[SECURITY] [DSA 1199-1] New webmin packages fix input validation problems

------------------------------------------------------------------------ Debian Security Advisory DSA-1199-1 [email protected] http://www.debian.org/security/ Noah Meyerhans October 23, 2006 - ------------------------------------------------------------------------ Package : webmin...

[SECURITY] [DSA 1084-1] New typespeed packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1084-1 [email protected] http://www.debian.org/security/ Steve Kemp May 31st, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 900-3] New fetchmail-ssl packages fix potential information leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 900-3 [email protected] http://www.debian.org/security/ Martin Schulze November 22nd, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 6298-1] imagemagick security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6298-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 26, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3928-1] ffmpeg security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3928-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort October 21, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3701-1] tinyxml security update

Debian LTS Advisory DLA-3701-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin December 31, 2023 https://wiki.debian.org/LTS Package : tinyxml Version : 2.6.2-4+deb10u2 CVE ID : CVE-2023-34194 CVE-2023-40462 Debian Bug : 1059315 A reachable assertion issue has been...

[SECURITY] [DSA 5310-1] ruby-image-processing security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5310-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 31, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3077-1] ruby-tzinfo security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3077-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb August 18, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2874-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2874-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort January 04, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2820-1] atftp security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2820-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz November 17, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2770-1] weechat security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2770-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk September 30, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2561-1] ruby-mechanize security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2561-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta February 17, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2552-1] connman security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2552-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz February 09, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2384-1] yaws security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2384-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz September 26, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2344-1] mongodb security update

Debian LTS Advisory DLA-2344-1 [email protected] https://www.debian.org/lts/security/ August 24, 2020 https://wiki.debian.org/LTS Package : mongodb Version : 1:3.2.11-2+deb9u2 CVE ID : CVE-2020-7923 Debian Bug : A denial of service vulnerability was discovered in mongodb, an...

[SECURITY] [DLA 2075-1] jsoup security update

Package : jsoup Version : 1.8.1-1+deb8u1 CVE ID : CVE-2015-6748 An issue has been found in jsoup, a Java HTML parser that makes sense of real-world HTML soup. Due to bad handling of missing at EOF a cross-site scripting XSS vulnerability could appear. For Debian 8 "Jessie", this problem has been...

[SECURITY] [DLA 2009-1] tiff security update

Package : tiff Version : 4.0.3-12.3+deb8u10 CVE ID : CVE-2017-17095 CVE-2018-12900 CVE-2018-18661 CVE-2019-6128 CVE-2019-17546 Several issues have been found in tiff, a Tag Image File Format library. CVE-2019-17546 The RGBA interface contains an integer overflow that might lead to heap buffer...

[SECURITY] [DSA 4548-1] openjdk-8 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4548-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 21, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1900-2] apache2 regression update

Package : apache2 Version : 2.4.10-10+deb8u16 CVE ID : CVE-2019-10092 Debian Bug : 941202 The update of apache2 released as DLA-1900-1 contained an incomplete fix for CVE-2019-10092, a limited cross-site scripting issue affecting the modproxy error page. The old patch rather introduced a new CSRF...

[SECURITY] [DLA-1874-1] postgresql-9.4 security update

Package : postgresql-9.4 Version : 9.4.24-0+deb8u1 CVE ID : CVE-2019-10208 CVE-2019-10208: TYPE in pgtemp executes arbitrary SQL during SECURITY DEFINER execution Versions Affected: 9.4 - 11 Given a suitable SECURITY DEFINER function, an attacker can execute arbitrary SQL under the identity of th...

[SECURITY] [DSA 4454-2] qemu regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4454-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 06, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4435-1] libpng1.6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4435-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 27, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4406-1] waagent security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4406-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 12, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4364-1] ruby-loofah security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4364-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 08, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1522-1] strongswan security update

Package : strongswan Version : 5.2.1-6+deb8u7 CVE ID : CVE-2018-16151 CVE-2018-16152 Sze Yiu Chau and his team from Purdue University and The University of Iowa found several security issues in the gmp plugin for strongSwan, an IKE/IPsec suite. CVE-2018-16151 The OID parser in the ASN.1 code in g...

