[SECURITY] [DLA 2212-1] openconnect security update

Package : openconnect Version : 6.00-2+deb8u2 CVE ID : CVE-2020-12823 Debian Bug : 960620 OpenConnect, a VPN software, had a buffer overflow, causing a denial of service application crash or possibly unspecified other impact, via crafted certificate data to getcertname in gnutls.c. For Debian 8...

[SECURITY] [DSA 4637-1] network-manager-ssh security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4637-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 09, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4493-1] postgresql-11 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4493-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 08, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4437-1] gst-plugins-base1.0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4437-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 29, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4395-2] chromium regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4395-2 [email protected] https://www.debian.org/security/ Michael Gilbert February 26, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4243-1] cups security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4243-1 [email protected] https://www.debian.org/security/ Luciano Bello July 11, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1249-1] smarty3 security update

Package : smarty3 Version : 3.1.10-2+deb7u2 CVE ID : CVE-2017-1000480 Debian Bug : 886460 It was discovered that there was a code-injection vulnerability in smarty3, a PHP template engine. A via specially-crafted filename in comments could result in arbitray code execution. Thanks to Mike Gabriel...

[SECURITY] [DSA 3957-1] ffmpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3957-1 [email protected] https://www.debian.org/security/ Luciano Bello August 28, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1045-1] graphicsmagick security update

Package : graphicsmagick Version : 1.3.16-1.1+deb7u8 CVE ID : CVE-2017-10799 CVE-2017-11102 CVE-2017-11140 CVE-2017-11403 CVE-2017-11636 CVE-2017-11637 CVE-2017-11638 CVE-2017-11641 CVE-2017-11642 CVE-2017-11643 Debian Bug : 867077 867746 870149 Multiple security vulnerabilities, NULL pointer...

[SECURITY] [DLA 983-1] tiff3 security update

Package : tiff3 Version : 3.9.6-11+deb7u6 CVE ID : CVE-2016-10095 CVE-2017-9147 CVE-2017-9403 CVE-2017-9404 tiff3 was affected by multiple memory leaks CVE-2017-9403, CVE-2017-9404 that could result in denial of service. Furthermore, while the current version in Debian was already patched for...

[SECURITY] [DLA 947-1] icu security update

Package : icu Version : 4.8.1.1-12+deb7u7 CVE ID : CVE-2017-7867 CVE-2017-7868 It was discovered that icu, the International Components for Unicode library, did not correctly validate its input. An attacker could use this problem to trigger an out-of-bound write through a heap-based buffer...

[SECURITY] [DLA 945-1] mysql-connector-java security update

Package : mysql-connector-java Version : 5.1.42-1deb7u1 CVE ID : CVE-2017-3523 CVE-2017-3586 CVE-2017-3589 Several issues were discovered in mysql-connector-java that allow attackers to execute arbitrary code, insert or delete access to some of MySQL Connectors accessible data as well as...

[SECURITY] [DLA 753-1] tomcat7 security update

Package : tomcat7 Version : 7.0.28-4+deb7u8 CVE ID : CVE-2016-9774 Debian Bug : 845393 845425 846298 Paul Szabo discovered a potential privilege escalation that could be exploited in the situation envisaged in DLA-622-1. This update also addresses several regressions stemming from incomplete fixe...

[SECURITY] [DLA 498-1] ruby-activemodel-3.2 security update

Package : ruby-activemodel-3.2 Version : 3.23.2.6-3+deb7u1 CVE ID : CVE-2016-0753 Active Model in Ruby on Rails 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 supports the use of instance-level writers for class accessors, which allows remote attackers to bypass intende...

