[SECURITY] [DSA 4800-1] libproxy security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4800-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 28, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2157-1] weechat security update

Package : weechat Version : 1.0.1-1+deb8u3 CVE ID : CVE-2020-8955 CVE-2020-9759 CVE-2020-9760 Several issues have been found in weechat, a fast, light and extensible chat client. All issues are about crafted messages, that could result in a buffer overflow and application crash. This could cause ...

[SECURITY] [DLA 2130-1] libapache2-mod-auth-openidc security

Package : libapache2-mod-auth-openidc Version : 1.6.0-1+deb8u3 CVE ID : CVE-2019-20479 An issue has been found in libapache2-mod-auth-openidc, an OpenID Connect authentication module for Apache. Due to insufficient validatation of URLs an Open Redirect vulnerability for URLs beginning with a slas...

[SECURITY] [DLA 2074-1] python-apt security update

Package : python-apt Version : 0.9.3.13 CVE ID : CVE-2019-15795 CVE-2019-15796 Debian Bug : 944696 Several issues have been found in python-apt, a python interface to libapt-pkg. CVE-2019-15795 It was discovered that python-apt would still use MD5 hashes to validate certain downloaded packages. I...

[SECURITY] [DLA 2005-1] tnef security update

Package : tnef Version : 1.4.9-1+deb8u4 CVE ID : CVE-2019-18849 Debian Bug : 944851 In tnef, an attacker may be able to write to the victims .ssh/authorizedkeys file via an e-mail message with a crafted winmail.dat application/ms-tnef attachment, because of a heap-based buffer over-read involving...

[SECURITY] [DLA 1787-1] linux-4.9 security update

Package : linux-4.9 Version : 4.9.168-1+deb9u2deb8u1 CVE ID : CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091 Debian Bug : 928125 Multiple researchers have discovered vulnerabilities in the way the Intel processor designs have implemented speculative forwarding of data filled into...

[SECURITY] [DLA 1779-1] 389-ds-base security update

Package : 389-ds-base Version : 1.3.3.5-4+deb8u6 CVE ID : CVE-2019-3883 Debian Bug : 927939 In 389-ds-base up to version 1.4.1.2, requests were handled by worker threads. Each socket had been waited for by the worker for at most ioblocktimeout seconds. However, this timeout applied only to...

[SECURITY] [DLA 1751-1] suricata security update

Package : suricata Version : 2.0.7-2+deb8u4 CVE ID : CVE-2018-10242 CVE-2018-10243 Multiple vulnerabilities have been found in suricata, the network threat detection engine: CVE-2018-10242 Missing length check causing out-of-bounds read in SSHParseBanner app-layer-ssh.c. Remote attackers might...

[SECURITY] [DLA 1216-1] wordpress security update

Package : wordpress Version : 3.6.1+dfsg-1deb7u20 CVE ID : CVE-2017-17091 CVE-2017-17092 CVE-2017-17093 CVE-2017-17094 Debian Bug : 883314 Several vulnerabilities were discovered in wordpress, a web blogging tool. The Common Vulnerabilities and Exposures project identifies the following issues...

[SECURITY] [DSA 3957-1] ffmpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3957-1 [email protected] https://www.debian.org/security/ Luciano Bello August 28, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 623-1] tomcat7 security update

Package : tomcat7 Version : 7.0.28-4+deb7u6 CVE ID : CVE-2016-1240 Dawid Golunski from legalhackers.com discovered that Debians version of Tomcat 7 was vulnerable to a local privilege escalation. Local attackers who have gained access to the server in the context of the tomcat7 user through a...

[SECURITY] [DSA-1997-1] New mysql-dfsg-5.0 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1997-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano February 14, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DLA 4271-1] linux-6.1 security update

Debian LTS Advisory DLA-4271-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings August 13, 2025 https://wiki.debian.org/LTS Package : linux-6.1 Version : 6.1.140-1deb11u1 CVE ID : CVE-2024-26618 CVE-2024-26783 CVE-2024-26807 CVE-2024-28956 CVE-2024-35790 CVE-2024-369...

