[SECURITY] [DSA 1514-1] New moin packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1514-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 9, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DLA 4131-1] zabbix security update

Debian LTS Advisory DLA-4131-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost April 19, 2025 https://wiki.debian.org/LTS Package : zabbix Version : 1:5.0.46+dfsg-1+deb11u1 CVE ID : CVE-2024-36469 CVE-2024-42325 CVE-2024-45699 CVE-2024-45700 Debian Bug : Several...

[SECURITY] [DLA 3711-1] linux-5.10 security update

Debian LTS Advisory DLA-3711-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings January 11, 2024 https://wiki.debian.org/LTS Package : linux-5.10 Version : 5.10.205-2deb10u1 CVE ID : CVE-2021-44879 CVE-2023-5178 CVE-2023-5197 CVE-2023-5717 CVE-2023-6121 CVE-2023-6531...

[SECURITY] [DSA 5377-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5377-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 23, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3309-1] graphite-web security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3309-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb February 06, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3099-1] qemu security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3099-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA September 05, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2610-1] linux-4.19 security update

Debian LTS Advisory DLA-2610-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings March 30, 2021 https://wiki.debian.org/LTS Package : linux-4.19 Version : 4.19.181-1deb9u1 CVE ID : CVE-2020-27170 CVE-2020-27171 CVE-2021-3348 CVE-2021-3428 CVE-2021-26930 CVE-2021-26931...

[SECURITY] [DLA 2534-1] sudo security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2534-1 [email protected] https://www.debian.org/lts/security/ Salvatore Bonaccorso January 26, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2475-1] pdfresurrect security update

Debian LTS Advisory DLA-2475-1 [email protected] https://www.debian.org/lts/security/ Roberto C. Sánchez December 01, 2020 https://wiki.debian.org/LTS Package : pdfresurrect Version : 0.12-6+deb9u1 CVE ID : CVE-2019-14934 CVE-2020-20740 Vulnerabilities have been discovered in...

[SECURITY] [DLA 2208-1] wordpress security update

Package : wordpress Version : 4.1.30+dfsg-0+deb8u1 CVE ID : CVE-2020-11026 CVE-2020-11027 CVE-2020-11028 CVE-2020-11029 Debian Bug : 959391 Multiple CVEs were discovered in the src:wordpress package. CVE-2020-11026 Files with a specially crafted name when uploaded to the Media section can lead to...

[SECURITY] [DSA 4584-1] spamassassin security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4584-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 14, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1911-1] exim4 security update

Package : exim4 Version : 4.84.2-2+deb8u6 CVE ID : CVE-2019-15846 "Zerons" and Qualys discovered that a buffer overflow triggerable in the TLS negotiation code of the Exim mail transport agent could result in the execution of arbitrary code with root privileges. For Debian 8 "Jessie", this proble...

[SECURITY] [DLA 1705-1] sox security update

Package : sox Version : 14.4.1-5+deb8u3 CVE ID : CVE-2017-11332 CVE-2017-11358 CVE-2017-11359 CVE-2017-15371 Debian Bug : 878809 870328 Multiple vulnerabilities have been discovered in SoX Sound eXchange, a sound processing program: CVE-2017-11332 The startread function wav.c is affected by a...

[SECURITY] [DLA 1421-1] ruby2.1 security update

Package : ruby2.1 Version : 2.1.5-2+deb8u4 CVE ID : CVE-2015-9096 CVE-2016-2339 CVE-2016-7798 CVE-2017-0898 CVE-2017-0899 CVE-2017-0900 CVE-2017-0901 CVE-2017-0902 CVE-2017-0903 CVE-2017-10784 CVE-2017-14033 CVE-2017-14064 CVE-2017-17405 CVE-2017-17742 CVE-2017-17790 CVE-2018-6914 CVE-2018-8777...

[SECURITY] [DSA 4173-1] r-cran-readxl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4173-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 16, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3997-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3997-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez October 10, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3927-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3927-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 07, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3804-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3804-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 08, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3565-1] botan1.10 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3565-1 [email protected] https://www.debian.org/security/ Sebastien Delafond May 02, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3426-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3426-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 17, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DLA 165-1] eglibc security update

Package : eglibc Version : 2.11.3-4+deb6u5 CVE ID : CVE-2012-3405 CVE-2012-3406 CVE-2012-3480 CVE-2012-4412 CVE-2012-4424 CVE-2013-0242 CVE-2013-1914 CVE-2013-4237 CVE-2013-4332 CVE-2013-4357 CVE-2013-4458 CVE-2013-4788 CVE-2013-7423 CVE-2013-7424 CVE-2014-4043 CVE-2015-1472 CVE-2015-1473 Debian...

[SECURITY] [DSA 2634-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2634-1 [email protected] http://www.debian.org/security/ Nico Golde February 27, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 5747-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5747-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 12, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5678-1] glibc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5678-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 03, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2661-1] jetty9 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2661-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler May 14, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4696-1] nodejs security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4696-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 06, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2069-1] cacti security update

Package : cacti Version : 0.8.8b+dfsg-8+deb8u9 CVE ID : CVE-2020-7106 It was discovered that there were a number of cross-site scripting vulnerabilities in cacti, a web interface for monitoring systems. For Debian 8 "Jessie", this issue has been fixed in cacti version 0.8.8b+dfsg-8+deb8u9. We...

