[SECURITY] [DSA 5389-1] rails security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5389-1 [email protected] https://www.debian.org/security/ Aron Xu April 14, 2023 https://www.debian.org/security/faq - -------------------------------------------------------------------------...

[SECURITY] [DLA 3265-1] exiv2 security update

Debian LTS Advisory DLA-3265-1 [email protected] https://www.debian.org/lts/security/ Helmut Grohne January 10, 2023 https://wiki.debian.org/LTS Package : exiv2 Version : 0.25-4+deb10u4 CVE ID : CVE-2017-11591 CVE-2017-14859 CVE-2017-14862 CVE-2017-14864 CVE-2017-17669 CVE-2017-18005...

[SECURITY] [DLA 3005-1] lrzip security update

Debian LTS Advisory DLA-3005-1 [email protected] https://www.debian.org/lts/security/ Stefano Rivera May 13, 2022 https://wiki.debian.org/LTS Package : lrzip Version : 0.631-1+deb9u3 CVE ID : CVE-2022-28044 lrzip, a compression program, was found to have a heap memory corruption bug. Fo...

[SECURITY] [DSA 4846-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4846-1 [email protected] https://www.debian.org/security/ Michael Gilbert February 07, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4839-1] sudo security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4839-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 26, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2168-1] libplist security update

Package : libplist Version : 1.11-3+deb8u1 CVE ID : CVE-2017-5209 CVE-2017-5545 CVE-2017-5834 CVE-2017-5835 CVE-2017-6435 CVE-2017-6436 CVE-2017-6439 CVE-2017-7982 Debian Bug : 851196 852385 854000 860945 libplist is a library for reading and writing the Apple binary and XML property lists format...

[SECURITY] [DSA 4448-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4448-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 22, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3986-1] ghostscript security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3986-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 29, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3660-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3660-1 [email protected] https://www.debian.org/security/ Michael Gilbert September 05, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3660-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3660-1 [email protected] https://www.debian.org/security/ Michael Gilbert September 05, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3267-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3267-1 [email protected] http://www.debian.org/security/ Michael Gilbert May 22, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1871-2] New wordpress packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1871-2 [email protected] http://www.debian.org/security/ Steffen Joeris August 27, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 6009-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6009-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 22, 2025 https://www.debian.org/security/faq -...

[SECURITY] [DLA 4008-1] linux-6.1 security update

Debian LTS Advisory DLA-4008-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings January 02, 2025 https://wiki.debian.org/LTS Package : linux-6.1 Version : 6.1.119-1deb11u1 CVE ID : CVE-2022-45888 CVE-2023-31083 CVE-2023-45896 CVE-2023-52760 CVE-2023-52812...

[SECURITY] [DLA 3532-1] openssh security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-3532-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta August 17, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5293-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5293-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 03, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2695-1] klibc security update

Debian LTS Advisory DLA-2695-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings June 28, 2021 https://wiki.debian.org/LTS Package : klibc Version : 2.0.4-9+deb9u1 CVE ID : CVE-2021-31870 CVE-2021-31871 CVE-2021-31872 CVE-2021-31873 Debian Bug : 989505 Several...

[SECURITY] [DLA 2623-1] qemu security update

Debian LTS Advisory DLA-2623-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany April 10, 2021 https://wiki.debian.org/LTS Package : qemu Version : 1:2.8+dfsg-6+deb9u14 CVE ID : CVE-2020-17380 CVE-2021-3392 CVE-2021-3409 CVE-2021-3416 CVE-2021-20203 CVE-2021-20255...

[SECURITY] [DLA 2115-1] proftpd-dfsg security update

Package : proftpd-dfsg Version : 1.3.5e+r1.3.5-2+deb8u6 CVE ID : CVE-2020-9273 It was discovered that there was a a use-after-free vulnerability in in the proftpd-dfsg FTP server. Exploitation of this vulnerability within the memory pool handling could have allowed a remote attacker to execute...

