[SECURITY] [DLA 1675-1] python-gnupg security update

Package : python-gnupg Version : 0.3.6-1+deb8u1 CVE ID : CVE-2019-6690 Alexander Kjäll and Stig Palmquist discovered a vulnerability in python-gnupg, a wrapper around GNU Privacy Guard. It was possible to inject data through the passphrase property of the gnupg.GPG.encrypt and gnupg.GPG.decrypt...

[SECURITY] [DLA-1589-1] keepalived security update

Package : icecast2 Version : 1:1.2.13-1+deb8u1 CVE ID : CVE-2018-19115 Debian Bug : 914393 keepalived has a heap-based buffer overflow when parsing HTTP status codes resulting in DoS or possibly unspecified other impact, because extractstatuscode in lib/html.c has no validation of the status code...

[SECURITY] [DLA 1264-1] unbound security update

Package : unbound Version : 1.4.17-3+deb7u3 CVE ID : CVE-2017-15105 Debian Bug : 887733 Ralph Dolmans and Karst Koymans found a flaw in the way unbound validated wildcard-synthesized NSEC records. An improperly validated wildcard NSEC record could be used to prove the non-existence NXDOMAIN answe...

[SECURITY] [DSA 3995-1] libxfont security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3995-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 10, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3903-1] tiff security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3903-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 05, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 905-1] ghostscript security update

Package : ghostscript Version : 9.05dfsg-6.3+deb7u5 CVE ID : CVE-2016-10219 CVE-2016-10220 CVE-2017-5951 ghostscript is vulnerable to multiple issues that can lead to denial of service when processing untrusted content. CVE-2016-10219 Application crash with division by 0 in scan conversion code...

[SECURITY] [DSA 3826-1] tryton-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3826-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 04, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA DLA-649-1] python-django security update

Package : python-django Version : 1.4.22-1+deb7u1 CVE ID : CVE-2016-7401 It was discovered that there was a possible CSRF protection bypass on sites that use Google Analytics in python-django, a High-level Python web development framework. More information can be found in the upstream announcemen...

[SECURITY] [DSA 3376-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3376-1 [email protected] https://www.debian.org/security/ Michael Gilbert October 20, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DLA 243-1] libraw security update

Package : libraw Version : 0.9.1-1+deb6u1 CVE ID : CVE-2015-3885 Debian Bug : 786788 This DLA supersedes my wrong announcement using DLA 241-1 CVE-2015-3885: Integer overflow in the ljpegstart function in dcraw 7.00 and earlier allows remote attackers to cause a denial of service crash via a...

[SECURITY] [DSA 2855-1] libav security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2855-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 05, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2724-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2724-1 [email protected] http://www.debian.org/security/ Michael Gilbert July 17, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2613-1] rails security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2613-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 29, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2451-1] puppet security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2451-1 [email protected] http://www.debian.org/security/ Nico Golde April 13, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2121-1] New TYPO3 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2121-1 [email protected] http://www.debian.org/security/ Florian Weimer October 19, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DLA 4160-1] libbson-xs-perl security update

Debian LTS Advisory DLA-4160-1 [email protected] https://www.debian.org/lts/security/ Roberto C. Sánchez May 09, 2025 https://wiki.debian.org/LTS Package : libbson-xs-perl Version : 0.8.4-1+deb11u1 CVE ID : CVE-2017-14227 CVE-2018-16790 CVE-2023-0437 CVE-2024-6381 CVE-2024-6383...

[SECURITY] [DSA 5593-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5593-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 01, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3589-1] python-git security update

Debian LTS Advisory DLA-3589-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin September 29, 2023 https://wiki.debian.org/LTS Package : python-git Version : 2.1.11-1+deb10u2 CVE ID : CVE-2023-41040 Santos Gallegos discovered a blind local file inclusion in...

[SECURITY] [DSA 5481-1] fastdds security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5481-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 20, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5467-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5467-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 04, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3339-1] binwalk security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3339-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk February 23, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5039-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5039-1 [email protected] https://www.debian.org/security/ Sebastien Delafond January 11, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4871-1] tor security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4871-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 16, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2264-1] libvncserver security update

Package : libvncserver Version : 0.9.9+dfsg2-6.1+deb8u8 CVE ID : CVE-2019-20839 CVE-2020-14397 CVE-2020-14399 CVE-2020-14400 CVE-2020-14401 CVE-2020-14402 CVE-2020-14403 CVE-2020-14404 CVE-2020-14405 Debian Bug : Several vulnerabilities have been discovered in libVNC libvncserver Debian package, ...

