[SECURITY] [DSA 4365-1] tmpreaper security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4365-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 10, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1496-1] lcms2 security update

Package : lcms2 Version : 2.6-3+deb8u2 CVE ID : CVE-2018-16435 Debian Bug : 907983 It was discovered that there was an integer overflow vulnerability in the "Little CMS 2" colour management library. A specially-crafted input file could lead to a heap-based buffer overflow. For Debian 8 "Jessie",...

[SECURITY] [DSA 4284-1] lcms2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4284-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 04, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4049-1] ffmpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4049-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 27, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3564-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3564-1 [email protected] https://www.debian.org/security/ Michael Gilbert May 02, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3474-1] libgcrypt20 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3474-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 12, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 325-1] linux-2.6 security update

Package : linux-2.6 Version : 2.6.32-48squeeze16 CVE ID : CVE-2015-2925 CVE-2015-5257 CVE-2015-7613 This update fixes the CVEs described below. CVE-2015-2925 Jann Horn discovered that when a subdirectory of a filesystem was bind-mounted into a chroot or mount namespace, a user that should be...

[SECURITY] [DSA 3271-1] nbd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3271-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini May 23, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2793-1] libav security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2793-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 09, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA-1940-1] New php5 packages fix several issues

------------------------------------------------------------------------ Debian Security Advisory DSA-1940-1 [email protected] http://www.debian.org/security/ Stefan Fritsch November 25, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1444-2] New php5 packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1444-2 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 23, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1430-1] New libnss-ldap packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1430-1 [email protected] http://www.debian.org/security/ Steve Kemp December 11, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DLA 4283-1] luajit security update

Debian LTS Advisory DLA-4283-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin August 25, 2025 https://wiki.debian.org/LTS Package : luajit Version : 2.1.0beta3+dfsg-5.3+deb11u1 CVE ID : CVE-2019-19391 CVE-2020-15890 CVE-2020-24372 CVE-2024-25176 CVE-2024-25177...

[SECURITY] [DSA 5680-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5680-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 06, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5676-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5676-1 [email protected] https://www.debian.org/security/ Andres Salomon May 02, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5572-1] roundcube security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5572-1 [email protected] https://www.debian.org/security/ Sebastien Delafond December 04, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5367-1] spip security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5367-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 02, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5306-1] gerbv security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5306-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 27, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5265-1] tomcat9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5265-1 [email protected] https://www.debian.org/security/ Markus Koschany October 29, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5186-1] djangorestframework security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5186-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 22, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5127-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5127-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 02, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2950-1] python-scrapy security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2950-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort March 16, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2947-1] vim security update

Debian LTS Advisory DLA-2947-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany March 11, 2022 https://wiki.debian.org/LTS Package : vim Version : 2:8.0.0197-4+deb9u5 CVE ID : CVE-2021-3984 CVE-2021-4019 CVE-2021-4069 CVE-2021-4193 CVE-2022-0213 CVE-2022-0319...

[SECURITY] [DLA 2865-1] resiprocate security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2865-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk December 29, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2826-1] mbedtls security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2826-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort November 23, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2816-1] icinga2 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2816-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler November 10, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4918-1] ruby-rack-cors security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4918-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 18, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2545-1] open-build-service security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2545-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta February 03, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4820-1] horizon security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4820-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 27, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4809-1] python-apt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4809-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 09, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2385-1] linux-4.19 security update

Debian LTS Advisory DLA-2385-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings September 28, 2020 https://wiki.debian.org/LTS Package : linux-4.19 Version : 4.19.146-1deb9u1 CVE ID : CVE-2019-3874 CVE-2019-19448 CVE-2019-19813 CVE-2019-19816 CVE-2020-10781...

[SECURITY] [DLA 2355-1] bind9 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2355-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz August 29, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2186-1] ncmpc security update

Package : ncmpc Version : 0.24-1+deb8u1 CVE ID : CVE-2018-9240 It has been discovered a NULL pointer dereference could happen in ncmpc, an ncurses-based audio player. This could result in a crash and a denial of service. For Debian 8 "Jessie", this problem has been fixed in version 0.24-1+deb8u1...

