[SECURITY] [DLA 4451-1] shapelib security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4451-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz January 24, 2026 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 4404-1] linux security update

Debian LTS Advisory DLA-4404-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings December 12, 2025 https://wiki.debian.org/LTS Package : linux Version : 5.10.247-1 CVE ID : CVE-2023-53498 CVE-2024-47666 CVE-2024-50143 CVE-2024-57947 CVE-2025-21861 CVE-2025-21887...

[SECURITY] [DLA 4352-1] python-authlib security update

Debian LTS Advisory DLA-4352-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert October 29, 2025 https://wiki.debian.org/LTS Package : python-authlib Version : 0.15.4-1+deb11u1 CVE ID : CVE-2024-37568 CVE-2025-59420 CVE-2025-61920 CVE-2025-62706 Multiple...

[SECURITY] [DLA 4303-1] nextcloud-desktop security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4303-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA September 18, 2025 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5628-1] imagemagick security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5628-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 22, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3507-1] pandoc security update

Debian LTS Advisory DLA-3507-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin July 25, 2023 https://wiki.debian.org/LTS Package : pandoc Version : 2.2.1-3+deb10u1 CVE ID : CVE-2023-35936 CVE-2023-38745 Debian Bug : 1041976 Arbitrary file write vulnerabilities were...

[SECURITY] [DLA 3117-1] mediawiki security update

Debian LTS Advisory DLA-3117-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany September 22, 2022 https://wiki.debian.org/LTS Package : mediawiki Version : 1:1.31.16-1+deb10u3 CVE ID : CVE-2021-44856 CVE-2022-28201 CVE-2022-28202 CVE-2022-28203 CVE-2022-34911...

[SECURITY] [DSA 5229-1] freecad security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5229-1 [email protected] https://www.debian.org/security/ Aron Xu September 13, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3078-1] kicad security update

Debian LTS Advisory DLA-3078-1 [email protected] https://www.debian.org/lts/security/ Stefano Rivera August 20, 2022 https://wiki.debian.org/LTS Package : kicad Version : 5.0.2+dfsg1-1+deb10u1 CVE ID : CVE-2022-23803 CVE-2022-23804 CVE-2022-23946 CVE-2022-23947 KiCad is a suite of...

[SECURITY] [DLA 3053-1] vim security update

Debian LTS Advisory DLA-3053-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany June 20, 2022 https://wiki.debian.org/LTS Package : vim Version : 2:8.0.0197-4+deb9u7 CVE ID : CVE-2021-3903 CVE-2022-0417 CVE-2022-0943 CVE-2022-1720 CVE-2022-1851 CVE-2022-1898...

[SECURITY] [DSA 4764-1] inspircd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4764-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 18, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2213-1] exim4 security update

Package : exim4 Version : 4.84.2-2+deb8u7 CVE ID : CVE-2020-12783 It was discovered that exim4, a mail transport agent, suffers from a authentication bypass vulnerability in the spa authentication driver. The spa authentication driver is not enabled by default. For Debian 8 "Jessie", this problem...

[SECURITY] [DSA 4665-1] qemu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4665-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 27, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2099-1] checkstyle security update

Package : checkstyle Version : 5.9-1+deb8u2 CVE ID : CVE-2019-10782 Security researchers from Snyk discovered that the fix for CVE-2019-9658 was incomplete. Checkstyle, a development tool to help programmers write Java code that adheres to a coding standard, was still vulnerable to XML External...

[SECURITY] [DLA 2031-1] freeimage security update

Package : freeimage Version : 3.15.4-4.2+deb8u2 CVE ID : CVE-2019-12211 CVE-2019-12213 Debian Bug : 929597 It was found that freeimage, a graphics library, was affected by the following two security issues: CVE-2019-12211 Heap buffer overflow caused by invalid memcpy in PluginTIFF. This flaw migh...

[SECURITY] [DLA 1841-1] gpac security update

Package : gpac Version : 0.5.0+svn5324dfsg1-1+deb8u4 CVE ID : CVE-2019-12481 CVE-2019-12482 CVE-2019-12483 Three issues have been found for gpac, an Open Source multimedia framework. Two of them are NULL pointer dereferences and one of them is a heap-based buffer overflow. For Debian 8 "Jessie",...

[SECURITY] [DSA 4438-1] atftp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4438-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 07, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4347-1] perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4347-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 29, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4191-1] redmine security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4191-1 [email protected] https://www.debian.org/security/ Sebastien Delafond May 03, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1343-1] ming security update

Package : ming Version : 0.4.4-1.1+deb7u8 CVE ID : CVE-2018-6358 CVE-2018-7867 CVE-2018-7868 CVE-2018-7870 CVE-2018-7871 CVE-2018-7872 CVE-2018-7875 CVE-2018-9165 Multiple vulnerabilities have been discovered in Ming: CVE-2018-6358 Heap-based buffer overflow vulnerability in the printDefineFont2...