[SECURITY] [DSA 3512-1] libotr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3512-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 09, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3478-1] libgcrypt11 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3478-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 15, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3244-1] owncloud security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3244-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 02, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3149-1] condor security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3149-1 [email protected] http://www.debian.org/security/ Sebastien Delafond February 02, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2647-1] firebird2.1 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2647-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 15, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2172-1] moodle security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2172-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 22, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1436-1] New Linux 2.6.18 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1436-1 [email protected] http://www.debian.org/security/ dann frazier December 20th, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1371-1] New phpwiki packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1371-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst September 11th, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1362-1] New lighttpd packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1362 [email protected] http://www.debian.org/security/ Steve Kemp August 29th, 2007 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

[SECURITY] [DSA 1039-1] New blender packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1039-1 [email protected] http://www.debian.org/security/ Martin Schulze April 24th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 967-1] New elog packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 967-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 10th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 887-1] New ClamAV packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 887-1 [email protected] http://www.debian.org/security/ Martin Schulze November 7th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DLA 4149-1] nagvis security update

Debian LTS Advisory DLA-4149-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert May 01, 2025 https://wiki.debian.org/LTS Package : nagvis Version : 1:1.9.25-2+deb11u1 CVE ID : CVE-2021-33178 CVE-2022-3979 CVE-2022-46945 CVE-2023-46287 CVE-2024-13722 CVE-2024-13723...

[SECURITY] [DSA 5880-1] freetype security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5880-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 17, 2025 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5530-1] ruby-rack security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5530-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 22, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5231-1] connman security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5231-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 17, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5144-1] condor security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5144-1 [email protected] https://www.debian.org/security/ Markus Koschany May 22, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2990-1] jackson-databind security update

Debian LTS Advisory DLA-2990-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany May 02, 2022 https://wiki.debian.org/LTS Package : jackson-databind Version : 2.8.6-1+deb9u10 CVE ID : CVE-2020-36518 Debian Bug : 1007109 It was discovered that the implementation of...

[SECURITY] [DSA 4946-1] openjdk-11 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4946-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 29, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4931-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4931-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 15, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4861-1] screen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4861-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 21, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2506-1] awstats security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2506-1 [email protected] https://www.debian.org/lts/security/ December 23, 2020 https://wiki.debian.org/LTS - -------------------------------------------------------------------------...

[SECURITY] [DLA 2445-1] libmaxminddb security update

Debian LTS Advisory DLA-2445-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany November 10, 2020 https://wiki.debian.org/LTS Package : libmaxminddb Version : 1.2.0-1+deb9u1 CVE ID : CVE-2020-28241 Debian Bug : 973878 A heap-based buffer over-read has been found in...

[SECURITY] [DLA 2375-1] inspircd security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2375-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA September 19, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2117-1] zsh security update

Package : zsh Version : 5.0.7-5+deb8u1 CVE ID : CVE-2019-20044 Debian Bug : 951458 A privilege escalation vulnerability was discovered in zsh, a shell with lots of features, whereby a user could regain a formerly elevated privelege level even when such an action should not be permitted. For Debia...

[SECURITY] [DLA 1912-1] expat security update

Package : expat Version : 2.1.0-6+deb8u6 CVE IDs : CVE-2019-15903 Debian Bug : 939394 It was discovered that there was a heap-based buffer overread vulnerability in expat, an XML parsing library. A specially-crafted XML input could fool the parser into changing from DTD parsing to document parsin...

[SECURITY] [DSA 4351-1] libphp-phpmailer security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4351-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 07, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1475-1] tomcat-native security update

Package : tomcat-native Version : 1.1.32repack-2+deb8u2 CVE ID : CVE-2018-8019 CVE-2018-8020 When using an OCSP responder Tomcat Native did not correctly handle invalid responses. This allowed for revoked client certificates to be incorrectly identified. It was therefore possible for users to...

[SECURITY] [DSA 4192-1] libmad security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4192-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 04, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4092-1] awstats security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4092-1 [email protected] https://www.debian.org/security/ Sebastien Delafond January 19, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4085-1] xmltooling security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4085-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 12, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4017-1] openssl1.0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4017-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 03, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3861-1] libtasn1-6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3861-1 [email protected] https://www.debian.org/security/ Sebastien Delafond May 24, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3826-1] tryton-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3826-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 04, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3797-1] mupdf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3797-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 28, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3753-1] libvncserver security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3753-1 [email protected] https://www.debian.org/security/ Sebastien Delafond January 05, 2017 https://www.debian.org/security/faq -...