[SECURITY] [DSA 1164-1] New sendmail packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1164-1 [email protected] http://www.debian.org/security/ Noah Meyerhans August 31st, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1088-1] New centericq packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1088-1 [email protected] http://www.debian.org/security/ Martin Schulze June 3rd, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 980-1] New tutos package fixes several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 980-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 22nd, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 884-1] New Horde3 packages fix insecure default installation

-------------------------------------------------------------------------- Debian Security Advisory DSA 884-1 [email protected] http://www.debian.org/security/ Martin Schulze November 7th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 782-1] New bluez-utils packages fix arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 782-1 [email protected] http://www.debian.org/security/ Martin Schulze August 23rd, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 616-1] New telnetd-ssl packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 616-1 [email protected] http://www.debian.org/security/ Martin Schulze December 23rd, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 606-1] New nfs-utils packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 606-1 [email protected] http://www.debian.org/security/ Martin Schulze December 8th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 557-1] New rp-pppoe packages fix potential root compromise

-------------------------------------------------------------------------- Debian Security Advisory DSA 557-1 [email protected] http://www.debian.org/security/ Martin Schulze October 4th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 429-1] New gnupg packages fix cryptographic weakness in ElGamal signing keys

-------------------------------------------------------------------------- Debian Security Advisory DSA 429-1 [email protected] http://www.debian.org/security/ Matt Zimmerman January 26th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 411-1] New mpg321 packages fix format string vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 411-1 [email protected] http://www.debian.org/security/ Matt Zimmerman January 5th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 408-1] New screen packages fix group utmp exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 408-1 [email protected] http://www.debian.org/security/ Martin Schulze January 5th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 394-1] New openssl095 packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 394-1 [email protected] http://www.debian.org/security/ Martin Schulze October 11th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 276-1] New Linux kernel packages (s390) fix local root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 276-1 [email protected] http://www.debian.org/security/ Martin Schulze April 3rd, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 188-1] New Apache-SSL packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 188-1 [email protected] http://www.debian.org/security/ Martin Schulze November 5th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 5924-1] intel-microcode security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5924-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 23, 2025 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5462-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5462-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 30, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3237-1] node-tar security update

Debian LTS Advisory DLA-3237-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin December 12, 2022 https://wiki.debian.org/LTS Package : node-tar Version : 4.4.6+ds1-3+deb10u2 CVE ID : CVE-2021-37701 CVE-2021-37712 Debian Bug : 993981 Cache poisoning vulnerabilities...

[SECURITY] [DSA 5267-1] pysha3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5267-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 30, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5160-1] ntfs-3g security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5160-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 10, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5075-1] minetest security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5075-1 [email protected] https://www.debian.org/security/ Markus Koschany February 14, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5074-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5074-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 13, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2872-1] agg security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2872-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk December 31, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2754-1] pywps security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2754-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA September 04, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4955-1] libspf2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4955-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 11, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4933-1] nettle security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4933-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 18, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4912-1] exim4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4912-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 04, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4910-1] libimage-exiftool-perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4910-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 02, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2502-1] postsrsd security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2502-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk December 20, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4815-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4815-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 17, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2365-1] netty-3.9 security update

Debian LTS Advisory DLA-2365-1 [email protected] https://www.debian.org/lts/security/ Roberto C. Sánchez September 04, 2020 https://wiki.debian.org/LTS Package : netty-3.9 Version : 3.9.9.Final-1+deb9u1 CVE ID : CVE-2019-16869 CVE-2019-20444 CVE-2019-20445 Debian Bug : 941266 950966...

[SECURITY] [DSA 4752-1] bind9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4752-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 27, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2308-1] libopenmpt security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2308-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta August 02, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2300-1] kdepim-runtime security update

Package : kdepim-runtime Version : 4:16.04.2-2+deb9u1 CVE ID : CVE-2020-15954 It was discovered that there was an issue where kdepim-runtime would default to using unencrypted POP3 communication despite the UI indicating that encryption was in use. For Debian 9 "Stretch", this issue has been fixe...

[SECURITY] [DLA 2233-2] python-django regression update

Package : python-django Version : 1.7.11-1+deb8u10 CVE ID : CVE-2020-13254 It was discovered that there was a regression in the latest update to Django, the Python web development framework. The upstream fix for CVE-2020-13254 to address data leakages via malformed memcached keys could, in some...

[SECURITY] [DSA 4637-1] network-manager-ssh security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4637-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 09, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2120-1] rake security update

Package : rake Version : 10.3.2-2+deb8u1 CVE ID : CVE-2020-8130 There is an OS command injection vulnerability in Rake a ruby make-like utility 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character |. For Debian 8 "Jessie", this problem has been fixed in version...

[SECURITY] [DLA 2078-1] libxmlrpc3-java security update

Package : libxmlrpc3-java Version : 3.1.3-7+deb8u1 CVE ID : CVE-2019-17570 Debian Bug : 949089 An untrusted deserialization was found in the org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult method of Apache XML-RPC aka ws-xmlrpc library. A malicious XML-RPC server could target a XML-RPC...

[SECURITY] [DLA 2042-1] python-django security update

Package : python-django Version : 1.7.11-1+deb8u8 CVE ID : CVE-2019-19844 Debian Bug : 946937 It was discovered that there was a potential account hijack vulnerabilility in Django, the Python-based web development framework. Djangos password-reset form used a case-insensitive query to retrieve...

[SECURITY] [DLA 2022-1] librabbitmq security update

Package : librabbitmq Version : 0.5.2-2+deb8u1 CVE ID : CVE-2019-18609 Debian Bug : 946005 It was discovered that there was an integer overflow vulnerability in librabbitmq, a library for robust messaging between applications and servers. For Debian 8 "Jessie", this issue has been fixed in...

[SECURITY] [DLA 1759-1] clamav security update

Package : clamav Version : 0.100.3+dfsg-0+deb8u1 CVE ID : CVE-2019-1787 CVE-2019-1788 CVE-2019-1789 Debian Bug : Out-of-bounds read and write conditions have been fixed in clamav. CVE-2019-1787 An out-of-bounds heap read condition may occur when scanning PDF documents. The defect is a failure to...

[SECURITY] [DSA 4434-1] drupal7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4434-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 20, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4431-1] libssh2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4431-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 13, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1727-1] firefox-esr security update

Package : firefox-esr Version : 60.6.1esr-1deb8u1 CVE ID : CVE-2019-9810 CVE-2019-9813 Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code. For Debian 8 "Jessie", these problems have been fixed in version...

[SECURITY] [DSA 4415-1] passenger security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4415-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 24, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4158-1] openssl1.0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4158-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 29, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4018-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4018-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 04, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3879-1] libosip2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3879-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 13, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3873-1] perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3873-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 05, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 789-1] icoutils security update

Package : icoutils Version : 0.29.1-5deb7u1 CVE ID : CVE-2017-5208 CVE-2017-5331 CVE-2017-5332 CVE-2017-5333 Debian Bug : 850017 Brief introduction CVE-2017-5208 Choongwoo Han reported0 an exploitable crash in wrestool from icoutils. The command line tools is e.g. used in KDEs metadataparsing...

[SECURITY] [DLA 671-1] libxvmc security update

Package : libxvmc Version : 2:1.0.7-1+deb7u3 CVE ID : CVE-2016-7953 CVE-2016-7953 If an empty string is received from an x-server, do not underrun the buffer by accessing "rep.nameLen - 1" unconditionally, which could end up being -1. For Debian 7 "Wheezy", these problems have been fixed in versi...