[SECURITY] [DLA 1815-1] poppler security update

Package : poppler Version : 0.26.5-2+deb8u10 CVE ID : CVE-2019-10872 CVE-2019-12293 CVE-2019-12360 Several vulnerabilities have been found in the poppler PDF rendering library, which could result in denial of service or possibly other unspecified impact when processing malformed or maliciously...

[SECURITY] [DLA 1697-1] bind9 security updat

Package : bind9 Version : 1:9.9.5.dfsg-9+deb8u17 CVE ID : CVE-2018-5745 CVE-2019-6465 Two issues have been found in bind9, the Internet Domain Name Server. CVE-2019-6465 Zone transfer for DLZs are executed though not permitted by ACLs. CVE-2018-5745 Avoid assertion and thus causing named to...

[SECURITY] [DLA 1655-1] mariadb-10.0 security update

Package : mariadb-10.0 Version : 10.0.38-0+deb8u1 CVE ID : CVE-2019-2529 CVE-2019-2537 Several issues have been discovered in the MariaDB database server. The vulnerabilities are addressed by upgrading MariaDB to the new upstream version 10.0.38. Please see the MariaDB 10.0 Release Notes for...

[SECURITY] [DSA 3926-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3926-1 [email protected] https://www.debian.org/security/ Michael Gilbert August 04, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 922-1] linux security update

Package : linux Version : 3.2.88-1 CVE ID : CVE-2016-2188 CVE-2016-9604 CVE-2016-10200 CVE-2017-2647 CVE-2017-2671 CVE-2017-5967 CVE-2017-5970 CVE-2017-6951 CVE-2017-7184 CVE-2017-7261 CVE-2017-7273 CVE-2017-7294 CVE-2017-7308 CVE-2017-7472 CVE-2017-7616 CVE-2017-7618 Several vulnerabilities have...

[SECURITY] [DLA 693-1] tiff security update

Package : tiff Version : 4.0.2-6+deb7u7 CVE ID : CVE-2014-8128 CVE-2015-7554 CVE-2015-8668 CVE-2016-3186 CVE-2016-3619 CVE-2016-3620 CVE-2016-3621 CVE-2016-3631 CVE-2016-3632 CVE-2016-3633 CVE-2016-3634 CVE-2016-5102 CVE-2016-5318 CVE-2016-5319 CVE-2016-5652 CVE-2016-6223 CVE-2016-8331 Debian Bug...

[SECURITY] [DSA 3619-1] libgd2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3619-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 15, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3865-1] frr security update

Debian LTS Advisory DLA-3865-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost September 03, 2024 https://wiki.debian.org/LTS Package : frr Version : 7.5.1-1.1+deb11u3 CVE ID : CVE-2022-26125 CVE-2022-26126 CVE-2022-26127 CVE-2022-26128 CVE-2022-26129 CVE-2022-37035...

[SECURITY] [DSA 5668-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5668-1 [email protected] https://www.debian.org/security/ Andres Salomon April 20, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3696-1] asterisk security update

Debian LTS Advisory DLA-3696-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany December 28, 2023 https://wiki.debian.org/LTS Package : asterisk Version : 1:16.28.0dfsg-0+deb10u4 CVE ID : CVE-2023-37457 CVE-2023-38703 CVE-2023-49294 CVE-2023-49786 Debian Bug :...

[SECURITY] [DLA 3305-1] libstb security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3305-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk [email protected] January 31, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5117-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5117-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 10, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2936-1] libgit2 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2936-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta March 07, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2799-1] opencv security update

Debian LTS Advisory DLA-2799-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany October 29, 2021 https://wiki.debian.org/LTS Package : opencv Version : 2.4.9.1+dfsg1-2+deb9u1 CVE ID : CVE-2016-1516 CVE-2017-12597 CVE-2017-12598 CVE-2017-12599 CVE-2017-12601...

