[SECURITY] [DSA 3039-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3039-1 [email protected] http://www.debian.org/security/ Michael Gilbert September 28, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2303-2] New linux-2.6 packages fix regression

---------------------------------------------------------------------- Debian Security Advisory DSA-2303-2 [email protected] http://www.debian.org/security/ Dann Frazier September 10, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DLA 2940-1] linux security update

Debian LTS Advisory DLA-2940-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings March 09, 2022 https://wiki.debian.org/LTS Package : linux Version : 4.9.303-1 CVE ID : CVE-2021-3640 CVE-2021-3752 CVE-2021-4002 CVE-2021-4083 CVE-2021-4155 CVE-2021-4202 CVE-2021-28711...

[SECURITY] [DLA 2645-1] edk2 security update

Debian LTS Advisory DLA-2645-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany April 29, 2021 https://wiki.debian.org/LTS Package : edk2 Version : 020161202.7bbe0b3e-1+deb9u2 CVE ID : CVE-2019-0161 CVE-2019-14558 CVE-2019-14559 CVE-2019-14562 CVE-2019-14563...

[SECURITY] [DLA 2618-1] smarty3 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2618-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA April 05, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2227-1] bind9 security update

Package : bind9 Version : 1:9.9.5.dfsg-9+deb8u19 CVE ID : CVE-2020-8616 CVE-2020-8617 Several vulnerabilities were discovered in BIND, a DNS server implementation. CVE-2020-8616 It was discovered that BIND does not sufficiently limit the number of fetches performed when processing referrals. An...

[SECURITY] [DSA 4636-1] python-bleach security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4636-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 28, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1975-1] spip security update

Package : spip Version : 3.0.17-2+deb8u5 CVE ID : CVE-2019-16391 CVE-2019-16392 CVE-2019-16393 CVE-2019-16394 It was discovered that SPIP, a website engine for publishing, would allow unauthenticated users to modify published content and write to the database, perform cross-site request forgeries...

[SECURITY] [DSA 4541-1] libapreq2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4541-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 04, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4415-1] passenger security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4415-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 24, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4383-1] libvncserver security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4383-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 03, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA-1459-1] cgit security update

Package : cgit Version : 0.10.2.git2.0.1-3+deb8u2 CVE ID : CVE-2018-14912 Debian Bug : 905382 It was discovered that there was a directory traversal vulnerability in cgit, a web frontend for Git repositories. For Debian 8 "Jessie", this issue has been fixed in cgit version 0.10.2.git2.0.1-3+deb8u...

[SECURITY] [DSA 3731-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3731-1 [email protected] https://www.debian.org/security/ Michael Gilbert December 11, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 595-1] wireshark security update

Package : wireshark Version : 1.12.1+g01b65bf-4+deb8u6deb7u3 CVE ID : CVE-2016-6504 CVE-2016-6505 CVE-2016-6506 CVE-2016-6507 CVE-2016-6508 CVE-2016-6509 CVE-2016-6510 CVE-2016-6511 Multiple vulnerabilities were discovered in the dissectors for NDS, PacketBB, WSP, MMSE, RLC, LDSS, RLC and OpenFlo...

[SECURITY] [DLA 2928-1] htmldoc security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2928-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz February 26, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2456-1] python3.5 security update

Debian LTS Advisory DLA-2456-1 [email protected] https://www.debian.org/lts/security/ Roberto C. Sánchez November 18, 2020 https://wiki.debian.org/LTS Package : python3.5 Version : 3.5.3-1+deb9u3 CVE ID : CVE-2019-20907 CVE-2020-26116 Debian Bug : Multiple security issues were discovere...

[SECURITY] [DLA 1924-1] python3.4 security update

Package : python3.4 Version : 3.4.2-1+deb8u7 CVE ID : CVE-2019-16056 A vulnerability was discovered in Python, an interactive high-level object-oriented language. CVE-2019-16056 The email module wrongly parses email addresses that contain multiple @ characters. An application that uses the email...

[SECURITY] [DLA 1679-1] php5 security update

Package : php5 Version : 5.6.40+dfsg-0+deb8u1 Several security bugs have been identified and fixed in php5, a server-side, HTML-embedded scripting language. The affected components include GD graphics, multi-byte string handling, phar file format handling, and xmlrpc. CVEs have not yet been...

[SECURITY] [DLA 1631-1] libcaca security update

Package : libcaca Version : 0.99.beta19-2+deb8u1 CVE ID : CVE-2018-20544 CVE-2018-20546 CVE-2018-20547 CVE-2018-20549 Debian Bug : 917807 Several vulnerabilities were discovered in libcaca, a graphics library that outputs text: integer overflows, floating point exceptions or invalid memory reads...

