[SECURITY] [DLA 1827-1] gvfs security update

Package : gvfs Version : 1.22.2-1+deb8u1 CVE ID : CVE-2019-12795 Debian Bug : 930376 Simon McVittie discovered a flaw in gvfs, the Gnome Virtual File System. The gvfsd daemon opened a private D-Bus server socket without configuring an authorization rule. A local attacker could connect to this...

[SECURITY] [DLA 1762-1] systemd security update

Package : systemd Version : 215-17+deb8u12 CVE ID : CVE-2017-18078 CVE-2019-3842 Two vulnerabilities have been addressed in the systemd components systemd-tmpfiles and pamsystemd.so. CVE-2017-18078 systemd-tmpfiles in systemd attempted to support ownership/permission changes on hardlinked files...

[SECURITY] [DLA 1186-1] xorg-server security update

Package : xorg-server Version : 2:1.12.4-6+deb7u8 CVE ID : CVE-2017-2624 CVE-2017-12176 CVE-2017-12177 CVE-2017-12178 CVE-2017-12180 CVE-2017-12182 CVE-2017-12183 CVE-2017-12184 CVE-2017-12185 CVE-2017-12187 CVE-2017-13723 Several vulnerabilities have been discovered in the X.Org X server. An...

[SECURITY] [DSA 3981-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3981-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 20, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1095-1] freerdp security update

Package : freerdp Version : 1.0.1-1.1+deb7u4 CVE ID : CVE-2017-2835 CVE-2017-2836 CVE-2017-2837 CVE-2017-2838 CVE-2017-2839 Debian Bug : 869880 Tyler Bohan of Talos discovered that FreeRDP, a free implementation of the Remote Desktop Protocol RDP, contained several vulnerabilities that allowed a...

[SECURITY] [DLA 849-1] linux security update

Package : linux Version : 3.2.86-1 CVE ID : CVE-2016-9588 CVE-2017-2636 CVE-2017-5669 CVE-2017-5986 CVE-2017-6214 CVE-2017-6345 CVE-2017-6346 CVE-2017-6348 CVE-2017-6353 Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or...

[SECURITY] [DLA 817-1] libphp-phpmailer security update

Package : libphp-phpmailer Version : 5.1-1.3+deb7u1 CVE ID : CVE-2017-5223 Debian Bug : 853232 It was discovered that there was a local file disclosure vulnerability in libphp-phpmailer, a email transfer class for PHP, where insufficient parsing of HTML messages could potentially be used by...

[SECURITY] [DSA 3777-1] libgd2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3777-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 31, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 407-1] prosody security update

Package : prosody Version : 0.7.0-1squeeze1+deb6u2 CVE ID : CVE-2016-0756 The flaw allows a malicious server to impersonate the vulnerable domain to any XMPP domain whose domain name includes the attackers domain as a suffix. For example, bber.example would be able to connect to jabber.example an...

[SECURITY] [DSA 3397-1] wpa security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3397-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 10, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3026-1] dbus security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3026-1 [email protected] http://www.debian.org/security/ Florian Weimer September 16, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2754-1] exactimage security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2754-1 [email protected] http://www.debian.org/security/ Raphael Geissert September 10, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1819-1] New vlc packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1819-1 [email protected] http://www.debian.org/security/ Steffen Joeris June 18, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1207-1] New phpmyadmin packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1207-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 9th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DLA 4462-1] pillow security update

Debian LTS Advisory DLA-4462-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert February 01, 2026 https://wiki.debian.org/LTS Package : pillow Version : 8.1.2+dfsg-0.3+deb11u3 CVE ID : CVE-2021-23437 CVE-2022-24303 CVE-2022-45198 Multiple vulnerabilities have been...

[SECURITY] [DLA 4271-1] linux-6.1 security update

Debian LTS Advisory DLA-4271-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings August 13, 2025 https://wiki.debian.org/LTS Package : linux-6.1 Version : 6.1.140-1deb11u1 CVE ID : CVE-2024-26618 CVE-2024-26783 CVE-2024-26807 CVE-2024-28956 CVE-2024-35790 CVE-2024-369...

[SECURITY] [DLA 4175-1] mongo-c-driver security update

Debian LTS Advisory DLA-4175-1 [email protected] https://www.debian.org/lts/security/ Roberto C. Sánchez May 20, 2025 https://wiki.debian.org/LTS Package : mongo-c-driver Version : 1.17.6-1+deb11u1 CVE ID : CVE-2021-32050 CVE-2023-0437 CVE-2024-6381 CVE-2024-6383 CVE-2025-0755 Multiple...

[SECURITY] [DLA 3658-1] wordpress security update

Debian LTS Advisory DLA-3658-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany November 20, 2023 https://wiki.debian.org/LTS Package : wordpress Version : 5.0.20+dfsg1-0+deb10u1 CVE ID : CVE-2023-5561 CVE-2023-39999 Several security vulnerabilities have been...

[SECURITY] [DLA 2876-1] vim security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2876-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky January 10, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4994-1] bind9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4994-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 28, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2713-1] linux security update

Debian LTS Advisory DLA-2713-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings July 20, 2021 https://wiki.debian.org/LTS Package : linux Version : 4.9.272-2 CVE ID : CVE-2021-3609 CVE-2021-21781 CVE-2021-33909 CVE-2021-34693 Debian Bug : 990072 Brief introduction...