[SECURITY] [DSA 4165-1] ldap-account-manager security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4165-1 [email protected] https://www.debian.org/security/ Luciano Bello April 03, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4034-1] varnish security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4034-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 15, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1142-1] libav security update

Package : libav Version : 6:0.8.21-0+deb7u1 CVE ID : CVE-2015-8365 CVE-2017-7208 CVE-2017-7862 CVE-2017-9992 Multiple vulnerabilities have been found in libav: CVE-2015-8365 The smkadecodeframe function in libavcodec/smacker.c does not verify that the data size is consistent with the number of...

[SECURITY] [DLA 1127-1] sam2p security update

Package : sam2p Version : 0.49.1-1+deb7u1 CVE ID : CVE-2017-14628 CVE-2017-14629 CVE-2017-14630 CVE-2017-14631 CVE-2017-14636 CVE-2017-14637 Several vulnerabilites, like heap-based buffer overflows, integer signedness or overflow errors have been found by fpbibi and have been fixed by upstream. F...

[SECURITY] [DSA 3937-1] zabbix security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3937-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 12, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 678-1] qemu security update

Package : qemu Version : 1.1.2+dfsg-6+deb7u17 CVE ID : CVE-2016-8576 CVE-2016-8577 CVE-2016-8578 CVE-2016-8669 Multiple vulnerabilities have been found in QEMU: CVE-2016-8576 Quick Emulator Qemu built with the USB xHCI controller emulation support is vulnerable to an infinite loop issue. It could...

[SECURITY] [DSA 3616-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3616-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 04, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3376-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3376-1 [email protected] https://www.debian.org/security/ Michael Gilbert October 20, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 2306-1] ffmpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2306-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano September 11, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 5909-1] request-tracker5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5909-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 30, 2025 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3753-1] yard security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3753-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk March 06, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5525-1] samba security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5525-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 11, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5493-1] open-vm-tools security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5493-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 10, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3370-1] xrdp security update

Debian LTS Advisory DLA-3370-1 [email protected] https://www.debian.org/lts/security/ Dominik George March 28, 2023 https://wiki.debian.org/LTS Package : xrdp Version : 0.9.9-1+deb10u2 CVE ID : CVE-2022-23468 CVE-2022-23478 CVE-2022-23479 CVE-2022-23483 CVE-2022-23484 CVE-2022-23493...

[SECURITY] [DLA 3149-1] ruby-nokogiri security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3149-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler October 12, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5189-1] gsasl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5189-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 24, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5059-1] policykit-1 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5059-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 25, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2849-1] wireshark security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2849-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk December 26, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2533-1] crmsh security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2533-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb January 25, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4807-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4807-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 08, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4794-1] mupdf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4794-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 21, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2342-1] libjackson-json-java security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2342-1 [email protected] https://www.debian.org/lts/security/ August 24, 2020 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package...

[SECURITY] [DSA 4742-1] firejail security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4742-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 06, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2110-1] netty-3.9 security update

Package : netty-3.9 Version : 3.9.0.Final-1+deb8u1 CVE ID : CVE-2014-0193 CVE-2014-3488 CVE-2019-16869 CVE-2019-20444 CVE-2019-20445 CVE-2020-7238 Debian Bug : 746639 941266 950966 950967 Several vulnerabilities were discovered in Netty, a Java NIO client/server socket framework: CVE-2014-0193...

[SECURITY] [DSA 4608-1] tiff security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4608-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 21, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1991-1] libssh2 security update

Package : libssh2 Version : 1.4.3-4.1+deb8u6 CVE ID : CVE-2019-17498 Debian Bug : 943562 In libssh2, SSHMSGDISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary out-of-bounds offset for a subsequent memory read. A crafted SSH server m...

[SECURITY] [DLA 1675-1] python-gnupg security update

Package : python-gnupg Version : 0.3.6-1+deb8u1 CVE ID : CVE-2019-6690 Alexander Kjäll and Stig Palmquist discovered a vulnerability in python-gnupg, a wrapper around GNU Privacy Guard. It was possible to inject data through the passphrase property of the gnupg.GPG.encrypt and gnupg.GPG.decrypt...

[SECURITY] [DLA 1400-1] tomcat7 security update

Package : tomcat7 Version : 7.0.56-3+really7.0.88-1 CVE ID : CVE-2017-7674 CVE-2017-12616 CVE-2018-1304 CVE-2018-1305 CVE-2018-8014 Debian Bug : 802312 898935 Several security vulnerabilities have been discovered in the Tomcat servlet and JSP engine. CVE-2017-7674 The CORS Filter in Apache Tomcat...

[SECURITY] [DLA 1368-1] libvorbis security update

Package : libvorbis Version : 1.3.2-1.3+deb7u1 CVE ID : CVE-2017-11333 CVE-2017-14632 CVE-2017-14633 CVE-2018-5146 Serious vulnerabilities were found in the libvorbis library, commonly used to encode and decode audio in OGG containers. 2017-14633 In Xiph.Org libvorbis 1.3.5, an out-of-bounds arra...

[SECURITY] [DLA 905-1] ghostscript security update

Package : ghostscript Version : 9.05dfsg-6.3+deb7u5 CVE ID : CVE-2016-10219 CVE-2016-10220 CVE-2017-5951 ghostscript is vulnerable to multiple issues that can lead to denial of service when processing untrusted content. CVE-2016-10219 Application crash with division by 0 in scan conversion code...