14446 matches found
[SECURITY] [DLA 2614-1] busybox security update
Debian LTS Advisory DLA-2614-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany April 01, 2021 https://wiki.debian.org/LTS Package : busybox Version : 1:1.22.0-19+deb9u2 CVE ID : CVE-2021-28831 Debian Bug : 986217 The gunzip decompressor of Busybox, tiny utilities...
[SECURITY] [DSA 4489-1] patch security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4489-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 27, 2019 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1824-1] linux-4.9 security update
Package : linux-4.9 Version : 4.9.168-1+deb9u3deb8u1 CVE ID : CVE-2019-3846 CVE-2019-5489 CVE-2019-9500 CVE-2019-9503 CVE-2019-10126 CVE-2019-11477 CVE-2019-11478 CVE-2019-11479 CVE-2019-11486 CVE-2019-11599 CVE-2019-11815 CVE-2019-11833 CVE-2019-11884 Debian Bug : 928989 Several vulnerabilities...
[SECURITY] [DLA 1633-1] sqlite3 security update
Package : sqlite3 Version : 3.8.7.1-1+deb8u4 CVE ID : CVE-2017-2518 CVE-2017-2519 CVE-2017-2520 CVE-2017-10989 CVE-2018-8740 Debian Bug : 867618 893195 Several flaws were corrected in SQLite, an SQL database engine. CVE-2017-2518 A use-after-free bug in the query optimizer may cause a buffer...
[SECURITY] [DLA 1590-1] openjdk-7 security update
Package : openjdk-7 Version : 7u181-2.6.14-2deb8u1 CVE ID : CVE-2018-2952 CVE-2018-3136 CVE-2018-3139 CVE-2018-3149 CVE-2018-3169 CVE-2018-3180 CVE-2018-3214 Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in denial of service,...
[SECURITY] [DSA 5907-1] linux security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5907-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 27, 2025 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4451-1] thunderbird security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4451-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 24, 2019 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4368-1] zeromq3 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4368-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 14, 2019 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4877-1] webkit2gtk security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4877-1 [email protected] https://www.debian.org/security/ Alberto Garcia March 27, 2021 https://www.debian.org/security/faq -...
[SECURITY] [DSA 5139-1] openssl security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5139-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 17, 2022 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1394-1] imagemagick security update
Package : imagemagick Version : 8:6.8.9.9-5+deb8u13 CVE ID : CVE-2018-11251 CVE-2018-12599 CVE-2018-12600 Several security vulnerabilities were discovered in ImageMagick, an image manipulation program, that allow remote attackers to cause denial of service application crash or out of bounds memor...
[SECURITY] [DSA 4699-1] linux security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4699-1 [email protected] https://www.debian.org/security/ Ben Hutchings June 09, 2020 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1811-1] miniupnpd security update
Package : miniupnpd Version : 1.8.20140523-4+deb8u1 CVE ID : CVE-2017-1000494 CVE-2019-12107 CVE-2019-12108 CVE-2019-12109 CVE-2019-12110 CVE-2019-12111 Ben Barnea and colleagues from VDOO discovered several vulnerabilities in miniupnpd, a small daemon that provides UPnP Internet Gateway Device a...
[SECURITY] [DSA 4949-1] jetty9 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4949-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 04, 2021 https://www.debian.org/security/faq -...
[SECURITY] [DLA 2045-1] tightvnc security update
Package : tightvnc Version : 1.3.9-6.5+deb8u1 CVE ID : CVE-2014-6053 CVE-2018-7225 CVE-2019-8287 CVE-2018-20021 CVE-2018-20022 CVE-2019-15678 CVE-2019-15679 CVE-2019-15680 CVE-2019-15681 Debian Bug : 945364 Several vulnerabilities have recently been discovered in TightVNC 1.x, an X11 based VNC...
[SECURITY] [DLA 1592-1] otrs2 security update
Package : otrs2 Version : 3.3.18-1+deb8u7 CVE ID : CVE-2018-19141 CVE-2018-19143 Two security vulnerabilities were discovered in OTRS, a Ticket Request System, that may lead to privilege escalation or arbitrary file write. CVE-2018-19141 An attacker who is logged into OTRS as an admin user may...
[SECURITY] [DSA 4640-1] graphicsmagick security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4640-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 15, 2020 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4458-1] cyrus-imapd security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4458-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 08, 2019 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4431-1] libssh2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4431-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 13, 2019 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1583-1] jasper security update
Package : jasper Version : 1.900.1-debian1-2.4+deb8u4 CVE ID : CVE-2015-5203 CVE-2015-5221 CVE-2016-8690 CVE-2017-13748 CVE-2017-14132 Several security vulnerabilities were discovered in the JasPer JPEG-2000 library. CVE-2015-5203 Gustavo Grieco discovered an integer overflow vulnerability that...
