[SECURITY] [DSA 3855-1] jbig2dec security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3855-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 18, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3815-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3815-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 23, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 771-1] hdf5 security update

Package : hdf5 Version : 1.8.8-9+deb7u1 CVE ID : CVE-2016-4330 CVE-2016-4331 CVE-2016-4332 CVE-2016-4333 Debian Bug : 845301 Cisco Talos discovered that hdf5, a file format and library for storing scientific data, contained several vulnerabilities that could lead to arbitrary code execution when...

[SECURITY] [DSA 3743-1] python-bottle security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3743-1 [email protected] https://www.debian.org/security/ Sebastien Delafond December 20, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3696-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3696-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 19, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3682-1] c-ares security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3682-1 [email protected] https://www.debian.org/security/ Florian Weimer September 30, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 555-1] python-django security update

Package : python-django Version : 1.4.5-1+deb7u17 CVE ID : CVE-2016-6186 Debian Bug : 831799 It was discovered that Django, a high-level Python web development framework, is prone to a cross-site scripting vulnerability in the admins add/change related popup and debug view. For Debian 7 "Wheezy",...

[SECURITY] [DSA 3554-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3554-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 21, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3454-1] virtualbox security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3454-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 27, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 298-1] roundup security update

Package : roundup Version : 1.4.15-3+deb6u1 CVE ID : CVE-2012-6130 CVE-2012-6131 CVE-2012-6132 CVE-2012-6133 CVE-2012-6130 Cross-site scripting XSS vulnerability in the history display in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via a username, related ...

[SECURITY] [DLA 56-1] wordpress security update

Package : wordpress Version : 3.6.1+dfsg-1deb6u5 CVE ID : CVE-2014-2053 CVE-2014-5204 CVE-2014-5205 CVE-2014-5240 CVE-2014-5265 CVE-2014-5266 Multiple security issues have been discovered in Wordpress, a web blogging tool, resulting in denial of service or information disclosure. More information...

[SECURITY] [DSA 2616-1] nagios3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2616-1 [email protected] http://www.debian.org/security/ Jonathan Wiltshire February 03, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2384-1] cacti security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2384-1 [email protected] http://www.debian.org/security/ Luk Claes January 09, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA-2115-2] New moodle packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2115-2 [email protected] http://www.debian.org/security/ Florian Weimer October 11, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1916-1] New kdelibs packages fix SSL certificate verification weakness

------------------------------------------------------------------------ Debian Security Advisory DSA-1916-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano October 23, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1069-1] New Linux kernel 2.4.18 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1069-1 [email protected] http://www.debian.org/security/ Martin Schulze, Dann Frazier May 20th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 925-1] New phpbb2 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 925-1 [email protected] http://www.debian.org/security/ Martin Schulze December 22nd, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 6247-1] lxd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6247-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 04, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DLA 4327-1] linux security update

Debian LTS Advisory DLA-4327-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings October 13, 2025 https://wiki.debian.org/LTS Package : linux Version : 5.10.244-1 CVE ID : CVE-2021-46987 CVE-2021-47037 CVE-2021-47070 CVE-2021-47076 CVE-2021-47183 CVE-2021-47193...

[SECURITY] [DSA 5460-1] curl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5460-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 26, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3341-1] curl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3341-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk February 24, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5359-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5359-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 23, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3281-1] swift security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-3281-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta January 25, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3204-1] vim security update

Debian LTS Advisory DLA-3204-1 [email protected] https://www.debian.org/lts/security/ Helmut Grohne November 24, 2022 https://wiki.debian.org/LTS Package : vim Version : 2:8.1.0875-5+deb10u4 CVE ID : CVE-2022-0318 CVE-2022-0392 CVE-2022-0629 CVE-2022-0696 CVE-2022-1619 CVE-2022-1621...

[SECURITY] [DSA 5187-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5187-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 22, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2908-1] librecad security update

Debian LTS Advisory DLA-2908-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany February 03, 2022 https://wiki.debian.org/LTS Package : librecad Version : 2.1.2-1+deb9u3 CVE ID : CVE-2021-45341 CVE-2021-45342 CVE-2021-45343 Debian Bug : 1004518 Several security...

[SECURITY] [DLA 2824-1] firebird3.0 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2824-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler November 20, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2617-1] php-nette security update

Debian LTS Advisory DLA-2617-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany April 04, 2021 https://wiki.debian.org/LTS Package : php-nette Version : 2.4-20160731-1+deb9u1 CVE ID : CVE-2020-15227 Cyku Hong from DEVCORE discovered that php-nette, a PHP MVC...

[SECURITY] [DSA 4864-1] python-aiohttp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4864-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 27, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2542-1] tzdata new upstream version

------------------------------------------------------------------------- Debian LTS Advisory DLA-2542-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort February 02, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4841-1] slurm-llnl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4841-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 27, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2416-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2416-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort October 27, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2149-1] rails security update

Package : rails Version : 2:4.1.8-1+deb8u6 CVE ID : CVE-2020-5267 Debian Bug : 954304 In ActionView before versions 6.0.2.2 and 5.2.4.2, there is a possible XSS vulnerability in ActionViews JavaScript literal escape helpers. Views that use the j or escapejavascript methods may be susceptible to X...

[SECURITY] [DLA 2121-1] libimobiledevice security update

Package : libimobiledevice Version : 1.1.6+dfsg-3.1+deb8u1 CVE ID : CVE-2016-5104 Debian Bug : 825553 It was discovered that libimobiledevice incorrectly handled socket permissions. A remote attacker could use this issue to access services on iOS devices, contrary to expectations. For Debian 8...

