[SECURITY] [DLA 66-1] apache2 security update

Package : apache2 Version : 2.2.16-6+squeeze13 CVE ID : CVE-2013-6438 CVE-2014-0118 CVE-2014-0226 CVE-2014-0231 CVE-2014-0231: prevent denial of service in modcgid. CVE-2014-0226: prevent denial of service via race in modstatus. CVE-2014-0118: fix resource consumption via moddeflate body...

[SECURITY] [email protected]

Package : bash Version : 4.1-3+deb6u1 CVE ID : CVE-2014-6271 Stephane Chazelas discovered a vulnerability in bash, the GNU Bourne-Again Shell, related to how environment variables are processed. In many common configurations, this vulnerability is exploitable over the network, especially if bash...

openssl security update

Package: openssl Version: 0.9.8o-4squeeze16 CVE ID: CVE-2014-0224 CVE-2012-4929 CVE-2014-0224 This update updates the upstream fix for CVE-2014-0224 to address problems with renegotiation under some conditions. original text: KIKUCHI Masashi discovered that carefully crafted handshakes can force...

[SECURITY] [DSA 2809-1] ruby1.8 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2809-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 04, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2621-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2621-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst February 13, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2460-1] asterisk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2460-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 25, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2345-1] icedove security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2345-1 [email protected] http://www.debian.org/security/ Florian Weimer November 11, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA-2141-1] New apache2 packages add backward compatibility option

------------------------------------------------------------------------ Debian Security Advisory DSA-2141-3 [email protected] http://www.debian.org/security/ Stefan Fritsch January 06, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA-2105-1] New freetype packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2105-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano September 07, 2010 http://www.debian.org/security/faq -...

[Backports-security-announce] Security Update for xulrunner

Alexander Reichle-Schmehl uploaded new packages for xulrunner which fixed the following security problems: CVE-2010-1211 Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of...

[SECURITY] [DSA 1984-1] New libxerces2-java packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1984-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano January 30, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1844-1] New Linux 2.6.24 packages fix several vulnerabilities

---------------------------------------------------------------------- Debian Security Advisory DSA-1844-1 [email protected] http://www.debian.org/security/ Dann Frazier July 28, 2009 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

[SECURITY] [DSA 1509-1] New koffice packages fix multiple vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1509-1 [email protected] http://www.debian.org/security/ Noah Meyerhans February 25, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1381-2] New Linux 2.6.18 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1381-2 [email protected] http://www.debian.org/security/ Dann Frazier October 12th, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1363-1] New Linux 2.6.18 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1363-1 [email protected] http://www.debian.org/security/ Dann Frazier August 31st, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1212-1] New openssh packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1212-1 [email protected] http://www.debian.org/security/ Noah Meyerhans November 15, 2006 - ------------------------------------------------------------------------ Package : openssh...

[SECURITY] [DSA 1103-1] New Linux kernel 2.6.8 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1103-1 [email protected] http://www.debian.org/security/ Dann Frazier, Troy Heber June 27th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 506-1] New neon packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 506-1 [email protected] http://www.debian.org/security/ Martin Schulze May 19th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 455-1] New libxml packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 455-1 [email protected] http://www.debian.org/security/ Martin Schulze March 3rd, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA-078-1] slrn command invocation

Package : slrn Problem type : remote command invocation Debian-specific: no Byrial Jensen found a nasty problem in slrn a threaded news reader. The notice on slrn-announce describes it as follows: When trying to decode binaries, the built-in code executes any shell scripts the article might...

[SECURITY] [DLA 3638-1] h2o security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3638-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky October 29, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3617-2] tomcat9 regression update

Debian LTS Advisory DLA-3617-2 [email protected] https://www.debian.org/lts/security/ Markus Koschany October 17, 2023 https://wiki.debian.org/LTS Package : tomcat9 Version : 9.0.31-1deb10u10 CVE ID : CVE-2023-44487 A regression was discovered in the Http2UpgradeHandler class of Tomcat ...