[SECURITY] [DLA 1445-1] busybox security update
Package : busybox Version : 1:1.22.0-9+deb8u2 CVE ID : CVE-2011-5325 CVE-2014-9645 CVE-2015-9261 CVE-2016-2147 CVE-2016-2148 CVE-2017-15873 CVE-2017-16544 CVE-2018-1000517 Debian Bug : 902724 882258 879732 818497 818499 803097 802702 Busybox, utility programs for small and embedded systems, was...
[SECURITY] [DLA 2523-1] imagemagick security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2523-1 [email protected] https://www.debian.org/lts/security/ January 12, 2021 https://wiki.debian.org/LTS - -------------------------------------------------------------------------...
[SECURITY] [DLA 3065-1] linux security update
Debian LTS Advisory DLA-3065-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings June 30, 2022 https://wiki.debian.org/LTS Package : linux Version : 4.9.320-2 CVE ID : CVE-2018-1108 CVE-2021-4149 CVE-2021-39713 CVE-2022-0494 CVE-2022-0812 CVE-2022-0854 CVE-2022-1011...
[SECURITY] [DLA 1934-1] cimg security update
Package : cimg Version : 1.5.9+dfsg-1+deb8u1 CVE ID : CVE-2018-7588 CVE-2018-7589 CVE-2018-7637 CVE-2018-7638 CVE-2018-7639 CVE-2018-7640 CVE-2018-7641 CVE-2019-1010174 Several issues have been found in cimg, a powerful image processing library. CVE-2019-1010174 is related to a missing string...
[SECURITY] [DLA 2616-1] libxstream-java security update
Debian LTS Advisory DLA-2616-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany April 03, 2021 https://wiki.debian.org/LTS Package : libxstream-java Version : 1.4.11.1-1+deb9u2 CVE ID : CVE-2021-21341 CVE-2021-21342 CVE-2021-21343 CVE-2021-21344 CVE-2021-21345...
[SECURITY] [DLA 1955-1] tcpdump security update
Package : tcpdump Version : 4.9.3-1deb8u1 CVE ID : CVE-2018-10103 CVE-2018-10105 CVE-2018-14461 CVE-2018-14462 CVE-2018-14463 CVE-2018-14464 CVE-2018-14465 CVE-2018-14466 CVE-2018-14467 CVE-2018-14468 CVE-2018-14469 CVE-2018-14470 CVE-2018-14879 CVE-2018-14880 CVE-2018-14881 CVE-2018-14882...
[SECURITY] [DLA 1814-1] python-django security update
Package : python-django Version : 1.7.11-1+deb8u5 CVE ID : CVE-2019-12308 Debian Bug : 929927 It was discovered that there was a cross-site scripting XSS vulnerability in the Django web development framework. For Debian 8 "Jessie", this issue has been fixed in python-django version 1.7.11-1+deb8u...
[SECURITY] [DLA 1658-1] phpmyadmin security update
Package : phpmyadmin Version : 4:4.2.12-2+deb8u4 CVE ID : CVE-2018-19968 CVE-2018-19970 A couple of vulnerabilities have been discovered in phpmyadmin, MySQL web administration tool. CVE-2018-19968 An attacker can exploit phpMyAdmin before 4.8.4 to leak the contents of a local file because of an...
[SECURITY] [DLA 2559-1] busybox security update
Debian LTS Advisory DLA-2559-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany February 15, 2021 https://wiki.debian.org/LTS Package : busybox Version : 1:1.22.0-19+deb9u1 CVE ID : CVE-2011-5325 CVE-2015-9261 CVE-2016-2147 CVE-2016-2148 CVE-2017-15873 CVE-2017-165...
[SECURITY] [DLA 1822-1] php-horde-form security update
Package : php-horde-form Version : 2.0.8-2+deb8u1 CVE ID : CVE-2019-9858 Debian Bug : 930321 The Horde Application Framework contained a remote code execution vulnerability. A remote attacker could use this flaw to use image uploads in forms to install and execute a file in an arbitrary writable...
[SECURITY] [DLA 1593-1] phpbb3 security update
Package : phpbb3 Version : 3.0.12-5+deb8u2 CVE ID : CVE-2018-19274 Simon Scannell and Robin Peraglie of RIPS Technologies discovered that passing an absolute path to a fileexists check in phpBB, a full featured web forum, allows remote code execution through Object Injection by employing Phar...
[SECURITY] [DSA 4599-1] wordpress security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4599-1 [email protected] https://www.debian.org/security/ Sebastien Delafond January 08, 2020 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1812-1] doxygen security update
Package : doxygen Version : 1.8.8-5+deb8u1 CVE ID : CVE-2016-10245 Insufficient sanitization of the query parameter in searchopensearch.php could lead to reflected cross-site scripting or iframe injection. For Debian 8 "Jessie", this problem has been fixed in version 1.8.8-5+deb8u1. We recommend...
