[SECURITY] [DLA 2326-1] htmlunit security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2326-1 [email protected] https://www.debian.org/lts/security/ August 15, 2020 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package...

[SECURITY] [DLA 2318-1] wpa security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2318-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta August 09, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4737-1] xrdp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4737-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 29, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4732-1] squid security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4732-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 21, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2262-1] qemu security update

Package : qemu Version : 1:2.1+dfsg-12+deb8u15 CVE ID : CVE-2020-1983 CVE-2020-13361 CVE-2020-13362 CVE-2020-13765 Debian Bug : Several vulnerabilities were fixed in qemu, a fast processor emulator. CVE-2020-1983 slirp: Fix use-after-free in ipreass. CVE-2020-13361 es1370transferaudio in...

[SECURITY] [DLA 2155-1] tomcat8 security update

Package : tomcat8 Version : 8.0.14-1+deb8u16 CVE ID : CVE-2019-12418 Tomcat8 is configured with the JMX Remote Lifecycle Listener, a local attacker without access to the Tomcat process or configuration files is able to manipulate the RMI registry to perform a man-in-the-middle attack to capture...

[SECURITY] [DLA 2037-1] spamassassin security update

Package : spamassassin Version : 3.4.2-0+deb8u2 CVE ID : CVE-2018-11805 CVE-2019-12420 Debian Bug : 946652 946653 Two vulnerabilities were discovered in spamassassin, a Perl-based spam filter using text analysis. CVE-2018-11805 Malicious rule or configuration files, possibly downloaded from an...

[SECURITY] [DLA 2036-1] thunderbird security update

Package : thunderbird Version : 1:68.3.0-2deb8u1 CVE ID : CVE-2019-17005 CVE-2019-17008 CVE-2019-17010 CVE-2019-17011 CVE-2019-17012 Multiple security issues have been found in Thunderbird which could potentially result in the execution of arbitrary code. For Debian 8 "Jessie", these problems hav...

[SECURITY] [DSA 4581-1] git security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4581-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 10, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2022-1] librabbitmq security update

Package : librabbitmq Version : 0.5.2-2+deb8u1 CVE ID : CVE-2019-18609 Debian Bug : 946005 It was discovered that there was an integer overflow vulnerability in librabbitmq, a library for robust messaging between applications and servers. For Debian 8 "Jessie", this issue has been fixed in...

[SECURITY] [DLA 2008-1] nss security update

Package : nss Version : 2:3.26-1+debu8u7 CVE ID : CVE-2019-11745 A vulnerability has been discovered in nss, the Mozilla Network Security Service library. An out-of-bounds write can occur when passing an output buffer smaller than the block size to NSCEncryptUpdate. For Debian 8 "Jessie", this...

[SECURITY] [DLA 1982-1] openafs security update

Package : openafs Version : 1.6.9-2+deb8u9 CVE ID : CVE-2019-18601 CVE-2019-18602 CVE-2019-18603 Debian Bug : 943587 Several security vulnerabilities were discovered in OpenAFS, a distributed file system. CVE-2019-18601 OpenAFS is prone to denial of service from unserialized data access because...

[SECURITY] [DLA 1761-1] ghostscript security update

Package : ghostscript Version : 9.26adfsg-0+deb8u2 CVE ID : CVE-2019-3835 CVE-2019-3838 Debian Bug : 925256 925257 Cedric Buissart discovered two vulnerabilities in Ghostscript, the GPL PostScript/PDF interpreter, which could result in bypass of file system restrictions of the dSAFER sandbox. For...

[SECURITY] [DLA 1445-2] busybox regression update

Package : busybox Version : 1:1.22.0-9+deb8u3 The security update of busybox announced as DLA-1445-1 introduced a regression due to an incomplete fix for CVE-2015-9261. It was no longer possible to decompress gzip archives which exceeded a certain file size. For Debian 8 "Jessie", this problem ha...

[SECURITY] [DLA 1362-1] gcc-4.9-backport new package

Package : gcc-4.9-backport Version : 4.9.2-10+deb7u1 GCC 4.9 has been packaged as gcc-4.9-backport for Debian 7. This package will be needed by future updates to linux, and possibly other packages, to implement the "retpoline" mitigation for CVE-2017-5715 Spectre variant 2. Further information...