[SECURITY] [DSA 5409-1] libssh security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5409-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 23, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3429-1] imagemagick security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3429-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucaries May 21, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5066-1] ruby2.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5066-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 03, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5011-1] salt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5011-1 [email protected] https://www.debian.org/security/ Markus Koschany November 19, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4938-1] linuxptp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4938-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 13, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2651-1] python-django security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2651-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb May 06, 2021 https://wiki.debian.org/LTS - -------------------------------------------------------------------------...

[SECURITY] [DLA 2603-1] libmediainfo security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2603-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb March 23, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4818-1] sympa security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4818-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 23, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2498-1] xerces-c security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2498-1 [email protected] https://www.debian.org/lts/security/ December 17, 2020 https://wiki.debian.org/LTS - -------------------------------------------------------------------------...

[SECURITY] [DSA 4810-1] lxml security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4810-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 13, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4790-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4790-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 12, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4773-1] yaws security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4773-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 16, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2315-1] gupnp security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2315-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 06, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2303-1] libssh security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2303-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany July 31, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2270-1] jackson-databind security update

Package : jackson-databind Version : 2.4.2-2+deb8u15 CVE ID : CVE-2020-14060 CVE-2020-14061 CVE-2020-14062 CVE-2020-14195 There were several CVEs reported against src:jackson-databind, which are as follows: CVE-2020-14060 FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction...

[SECURITY] [DLA 2243-1] firefox-esr security update [REVISED]

Package : firefox-esr Version : 68.9.0esr-1deb8u2 CVE ID : CVE-2020-12399 CVE-2020-12405 CVE-2020-12406 CVE-2020-12410 Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or a timing attack on cryptographic...

[SECURITY] [DLA 2139-1] dojo security update

Package : dojo Version : 1.10.2+dfsg-1+deb8u3 CVE ID : CVE-2020-5258 CVE-2020-5259 Debian Bug : 953585 953587 The following CVEs were reported against dojo: CVE-2020-5258 In affected versions of dojo, the deepCopy method is vulnerable to Prototype Pollution. An attacker could manipulate these...

[SECURITY] [DLA 2072-1] gpac security update

Package : gpac Version : 0.5.0+svn5324dfsg1-1+deb8u5 CVE ID : CVE-2018-21015 CVE-2018-21016 CVE-2019-13618 CVE-2019-20161 CVE-2019-20162 CVE-2019-20163 CVE-2019-20165 CVE-2019-20170 CVE-2019-20171 CVE-2019-20208 Debian Bug : 940882 932242 Multiple issues were found in gpac, a multimedia framework...

[SECURITY] [DLA 1977-1] libvncserver security update

Package : libvncserver Version : 0.9.9+dfsg2-6.1+deb8u6 CVE ID : CVE-2019-15681 Debian Bug : 943793 LibVNC contained a memory leak CWE-655 in VNC server code, which allowed an attacker to read stack memory and could be abused for information disclosure. For Debian 8 "Jessie", this problem has bee...

[SECURITY] [DSA 4497-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4497-1 [email protected] https://www.debian.org/security/ Ben Hutchings August 13, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4431-1] libssh2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4431-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 13, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4363-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4363-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 08, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4274-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4274-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 16, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1369-1] linux security update

Package : linux Version : 3.2.101-1 CVE ID : CVE-2017-0861 CVE-2017-5715 CVE-2017-13166 CVE-2017-16526 CVE-2017-16911 CVE-2017-16912 CVE-2017-16913 CVE-2017-16914 CVE-2017-18017 CVE-2017-18203 CVE-2017-18216 CVE-2018-1068 CVE-2018-1092 CVE-2018-5332 CVE-2018-5333 CVE-2018-5750 CVE-2018-5803...

[SECURITY] [DSA 4014-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4014-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 01, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1139-1] imagemagick security update

Package : imagemagick Version : 8:6.7.7.10-5+deb7u18 CVE ID : CVE-2017-15277 CVE-2017-15281 Debian Bug : 878578 878579 This update fixes two vulnerabilities in ImageMagick: CVE-2017-15277 An uninitialized data structure could lead to information disclosure when reading a specially crafted GIF fil...

[SECURITY] [DSA 3999-1] wpa security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3999-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez October 16, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3920-1] qemu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3920-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 25, 2017 https://www.debian.org/security/faq -...