[SECURITY] [DSA 4422-1] apache2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4422-1 [email protected] https://www.debian.org/security/ Stefan Fritsch April 03, 2019 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1821-1] phpmyadmin security update
Package : phpmyadmin Version : 4:4.2.12-2+deb8u6 CVE ID : CVE-2016-6606 CVE-2016-6607 CVE-2016-6611 CVE-2016-6612 CVE-2016-6613 CVE-2016-6624 CVE-2016-6626 CVE-2016-6627 CVE-2016-6628 CVE-2016-6630 CVE-2016-6631 CVE-2016-6632 CVE-2016-9849 CVE-2016-9850 CVE-2016-9861 CVE-2016-9864 CVE-2019-12616...
[SECURITY] [DLA 1663-1] python3.4 security update
Package : python3.4 Version : 3.4.2-1+deb8u2 CVE ID : CVE-2016-0772 CVE-2016-5636 CVE-2016-5699 CVE-2018-20406 CVE-2019-5010 This DLA fixes a a problem parsing x509 certificates, an pickle integer overflow, and some other minor issues: CVE-2016-0772 The smtplib library in CPython does not return ...
[SECURITY] [DSA 2094-1] New Linux 2.6.26 packages fix several issues
---------------------------------------------------------------------- Debian Security Advisory DSA-2094-1 [email protected] http://www.debian.org/security/ dann frazier August 19, 2010 http://www.debian.org/security/faq - ----------------------------------------------------------------------...
[SECURITY] [DSA 5480-1] linux security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5480-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 18, 2023 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4465-1] linux security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4465-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 17, 2019 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1701-1] openssl security update
Package : openssl Version : 1.0.1t-1+deb8u11 CVE ID : CVE-2019-1559 Juraj Somorovsky, Robert Merget and Nimrod Aviram discovered a padding oracle attack in OpenSSL. If an application encounters a fatal protocol error and then calls SSLshutdown twice once to send a closenotify, and once to receive...
[SECURITY] [DLA 1618-1] libsndfile security update
Package : libsndfile Version : 1.0.25-9.1+deb8u2 CVE ID : CVE-2017-8361 CVE-2017-8362 CVE-2017-8363 CVE-2017-8365 CVE-2017-14245 CVE-2017-14246 CVE-2017-14634 CVE-2017-17456 CVE-2017-17457 CVE-2018-13139 CVE-2018-19432 CVE-2018-19661 CVE-2018-19662 Multiple vulnerabilities have been found in...
[SECURITY] [DLA 3194-1] asterisk security update
Debian LTS Advisory DLA-3194-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany November 17, 2022 https://wiki.debian.org/LTS Package : asterisk Version : 1:16.28.0dfsg-0+deb10u1 CVE ID : CVE-2021-37706 CVE-2021-43299 CVE-2021-43300 CVE-2021-43301 CVE-2021-43302...
[SECURITY] [DLA 1799-2] linux security update
Package : linux Version : 3.16.68-1 CVE ID : CVE-2018-5995 CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-2024 CVE-2019-3459 CVE-2019-3460 CVE-2019-3882 CVE-2019-3901 CVE-2019-6133 CVE-2019-9503 CVE-2019-11091 CVE-2019-11190 CVE-2019-11486 CVE-2019-11599 Debian Bug : 927781 Several...
[SECURITY] [DSA 4430-1] wpa security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4430-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez April 10, 2019 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4396-1] ansible security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4396-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 19, 2019 https://www.debian.org/security/faq -...
[SECURITY] [DLA 2016-1] ssvnc security update
Package : ssvnc Version : 1.0.29-2+deb8u1 CVE ID : CVE-2018-20020 CVE-2018-20021 CVE-2018-20022 CVE-2018-20024 Debian Bug : 945827 Several vulnerabilities have been identified in the VNC code of ssvnc, an encryption-capable VNC client.. The vulnerabilities referenced below are issues that have...
[SECURITY] [DSA 5105-1] bind9 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5105-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 18, 2022 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4677-1] wordpress security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4677-1 [email protected] https://www.debian.org/security/ Sebastien Delafond May 06, 2020 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4382-1] rssh security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4382-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 02, 2019 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1599-1] qemu security update
Package : qemu Version : 1:2.1+dfsg-12+deb8u8 CVE ID : CVE-2016-2391 CVE-2016-2392 CVE-2016-2538 CVE-2016-2841 CVE-2016-2857 CVE-2016-2858 CVE-2016-4001 CVE-2016-4002 CVE-2016-4020 CVE-2016-4037 CVE-2016-4439 CVE-2016-4441 CVE-2016-4453 CVE-2016-4454 CVE-2016-4952 CVE-2016-5105 CVE-2016-5106...