Debian: Security Advisory (DLA-2611-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2613-1] underscore security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2613-1 [email protected] https://www.debian.org/lts/security/ Yadd March 31, 2021 https://wiki.debian.org/LTS - -------------------------------------------------------------------------...

[SECURITY] [DLA 2612-1] leptonlib security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2612-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz March 31, 2021 https://wiki.debian.org/LTS -...

Debian DLA-2609-1 : thunderbird security update

Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code or information disclosure. For Debian 9 stretch, these problems have been fixed in version 1:78.9.0-1deb9u1. We recommend that you upgrade your thunderbird packages. For the detailed...

Debian DLA-2608-1 : jquery security update

Two vulnerabilities have been discovered in jquery's handling of untrusted HTML which may result in execution of untrusted code. For Debian 9 stretch, these problems have been fixed in version 3.1.1-2+deb9u2. We recommend that you upgrade your jquery packages. For the detailed security status of...

Debian DLA-2606-1 : lxml security update

An issue has been found in lxml, a pythonic binding for the libxml2 and libxslt libraries. Due to missing input sanitization, XSS is possible for the HTML5 formaction attribute. For Debian 9 stretch, this problem has been fixed in version 3.7.1-1+deb9u4. We recommend that you upgrade your lxml...

Debian: Security Advisory (DLA-2607-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2607-1 : firefox-esr security update

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information disclosure or spoofing attacks. For Debian 9 stretch, these problems have been fixed in version 78.9.0esr-1deb9u1. We recommend that you...

[SECURITY] [DLA 2607-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2607-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort March 25, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2606-1] lxml security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2606-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz March 24, 2021 https://wiki.debian.org/LTS -...

Debian: Security Advisory (DLA-2603-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2603-1 : libmediainfo security update

It was discovered that there were a number of vulnerabilities in libmediainfo, a library reading metadata such as track names, lengths, etc. from media files. For Debian 9 'Stretch', these problems have been fixed in version 0.7.91-1+deb9u1. We recommend that you upgrade your libmediainfo package...

Debian DLA-2605-1 : mariadb-10.1 security update

A remote code execution issue was discovered in MariaDB. An untrusted search path leads to eval injection, in which a database SUPER user can execute OS commands after modifying wsrepprovider and wsrepnotifycmd. For Debian 9 stretch, this problem has been fixed in version 10.1.48-0+deb9u2. We...

[SECURITY] [DLA 2603-1] libmediainfo security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2603-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb March 23, 2021 https://wiki.debian.org/LTS -...

Debian DLA-2604-1 : dnsmasq security update

Moshe Kol and Shlomi Oberman of JSOF discovered several vulnerabilities in dnsmasq, a small caching DNS proxy and DHCP/TFTP server. They could result in denial of service, cache poisoning or the execution of arbitrary code. For Debian 9 stretch, these problems have been fixed in version...

[SECURITY] [DLA 2604-1] dnsmasq security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2604-1 [email protected] https://www.debian.org/lts/security/ March 22, 2021 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package...

Debian DLA-2601-1 : cloud-init security update

cloud-init has the ability to generate and set a randomized password for system users. This functionality is enabled at runtime by passing cloud-config data such as : chpasswd: list: | user1:RANDOM When used this way, cloud-init logs the raw, unhashed password to a world-readable local file. For...

[SECURITY] [DLA 2558-2] xterm regression update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2558-2 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta March 21, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2600-1] pygments security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2600-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb March 19, 2021 https://wiki.debian.org/LTS -...

Debian DLA-2595-1 : velocity security update

It was discovered that there was a potential arbitrary code execution vulnerability in velocity, a Java-based template engine for writing web applications. It could be exploited by applications which allowed untrusted users to upload/modify templates. For Debian 9 'Stretch', this problem has been...