[SECURITY] [DLA 2683-1] rxvt security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2683-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta June 09, 2021 https://wiki.debian.org/LTS - -----------------------------------------------------------------------...

[SECURITY] [DLA 2653-1] libxml2 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2653-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort May 10, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4890-1] ruby-kramdown security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4890-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 12, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2393-1] snmptt security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2393-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA October 01, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4753-1] mupdf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4753-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 29, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4743-1] ruby-kramdown security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4743-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 10, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4691-1] pdns-recursor security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4691-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 21, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2184-1] jsch security update

Package : jsch Version : 0.1.51-1+deb8u1 CVE ID : CVE-2016-5725 It was discovered that there was a path traversal vulnerability in jsch, a pure Java implementation of the SSH2 protocol. For Debian 8 "Jessie", this problem has been fixed in version 0.1.51-1+deb8u1. We recommend that you upgrade yo...

[SECURITY] [DSA 4653-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4653-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 04, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2128-1] openjdk-7 security update

Package : openjdk-7 Version : 7u251-2.6.21-1deb8u1 CVE ID : CVE-2020-2583 CVE-2020-2590 CVE-2020-2593 CVE-2020-2601 CVE-2020-2604 CVE-2020-2654 CVE-2020-2659 Several vulnerabilities have been discovered in the OpenJDK Java runtime, resulting in denial of service, incorrect implementation of...

[SECURITY] [DSA 4627-1] webkit2gtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4627-1 [email protected] https://www.debian.org/security/ Alberto Garcia February 17, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2057-1] pillow security update

Package : pillow Version : 2.6.1-2+deb8u4 CVE IDs : CVE-2019-19911 CVE-2020-5312 CVE-2020-5313 Debian Bug : 948224 It was discovered that there were three vulnerabilities in Pillow, an imaging library for the Python programming language: CVE-2019-19911: Prevent a denial-of-service vulnerability...

[SECURITY] [DLA 2035-1] libpgf security update

Package : libpgf Version : 6.14.12-3+deb8u1 CVE ID : CVE-2015-6673 An issue has been found in libpgf, a library to handle Progressive Graphics File PGF. Due to lack of validation of ColorTableSize, a use-after-free issue might appear in Decoder.cpp For Debian 8 "Jessie", this problem has been fix...

[SECURITY] [DSA 4559-1] proftpd-dfsg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4559-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 05, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1770-1] gst-plugins-base1.0 security update

Package : gst-plugins-base1.0 Version : 1.4.4-2+deb8u2 CVE ID : CVE-2019-9928 The RTSP connection parser in the base GStreamer packages version 1.0, which is a streaming media framework, was vulnerable against an heap-based buffer overflow by sending a longer than allowed session id in a response...

[SECURITY] [DSA 4319-1] spice security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4319-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 15, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4193-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4193-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 05, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4074-1] imagemagick security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4074-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 28, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 870-1] libplist security update

Package : libplist Version : 1.8-1+deb7u3 CVE ID : CVE-2017-6435 CVE-2017-6436 CVE-2017-6439 More vulnerabilities were discovered in libplist, a library for reading and writing the Apple binary and XML property lists format. A maliciously crafted plist file could cause a denial-of-service...

[SECURITY] [DSA 3798-1] tnef security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3798-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 01, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 779-1] tomcat7 security update

Package : tomcat7 Version : 7.0.28-4+deb7u9 CVE ID : CVE-2016-8745 Debian Bug : 849949 A bug in the error handling of the send file code for the NIO HTTP connector resulted in the current Processor object being added to the Processor cache multiple times. This in turn meant that the same Processo...

[SECURITY] [DSA 3715-1] moin security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3715-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 15, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 597-1] libupnp security update

Package : libupnp Version : 1.6.17-1.2+deb7u1 CVE ID : CVE-2016-6255 Debian Bug : 831857 It has been discovered that libupnps default behaviour allows anyone to write to the filesystem of the system running a libupnp-based server application. For Debian 7 "Wheezy", these problems have been fixed ...

[SECURITY] [DSA 3538-1] libebml security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3538-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 31, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3495-1] xymon security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3495-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 29, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3448-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3448-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 19, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 263-1] ruby1.9.1 security update

Package : ruby1.9.1 Version : 1.9.2.0-2+deb6u5 CVE ID : CVE-2012-5371 CVE-2013-0269 Debian Bug : 693024 700471 Two vulnerabilities were identified in the Ruby language interpreter, version 1.9.1. CVE-2012-5371 Jean-Philippe Aumasson identified that Ruby computed hash values without properly...

[SECURITY] [DLA 214-1] libxml-libxml-perl security update

Package : libxml-libxml-perl Version : 1.70.ds-1+deb6u1 CVE ID : CVE-2015-3451 Debian Bug : 783443 In some cases, XML::LibXML did not respect the request to disable entities expansion. Applications handling untrusted XML files can then be tricked into disclosing the content of local files. In...

[SECURITY] [DSA 2971-1] dbus security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2971-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso July 02, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2892-1] a2ps security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2892-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso March 31, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2862-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2862-1 [email protected] http://www.debian.org/security/ Michael Gilbert February 16, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2710-1] xml-security-c security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2710-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso June 18, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2671-1] request-tracker4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2671-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 22, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2665-1] strongswan security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2665-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez April 30, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2582-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2582-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez December 07, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2563-1] viewvc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2563-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst October 23, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2281-1] opie security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2281-1 [email protected] http://www.debian.org/security/ Steffen Joeris July 21, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2262-2] php5 update

------------------------------------------------------------------------- Debian Security Advisory DSA-2266-2 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 01, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1742-1] New libsnd packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA-1742-1 [email protected] http://www.debian.org/security/ Nico Golde March 16th, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1038-1] New xzgv packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1038-1 [email protected] http://www.debian.org/security/ Martin Schulze April 22nd, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 925-1] New phpbb2 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 925-1 [email protected] http://www.debian.org/security/ Martin Schulze December 22nd, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 5895-1] xz-utils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5895-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 05, 2025 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3714-1] keystone security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3714-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès January 21, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5483-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5483-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 25, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5440-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5440-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 28, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3451-1] pypdf2 security update

Debian LTS Advisory DLA-3451-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany June 09, 2023 https://wiki.debian.org/LTS Package : pypdf2 Version : 1.26.0-2+deb10u1 CVE ID : CVE-2022-24859 Debian Bug : 1009879 Sebastian Krause discovered that manipulated inline...

[SECURITY] [DLA 3285-1] libapache-session-browseable-perl security update

Debian LTS Advisory DLA-3285-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin January 28, 2023 https://wiki.debian.org/LTS Package : libapache-session-browseable-perl Version : 1.3.0-1+deb10u1 CVE ID : CVE-2020-36659 In Apache::Session::Browseable before 1.3.6,...

[SECURITY] [DLA 3246-1] node-hawk security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3246-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb December 23, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3084-1] ndpi security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3084-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky August 27, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5206-1] trafficserver security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5206-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 12, 2022 https://www.debian.org/security/faq -...