[SECURITY] [DLA 2654-1] composer security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2654-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta May 12, 2021 https://wiki.debian.org/LTS - -----------------------------------------------------------------------...

Debian DLA-2653-1 : libxml2 security update

Several vulnerabilities were discovered in libxml2, a library providing support to read, modify and write XML and HTML files, which could cause denial of service via application crash when parsing specially crafted files. For Debian 9 stretch, these problems have been fixed in version...

Debian DLA-2648-2 : mediawiki regression update

The patch from latest upstream release to address CVE-2021-30152 was not portable to stretch-security version causing MediaWiki APIs to fail. This update includes a patch from upstream REL31 release which fix the issue. For Debian 9 stretch, this problem has been fixed in version 1:1.27.7-1deb9u9...

Debian DLA-2651-1 : python-django security update

It was discovered that there was potential directory-traversal vulnerability in Django, a popular Python-based web development framework. The MultiPartParser, UploadedFile and FieldFile classes allowed directory-traversal via uploaded files with suitably crafted file names. In order to mitigate...

Debian DLA-2652-1 : unbound1.9 security update

Several security vulnerabilities have been discovered in Unbound, a validating, recursive, caching DNS resolver, by security researchers of X41 D-SEC located in Aachen, Germany. Integer overflows, assertion failures, an out-of-bound write and an infinite loop vulnerability may lead to a denial of...

[SECURITY] [DLA 2648-2] mediawiki regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2648-2 [email protected] https://www.debian.org/lts/security/ Abhijith PA May 07, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2651-1] python-django security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2651-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb May 06, 2021 https://wiki.debian.org/LTS - -------------------------------------------------------------------------...

Debian: Security Advisory (DLA-2648-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2649-1] cgal security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2649-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky May 04, 2021 https://wiki.debian.org/LTS -...

Debian DLA-2647-1 : bind9 security update

Several vulnerabilities were discovered in BIND, a DNS server implementation. CVE-2021-25214 Greg Kuechle discovered that a malformed incoming IXFR transfer could trigger an assertion failure in named, resulting in denial of service. CVE-2021-25215 Siva Kakarla discovered that named could crash...

Debian DLA-2649-1 : cgal security update

Four security issues have been discovered in cgal. A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL. CVE-2020-28601 An oob read vulnerability exists in Nef2/PMioparser.h PMioparser::readvertex Faceof OOB read. An attacker can provide malicious input to trigge...

[SECURITY] [DLA 2647-1] bind9 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2647-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort May 04, 2021 https://wiki.debian.org/LTS -...

Debian DLA-2646-1 : subversion security update

One security issue has been discovered in subversion : CVE-2020-17525 : Subversion's modauthzsvn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to...

Debian DLA-2645-1 : edk2 security update

For Debian 9 stretch, these problems have been fixed in version 020161202.7bbe0b3e-1+deb9u2. We recommend that you upgrade your edk2 packages. For the detailed security status of edk2 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/edk2 NOTE: Tenable...

Debian DLA-2642-1 : gst-plugins-bad1.0 security update

Multiple vulnerabilities were discovered in plugins for the GStreamer media framework, which may result in denial of service or potentially the execution of arbitrary code if a malformed media file is opened. For Debian 9 stretch, this problem has been fixed in version 1.10.4-1+deb9u2. We recomme...

Debian DLA-2641-1 : gst-plugins-base1.0 security update

Multiple vulnerabilities were discovered in plugins for the GStreamer media framework, which may result in denial of service or potentially the execution of arbitrary code if a malformed media file is opened. For Debian 9 stretch, this problem has been fixed in version 1.10.4-1+deb9u2. We recomme...

Debian: Security Advisory (DLA-2643-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2644-1 : gst-libav1.0 security update

Multiple vulnerabilities were discovered in plugins for the GStreamer media framework, which may result in denial of service or potentially the execution of arbitrary code if a malformed media file is opened. For Debian 9 stretch, this problem has been fixed in version 1.10.4-1+deb9u1. We recomme...

[SECURITY] [DLA 2642-1] gst-plugins-bad1.0 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2642-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort April 27, 2021 https://wiki.debian.org/LTS -...

Debian DLA-2639-1 : opendmarc security update

It was discovered that OpenDMARC, a milter implementation of DMARC, has improper null termination in the function opendmarcxmlparse that can result in a one-byte heap overflow in opendmarcxml when parsing a specially crafted DMARC aggregate report. This can cause remote memory corruption when a...