[SECURITY] [DLA 3855-1] pdns-recursor security update

Debian LTS Advisory DLA-3855-1 [email protected] https://www.debian.org/lts/security/ ; Daniel Leidert July 01, 2024 https://wiki.debian.org/LTS Package : pdns-recursor Version : 4.1.11-1+deb10u2 CVE...

[SECURITY] [DSA 5522-1] tomcat9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5522-1 [email protected] https://www.debian.org/security/ Markus Koschany October 10, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5404-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5404-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 17, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3375-1] xrdp security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3375-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb March 31, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3349-1] linux-5.10 security update

Debian LTS Advisory DLA-3349-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings March 02, 2023 https://wiki.debian.org/LTS Package : linux-5.10 Version : 5.10.162-1deb10u1 CVE ID : CVE-2022-2873 CVE-2022-3545 CVE-2022-3623 CVE-2022-4696 CVE-2022-36280 CVE-2022-41218...

[SECURITY] [DSA 5246-1] mediawiki security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5246-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 04, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5189-1] gsasl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5189-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 24, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3008-1] openssl security update

Debian LTS Advisory DLA-3008-1 [email protected] https://www.debian.org/lts/security/ Stefano Rivera May 14, 2022 https://wiki.debian.org/LTS Package : openssl Version : 1.1.0l-1deb9u6 CVE ID : CVE-2022-1292 The crehash script does not properly sanitise shell metacharacters to prevent...

[SECURITY] [DLA 2604-1] dnsmasq security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2604-1 [email protected] https://www.debian.org/lts/security/ March 22, 2021 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package...

[SECURITY] [DLA 2533-1] crmsh security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2533-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb January 25, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4833-2] gst-plugins-bad1.0 regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4833-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 24, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2492-1] openssl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2492-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort December 14, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2295-1] curl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2295-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz July 28, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4709-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4709-1 [email protected] https://www.debian.org/security/ Sebastien Delafond June 23, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4651-1] mediawiki security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4651-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 02, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2126-1] gst-plugins-base0.10 security update

Package : gst-plugins-base0.10 Version : 0.10.36-2+deb8u2 CVE ID : CVE-2016-9811 CVE-2017-5837 CVE-2017-5844 Some isses have been found in gst-plugins-base0.10, a package that provides GStreamer plugins from the "base" set. All issues are related to crafted ico-files that could result in an...

[SECURITY] [DSA 4549-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4549-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 24, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4516-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4516-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 05, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1888-1] imagemagick security update

Package : imagemagick Version : 8:6.8.9.9-5+deb8u17 CVE ID : CVE-2019-12974 CVE-2019-13135 CVE-2019-13295 CVE-2019-13297 CVE-2019-13304 CVE-2019-13305 CVE-2019-13306 Multiple vulnerabilities have been found in imagemagick, an image processing toolkit. CVE-2019-12974 NULL pointer dereference in...

[SECURITY] [DLA 1850-1] redis security update

Package : redis Version : 2:2.8.17-1+deb8u7 CVE ID : CVE-2019-10192 Debian Bug : 931625 It was discovered that there were two heap buffer overflows in the Hyperloglog functionality provided by the Redis in-memory key-value database. For Debian 8 "Jessie", these issues have been fixed in redis...

[SECURITY] [DSA 4397-1] ldb security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4397-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 28, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1641-1] mxml security update

Package : mxml Version : 2.6-2+deb8u1 CVE ID : CVE-2016-4570 CVE-2016-4571 CVE-2018-20004 Debian Bug : 825855 918007 Several stack exhaustion conditions were found in mxml that can easily crash when parsing xml files. CVE-2016-4570 The mxmlDelete function in mxml-node.c allows remote attackers to...

[SECURITY] [DSA 4347-1] perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4347-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 29, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4256-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4256-1 [email protected] https://www.debian.org/security/ Michael Gilbert July 26, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4201-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4201-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 15, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1142-1] libav security update

Package : libav Version : 6:0.8.21-0+deb7u1 CVE ID : CVE-2015-8365 CVE-2017-7208 CVE-2017-7862 CVE-2017-9992 Multiple vulnerabilities have been found in libav: CVE-2015-8365 The smkadecodeframe function in libavcodec/smacker.c does not verify that the data size is consistent with the number of...

