security/ Sebastien Delafond November 06, 2020 https://www.debian.org/security/faq -...

DEBIAN-CVE-2020-26892

The JWT library in NATS nats-server before 2.1.9 has Incorrect Access Control because of how expired credentials are handled...

DEBIAN-CVE-2020-28034

WordPress before 5.5.2 allows XSS associated with global variables...

[SECURITY] [DSA 4768-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4768-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 28, 2020 https://www.debian.org/security/faq -...

Debian DSA-4764-1 : inspircd - security update

Two security issues were discovered in the pgsql and mysql modules of the InspIRCd IRC daemon, which could result in denial of service. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4764. The text itself is...

Debian DLA-2369-1 : libxml2 security update

Several security vulnerabilities were corrected in libxml2, the GNOME XML library. CVE-2017-8872 Global buffer-overflow in the htmlParseTryOrFinish function. CVE-2017-18258 The xzhead function in libxml2 allows remote attackers to cause a denial of service memory consumption via a crafted LZMA...

[SECURITY] [DSA 4760-1] qemu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4760-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 06, 2020 https://www.debian.org/security/faq -...

Debian DSA-4749-1 : firefox-esr - security update

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or unintended or malicious extensions being installed. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Debian DSA-4738-1 : ark - security update

Dominik Penner discovered that the Ark archive manager did not sanitise extraction paths, which could result in maliciously crafted archives writing outside the extraction directory. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...