[SECURITY] [DSA 5394-1] ffmpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5394-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 30, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3240-1] libde265 security update

Debian LTS Advisory DLA-3240-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost December 15, 2022 https://wiki.debian.org/LTS Package : libde265 Version : 1.0.3-1+deb10u1 CVE ID : CVE-2020-21599 CVE-2021-35452 CVE-2021-36408 CVE-2021-36409 CVE-2021-36410 CVE-2021-3641...

[SECURITY] [DLA 3144-1] connman security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3144-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort October 10, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5246-1] mediawiki security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5246-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 04, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2896-1] ipython security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2896-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb January 24, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2691-1] libgcrypt20 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2691-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz June 25, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2666-1] libx11 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2666-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort May 24, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4871-1] tor security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4871-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 16, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4859-1] libzstd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4859-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 20, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4714-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4714-1 [email protected] https://www.debian.org/security/ Michael Gilbert July 01, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4667-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4667-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 28, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4662-1] openjdk-11 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4662-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 24, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2134-1] pdfresurrect security update

Package : pdfresurrect Version : 0.12-5+deb8u1 CVE ID : CVE-2020-9549 Debian Bug : 952948 It was discovered that there was an out-of-bounds write vulnerability in pdfresurrect, a tool for extracting or scrubbing versioning data from PDF documents. For Debian 8 "Jessie", this issue has been fixed ...

[SECURITY] [DLA 2087-1] suricata security update

Package : suricata Version : 2.0.7-2+deb8u5 CVE ID : CVE-2019-18625 CVE-2019-18792 Two vulnerabilities have recently been discovered in the stream-tcp code of the intrusion detection and prevention tool Suricata. CVE-2019-18625 It was possible to bypass/evade any tcp based signature by faking a...

[SECURITY] [DLA 2076-1] slirp security update

Package : slirp Version : 1:1.0.17-7+deb8u1 CVE ID : CVE-2020-7039 Debian Bug : 949085 An issue has been found in slirp, a SLIP/PPP emulator using a dial up shell account. Due to bad memory handling in slirp a heap-based buffer overflow or other out-of-bounds access could happen, which can lead t...

[SECURITY] [DSA 4590-1] cyrus-imapd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4590-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 19, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1988-1] ampache security update

Package : ampache Version : 3.6-rzb2752+dfsg-5+deb8u1 CVE ID : CVE-2019-12385 CVE-2019-12386 Several vulnerabilities were discovered in Ampache, a web-based audio file management system. CVE-2019-12385 A stored XSS exists in the localplay.php LocalPlay "add instance" functionality. The injected...

[SECURITY] [DLA 1900-2] apache2 regression update

Package : apache2 Version : 2.4.10-10+deb8u16 CVE ID : CVE-2019-10092 Debian Bug : 941202 The update of apache2 released as DLA-1900-1 contained an incomplete fix for CVE-2019-10092, a limited cross-site scripting issue affecting the modproxy error page. The old patch rather introduced a new CSRF...

[SECURITY] [DLA 1866-1] glib2.0 security update

Package : glib2.0 Version : 2.42.1-1+deb8u2 CVE ID : CVE-2018-16428 CVE-2018-16429 CVE-2019-13012 Debian Bug : 931234 Various minor issues have been addressed in the GLib library. GLib is a useful general-purpose C library used by projects such as GTK+, GIMP, and GNOME. CVE-2018-16428 In GNOME...

[SECURITY] [DSA 4406-1] waagent security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4406-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 12, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1703-1] jackson-databind security update

Package : jackson-databind Version : 2.4.2-2+deb8u5 CVE ID : CVE-2018-11307 CVE-2018-12022 CVE-2018-12023 CVE-2018-14718 CVE-2018-14719 CVE-2018-14720 CVE-2018-14721 CVE-2018-19360 CVE-2018-19361 CVE-2018-19362 Several deserialization flaws were discovered in jackson-databind, a fast and powerful...

[SECURITY] [DSA 4377-2] rssh regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4377-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 11, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1475-1] tomcat-native security update

Package : tomcat-native Version : 1.1.32repack-2+deb8u2 CVE ID : CVE-2018-8019 CVE-2018-8020 When using an OCSP responder Tomcat Native did not correctly handle invalid responses. This allowed for revoked client certificates to be incorrectly identified. It was therefore possible for users to...

