[SECURITY] [DLA 3037-1] libjpeg-turbo security update

Debian LTS Advisory DLA-3037-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany May 31, 2022 https://wiki.debian.org/LTS Package : libjpeg-turbo Version : 1:1.5.1-2+deb9u2 CVE ID : CVE-2019-2201 Several integer overflows have been discovered in TurboJPEG, a JPEG...

[SECURITY] [DLA 3035-1] libdbi-perl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3035-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler May 30, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3034-1] haproxy security update

Debian LTS Advisory DLA-3034-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany May 30, 2022 https://wiki.debian.org/LTS Package : haproxy Version : 1.7.5-2+deb9u1 CVE ID : CVE-2018-20102 CVE-2018-20103 CVE-2019-18277 Debian Bug : 916308 916307 Nathan Davison...

[SECURITY] [DLA 3030-1] zipios++ security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3030-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz May 27, 2022 https://wiki.debian.org/LTS -...

Debian DLA-3026-1 : filezilla - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-3026 advisory. Untrusted search path in FileZilla before 3.41.0-rc1 allows an attacker to gain privileges via a malicious fzsftp binary in the user's home directory. For Debian 9 stretch,...

Debian DLA-3025-1 : irssi - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-3025 advisory. - Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server. CVE-2019-13045 Note that...

Debian DLA-3029-1 : cups - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-3029 advisory. Joshua Mason discovered that a logic error in the validation of the secret key used in the local authorisation mode of the CUPS printing system may result in privilege...

Debian: Security Advisory (DLA-3026-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3029-1] cups security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3029-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz May 27, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3026-1] filezilla security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3026-1 [email protected] https://www.debian.org/lts/security/ Andreas Rönnquist May 26, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3024-1] python-django security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3024-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb May 26, 2022 https://wiki.debian.org/LTS - -------------------------------------------------------------------------...

Debian DLA-3019-1 : admesh - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-3019 advisory. - ADMesh through 0.98.4 has a heap-based buffer over-read in stlupdateconnectsremove1 called from stlremovedegenerate in connect.c in libadmesh.a. CVE-2018-25033 Note that...

[SECURITY] [DLA 3013-1] needrestart security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-3013-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta May 18, 2022 https://wiki.debian.org/LTS - -----------------------------------------------------------------------...

Debian: Security Advisory (DLA-3012-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3011-1] vim security update

Debian LTS Advisory DLA-3011-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany May 16, 2022 https://wiki.debian.org/LTS Package : vim Version : 2:8.0.0197-4+deb9u6 CVE ID : CVE-2022-0261 CVE-2022-0351 CVE-2022-0413 CVE-2022-0443 CVE-2022-0572 CVE-2022-1154...

[SECURITY] [DLA 3010-1] ffmpeg security update

Debian LTS Advisory DLA-3010-1 [email protected] https://www.debian.org/lts/security/ Enrico Zini May 16, 2022 https://wiki.debian.org/LTS Package : ffmpeg Version : 7:3.2.18-0+deb9u1 The ffmpeg project released the new version 3.2.18 with fixes for various issues found by the OSS-Fuzz...

[SECURITY] [DLA 3009-1] cifs-utils security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-3009-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta May 16, 2022 https://wiki.debian.org/LTS - -----------------------------------------------------------------------...

[SECURITY] [DLA 3006-1] openjdk-8 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3006-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort May 14, 2022 https://wiki.debian.org/LTS -...

Debian: Security Advisory (DLA-3004-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-3005-1 : lrzip - LTS security update

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-3005 advisory. lrzip, a compression program, was found to have a heap memory corruption bug. For Debian 9 stretch, this problem has been fixed in version 0.631-1+deb9u3. We recommend that...