[SECURITY] [DLA 2876-1] vim security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2876-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky January 10, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4948-1] aspell security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4948-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 01, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2687-2] prosody regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2687-2 [email protected] https://www.debian.org/lts/security/ Anton Gladky June 19, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2596-1] tomcat8 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2594-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky March 15, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2553-1] xcftools security update

Debian LTS Advisory DLA-2553-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany February 09, 2021 https://wiki.debian.org/LTS Package : xcftools Version : 1.0.7-6+deb9u1 CVE ID : CVE-2019-5086 CVE-2019-5087 Debian Bug : 945317 Claudio Bozzato of Cisco Talos...

[SECURITY] [DSA 4837-1] salt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4837-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 24, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4795-1] krb5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4795-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 21, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2402-1] golang-go.crypto security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2402-1 [email protected] https://www.debian.org/lts/security/ Brian May October 08, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4750-1] nginx security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4750-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 26, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2216-1] ruby-rack security update

Package : ruby-rack Version : 1.5.2-3+deb8u3 CVE ID : CVE-2020-8161 There was a possible directory traversal vulnerability in the Rack::Directory app that is bundled with Rack. If certain directories exist in a director that is managed by Rack::Directory, an attacker could, using this...

[SECURITY] [DSA 4675-1] graphicsmagick security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4675-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 05, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2129-1] firebird2.5 security update

Package : firebird2.5 Version : 2.5.3.26778.ds4-5+deb8u2 CVE ID : CVE-2017-11509 An issues has been found in firebird2.5, an RDBMS based on InterBase 6.0. As UDFs can be used for a remote authenticated code execution as user firebird, UDFs have been disabled in the default configuration which wil...

[SECURITY] [DLA 2048-1] libxml2 security update

Package : libxml2 Version : 2.9.1+dfsg1-5+deb8u8 CVE ID : CVE-2019-19956 It was discovered that there was a potential denial of service vulnerability in libxml2, the GNOME XML parsing library. For Debian 8 "Jessie", this issue has been fixed in libxml2 version 2.9.1+dfsg1-5+deb8u8. We recommend...

[SECURITY] [DLA 2039-1] libvorbis security update

Package : libvorbis Version : 1.3.4-2+deb8u3 CVE ID : CVE-2017-11333 CVE-2017-14633 Two issues have been found in libvorbis, a decoder library for Vorbis General Audio Compression Codec. 2017-14633 In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function...

[SECURITY] [DSA 4376-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4376-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 30, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1623-1] tar security update

Package : tar Version : 1.27.1-2+deb8u2 CVE ID : CVE-2018-20482 Debian Bug : 917377 It was discovered that there was a potential denial of service vulnerability in tar, the GNU version of the tar UNIX archiving utility. The --sparse argument looped endlessly if the file shrank whilst it was being...

[SECURITY] [DLA 1603-1] suricata security update

Package : suricata Version : 2.0.7-2+deb8u3 CVE ID : CVE-2017-7177 CVE-2017-15377 CVE-2018-6794 Debian Bug : 856648 889842 856649 Several issues were found in suricata, an intrusion detection and prevention tool. CVE-2017-7177 Suricata has an IPv4 defragmentation evasion issue caused by lack of a...

[SECURITY] [DSA 3957-1] ffmpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3957-1 [email protected] https://www.debian.org/security/ Luciano Bello August 28, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3945-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3945-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 17, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 849-1] linux security update

Package : linux Version : 3.2.86-1 CVE ID : CVE-2016-9588 CVE-2017-2636 CVE-2017-5669 CVE-2017-5986 CVE-2017-6214 CVE-2017-6345 CVE-2017-6346 CVE-2017-6348 CVE-2017-6353 Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or...

[SECURITY] [DLA 817-1] libphp-phpmailer security update

Package : libphp-phpmailer Version : 5.1-1.3+deb7u1 CVE ID : CVE-2017-5223 Debian Bug : 853232 It was discovered that there was a local file disclosure vulnerability in libphp-phpmailer, a email transfer class for PHP, where insufficient parsing of HTML messages could potentially be used by...

[SECURITY] [DSA 3509-1] rails security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3509-1 [email protected] https://www.debian.org/security/ Luciano Bello March 09, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3488-1] libssh security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3488-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 23, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 2624-1] ffmpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2624-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 16, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DLA 2480-2] salt regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2480-2 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler January 03, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2589-1] mupdf security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2589-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta March 12, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4794-1] mupdf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4794-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 21, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4692-1] netqmail security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4692-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 24, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2187-1] radicale security update

Package : radicale Version : 0.9-1+deb8u2 CVE ID : CVE-2017-8342 Radicale, a simple calendar and addressbook server - daemon, is prone to timing oracles and simple brute-force attacks when using the htpasswd authentication method. For Debian 8 "Jessie", this problem has been fixed in version...