[SECURITY] [DSA 3850-1] rtmpdump security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3850-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 12, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3799-1] imagemagick security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3799-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 01, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3565-1] botan1.10 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3565-1 [email protected] https://www.debian.org/security/ Sebastien Delafond May 02, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3402-1] symfony security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3402-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 24, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 2920-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2920-1 [email protected] http://www.debian.org/security/ Michael Gilbert May 03, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 685-1] New emacs21 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 685-1 [email protected] http://www.debian.org/security/ Martin Schulze February 17th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DLA 3845-1] dlt-daemon security update

Debian LTS Advisory DLA-3845-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany June 27, 2024 https://wiki.debian.org/LTS Package : dlt-daemon Version : 2.18.0-1+deb10u2 CVE ID : CVE-2022-39836 CVE-2022-39837 CVE-2023-26257 CVE-2023-36321 Several flaws were...

[SECURITY] [DLA 3749-1] phpseclib security update

Debian LTS Advisory DLA-3749-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin March 05, 2024 https://wiki.debian.org/LTS Package : phpseclib Version : 1.0.19-3deb10u3 CVE ID : CVE-2024-27354 CVE-2024-27355 Security issues were discovered in phpseclib, a PHP librar...

[SECURITY] [DSA 5628-1] imagemagick security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5628-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 22, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5573-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5573-1 [email protected] https://www.debian.org/security/ Andres Salomon December 09, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5493-1] open-vm-tools security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5493-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 10, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3376-1] svgpp security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3376-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky March 31, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3336-1] node-url-parse security update

Debian LTS Advisory DLA-3336-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin February 23, 2023 https://wiki.debian.org/LTS Package : node-url-parse Version : 1.2.0-2+deb10u2 CVE ID : CVE-2021-3664 CVE-2021-27515 CVE-2022-0512 CVE-2022-0639 CVE-2022-0686...

[SECURITY] [DLA 3078-1] kicad security update

Debian LTS Advisory DLA-3078-1 [email protected] https://www.debian.org/lts/security/ Stefano Rivera August 20, 2022 https://wiki.debian.org/LTS Package : kicad Version : 5.0.2+dfsg1-1+deb10u1 CVE ID : CVE-2022-23803 CVE-2022-23804 CVE-2022-23946 CVE-2022-23947 KiCad is a suite of...

[SECURITY] [DLA 3034-1] haproxy security update

Debian LTS Advisory DLA-3034-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany May 30, 2022 https://wiki.debian.org/LTS Package : haproxy Version : 1.7.5-2+deb9u1 CVE ID : CVE-2018-20102 CVE-2018-20103 CVE-2019-18277 Debian Bug : 916308 916307 Nathan Davison...

[SECURITY] [DLA 2849-1] wireshark security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2849-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk December 26, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4957-1] trafficserver security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4957-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 13, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2666-1] libx11 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2666-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort May 24, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2663-1] libimage-exiftool-perl security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2663-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta May 16, 2021 https://wiki.debian.org/LTS - -----------------------------------------------------------------------...

[SECURITY] [DSA 4869-1] tiff security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4869-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 12, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2087-1] suricata security update

Package : suricata Version : 2.0.7-2+deb8u5 CVE ID : CVE-2019-18625 CVE-2019-18792 Two vulnerabilities have recently been discovered in the stream-tcp code of the intrusion detection and prevention tool Suricata. CVE-2019-18625 It was possible to bypass/evade any tcp based signature by faking a...

[SECURITY] [DLA 1990-1] linux-4.9 security update

Package : linux-4.9 Version : 4.9.189-3+deb9u2deb8u1 CVE ID : CVE-2018-12207 CVE-2019-0154 CVE-2019-0155 CVE-2019-11135 Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service, or information leak. CVE-2018-12207 It was discovere...

[SECURITY] [DLA 1988-1] ampache security update

Package : ampache Version : 3.6-rzb2752+dfsg-5+deb8u1 CVE ID : CVE-2019-12385 CVE-2019-12386 Several vulnerabilities were discovered in Ampache, a web-based audio file management system. CVE-2019-12385 A stored XSS exists in the localplay.php LocalPlay "add instance" functionality. The injected...

[SECURITY] [DSA 4439-1] postgresql-9.6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4439-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 09, 2019 https://www.debian.org/security/faq -...