[SECURITY] [DSA 4660-1] awl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4660-1 [email protected] https://www.debian.org/security/ Sebastien Delafond April 21, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2171-1] ceph security update

Package : ceph Version : 0.80.7-2+deb8u4 CVE ID : CVE-2020-1760 Debian Bug : 956142 It was discovered that there was a header-splitting vulnerability in ceph, a distributed storage and file system. For Debian 8 "Jessie", this issue has been fixed in ceph version 0.80.7-2+deb8u4. We recommend that...

[SECURITY] [DSA 4628-1] php7.0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4628-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 18, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2076-1] slirp security update

Package : slirp Version : 1:1.0.17-7+deb8u1 CVE ID : CVE-2020-7039 Debian Bug : 949085 An issue has been found in slirp, a SLIP/PPP emulator using a dial up shell account. Due to bad memory handling in slirp a heap-based buffer overflow or other out-of-bounds access could happen, which can lead t...

[SECURITY] [DLA 2073-1] transfig security update

Package : transfig Version : 1:3.2.5.e-4+deb8u2 CVE ID : CVE-2018-16140 CVE-2019-14275 CVE-2019-19555 Several issues have been found in transfig, a XFig figure files converter. CVE-2018-16140 Buffer underwrite vulnerability in getline allows an attacker to write prior to the beginning of the buff...

[SECURITY] [DLA 1891-1] openldap security update

Package : openldap Version : 2.4.40+dfsg-1+deb8u5 CVE ID : CVE-2019-13057 CVE-2019-13565 Debian Bug : 932997 932998 Several security vulnerabilities were discovered in openldap, a server and tools to provide a standalone directory service. CVE-2019-13057 When the server administrator delegates...

[SECURITY] [DLA 1837-1] rdesktop security update

Package : rdesktop Version : 1.8.6-0+deb8u1 Debian Bug : 930387 Several security vulnerabilities were discovered in the rdesktop RDP client, which could result in buffer overflows and execution of arbitrary code. For Debian 8 "Jessie", this problem has been fixed in version 1.8.6-0+deb8u1. We...

[SECURITY] [DSA 4445-1] drupal7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4445-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 14, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1591-2] libphp-phpmailer regression update

Package : libphp-phpmailer Version : 5.2.9+dfsg-2+deb8u5 CVE ID : CVE-2018-19296 A possible regression was found in the recent security update for libphp-phpmailer, announced as DLA 1591-1. During backporting a new variable have accidentally introduced to a conditional statement from a much later...

[SECURITY] [DLA 1303-1] python-django security update

Package : python-django Version : 1.4.22-1+deb7u4 CVE ID : CVE-2018-7536 CVE-2018-7537 Several functions were extremely slow to evaluate certain inputs due to catastrophic backtracking vulnerabilities in several regular expressions. CVE-2018-7536 The django.utils.html.urlize function was extremel...

[SECURITY] [DLA 652-1] qemu security update

Package : qemu Version : 1.1.2+dfsg-6+deb7u16 CVE ID : CVE-2016-7161 CVE-2016-7170 CVE-2016-7908 Multiple vulnerabilities have been found in QEMU: CVE-2016-7161 Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU aka Quick Emulator allows attackers to execute...

[SECURITY] [DSA 3588-1] symfony security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3588-1 [email protected] https://www.debian.org/security/ Luciano Bello May 29, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3554-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3554-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 21, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3456-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3456-1 [email protected] https://www.debian.org/security/ Michael Gilbert January 27, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 2878-1] virtualbox security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2878-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 13, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2857-1] libspring-java security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2857-1 [email protected] http://www.debian.org/security/ Markus Koschany February 08, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2616-1] nagios3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2616-1 [email protected] http://www.debian.org/security/ Jonathan Wiltshire February 03, 2013 http://www.debian.org/security/faq -...