[SECURITY] [DLA 1948-1] ruby-mini-magick security update

Package : ruby-mini-magick Version : 3.8.1-1+deb8u1 CVE ID : CVE-2019-13574 Debian Bug : 931932 In lib/minimagick/image.rb in ruby-mini-magick, a fetched remote image filename could cause remote command execution because Image.open input is directly passed to Kernelopen, which accepts a | charact...

[SECURITY] [DLA 1910-1] firefox-esr security update

Package : firefox-esr Version : 60.9.0esr-1deb8u1 CVE ID : CVE-2019-9812 CVE-2019-11740 CVE-2019-11742 CVE-2019-11743 CVE-2019-11744 CVE-2019-11746 CVE-2019-11752 Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of...

[SECURITY] [DLA 1886-1] openjdk-7 security update

Package : openjdk-7 Version : 7u231-2.6.19-1deb8u1 CVE ID : CVE-2019-2745 CVE-2019-2762 CVE-2019-2769 CVE-2019-2816 Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in denial of service, sandbox bypass, information disclosure or the...

[SECURITY] [DLA 1786-1] qt4-x11 security update

Package : qt4-x11 Version : 4:4.8.6+git64-g5dc8b2b+dfsg-3+deb8u2 CVE ID : CVE-2018-15518 CVE-2018-19869 CVE-2018-19870 CVE-2018-19871 CVE-2018-19873 Debian Bug : 923003 Multiple issues have been addressed in Qt4. CVE-2018-15518 A double-free or corruption during parsing of a specially crafted...

[SECURITY] [DSA 4077-1] gimp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4077-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 30, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1083-1] openexr security update

Package : openexr Version : 1.6.1-6+deb7u1 CVE ID : CVE-2017-9110 CVE-2017-9112 CVE-2017-9116 Debian Bug : 864078 Brandon Perry discovered that openexr, a high dynamic-range HDR image library, was affected by an integer overflow vulnerability and missing boundary checks that would allow a remote...

[SECURITY] [DLA 714-1] wireshark security update

Package : wireshark Version : 1.12.1+g01b65bf-4+deb8u6deb7u5 CVE ID : CVE-2016-9373 CVE-2016-9374 CVE-2016-9375 CVE-2016-9376 The following vulnerabilities have been discovered in the Debian Wheezys Wireshark version: CVE-2016-9373 The DCERPC dissector could crash CVE-2016-9374 The AllJoyn...

[SECURITY] [DSA 3531-1] chromum-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3531-1 [email protected] https://www.debian.org/security/ Michael Gilbert March 25, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 407-1] prosody security update

Package : prosody Version : 0.7.0-1squeeze1+deb6u2 CVE ID : CVE-2016-0756 The flaw allows a malicious server to impersonate the vulnerable domain to any XMPP domain whose domain name includes the attackers domain as a suffix. For example, bber.example would be able to connect to jabber.example an...

[SECURITY] [DSA 3251-1] dnsmasq security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3251-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 05, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3026-1] dbus security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3026-1 [email protected] http://www.debian.org/security/ Florian Weimer September 16, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2834-1] typo3-src security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2834-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 01, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1825-1] New nagios2/nagios3 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA-1825-1 [email protected] http://www.debian.org/security/ Nico Golde July 3rd, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 6068-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6068-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 02, 2025 https://www.debian.org/security/faq -...

[SECURITY] [DLA 4175-1] mongo-c-driver security update

Debian LTS Advisory DLA-4175-1 [email protected] https://www.debian.org/lts/security/ Roberto C. Sánchez May 20, 2025 https://wiki.debian.org/LTS Package : mongo-c-driver Version : 1.17.6-1+deb11u1 CVE ID : CVE-2021-32050 CVE-2023-0437 CVE-2024-6381 CVE-2024-6383 CVE-2025-0755 Multiple...

[SECURITY] [DSA 5520-1] mediawiki security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5520-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 10, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3611-1] inetutils security update

Debian LTS Advisory DLA-3611-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin October 08, 2023 https://wiki.debian.org/LTS Package : inetutils Version : 2:1.9.4-7+deb10u3 CVE ID : CVE-2019-0053 CVE-2023-40303 Debian Bug : 945861 1049365 Security issues were...

[SECURITY] [DLA 3164-1] python-django security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3164-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb October 28, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3093-2] rails regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3093-2 [email protected] https://www.debian.org/lts/security/ Abhijith PA September 15, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5128-1] openjdk-17 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5128-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 03, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2513-1] p11-kit security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2513-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk January 04, 2021 https://wiki.debian.org/LTS -...