[SECURITY] [DLA 1198-1] libextractor security update

Package : libextractor Version : 1:0.6.3-5+deb7u1 CVE ID : CVE-2017-15266 CVE-2017-15267 CVE-2017-15600 CVE-2017-15601 CVE-2017-15602 CVE-2017-15922 Debian Bug : 878314 880016 Leon Zhao discovered several security vulnerabilities in libextractor, a universal library and command-line tool to obtai...

[SECURITY] [DLA 1166-1] tomcat7 security update

Package : tomcat7 Version : 7.0.28-4+deb7u16 CVE ID : CVE-2017-12617 A remote code execution vulnerability has been discovered in tomcat7. When HTTP PUT was enabled e.g., via setting the readonly initialization parameter of the Default servlet to false it was possible to upload a JSP file to the...

[SECURITY] [DLA 870-1] libplist security update

Package : libplist Version : 1.8-1+deb7u3 CVE ID : CVE-2017-6435 CVE-2017-6436 CVE-2017-6439 More vulnerabilities were discovered in libplist, a library for reading and writing the Apple binary and XML property lists format. A maliciously crafted plist file could cause a denial-of-service...

[SECURITY] [DSA 3798-1] tnef security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3798-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 01, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3635-1] libdbd-mysql-perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3635-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 29, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3474-1] libgcrypt20 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3474-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 12, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 263-1] ruby1.9.1 security update

Package : ruby1.9.1 Version : 1.9.2.0-2+deb6u5 CVE ID : CVE-2012-5371 CVE-2013-0269 Debian Bug : 693024 700471 Two vulnerabilities were identified in the Ruby language interpreter, version 1.9.1. CVE-2012-5371 Jean-Philippe Aumasson identified that Ruby computed hash values without properly...

[SECURITY] [DSA 1779-1] New apt packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1779-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 26, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1572-1] New php5 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1572-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 11, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DLA 3766-1] zfs-linux security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-3766-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta March 19, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5594-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5594-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 02, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3701-1] tinyxml security update

Debian LTS Advisory DLA-3701-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin December 31, 2023 https://wiki.debian.org/LTS Package : tinyxml Version : 2.6.2-4+deb10u2 CVE ID : CVE-2023-34194 CVE-2023-40462 Debian Bug : 1059315 A reachable assertion issue has been...

[SECURITY] [DSA 5572-1] roundcube security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5572-1 [email protected] https://www.debian.org/security/ Sebastien Delafond December 04, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3306-1] python-django security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3306-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb February 01, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2561-1] ruby-mechanize security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2561-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta February 17, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4820-1] horizon security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4820-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 27, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4817-1] php-pear security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4817-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 19, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2393-1] snmptt security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2393-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA October 01, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2355-1] bind9 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2355-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz August 29, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4753-1] mupdf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4753-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 29, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2196-1] pound security update

Package : pound Version : 2.6-6+deb8u2 CVE ID : CVE-2016-10711 An issue has been found in pound, A request smuggling vulnerability was discovered in pound, a everse proxy, load balancer and HTTPS front-end for Web servers, that may allow attackers to send a specially crafted http request to a web...

[SECURITY] [DLA 2145-1] twisted security update

Package : twisted Version : 14.0.2-3+deb8u1 CVE IDs : CVE-2020-10108 CVE-2020-10109 Debian Bug : 953950 It was discovered that there were a number of HTTP request splitting vulnerabilities in Twisted, an Python event-based framework for building various types of internet applications. For more...

[SECURITY] [DLA 2128-1] openjdk-7 security update

Package : openjdk-7 Version : 7u251-2.6.21-1deb8u1 CVE ID : CVE-2020-2583 CVE-2020-2590 CVE-2020-2593 CVE-2020-2601 CVE-2020-2604 CVE-2020-2654 CVE-2020-2659 Several vulnerabilities have been discovered in the OpenJDK Java runtime, resulting in denial of service, incorrect implementation of...