[SECURITY] [DLA 3658-1] wordpress security update

Debian LTS Advisory DLA-3658-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany November 20, 2023 https://wiki.debian.org/LTS Package : wordpress Version : 5.0.20+dfsg1-0+deb10u1 CVE ID : CVE-2023-5561 CVE-2023-39999 Several security vulnerabilities have been...

[SECURITY] [DSA 5387-1] openvswitch security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5387-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 13, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5033-1] fort-validator security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5033-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 30, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5032-1] djvulibre security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5032-1 [email protected] https://www.debian.org/security/ Florian Weimer December 28, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2743-1] amd64-microcode security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2743-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta August 16, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2612-1] leptonlib security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2612-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz March 31, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2481-1] openldap security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2481-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta December 04, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2223-1] salt security update

Package : salt Version : 2014.1.13+ds-3+deb8u1 CVE ID : CVE-2020-11651 CVE-2020-11652 Debian Bug : 959684 Several vulnerabilities were discovered in package salt, a configuration management and infrastructure automation software. CVE-2020-11651 The salt-master process ClearFuncs class does not...

[SECURITY] [DLA 2215-1] clamav security update

Package : clamav Version : 0.101.5+dfsg-0+deb8u2 CVE ID : CVE-2020-3327 CVE-2020-3341 The following CVEs were found in src:clamav package. CVE-2020-3327 A vulnerability in the ARJ archive parsing module in Clam AntiVirus ClamAV could allow an unauthenticated, remote attacker to cause a denial of...

[SECURITY] [DLA 2206-1] thunderbird security update

Package : thunderbird Version : 1:68.8.0-1deb8u1 CVE ID : CVE-2020-6831 CVE-2020-12387 CVE-2020-12392 CVE-2020-12395 CVE-2020-12397 Multiple security issues have been found in Thunderbird which could result in spoofing the displayed sender email address, denial of service or potentially the...

[SECURITY] [DLA 2080-1] iperf3 security update

Package : iperf3 Version : 3.0.7-1+deb8u1 CVE ID : CVE-2016-4303 Debian Bug : 827116 An issue has been found in iperf3, an Internet Protocol bandwidth measuring tool. Bad handling of UTF8/16 strings in an embedded library could cause a denial of service crash or execution of arbitrary code by...

[SECURITY] [DLA 1918-1] libonig security update

Package : libonig Version : 5.9.5-3.2+deb8u3 CVE ID : CVE-2019-16163 Debian Bug : 939988 The Oniguruma regular expressions library, notably used in PHP mbstring, is vulnerable to stack exhaustion. A crafted regular expression can crash the process. For Debian 8 "Jessie", this problem has been fix...

[SECURITY] [DSA 4495-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4495-1 [email protected] https://www.debian.org/security/ Ben Hutchings August 10, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1794-1] libspring-security-2.0-java security update

Package : libspring-security-2.0-java Version : 2.0.7.RELEASE-3+deb8u1 CVE ID : CVE-2019-3795 A vulnerability was discovered in libspring-security-2.0-java, a modular Java/J2EE application security framework, when using SecureRandomFactoryBeansetSeed to configure a SecureRandom instance, resultin...

[SECURITY] [DLA 1735-1] ruby2.1 security update

Package : ruby2.1 Version : 2.1.5-2+deb8u7 CVE ID : CVE-2019-8320 CVE-2019-8322 CVE-2019-8323 CVE-2019-8324 CVE-2019-8325 Several vulnerabilities have been discovered in rubygems embedded in ruby2.1, the interpreted scripting language. CVE-2019-8320 A Directory Traversal issue was discovered in...

[SECURITY] [DLA 1724-1] ntfs-3g security update

Package : ntfs-3g Version : 1:2014.2.15AR.2-1+deb8u4 CVE ID : CVE-2019-9755 A heap-based buffer overflow was discovered in NTFS-3G, a read-write NTFS driver for FUSE. A local user can take advantage of this flaw for local root privilege escalation. For Debian 8 "Jessie", this problem has been fix...