[SECURITY] [DLA 2687-2] prosody regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2687-2 [email protected] https://www.debian.org/lts/security/ Anton Gladky June 19, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4919-1] lz4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4919-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 21, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2647-1] bind9 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2647-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort May 04, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2589-1] mupdf security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2589-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta March 12, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4800-1] libproxy security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4800-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 28, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2223-1] salt security update

Package : salt Version : 2014.1.13+ds-3+deb8u1 CVE ID : CVE-2020-11651 CVE-2020-11652 Debian Bug : 959684 Several vulnerabilities were discovered in package salt, a configuration management and infrastructure automation software. CVE-2020-11651 The salt-master process ClearFuncs class does not...

[SECURITY] [DLA 2216-1] ruby-rack security update

Package : ruby-rack Version : 1.5.2-3+deb8u3 CVE ID : CVE-2020-8161 There was a possible directory traversal vulnerability in the Rack::Directory app that is bundled with Rack. If certain directories exist in a director that is managed by Rack::Directory, an attacker could, using this...

[SECURITY] [DSA 4681-1] webkit2gtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4681-1 [email protected] https://www.debian.org/security/ Alberto Garcia May 07, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2135-1] jackson-databind security update

Package : jackson-databind Version : 2.4.2-2+deb8u12 CVE ID : CVE-2020-9546 CVE-2020-9547 CVE-2020-9548 The following CVEs were reported for jackson-databind source package. CVE-2020-9546 FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and...

[SECURITY] [DLA 2074-1] python-apt security update

Package : python-apt Version : 0.9.3.13 CVE ID : CVE-2019-15795 CVE-2019-15796 Debian Bug : 944696 Several issues have been found in python-apt, a python interface to libapt-pkg. CVE-2019-15795 It was discovered that python-apt would still use MD5 hashes to validate certain downloaded packages. I...

[SECURITY] [DLA 2039-1] libvorbis security update

Package : libvorbis Version : 1.3.4-2+deb8u3 CVE ID : CVE-2017-11333 CVE-2017-14633 Two issues have been found in libvorbis, a decoder library for Vorbis General Audio Compression Codec. 2017-14633 In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function...

[SECURITY] [DLA 1849-1] zeromq3 security update

Package : zeromq3 Version : 4.0.5+dfsg-2+deb8u2 CVE ID : CVE-2019-13132 Fang-Pen Lin discovered a stack-based buffer-overflow flaw in ZeroMQ, a lightweight messaging kernel library. A remote, unauthenticated client connecting to an application using the libzmq library, running with a socket...

[SECURITY] [DLA 1751-1] suricata security update

Package : suricata Version : 2.0.7-2+deb8u4 CVE ID : CVE-2018-10242 CVE-2018-10243 Multiple vulnerabilities have been found in suricata, the network threat detection engine: CVE-2018-10242 Missing length check causing out-of-bounds read in SSHParseBanner app-layer-ssh.c. Remote attackers might...

[SECURITY] [DSA 4391-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4391-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 14, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4372-1] ghostscript security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4372-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 26, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3957-1] ffmpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3957-1 [email protected] https://www.debian.org/security/ Luciano Bello August 28, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 6287-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6287-1 [email protected] https://www.debian.org/security/ Andres Salomon May 21, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DSA 6238-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6238-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 30, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DSA 6068-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6068-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 02, 2025 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3899-1] python-asyncssh security update

Debian LTS Advisory DLA-3899-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert September 27, 2024 https://wiki.debian.org/LTS Package : python-asyncssh Version : 2.5.0-0.1+deb11u1 CVE ID : CVE-2023-46445 CVE-2023-46446 CVE-2023-48795 Debian Bug : 1055999 1056000...

[SECURITY] [DLA 3588-1] vim security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3588-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès September 29, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3317-1] snort security update

Debian LTS Advisory DLA-3317-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany February 11, 2023 https://wiki.debian.org/LTS Package : snort Version : 2.9.20-0+deb10u1 CVE ID : CVE-2020-3299 CVE-2020-3315 CVE-2021-1223 CVE-2021-1224 CVE-2021-1236 CVE-2021-1494...

[SECURITY] [DSA 5085-2] expat regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-5085-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 13, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2776-1] apache2 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2776-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler October 02, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4948-1] aspell security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4948-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 01, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2713-2] linux security update

Debian LTS Advisory DLA-2713-2 [email protected] https://www.debian.org/lts/security/ Ben Hutchings July 20, 2021 https://wiki.debian.org/LTS Package : linux Version : 4.9.272-2 CVE ID : CVE-2021-3609 CVE-2021-21781 CVE-2021-33909 CVE-2021-34693 Debian Bug : 990072 Several vulnerabiliti...

[SECURITY] [DSA 4837-1] salt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4837-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 24, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2402-1] golang-go.crypto security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2402-1 [email protected] https://www.debian.org/lts/security/ Brian May October 08, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2206-1] thunderbird security update

Package : thunderbird Version : 1:68.8.0-1deb8u1 CVE ID : CVE-2020-6831 CVE-2020-12387 CVE-2020-12392 CVE-2020-12395 CVE-2020-12397 Multiple security issues have been found in Thunderbird which could result in spoofing the displayed sender email address, denial of service or potentially the...