[SECURITY] [DLA 956-1] libsndfile security update

Package : libsndfile Version : 1.0.25-9.1+deb7u2 CVE ID : CVE-2017-8361 CVE-2017-8362 CVE-2017-8363 CVE-2017-8365 CVE-2017-8361 The flacbuffercopy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have...

[SECURITY] [DSA 3857-1] mysql-connector-java security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3857-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 18, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 2336-1] ffmpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2336-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez November 07, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DLA 4038-1] dcmtk security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4038-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk January 31, 2025 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5077-1] librecad security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5077-1 [email protected] https://www.debian.org/security/ Aron Xu February 15, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4604-1] cacti security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4604-1 [email protected] https://www.debian.org/security/ Hugo Lefeuvre January 19, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1940-1] linux-4.9 security update

Package : linux-4.9 Version : 4.9.189-3+deb9u1deb8u1 CVE ID : CVE-2019-14821 CVE-2019-14835 CVE-2019-15117 CVE-2019-15118 CVE-2019-15902 Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. CVE-2019-14821...

[SECURITY] [DSA 4485-1] openjdk-8 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4485-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 21, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1151-1] wordpress security update

Package : wordpress Version : 3.6.1+dfsg-1deb7u17 CVE ID : CVE-2016-9263 CVE-2017-14718 CVE-2017-14719 CVE-2017-14720 CVE-2017-14721 CVE-2017-14722 CVE-2017-14723 CVE-2017-14725 CVE-2017-14990 Debian Bug : 876274 877629 Several vulnerabilities were discovered in wordpress, a web blogging tool. Th...

[SECURITY] [DSA 3914-1] imagemagick security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3914-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 18, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3238-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3238-1 [email protected] http://www.debian.org/security/ Michael Gilbert April 26, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 2972-1] libxml2 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2972-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky April 08, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2735-1] ceph security update

Debian LTS Advisory DLA-2735-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany August 09, 2021 https://wiki.debian.org/LTS Package : ceph Version : 10.2.11-2+deb9u1 CVE ID : CVE-2018-14662 CVE-2018-16846 CVE-2020-1760 CVE-2020-10753 CVE-2021-3524 Debian Bug : 9219...

[SECURITY] [DSA 4888-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4888-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 10, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4609-1] python-apt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4609-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 23, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4528-1] bird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4528-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 19, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1908-1] pump security update

Package : pump Version : 0.8.24-7+deb8u1 Debian Bug : 933674 It was discovered that there was an arbitrary code execution vulnerability in the pump BOOTP and DHCP client. When copying the body of the server response, the ethernet packet length could be forged leading to being able to overwrite up...

[SECURITY] [DSA 4501-1] libreoffice security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4501-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 15, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1656-1] agg security update

Package : agg Version : 2.5+dfsg1-9+deb8u1 CVE ID : CVE-2019-6245 Debian Bug : 919322 A stack overflow vulnerability was discovered in AGG, the AntiGrain Geometry graphical toolkit, that may lead to code execution if a malformed file is processed. Since AGG only provides a static library, the...

[SECURITY] [DLA 1655-1] mariadb-10.0 security update

Package : mariadb-10.0 Version : 10.0.38-0+deb8u1 CVE ID : CVE-2019-2529 CVE-2019-2537 Several issues have been discovered in the MariaDB database server. The vulnerabilities are addressed by upgrading MariaDB to the new upstream version 10.0.38. Please see the MariaDB 10.0 Release Notes for...

[SECURITY] [DSA 3464-1] rails security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3464-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 31, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3039-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3039-1 [email protected] http://www.debian.org/security/ Michael Gilbert September 28, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 3099-1] qemu security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3099-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA September 05, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2608-1] jquery security update

Debian LTS Advisory DLA-2608-1 [email protected] https://www.debian.org/lts/security/ Roberto C. Sánchez March 25, 2021 https://wiki.debian.org/LTS Package : jquery Version : 3.1.1-2+deb9u2 CVE ID : CVE-2020-11022 CVE-2020-11023 Two vulnerabilities have been discovered in jquerys handli...

[SECURITY] [DLA 2084-1] graphicsmagick security update

Package : graphicsmagick Version : 1.3.20-3+deb8u8 CVE ID : CVE-2019-19950 CVE-2019-19951 CVE-2019-19953 Three issues have been found in graphicsmagick, a collection of image processing tools. They are basically a heap-based buffer over-read, heap-based buffer overflow and a use-after-free in...

[SECURITY] [DLA 2069-1] cacti security update

Package : cacti Version : 0.8.8b+dfsg-8+deb8u9 CVE ID : CVE-2020-7106 It was discovered that there were a number of cross-site scripting vulnerabilities in cacti, a web interface for monitoring systems. For Debian 8 "Jessie", this issue has been fixed in cacti version 0.8.8b+dfsg-8+deb8u9. We...

[SECURITY] [DLA 2056-1] waitress security update

Package : waitress Version : 0.8.9-2+deb8u1 Debian Bug : 765126 It was discovered that there was a HTTP request smuggling vulnerability in waitress, pure-Python WSGI server. If a proxy server is used in front of waitress, an invalid request may be sent by an attacker that bypasses the front-end a...

