[SECURITY] [DLA 2556-1] unbound1.9 security update

Debian LTS Advisory DLA-2556-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany February 12, 2021 https://wiki.debian.org/LTS Package : unbound1.9 Version : 1.9.0-2+deb10u2deb9u1 CVE ID : CVE-2020-12662 CVE-2020-12663 CVE-2020-28935 Debian Bug : 977165 Several...

Debian DLA-2555-1 : netty security update

It was discovered that there was an insecure temporary file issue that could have lead to disclosure of arbitrary local files. For Debian 9 'Stretch', this problem has been fixed in version 1:4.1.7-2+deb9u3. We recommend that you upgrade your netty packages. For the detailed security status of...

[SECURITY] [DLA 2553-1] xcftools security update

Debian LTS Advisory DLA-2553-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany February 09, 2021 https://wiki.debian.org/LTS Package : xcftools Version : 1.0.7-6+deb9u1 CVE ID : CVE-2019-5086 CVE-2019-5087 Debian Bug : 945317 Claudio Bozzato of Cisco Talos...

Debian DLA-2553-2 : xcftools regression update

The patch to address CVE-2019-5086 and CVE-2019-5087 was not portable and did not work on 32 bit processor architectures. This update fixes the problem. For reference, the original advisory text follows. Claudio Bozzato of Cisco Talos discovered an exploitable integer overflow vulnerability in th...

Debian: Security Advisory (DLA-2551-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2550-1 : openjpeg2 security update

Various overflow errors were identified and fixed. CVE-2020-27814 A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. CVE-2020-27823 Wrong computation of x1,y1 if -d option is used, resulting in heap buffer overflow. CVE-2020-27824 Global buffer overflow on...

[SECURITY] [DLA 2550-1] openjpeg2 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2550-1 [email protected] https://www.debian.org/lts/security/ Brian May February 09, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2549-1] gdisk security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2549-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta February 08, 2021 https://wiki.debian.org/LTS -...

Debian DLA-2546-1 : intel-microcode security update

CVE-2020-8695 Observable discrepancy in the RAPL interface for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access. CVE-2020-8696 Improper removal of sensitive information before storage or transfer in some IntelR Processors may allow a...

Debian: Security Advisory (DLA-2547-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2548-1] privoxy security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2548-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta February 07, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2547-1] wireshark security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2547-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk February 06, 2021 https://wiki.debian.org/LTS -...

Debian DLA-2541-1 : thunderbird security update

Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code, denial of service or an information leak. For Debian 9 stretch, these problems have been fixed in version 1:78.7.0-1deb9u1. We recommend that you upgrade your thunderbird packages. For the...

Debian DLA-2545-1 : open-build-service security update

CVE-2020-8020 An improper neutralization of input during web page generation vulnerability in open-build-service allows remote attackers to store arbitrary JS code to cause XSS. CVE-2020-8021 An improper access control vulnerability in open-build-service allows remote attackers to read files of a...

[SECURITY] [DLA 2545-1] open-build-service security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2545-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta February 03, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2544-1] openldap security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2544-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta February 03, 2021 https://wiki.debian.org/LTS -...

Debian: Security Advisory (DLA-2541-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-2539-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2539-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2539-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort February 02, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2540-1] python-django security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2540-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb February 01, 2021 https://wiki.debian.org/LTS -...