[SECURITY] [DSA 4604-1] cacti security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4604-1 [email protected] https://www.debian.org/security/ Hugo Lefeuvre January 19, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2017-1] asterisk security update

Package : asterisk Version : 1:11.13.1dfsg-2+deb8u7 CVE ID : CVE-2019-13161 CVE-2019-18610 CVE-2019-18790 Several vulnerabilites are fixed in Asterisk, an Open Source PBX and telephony toolkit. CVE-2019-13161 An attacker was able to crash Asterisk when handling an SDP answer to an outgoing T.38...

[SECURITY] [DLA 1867-1] wpa security update

Package : wpa Version : 2.3-1+deb8u8 CVE ID : CVE-2019-9495 CVE-2019-9497 CVE-2019-9498 CVE-2019-9499 CVE-2019-11555 Debian Bug : 927463 Several vulnerabilities were discovered in WPA supplicant / hostapd. Some of them could only partially be mitigated, please read below for details. CVE-2019-949...

[SECURITY] [DLA 1664-1] golang security update

Package : golang Version : 2:1.3.3-1+deb8u1 CVE ID : CVE-2019-6486 Debian Bug : 920548 It was discovered that there was a denial of service vulnerability or possibly even the ability to conduct private key recovery attacks within in the elliptic curve cryptography handling in the Go programming...

[SECURITY] [DLA 1654-1] libav security update

Package : libav Version : 6:11.12-1deb8u5 CVE ID : CVE-2014-8542 CVE-2015-1207 CVE-2017-7863 CVE-2017-7865 CVE-2017-14169 CVE-2017-14223 Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. CVE-2014-8542 libavcodec/utils.c omitted a certai...

[SECURITY] [DLA 1643-1] krb5 security update

Package : krb5 Version : 1.12.1+dfsg-19+deb8u5 CVE ID : CVE-2018-5729 CVE-2018-5730 CVE-2018-20217 krb5, a MIT Kerberos implementation, had several flaws in LDAP DN checking, which could be used to circumvent a DN containership check by supplying special parameters to some calls. Further an...

[SECURITY] [DLA 1607-1] samba security update

Package : samba Version : 2:4.2.14+dfsg-0+deb8u11 CVE ID : CVE-2018-14629 CVE-2018-16851 Several vulnerabilities have been discovered in Samba, a SMB/CIFS file, print, and login server for Unix. The Common Vulnerabilities and Exposures project identifies the following issues: CVE-2018-14629 Flori...

[SECURITY] [DLA DLA-1396-1] redis security update

Package : redis Version : 2:2.8.17-1+deb8u6 CVE IDs : CVE-2018-11218, CVE-2018-11219, CVE-2018-12326 Debian Bugs : 901495, 902410 It was discovered that there were a number of vulnerabilities in redis, a persistent key-value database: CVE-2018-11218, CVE-2018-11219: Multiple heap corruption and...

[SECURITY] [DSA 4184-1] sdl-image1.2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4184-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 28, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3791-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3791-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 22, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 2080-1] New ghostscript packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2080-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 01, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 5818-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5818-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 24, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5495-1] frr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5495-1 [email protected] https://www.debian.org/security/ Aron Xu September 11, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2602-1] imagemagick security update

Debian LTS Advisory DLA-2602-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany March 23, 2021 https://wiki.debian.org/LTS Package : imagemagick Version : 8:6.9.7.4+dfsg-11+deb9u12 CVE ID : CVE-2020-25666 CVE-2020-25675 CVE-2020-25676 CVE-2020-27754 CVE-2020-27757...

[SECURITY] [DSA 4843-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4843-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 01, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2337-1] python2.7 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2337-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz August 22, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 1629-1] python-django security update

Package : python-django Version : 1.7.11-1+deb8u4 CVE ID : CVE-2019-3498 Debian Bug : 918230 It was discovered that there was a content-spoofing vulnerability in the default 404 pages in the Django web development framework. For more information, please see:...