[SECURITY] [DSA 4249-1] ffmpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4249-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 17, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4242-1] ruby-sprockets security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4242-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 09, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1341-1] sdl-image1.2 security update

Package : sdl-image1.2 Version : 1.2.12-2+deb7u2 CVE ID : CVE-2017-12122 CVE-2017-14440 CVE-2017-14441 CVE-2017-14442 CVE-2017-14448 CVE-2017-14450 Lilith of Cisco Talos discovered several buffer overflow vulnerabilities in the SDL Image library which can be leveraged by attackers to execute...

[SECURITY] [DSA 4090-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4090-1 [email protected] https://www.debian.org/security/ Sebastien Delafond January 17, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 945-1] mysql-connector-java security update

Package : mysql-connector-java Version : 5.1.42-1deb7u1 CVE ID : CVE-2017-3523 CVE-2017-3586 CVE-2017-3589 Several issues were discovered in mysql-connector-java that allow attackers to execute arbitrary code, insert or delete access to some of MySQL Connectors accessible data as well as...

[SECURITY] [DSA 3667-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3667-1 [email protected] https://www.debian.org/security/ Michael Gilbert September 15, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 2301-2] rails regression

------------------------------------------------------------------------- Debian Security Advisory DSA-2392-1 [email protected] http://www.debian.org/security/ January 23, 2012 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package...

[SECURITY] [DSA 1917-1] New mimetex packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1917-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano October 24, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 5490-1] aom security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5490-1 [email protected] https://www.debian.org/security/ Markus Koschany September 06, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5410-1] sofia-sip

------------------------------------------------------------------------- Debian Security Advisory DSA-5410-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 24, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5243-1] lighttpd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5243-1 [email protected] https://www.debian.org/security/ Helmut Grohne September 28, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3120-1] poppler security update

Debian LTS Advisory DLA-3120-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany September 26, 2022 https://wiki.debian.org/LTS Package : poppler Version : 0.71.0-5+deb10u1 CVE ID : CVE-2018-18897 CVE-2018-19058 CVE-2018-20650 CVE-2019-9903 CVE-2019-9959...

[SECURITY] [DLA 3047-1] avahi security update

Debian LTS Advisory DLA-3047-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany June 07, 2022 https://wiki.debian.org/LTS Package : avahi Version : 0.6.32-2+deb9u1 CVE ID : CVE-2021-3468 CVE-2021-26720 Debian Bug : 984938 It was discovered that the Debian package o...

[SECURITY] [DLA 3037-1] libjpeg-turbo security update

Debian LTS Advisory DLA-3037-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany May 31, 2022 https://wiki.debian.org/LTS Package : libjpeg-turbo Version : 1:1.5.1-2+deb9u2 CVE ID : CVE-2019-2201 Several integer overflows have been discovered in TurboJPEG, a JPEG...

[SECURITY] [DSA 5111-1] zlib security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5111-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 01, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2340-2] sqlite3 regression update

Debian LTS Advisory DLA-2340-2 [email protected] https://www.debian.org/lts/security/ Roberto C. Sánchez December 10, 2020 https://wiki.debian.org/LTS Package : sqlite3 Version : 3.16.2-5+deb9u3 CVE ID : CVE-2019-20218 The update of sqlite3 released as DLA-2340-1 contained an incomplete...

[SECURITY] [DLA 2480-1] salt security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2480-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA December 04, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2435-1] guacamole-server security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2435-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany November 06, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4777-1] freetype security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4777-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 21, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2251-1] rails security update

Package : rails Version : 2:4.1.8-1+deb8u7 CVE ID : CVE-2020-8164 CVE-2020-8165 Two vulnerabilities were found in Ruby on Rails, a MVC ruby-based framework geared for web application development, which could lead to remote code execution and untrusted user input usage, depending on the applicatio...

[SECURITY] [DSA 4685-1] apt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4685-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 14, 2020 https://www.debian.org/security/faq -...