4412 matches found
[SECURITY] [DLA 2683-1] rxvt security update
----------------------------------------------------------------------- Debian LTS Advisory DLA-2683-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta June 09, 2021 https://wiki.debian.org/LTS - -----------------------------------------------------------------------...
[SECURITY] [DLA 2678-1] ruby-nokogiri security update
Debian LTS Advisory DLA-2678-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany June 06, 2021 https://wiki.debian.org/LTS Package : ruby-nokogiri Version : 1.6.8.1-1+deb9u1 CVE ID : CVE-2020-26247 Debian Bug : 978967 An XXE vulnerability was found in Nokogiri, a...
Debian DLA-2675-1 : caribou regression update
It was found that the fix for CVE-2020-25712 in the Xorg X server, addressed in DLA-2486-1, caused a regression in caribou, making it crash whenever special shifted characters were entered. For Debian 9 stretch, this problem has been fixed in version 0.4.21-1+deb9u1. We recommend that you upgrade...
Debian DLA-2674-1 : isc-dhcp security update
Jon Franklin and Pawel Wieczorkiewicz found an issue in the ISC DHCP client and server when parsing lease information, which could lead to denial of service via application crash. For Debian 9 stretch, this problem has been fixed in version 4.3.5-3+deb9u2. We recommend that you upgrade your...
[SECURITY] [DLA 2675-1] caribou regression update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2675-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort June 03, 2021 https://wiki.debian.org/LTS -...
Debian DLA-2665-1 : ring security update
An issue has been found in ring, a secure and distributed voice, video and chat platform. Actually the embedded copy of pjproject is affected by this CVE. Due to bad handling of two consecutive crafted answers to an INVITE, the attacker is able to crash the server resulting in a denial of service...
May 20, 2021—KB5003217 (OS Build 17763.1971) Preview
None None...
[SECURITY] [DSA 4918-1] ruby-rack-cors security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4918-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 18, 2021 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4918-1] ruby-rack-cors security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4918-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 18, 2021 https://www.debian.org/security/faq -...
Debian DLA-2664-1 : curl security update
Viktor Szakats reported that libcurl, an URL transfer library, does not strip off user credentials from the URL when automatically populating the Referer HTTP request header field in outgoing HTTP requests. Sensitive authentication data may leak to the server that is the target of the second HTTP...
Debian DLA-2663-1 : libimage-exiftool-perl security update
A vulnerability was discovered in libimage-exiftool-perl, a library and program to read and write meta information in multimedia files, which may result in execution of arbitrary code if a malformed DjVu file is processed. For Debian 9 stretch, this problem has been fixed in version 10.40-1+deb9u...
Debian DLA-2662-1 : postgresql-9.6 security update
Multiple security issues have been discovered in the PostgreSQL database system, which could result in the execution of arbitrary code or disclosure of memory content. For Debian 9 stretch, these problems have been fixed in version 9.6.22-0+deb9u1. We recommend that you upgrade your postgresql-9....
Debian DLA-2656-1 : hivex security update
Jemery Galindo discovered an out-of-bounds memory access in Hivex, a library to parse Windows Registry hive files. For Debian 9 stretch, this problem has been fixed in version 1.3.13-2+deb9u1. We recommend that you upgrade your hivex packages. For the detailed security status of hivex please refe...
[SECURITY] [DLA 2654-1] composer security update
----------------------------------------------------------------------- Debian LTS Advisory DLA-2654-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta May 12, 2021 https://wiki.debian.org/LTS - -----------------------------------------------------------------------...
Debian DLA-2651-1 : python-django security update
It was discovered that there was potential directory-traversal vulnerability in Django, a popular Python-based web development framework. The MultiPartParser, UploadedFile and FieldFile classes allowed directory-traversal via uploaded files with suitably crafted file names. In order to mitigate...
Debian DLA-2650-1 : exim4 security update
The Qualys Research Labs reported several vulnerabilities in Exim, a mail transport agent, which could result in local privilege escalation and remote code execution. Details can be found in the Qualys advisory at https://www.qualys.com/2021/05/04/21nails/21nails.txt For Debian 9 stretch, these...
Debian DLA-2648-2 : mediawiki regression update
The patch from latest upstream release to address CVE-2021-30152 was not portable to stretch-security version causing MediaWiki APIs to fail. This update includes a patch from upstream REL31 release which fix the issue. For Debian 9 stretch, this problem has been fixed in version 1:1.27.7-1deb9u9...
[SECURITY] [DLA 2648-2] mediawiki regression update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2648-2 [email protected] https://www.debian.org/lts/security/ Abhijith PA May 07, 2021 https://wiki.debian.org/LTS -...
WordPress Parcel Tracker eCourier <= 1.0.1 - Plugin Settings Update via Cross-Site Request Forgery (CSRF) vulnerability
Plugin Settings Update via Cross-Site Request Forgery CSRF vulnerability discovered by WPScanTeam in WordPress Parcel Tracker Courier versions = 1.0.1. Solution Update the WordPress Parcel Tracker eCourier to the latest available version at least 1.0.2...