[SECURITY] [DLA 1264-1] unbound security update

Package : unbound Version : 1.4.17-3+deb7u3 CVE ID : CVE-2017-15105 Debian Bug : 887733 Ralph Dolmans and Karst Koymans found a flaw in the way unbound validated wildcard-synthesized NSEC records. An improperly validated wildcard NSEC record could be used to prove the non-existence NXDOMAIN answe...

[SECURITY] [DLA 1035-1] qemu security update

Package : qemu Version : 1.1.2+dfsg-6+deb7u22 CVE ID : CVE-2016-9602 CVE-2016-9603 CVE-2017-7377 CVE-2017-7471 CVE-2017-7493 CVE-2017-7718 CVE-2017-7980 CVE-2017-8086 Several vulnerabilities were discovered in qemu, a fast processor emulator. The Common Vulnerabilities and Exposures project...

[SECURITY] [DLA 984-1] tiff security update

Package : tiff Version : 4.0.2-6+deb7u14 CVE ID : CVE-2016-10095 CVE-2017-9147 CVE-2017-9403 CVE-2017-9404 Debian Bug : 863185 850316 tiff was affected by multiple memory leaks CVE-2017-9403, CVE-2017-9404 that could result in denial of service. Furthermore, while the current version in Debian wa...

[SECURITY] [DLA 799-1] ming security update

Package : ming Version : 1:0.4.4-1.1+deb7u1 CVE ID : CVE-2016-9264 CVE-2016-9265 CVE-2016-9266 CVE-2016-9827 CVE-2016-9828 CVE-2016-9829 CVE-2016-9831 Debian Bug : 843928 Multiple security issues have been found in Ming. They may lead to the execution of arbitrary code or causing application cras...

[SECURITY] [DLA 632-1] wireshark security update

Package : wireshark Version : 1.12.1+g01b65bf-4+deb8u6deb7u4 CVE ID : CVE-2016-7176 CVE-2016-7177 CVE-2016-7178 CVE-2016-7179 CVE-2016-7180 Multiple vulnerabilities were discovered in the dissectors for H.225, Catapult DCT2000, UMTS FP and IPMI, which could result in denial of service or the...

[SECURITY] [DSA 3651-1] rails security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3651-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 25, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3315-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3315-1 [email protected] https://www.debian.org/security/ Michael Gilbert July 23, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3257-1] mercurial security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3257-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 11, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2939-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2939-1 [email protected] http://www.debian.org/security/ Michael Gilbert May 31, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2614-1] libupnp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2614-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez February 01, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2391-1] phpmyadmin security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2391-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 22, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1789-1] New php5 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1789-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 04, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1184-2] New Linux 2.6.8 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1184-2 [email protected] http://www.debian.org/security/ Dann Frazier September 26th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 6234-1] pdns-recursor security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6234-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 28, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DLA 4358-1] wordpress security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-4358-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta November 02, 2025 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5573-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5573-1 [email protected] https://www.debian.org/security/ Andres Salomon December 09, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5527-1] webkit2gtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5527-1 [email protected] https://www.debian.org/security/ Alberto Garcia October 12, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5467-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5467-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 04, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2727-1] pyxdg security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2727-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb August 03, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2639-1] opendmarc security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2639-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta April 25, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4884-1] ldb security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4884-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 02, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2493-1] openssl1.0 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2493-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort December 14, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2487-1] apt security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2487-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta December 10, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4627-1] tomcat9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4727-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 17, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2262-1] qemu security update

Package : qemu Version : 1:2.1+dfsg-12+deb8u15 CVE ID : CVE-2020-1983 CVE-2020-13361 CVE-2020-13362 CVE-2020-13765 Debian Bug : Several vulnerabilities were fixed in qemu, a fast processor emulator. CVE-2020-1983 slirp: Fix use-after-free in ipreass. CVE-2020-13361 es1370transferaudio in...

[SECURITY] [DLA 2236-1] graphicsmagick security update

Package : graphicsmagick Version : 1.3.20-3+deb8u11 CVE ID : CVE-2020-12672 Debian Bug : 960000 A vulnerability was discovered in graphicsmagick, a collection of image processing tools, that results in a heap buffer overwrite when magnifying MNG images. For Debian 8 "Jessie", this problem has bee...

[SECURITY] [DLA 2097-1] ppp security update

Package : ppp Version : 2.4.6-3.1+deb8u1 CVE ID : CVE-2020-8597 Debian Bug : 950618 Ilja Van Sprundel discovered a buffer overflow vulnerability in ppp, the Point-to-Point Protocol daemon. When receiving an EAP Request message in client mode, an attacker was able to overflow the rhostname array b...