[SECURITY] [DSA 4177-1] libsdl2-image security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4177-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 20, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3887-1] glibc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3887-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 19, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3643-1] kde4libs security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3643-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 06, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3505-1] wireshark security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3505-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 04, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3471-1] qemu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3471-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 08, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3267-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3267-1 [email protected] http://www.debian.org/security/ Michael Gilbert May 22, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3039-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3039-1 [email protected] http://www.debian.org/security/ Michael Gilbert September 28, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 4199-1] tcpdf security update

Debian LTS Advisory DLA-4199-1 [email protected] https://www.debian.org/lts/security/ Santiago Ruano Rincón May 31, 2025 https://wiki.debian.org/LTS Package : tcpdf Version : 6.3.5+dfsg1-1+deb11u1 CVE ID : CVE-2024-22640 CVE-2024-22641 CVE-2024-32489 CVE-2024-51058 CVE-2024-56519...

[SECURITY] [DLA 2557-1] linux-4.19 security update

Debian LTS Advisory DLA-2557-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings February 12, 2021 https://wiki.debian.org/LTS Package : linux-4.19 Version : 4.19.171-2deb9u1 CVE ID : CVE-2020-27815 CVE-2020-27825 CVE-2020-27830 CVE-2020-28374 CVE-2020-29568...

[SECURITY] [DSA 4766-1] rails security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4766-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 24, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4633-1] curl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4633-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini February 22, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2053-1] otrs2 security update

Package : otrs2 Version : 3.3.18-1+deb8u12 CVE ID : CVE-2019-18179 Debian Bug : 945251 An attacker who is logged into OTRS as an agent is able to list tickets assigned to other agents, which are in the queue where attacker doesn’t have permissions. For Debian 8 "Jessie", this problem has been fix...

[SECURITY] [DSA 4485-1] openjdk-8 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4485-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 21, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1546-1] moin security update

Package : moin Version : 1.9.8-1+deb8u2 CVE ID : CVE-2017-5934 Debian Bug : 910776 Nitin Venkatesh discovered a cross-site scripting vulnerability in moin, a Python clone of WikiWiki. A remote attacker can conduct cross-site scripting attacks via the GUI editors link dialogue. This only affects...

[SECURITY] [DSA 3986-1] ghostscript security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3986-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 29, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 134-1] curl security update

Package : curl Version : 7.21.0-2.1+squeeze11 CVE ID : CVE-2014-8150 Andrey Labunets of Facebook discovered that cURL, an URL transfer library, fails to properly handle URLs with embedded end-of-line characters. An attacker able to make an application using libcurl to access a specially crafted U...

[SECURITY] [DSA 1358-1] New asterisk packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1358-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 26th, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 5860-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5860-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 07, 2025 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2648-1] mediawiki security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2648-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA May 05, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4643-1] python-bleach security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4643-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 20, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2143-1] slurm-llnl security update

Package : slurm-llnl Version : 14.03.9-5+deb8u5 CVE ID : CVE-2019-6438 CVE-2019-12838 Debian Bug : 920997 931880 Several issue were found in Simple Linux Utility for Resource Management SLURM, a cluster resource management and job scheduling system. CVE-2019-6438 SchedMD Slurm mishandles 32-bit...

[SECURITY] [DSA 4592-1] mediawiki security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4592-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 26, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4578-1] libvpx security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4578-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 28, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1993-1] mesa security update

Package : mesa Version : 10.3.2-1+deb8u2 CVE ID : CVE-2019-5068 Debian Bug : 944298 Tim Brown discovered a shared memory permissions vulnerability in the Mesa 3D graphics library. Some Mesa X11 drivers use shared-memory XImages to implement back buffers for improved performance, but Mesa creates...

[SECURITY] [DLA 1833-1] bzip2 security update

Package : bzip2 Version : 1.0.6-7+deb8u1 CVE ID : CVE-2016-3189 CVE-2019-12900 Two issues in bzip2, a high-quality block-sorting file compressor, have been fixed. One, CVE-2019-12900, is a out-of-bounds write when using a crafted compressed file. The other, CVE-2016-3189, is a potential...

[SECURITY] [DLA 1829-1] firefox-esr security update

Package : firefox-esr Version : 60.7.1esr-1deb8u1 CVE ID : CVE-2019-11707 Samuel Gross discovered a type confusion bug in the JavaScript engine of the Mozilla Firefox web browser, which could result in the execution of arbitrary code when browsing a malicious website. For Debian 8 "Jessie", this...

[SECURITY] [DLA 1667-1] dovecot security update

Package : dovecot Version : 1:2.2.13-12deb8u5 CVE ID : CVE-2019-3814 It was discovered that there was a vulnerability in the dovecot IMAP/POP3 server. A flaw in the TLS username handling could lead to an attacker logging in as anyone else in the system if both authsslrequireclient,usernamefromcer...

[SECURITY] [DSA 4013-1] openjpeg2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4013-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 31, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3914-1] imagemagick security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3914-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 18, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3590-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3590-1 [email protected] https://www.debian.org/security/ Michael Gilbert June 01, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 2332-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2332-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst October 29, 2011 http://www.debian.org/security/faq -...