Debian DLA-2395-1 : libvirt security update

A double free vulnerability was discovered in libvirt, a toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. For Debian 9 stretch, this problem has been fixed in version 3.0.0-4+deb9u5. We recommend that you upgrade your libvirt packages. For the...

Debian DLA-2391-1 : ruby2.3 security update

A potential HTTP request smuggling vulnerability in WEBrick was reported. WEBrick bundled along with ruby2.3 was too tolerant against an invalid Transfer-Encoding header. This may lead to inconsistent interpretation between WEBrick and some HTTP proxy servers, which may allow the attacker to...

Debian DLA-2393-1 : snmptt security update

It was found that SNMP Trap Translator does not drop privileges as configured and does not properly escape shell commands in certain functions. A remote attacker, by sending a malicious crafted SNMP trap, could possibly execute arbitrary shell code with the privileges of the process or cause a...

[SECURITY] [DLA 2389-1] ruby-rack-cors security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2389-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta October 01, 2020 https://wiki.debian.org/LTS -...

Debian DLA-2388-1 : nss security update

Various vulnerabilities were fixed in nss, the Network Security Service libraries. CVE-2018-12404 Cache side-channel variant of the Bleichenbacher attack. CVE-2018-18508 NULL pointer dereference in several CMS functions resulting in a denial of service. CVE-2019-11719 Out-of-bounds read when...

Debian DLA-2387-2 : firefox-esr regression update

This update fixes a problem that caused Firefox to fail to build on the arm64 and armhf architectures. For Debian 9 stretch, this problem has been fixed in version 78.3.0esr-1deb9u2. We recommend that you upgrade your firefox-esr packages. For the detailed security status of firefox-esr please...

[SECURITY] [DLA 2379-2] mediawiki regression update

Debian LTS Advisory DLA-2379-2 [email protected] https://www.debian.org/lts/security/ Roberto C. Sánchez September 28, 2020 https://wiki.debian.org/LTS Package : mediawiki Version : 1:1.27.7-1deb9u5 Debian Bug : 971264 The update of mediawiki released as DLA-2379-1 contained a defect in...

[SECURITY] [DLA 2387-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2387-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort September 28, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2377-1] qt4-x11 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2377-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk September 21, 2020 https://wiki.debian.org/LTS -...

Debian DLA-2379-3 : mediawiki regression update

The update of mediawiki released as DLA-2379-2 contained a defect in the patch for CVE-2020-25827 which resulted from a possible use of an uninitialized variable. Updated mediawiki packages are now available to correct this issue. For Debian 9 stretch, this problem has been fixed in version...

Debian: Security Advisory (DLA-2383-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2381-1] lua5.3 security update

Debian LTS Advisory DLA-2381-1 [email protected] https://www.debian.org/lts/security/ Roberto C. Sánchez September 26, 2020 https://wiki.debian.org/LTS Package : lua5.3 Version : 5.3.3-1+deb9u1 CVE ID : CVE-2020-24370 A vulnerability was discovered in lua5.3, a simple, extensible,...

[SECURITY] [DSA 4767-1] mediawiki security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4767-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 25, 2020 https://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-4764-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2370-1] python-pip security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2370-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb September 11, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4761-1] zeromq3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4761-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 07, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2278-3] squid3 regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2278-3 [email protected] https://www.debian.org/lts/security/ Markus Koschany September 04, 2020 https://wiki.debian.org/LTS -...

Debian DLA-2362-1 : uwsgi security update

Apache HTTP Server versions before 2.4.32 uses src:uwsgi where a flaw was discovered. The uwsgi protocol does not let us serialize more than 16K of HTTP header leading to resource exhaustion and denial of service. For Debian 9 stretch, this problem has been fixed in version...

Debian DLA-2361-1 : libx11 security update

Jayden Rivers found an integer overflow in the initom function of libX11, the X11 client-side library, which could lead to a double free. For Debian 9 stretch, this problem has been fixed in version 2:1.6.4-3+deb9u3. We recommend that you upgrade your libx11 packages. For the detailed security...

[SECURITY] [DLA 2360-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2360-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 31, 2020 https://wiki.debian.org/LTS -...