[SECURITY] [DLA 2236-1] graphicsmagick security update

Package : graphicsmagick Version : 1.3.20-3+deb8u11 CVE ID : CVE-2020-12672 Debian Bug : 960000 A vulnerability was discovered in graphicsmagick, a collection of image processing tools, that results in a heap buffer overwrite when magnifying MNG images. For Debian 8 "Jessie", this problem has bee...

[SECURITY] [DSA 4662-1] openjdk-11 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4662-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 24, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2123-1] pure-ftpd security update

Package : pure-ftpd Version : 1.0.36-3.2+deb8u1 CVE ID : CVE-2020-9274 Debian Bug : 925666 An uninitialized pointer vulnerability was discovered in pure-ftpd, a secure and efficient FTP server, which could result in an out-of-bounds memory read and potential information disclosure. For Debian 8...

[SECURITY] [DLA 1959-1] xtrlock security update

Package : xtrlock Version : 2.6+deb8u1 CVE ID : CVE-2016-10894 Debian Bug : 830726 It was discovered that multitouch devices were not being disabled by the "xtrlock" screen locking utility. xtrlock did not block multitouch events so an attacker could still input and thus control various programs...

[SECURITY] [DLA 1343-1] ming security update

Package : ming Version : 0.4.4-1.1+deb7u8 CVE ID : CVE-2018-6358 CVE-2018-7867 CVE-2018-7868 CVE-2018-7870 CVE-2018-7871 CVE-2018-7872 CVE-2018-7875 CVE-2018-9165 Multiple vulnerabilities have been discovered in Ming: CVE-2018-6358 Heap-based buffer overflow vulnerability in the printDefineFont2...

[SECURITY] [DSA 4034-1] varnish security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4034-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 15, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1170-1] graphicsmagick security update

Package : graphicsmagick Version : 1.3.16-1.1+deb7u15 CVE ID : CVE-2017-13134 CVE-2017-16547 Debian Bug : 881524 Security vulnerabilities have been identified in graphicsmagick, a collection of image processing utilities and libraries. CVE-2017-13134 Graphicsmagick was vulnerable to a heap-based...

[SECURITY] [DLA 846-1] libzip-ruby security update

Package : libzip-ruby Version : 0.9.4-1+deb7u1 CVE ID : CVE-2017-5946 Debian Bug : 856269 It was discovered that libzip-ruby, a Ruby module for reading and writing zip files, is prone to a directory traversal vulnerability. An attacker can take advantage of this flaw to overwrite arbitrary files...

[SECURITY] [DSA 3777-1] libgd2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3777-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 31, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3715-1] moin security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3715-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 15, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3704-1] memcached security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3704-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 03, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3692-1] freeimage security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3692-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 13, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 459-1] mercurial security update

Package : mercurial Version : 2.2.2-4+deb7u3 CVE ID : CVE-2016-3105 Blake Burkhart discovered an arbitrary code execution flaw in Mercurial, a distributed version control system, when using the convert extension on Git repositories with specially crafted names. This flaw in particular affects...

[SECURITY] [DLA 450-1] gdk-pixbuf security update

Package : gdk-pixbuf Version : 2.26.1-1+deb7u4 CVE ID : CVE-2015-7552 CVE-2015-7674 A heap-based buffer overflow has been discovered in gdk-pixbuf, a library for image loading and saving facilities, fast scaling and compositing of pixbufs, that allows remote attackers to cause a denial of service...

[SECURITY] [DSA 3448-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3448-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 19, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3412-1] redis security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3412-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 03, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3315-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3315-1 [email protected] https://www.debian.org/security/ Michael Gilbert July 23, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DLA 154-1] nss security update

Package : nss Version : 3.12.8-1+squeeze11 CVE ID : CVE-2011-3389 CVE-2014-1569 Debian Bug : 773625 nss 3.12.8-1+squeeze11 fixes two security issues: CVE-2011-3389 SSL 3.0 and TLS 1.0 connections were vulnerable to some chosen plaintext attacks which allowed man-in-the middle attackers to obtain...

[SECURITY] [DLA 143-1] python-django security update

Package : python-django Version : 1.2.3-3+squeeze12 CVE ID : CVE-2015-0219 CVE-2015-0220 CVE-2015-0221 Multiple security issues have been found in Django: https://www.djangoproject.com/weblog/2015/jan/13/security/ For Debian 6 Squeeeze, they have been fixed in version 1.2.3-3+squeeze12 of...

[SECURITY] [DSA 2581-1] mysql-5.1 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2581-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez December 04, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2306-1] ffmpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2306-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano September 11, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1496-1] New mplayer packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1496-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 12, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1444-1] New php5 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1444-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 03, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1214-1] New gv packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1214-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 20th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 6247-1] lxd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6247-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 04, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DSA 6127-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6127-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 09, 2026 https://www.debian.org/security/faq -...