[SECURITY] [DSA 4582-1] davical security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4582-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 13, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1962-1] graphite-web security update

Package : graphite-web Version : 0.9.12+debian-6+deb8u1 CVE ID : CVE-2017-18638 The sendemail function in graphite-web/webapp/graphite/composer/views.py in Graphite is vulnerable to SSRF. The vulnerable SSRF endpoint can be used by an attacker to have the Graphite web server request any resource...

[SECURITY] [DSA 4519-1] libreoffice security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4519-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 08, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1860-1] libxslt security update

Package : libxslt Version : 1.1.28-2+deb8u5 CVE ID : CVE-2016-4609 CVE-2016-4610 CVE-2019-13117 CVE-2019-13118 Debian Bug : 932321 932320 Several vulnerabilities were found in libxslt the XSLT 1.0 processing library. CVE-2016-4610 Invalid memory access leading to DoS at exsltDynMapFunction. libxs...

[SECURITY] [DLA 1857-1] nss security update

Package : nss Version : 2:3.26-1+debu8u5 CVE ID : CVE-2019-11719 CVE-2019-11729 Vulnerabilities have been discovered in nss, the Mozilla Network Security Service library. CVE-2019-11719: Out-of-bounds read when importing curve25519 private key When importing a curve25519 private key in PKCS8forma...

[SECURITY] [DLA 1764-1] mercurial security update

Package : mercurial Version : 3.1.2-2+deb8u7 CVE ID : CVE-2019-3902 Debian Bug : 927674 It was discovered that there was a path traversal vulnerability in the "mercurial" distributed revision version control system. Symbolic links and subrepositories could be used defeat Mercurials path-checking...

[SECURITY] [DSA 4173-1] r-cran-readxl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4173-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 16, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 2247-1] rails security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2247-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 31, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2163-2] dajaxice regression fix

------------------------------------------------------------------------- Debian Security Advisory DSA-2163-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst March 1, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DLA 4561-1] linux-6.1 security update

Debian LTS Advisory DLA-4561-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings May 02, 2026 https://wiki.debian.org/LTS Package : linux-6.1 Version : 6.1.170-1deb11u1 CVE ID : CVE-2023-53228 CVE-2023-53510 CVE-2023-53545 CVE-2024-47736 CVE-2024-47809 CVE-2024-49998...

[SECURITY] [DSA 5244-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5244-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 28, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5120-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5120-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 13, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2941-1] linux-4.19 security update

Debian LTS Advisory DLA-2941-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings March 09, 2022 https://wiki.debian.org/LTS Package : linux-4.19 Version : 4.19.232-1deb9u1 CVE ID : CVE-2020-29374 CVE-2020-36322 CVE-2021-3640 CVE-2021-3744 CVE-2021-3752 CVE-2021-3760...

[SECURITY] [DLA 2658-1] redmine security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2658-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort May 13, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2568-1] bind9 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2568-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb February 19, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2185-1] eog security update

Package : eog Version : 3.14.1-1+deb8u1 CVE ID : CVE-2016-6855 It was discovered that eog Eye of GNOME incorrectly handled certain invalid UTF-8 strings. If a user were tricked into opening a specially-crafted image, a remote attacker could use this issue to cause Eye of GNOME to crash, resulting...

[SECURITY] [DSA 4568-1] postgresql-common security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4568-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 14, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1855-1] exiv2 security update

Package : exiv2 Version : 0.24-4.1+deb8u4 CVE ID : CVE-2019-13504 It was discovered that there was an integer overflow vulnerability in exiv2, a tool to manipulate images containing eg. EXIF metadata. This could have resulted in a denial of service via a specially- crafted file. For Debian 8...

[SECURITY] [DLA 1777-2] jquery regression update

Package : jquery Version : 1.7.2+dfsg-3.2+deb8u7 Debian Bug : 928827 The minified jquery library was broken in version 1.7.2+dfsg-3.2+deb8u6 due to an error during the build. This problem has now been fixed in version 1.7.2+dfsg-3.2+deb8u7 For Debian 8 "Jessie", this problem has been fixed in...

[SECURITY] [DSA 4410-1] openjdk-8 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4410-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 20, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1705-1] sox security update

Package : sox Version : 14.4.1-5+deb8u3 CVE ID : CVE-2017-11332 CVE-2017-11358 CVE-2017-11359 CVE-2017-15371 Debian Bug : 878809 870328 Multiple vulnerabilities have been discovered in SoX Sound eXchange, a sound processing program: CVE-2017-11332 The startread function wav.c is affected by a...

[SECURITY] [DLA 1698-1] file security update

Package : file Version : 1:5.22+15-2+deb8u5 CVE ID : CVE-2019-8905 CVE-2019-8907 Potential buffer over-reads in readelf.c have been found in file, a popular file type guesser. For Debian 8 "Jessie", these problems have been fixed in version 1:5.22+15-2+deb8u5. We recommend that you upgrade your...

[SECURITY] [DLA 1617-1] libvncserver security update

Package : libvncserver Version : 0.9.9+dfsg2-6.1+deb8u4 CVE ID : CVE-2018-6307 CVE-2018-15127 CVE-2018-20019 CVE-2018-20020 CVE-2018-20021 CVE-2018-20022 CVE-2018-20023 CVE-2018-20024 Debian Bug : 916941 Kaspersky Lab discovered several vulnerabilities in libvncserver, a C library to implement VN...