[SECURITY] [DLA 1800-1] firefox-esr security update

Package : firefox-esr Version : 60.7.0esr-1deb8u1 CVE ID : CVE-2018-18511 CVE-2019-5798 CVE-2019-7317 CVE-2019-9797 CVE-2019-9800 CVE-2019-9816 CVE-2019-9817 CVE-2019-9819 CVE-2019-9820 CVE-2019-11691 CVE-2019-11692 CVE-2019-11693 CVE-2019-11698 Multiple security issues have been found in the...

[SECURITY] [DLA 1750-1] roundup security update

Package : roundup Version : 1.4.20-1.1+deb8u2 CVE ID : CVE-2019-10904 Hanno Böck was discovered that there was a cross-site scripting XSS vulnerability in the web front-end of the roundup issue- tracking system. For Debian 8 "Jessie", this issue has been fixed in roundup version 1.4.20-1.1+deb8u2...

[SECURITY] [DSA 3830-1] icu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3830-1 [email protected] https://www.debian.org/security/ Sebastien Delafond April 19, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 818-1] php5 security update

Package : php5 Version : 5.4.45-0+deb7u7 CVE ID : CVE-2016-2554 CVE-2016-3141 CVE-2016-3142 CVE-2016-4342 CVE-2016-9934 CVE-2016-9935 CVE-2016-10158 CVE-2016-10159 CVE-2016-10160 CVE-2016-10161 PHP-Bugs : 71323 70979 71039 71459 71391 71335 Several issues have been discovered in PHP recursive...

[SECURITY] [DSA 3397-1] wpa security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3397-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 10, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3329-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3329-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 07, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3187-1] icu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3187-1 [email protected] http://www.debian.org/security/ Michael Gilbert March 15, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2883-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2883-1 [email protected] http://www.debian.org/security/ Michael Gilbert March 23, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2710-1] xml-security-c security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2710-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso June 18, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DLA 3705-1] php-guzzlehttp-psr7 security update

Debian LTS Advisory DLA-3705-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin December 31, 2023 https://wiki.debian.org/LTS Package : php-guzzlehttp-psr7 Version : 1.4.2-0.1+deb10u2 CVE ID : CVE-2023-29197 Debian Bug : 1034581 It was discovered that...

[SECURITY] [DLA 3341-1] curl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3341-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk February 24, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5317-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5317-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 13, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2725-1] lrzip security update

Debian LTS Advisory DLA-2725-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany August 01, 2021 https://wiki.debian.org/LTS Package : lrzip Version : 0.631-1+deb9u1 CVE ID : CVE-2017-8844 CVE-2017-8846 CVE-2017-9928 CVE-2017-9929 CVE-2018-5650 CVE-2018-5747...

[SECURITY] [DLA 2620-1] python-bleach security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2620-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb April 06, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4818-1] sympa security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4818-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 23, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4784-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4784-1 [email protected] https://www.debian.org/security/ Sebastien Delafond November 06, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2234-1] netqmail security update

Package : netqmail Version : 1.06-6.2deb8u1 CVE ID : CVE-2005-1513 CVE-2005-1514 CVE-2005-1515 CVE-2020-3811 CVE-2020-3812 Debian Bug : 961060 There were several CVE bugs reported against src:netqmail. CVE-2005-1513 Integer overflow in the strallocreadyplus function in qmail, when running on 64 b...

[SECURITY] [DLA 2141-1] yubikey-val security update

Package : yubikey-val Version : 2.27-1+deb8u1 CVE ID : CVE-2020-10184 CVE-2020-10185 The following CVEs were reported against yubikey-val. CVE-2020-10184 The verify endpoint in YubiKey Validation Server before 2.40 does not check the length of SQL queries, which allows remote attackers to cause a...

[SECURITY] [DLA 1895-1] libmspack security update

Package : libmspack Version : 0.5-1+deb8u4 CVE ID : CVE-2019-1010305 JsHuang found an issue in libmspack, a library for Microsoft compression format. Opening a crafted chm file might result in a buffer overflow which might disclose confidential information. For Debian 8 "Jessie", this problem has...

[SECURITY] [DSA 4386-1] curl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4386-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini February 06, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1647-1] apache2 security update

Package : apache2 Version : 2.4.10-10+deb8u13 CVE ID : CVE-2018-17199 Diego Angulo from ImExHS discovered an issue in the webserver apache2. The module modsession ignored the expiry time of sessions handled by modsessioncookie, because the expiry time is available only after decoding the session...

[SECURITY] [DSA 4296-1] mbedtls security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4296-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 16, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 987-1] request-tracker4 security update

Package : request-tracker4 Version : 4.0.7-5+deb7u5 CVE ID : CVE-2016-6127 CVE-2017-5361 CVE-2017-5943 CVE-2017-5944 Multiple vulnerabilities have been discovered in Request Tracker, an extensible trouble-ticket tracking system. The Common Vulnerabilities and Exposures project identifies the...