[SECURITY] [DSA 3796-1] apache2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3796-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 26, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3696-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3696-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 19, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3689-1] php5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3689-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 08, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3659-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3659-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 04, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3616-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3616-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 04, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3597-1] expat security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3597-1 [email protected] https://www.debian.org/security/ Luciano Bello June 07, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3560-1] php5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3560-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 27, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 400-1] pound security update

Package : pound Version : 2.6-1+deb6u1 CVE ID : CVE-2009-3555 CVE-2011-3389 CVE-2012-4929 CVE-2014-3566 This update fixes certain known vulnerabilities in pound in squeeze-lts by backporting the version in wheezy. CVE-2009-3555 The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as...

[SECURITY] [DSA 3358-1] php5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3358-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 13, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3316-1] openjdk-7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3316-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 25, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DLA 196-1] ia32-libs security update

Package : ia32-libs, ia32-libs-gtk Version : 20150413 The ia32-libs and ia32-libs-gtk packages contain 32 bit versions of various libraries for use on 64 bit systems. This update rolls in all security fixes made to these libraries since the previous update of ia32-libs and ia32-libs-gtk in Squeez...

[SECURITY] [email protected]

Package : bash Version : 4.1-3+deb6u1 CVE ID : CVE-2014-6271 Stephane Chazelas discovered a vulnerability in bash, the GNU Bourne-Again Shell, related to how environment variables are processed. In many common configurations, this vulnerability is exploitable over the network, especially if bash...

[SECURITY] [DSA 3021-2] file regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3021-2 [email protected] http://www.debian.org/security/ Luciano Bello September 10, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2727-1] openjdk-6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2727-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 25, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2514-1] iceweasel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2514-1 [email protected] http://www.debian.org/security/ Nico Golde July 17, 2012 http://www.debian.org/security/faq - -------------------------------------------------------------------------...

[SECURITY] [DSA 2405-1] apache2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2405-1 [email protected] http://www.debian.org/security/ Stefan Fritsch February 06, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA-1950-1] New webkit packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1950 [email protected] http://www.debian.org/security/ Giuseppe Iuculano December 12, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1928-1] New Linux 2.6.24 packages fix several vulnerabilities

---------------------------------------------------------------------- Debian Security Advisory DSA-1928-1 [email protected] http://www.debian.org/security/ Dann Frazier November 5, 2009 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

[SECURITY] [DSA-014-2] Correction: New version of splitvt released

---------------------------------------------------------------------------- Debian Security Advisory DSA-014-2 [email protected] http://www.debian.org/security/ Martin Schulze January 23, 2001 - ---------------------------------------------------------------------------- Package : splitvt...

[SECURITY] [DSA 5512-1] exim4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5512-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 02, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3331-2] python-cryptography security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3331-2 [email protected] https://www.debian.org/lts/security/ Chris Lamb February 27, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3206-1] heimdal security update

Debian LTS Advisory DLA-3206-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin November 26, 2022 https://wiki.debian.org/LTS Package : heimdal Version : 7.5.0+dfsg-3+deb10u1 CVE ID : CVE-2019-14870 CVE-2021-3671 CVE-2021-44758 CVE-2022-3437 CVE-2022-41916...

[SECURITY] [DSA 5287-1] heimdal security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5287-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 22, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3036-1] pjproject security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3036-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA May 31, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3029-1] cups security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3029-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz May 27, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2977-1] xz-utils security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2977-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta April 10, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2967-1] wireshark security update

Debian LTS Advisory DLA-2967-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany March 31, 2022 https://wiki.debian.org/LTS Package : wireshark Version : 2.6.20-0+deb9u3 CVE ID : CVE-2021-4181 CVE-2021-4184 CVE-2021-4185 CVE-2021-22191 CVE-2022-0581 CVE-2022-0582...

[SECURITY] [DSA 5032-1] djvulibre security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5032-1 [email protected] https://www.debian.org/security/ Florian Weimer December 28, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5003-1] samba security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5003-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 09, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2699-1] ipmitool security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2699-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz July 01, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4876-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4876-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 25, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2589-1] mupdf security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2589-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta March 12, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2531-1] python-bottle security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2531-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta January 24, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4808-1] apt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4808-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 09, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2449-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2449-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort November 13, 2020 https://wiki.debian.org/LTS -...