[SECURITY] [DLA 2713-1] linux security update

Debian LTS Advisory DLA-2713-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings July 20, 2021 https://wiki.debian.org/LTS Package : linux Version : 4.9.272-2 CVE ID : CVE-2021-3609 CVE-2021-21781 CVE-2021-33909 CVE-2021-34693 Debian Bug : 990072 Brief introduction...

[SECURITY] [DLA 2715-1] systemd security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2715-1 [email protected] https://www.debian.org/lts/security/ Salvatore Bonaccorso July 20, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2712-1] libjdom1-java security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2712-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb July 20, 2021 https://wiki.debian.org/LTS -...

Debian DLA-2712-1 : libjdom1-java - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2712 advisory. - An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request. CVE-2021-33813 Note that Nessus has not tested...

Debian DLA-2715-1 : systemd - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2715 advisory. The Qualys Research Labs discovered that an attacker-controlled allocation using the alloca function could result in memory corruption, allowing to crash systemd and hence...

[SECURITY] [DLA 2710-1] rabbitmq-server security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2710-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA July 19, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2709-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2709-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort July 15, 2021 https://wiki.debian.org/LTS -...

Debian DLA-2709-1 : firefox-esr - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2709 advisory. - Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted...

[SECURITY] [DLA 2707-1] sogo security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2707-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky July 12, 2021 https://wiki.debian.org/LTS -...

Denial Of Service (DoS)

openexr:stretch is vulnerable to denial of service. The vulnerability exists in LineBufferTask::execute function of ImfDeepScanLineInputFile.cpp due to heap buffer overflow which allows an attacker to crash the application via malicious input...

[SECURITY] [DLA 2705-1] scilab security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2705-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky July 07, 2021 https://wiki.debian.org/LTS -...

Debian: Security Advisory (DLA-2702-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2703-1 : ieee-data - LTS security update

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-2703 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 70300 C Tenable Network Security...

[SECURITY] [DLA 2701-1] openexr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2701-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler July 03, 2021 https://wiki.debian.org/LTS -...

Debian: Security Advisory (DLA-2699-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2698-1] node-bl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2698-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz July 01, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2696-1] libjdom2-java security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2696-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb June 29, 2021 https://wiki.debian.org/LTS -...

Debian DLA-2692-1 : bluez - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2692 advisory. Two issues have been found in bluez, a package with Bluetooth tools and daemons. One issue is about a man- in-the-middle attack during secure pairing, the other is...

Debian DLA-2693-1 : xmlbeans - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2693 advisory. The XML parsers used by XMLBeans did not set the properties needed to protect the user from malicious XML input. Vulnerabilities include the possibility for XML Entity...

[SECURITY] [DLA 2692-1] bluez security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2692-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz June 27, 2021 https://wiki.debian.org/LTS -...