[SECURITY] [DSA 4635-1] proftpd-dfsg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4635-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 26, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2095-1] storebackup security update

Package : storebackup Version : 3.2.1-1+deb8u1 CVE ID : CVE-2020-7040 Debian Bug : 949393 storeBackup.pl in storeBackup through 3.5 relies on the /tmp/storeBackup.lock pathname, which allows symlink attacks that possibly lead to privilege escalation. Local users can also create a plain file named...

[SECURITY] [DLA 1958-1] libdatetime-timezone-perl new upstream version

Package : libdatetime-timezone-perl Version : 1:1.75-2+2019c This update includes the changes in tzdata 2019c for the Perl bindings. For the list of changes, see DLA-1957-1. For Debian 8 "Jessie", this problem has been fixed in version 1:1.75-2+2019c. We recommend that you upgrade your...

[SECURITY] [DLA 1942-1] phpbb3 security update

Package : phpbb3 Version : 3.0.12-5+deb8u4 CVE ID : CVE-2019-16993 In phpBB, includes/acp/acpbbcodes.php had improper verification of a CSRF token on the BBCode page in the Administration Control Panel. An actual CSRF attack was possible if an attacker also managed to retrieve the session id of a...

[SECURITY] [DLA 1879-1] jackson-databind security update

Package : jackson-databind Version : 2.4.2-2+deb8u8 CVE ID : CVE-2019-14379 CVE-2019-14439 Debian Bug : 933393 Deserialization flaws were discovered in jackson-databind relating to EHCache and logback/jndi, which could allow an unauthenticated user to perform remote code execution. The issue was...

[SECURITY] [DLA 1714-1] libsdl2 security update

Package : libsdl2 Version : 2.0.2+dfsg1-6+deb8u1 CVE ID : CVE-2019-7572 CVE-2019-7573 CVE-2019-7574 CVE-2019-7575 CVE-2019-7576 CVE-2019-7577 CVE-2019-7578 CVE-2019-7635 CVE-2019-7636 CVE-2019-7637 CVE-2019-7638 Multiple buffer overflow security issues have been found in libsdl2, a library that...

[SECURITY] [DLA 1452-1] wordpress security update

Package : wordpress Version : 4.1+dfsg-1+deb8u18 CVE ID : CVE-2016-5836 CVE-2018-12895 Debian Bug : 902876 Two vulnerabilities were discovered in wordpress, a web blogging tool. The Common Vulnerabilities and Exposures project identifies the following issues. CVE-2016-5836 The oEmbed protocol...

[SECURITY] [DSA 4256-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4256-1 [email protected] https://www.debian.org/security/ Michael Gilbert July 26, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1088-1] irssi security update

Package : irssi Version : 0.8.15-5+deb7u2 CVE ID : CVE-2017-9468 CVE-2017-9469 Debian Bug : 864400 Irssi has some issues where remote attackers might be able to cause a crash. CVE-2017-9468 In irssi, when receiving a DCC message without source nick/host, it attempts to dereference a NULL pointer...

[SECURITY] [DLA 1022-1] tiff security update

Package : tiff Version : 4.0.2-6+deb7u15 CVE ID : CVE-2017-9936 CVE-2017-10688 Debian Bug : 866113 866611 Two vulnerabilities have been discovered in the libtiff library and the included tools, which may result in denial of service or the execution of arbitrary code. CVE-2017-9936 A crafted TIFF...

[SECURITY] [DLA 968-1] libpodofo security update

Package : libpodofo Version : 0.9.0-1.1+deb7u2 CVE ID : CVE-2017-6840 CVE-2017-6842 CVE-2017-6843 CVE-2017-6847 CVE-2017-6848 CVE-2017-7378 CVE-2017-7380 CVE-2017-7381 CVE-2017-7382 CVE-2017-7383 Debian Bug : 861557 861564 859330 859329 Several heap-based buffer overflows and NULL pointer...

[SECURITY] [DLA 874-1] jbig2dec security update

Package : jbig2dec Version : 0.13-4deb7u1 CVE ID : CVE-2016-9601 Multiple security issues have been found in the JBIG2 decoder library, which may lead to lead to denial of service or the execution of arbitrary code if a malformed image file usually embedded in a PDF document is opened. For Debian...

[SECURITY] [DLA 795-1] tiff security update

Package : tiff Version : 4.0.2-6+deb7u9 CVE ID : CVE-2016-3622 CVE-2016-3623 CVE-2016-3624 CVE-2016-3945 CVE-2016-3990 CVE-2016-9533 CVE-2016-9534 CVE-2016-9535 CVE-2016-9536 CVE-2016-9537 CVE-2016-9538 CVE-2016-9540 CVE-2016-10092 CVE-2016-10093 CVE-2017-5225 Debian Bug : 846837 820365 836570...

[BSA-114] Security update for wordpress

Craig Small [email protected] uploaded new packages for wordpress which fixed the following security problems: CVE-2016-10066, CVE-2016-10045 Potential Remote Command Execution RCE in PHPMailer CVE-2017-5488 Authenticated Cross-Site scripting XSS in update-core.php CVE-2017-5490 Stored Cross-Site...

[SECURITY] [DSA 3743-1] python-bottle security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3743-1 [email protected] https://www.debian.org/security/ Sebastien Delafond December 20, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3562-1] tardiff security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3562-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 01, 2016 https://www.debian.org/security/faq -...