[SECURITY] [DLA 1858-1] squid3 security update

Package : squid3 Version : 3.4.8-6+deb8u8 CVE ID : CVE-2019-12525 CVE-2019-12529 Squid, a high-performance proxy caching server for web clients, has been found vulnerable to denial of service attacks associated with HTTP authentication header processing. CVE-2019-12525 Due to incorrect buffer...

[SECURITY] [DLA 1684-1] systemd security update

Package : systemd Version : 215-17+deb8u10 CVE ID : CVE-2019-6454 Chris Coulson discovered a flaw in systemd leading to denial of service. An unprivileged user could take advantage of this issue to crash PID1 by sending a specially crafted D-Bus message on the system bus. For Debian 8 "Jessie",...

[SECURITY] [DLA 1596-1] squid3 security update

Package : squid3 Version : 3.4.8-6+deb8u6 CVE ID : CVE-2018-19132 Debian Bug : 912294 It was discovered that there can be a denial of service DoS vulnerability in squid3 due to a memory leak in SNMP query rejection code when SNMP is enabled. In environments where per-process memory restrictions a...

[SECURITY] [DSA 4316-1] imagemagick security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4316-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 12, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4074-1] imagemagick security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4074-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 28, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 746-1] tomcat6 security update

Package : tomcat6 Version : 6.0.45+dfsg-1deb7u4 CVE ID : CVE-2016-9774 Debian Bug : 845393 845425 846298 Paul Szabo discovered a potential privilege escalation that could be exploited in the situation envisaged in DLA-622-1. This update also addresses two regressions which were introduced by the...

[SECURITY] [DLA 555-1] python-django security update

Package : python-django Version : 1.4.5-1+deb7u17 CVE ID : CVE-2016-6186 Debian Bug : 831799 It was discovered that Django, a high-level Python web development framework, is prone to a cross-site scripting vulnerability in the admins add/change related popup and debug view. For Debian 7 "Wheezy",...

[SECURITY] [DSA 3520-1] icedove security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3520-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 18, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3456-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3456-1 [email protected] https://www.debian.org/security/ Michael Gilbert January 27, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3361-1] qemu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3361-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 18, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3010-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3010-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 22, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2862-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2862-1 [email protected] http://www.debian.org/security/ Michael Gilbert February 16, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2854-1] mumble security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2854-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 05, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2665-1] strongswan security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2665-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez April 30, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2262-2] php5 update

------------------------------------------------------------------------- Debian Security Advisory DSA-2266-2 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 01, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1941-1] New poppler packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1941-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 25, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1557-1] New phpmyadmin packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1557-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 24, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1199-1] New webmin packages fix input validation problems

------------------------------------------------------------------------ Debian Security Advisory DSA-1199-1 [email protected] http://www.debian.org/security/ Noah Meyerhans October 23, 2006 - ------------------------------------------------------------------------ Package : webmin...

[SECURITY] [DSA 1038-1] New xzgv packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1038-1 [email protected] http://www.debian.org/security/ Martin Schulze April 22nd, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 925-1] New phpbb2 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 925-1 [email protected] http://www.debian.org/security/ Martin Schulze December 22nd, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 900-3] New fetchmail-ssl packages fix potential information leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 900-3 [email protected] http://www.debian.org/security/ Martin Schulze November 22nd, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 5680-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5680-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 06, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3750-1] php-phpseclib security update

Debian LTS Advisory DLA-3750-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin March 05, 2024 https://wiki.debian.org/LTS Package : php-phpseclib Version : 2.0.30-2deb10u3 CVE ID : CVE-2024-27354 CVE-2024-27355 Security issues were discovered in php-phpseclib, a PH...

[SECURITY] [DLA 3676-1] libde265 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3676-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky November 30, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5483-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5483-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 25, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3451-1] pypdf2 security update

Debian LTS Advisory DLA-3451-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany June 09, 2023 https://wiki.debian.org/LTS Package : pypdf2 Version : 1.26.0-2+deb10u1 CVE ID : CVE-2022-24859 Debian Bug : 1009879 Sebastian Krause discovered that manipulated inline...

[SECURITY] [DLA 3360-1] ruby-sidekiq security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-3360-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta March 13, 2023 https://wiki.debian.org/LTS -...