[SECURITY] [DLA 1340-1] sam2p security update

Package : sam2p Version : 0.49.1-1+deb7u3 CVE ID : CVE-2018-7487 CVE-2018-7551 CVE-2018-7552 CVE-2018-7553 CVE-2018-7554 Multiple invalid frees and buffer-overflow vulnerabilities were discovered in sam2p, a utility to convert raster images and other image formats, that may lead to a...

[SECURITY] [DSA 4162-1] irssi security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4162-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 01, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1198-1] libextractor security update

Package : libextractor Version : 1:0.6.3-5+deb7u1 CVE ID : CVE-2017-15266 CVE-2017-15267 CVE-2017-15600 CVE-2017-15601 CVE-2017-15602 CVE-2017-15922 Debian Bug : 878314 880016 Leon Zhao discovered several security vulnerabilities in libextractor, a universal library and command-line tool to obtai...

[SECURITY] [DSA 3923-1] freerdp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3923-1 [email protected] https://www.debian.org/security/ Sebastien Delafond August 01, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3896-1] apache2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3896-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 22, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3882-1] request-tracker4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3882-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 15, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3815-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3815-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 23, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 832-1] bitlbee security update

Package : bitlbee Version : 3.0.5-1.2+deb7u1 CVE ID : CVE-2016-10188 CVE-2016-10189 CVE-2017-5668 CVE-2017-5668 Fix for incomplete fix for "Null pointer dereference with file transfer request from unknown contacts". Though this package wasnt in Wheezy with this issue, I mention it here. The fix w...

[SECURITY] [DLA 746-1] tomcat6 security update

Package : tomcat6 Version : 6.0.45+dfsg-1deb7u4 CVE ID : CVE-2016-9774 Debian Bug : 845393 845425 846298 Paul Szabo discovered a potential privilege escalation that could be exploited in the situation envisaged in DLA-622-1. This update also addresses two regressions which were introduced by the...

[SECURITY] [DLA 555-1] python-django security update

Package : python-django Version : 1.4.5-1+deb7u17 CVE ID : CVE-2016-6186 Debian Bug : 831799 It was discovered that Django, a high-level Python web development framework, is prone to a cross-site scripting vulnerability in the admins add/change related popup and debug view. For Debian 7 "Wheezy",...

[SECURITY] [DSA 3474-1] libgcrypt20 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3474-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 12, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 264-1] libmodule-signature-perl security update

Package : libmodule-signature-perl Version : 0.63-1+squeeze2 CVE ID : CVE-2015-3406 CVE-2015-3407 CVE-2015-3408 CVE-2015-3409 Debian Bug : 783451 John Lightsey discovered multiple vulnerabilities in Module::Signature, a Perl module to manipulate CPAN SIGNATURE files. The Common Vulnerabilities an...

[SECURITY] [DSA 3010-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3010-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 22, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2745-1] linux security update

---------------------------------------------------------------------- Debian Security Advisory DSA-2745-1 [email protected] http://www.debian.org/security/ Dann Frazier August 28, 2013 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

[SECURITY] [DSA 2000-1] New ffmpeg packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2000-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 18, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1941-1] New poppler packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1941-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 25, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1557-1] New phpmyadmin packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1557-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 24, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 5826-1] smarty3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5826-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 10, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5673-1] glibc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5673-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 23, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5594-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5594-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 02, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3291-1] node-object-path security update

Debian LTS Advisory DLA-3291-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin January 29, 2023 https://wiki.debian.org/LTS Package : node-object-path Version : 0.11.4-2+deb10u2 CVE ID : CVE-2021-3805 CVE-2021-23434 It was discovered that node-object-path, a Node.j...

[SECURITY] [DLA 3231-1] dlt-daemon security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-3231-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta December 07, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3074-1] epiphany-browser security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3074-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 18, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2808-1] python3.5 security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2808-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta November 05, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4932-1] tor security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4932-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 18, 2021 https://www.debian.org/security/faq -...