[SECURITY] [DLA 1912-1] expat security update

Package : expat Version : 2.1.0-6+deb8u6 CVE IDs : CVE-2019-15903 Debian Bug : 939394 It was discovered that there was a heap-based buffer overread vulnerability in expat, an XML parsing library. A specially-crafted XML input could fool the parser into changing from DTD parsing to document parsin...

[SECURITY] [DSA 4351-1] libphp-phpmailer security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4351-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 07, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1475-1] tomcat-native security update

Package : tomcat-native Version : 1.1.32repack-2+deb8u2 CVE ID : CVE-2018-8019 CVE-2018-8020 When using an OCSP responder Tomcat Native did not correctly handle invalid responses. This allowed for revoked client certificates to be incorrectly identified. It was therefore possible for users to...

[SECURITY] [DSA 4192-1] libmad security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4192-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 04, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4085-1] xmltooling security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4085-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 12, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4017-1] openssl1.0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4017-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 03, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3826-1] tryton-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3826-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 04, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3797-1] mupdf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3797-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 28, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3753-1] libvncserver security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3753-1 [email protected] https://www.debian.org/security/ Sebastien Delafond January 05, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3676-1] unadf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3676-1 [email protected] https://www.debian.org/security/ Luciano Bello September 24, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3544-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3544-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 07, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3522-1] squid3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3522-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 20, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3418-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3418-1 [email protected] https://www.debian.org/security/ Michael Gilbert December 14, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3402-1] symfony security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3402-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 24, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3320-1] openafs security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3320-1 [email protected] https://www.debian.org/security/ Sebastien Delafond July 30, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3305-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3305-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini July 08, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DLA 154-1] nss security update

Package : nss Version : 3.12.8-1+squeeze11 CVE ID : CVE-2011-3389 CVE-2014-1569 Debian Bug : 773625 nss 3.12.8-1+squeeze11 fixes two security issues: CVE-2011-3389 SSL 3.0 and TLS 1.0 connections were vulnerable to some chosen plaintext attacks which allowed man-in-the middle attackers to obtain...

[SECURITY] [DLA 142-1] privoxy security update

Package : privoxy Version : 3.0.16-1+deb6u1 CVE ID : CVE-2015-1031 CVE-2015-1381 CVE-2015-1382 Several vulnerabilities have been fixed in privoxy, a privacy enhancing HTTP proxy: CVE-2015-1031, CID66394: unmap: Prevent use-after-free if the map only consists of one item. CVE-2015-1031, CID66376 a...

[SECURITY] [DSA 2939-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2939-1 [email protected] http://www.debian.org/security/ Michael Gilbert May 31, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2829-1] hplip security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2829-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 28, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2648-1] firebird2.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2648-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 15, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2578-1] rssh security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2578-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez November 28, 2012 http://www.debian.org/security/faq -...

[BSA-023] Security Update for drupal6

Gerfried Fuchs uploaded new packages for drupal6 which fixed the following security problems: CVE-2010-2250 A user-supplied value is directly output during installation allowing a malicious user to craft a URL and perform a cross-site scripting attack. The exploit can only be conducted on sites n...

[SECURITY] [DSA 1742-1] New libsnd packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA-1742-1 [email protected] http://www.debian.org/security/ Nico Golde March 16th, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1502-1] New wordpress packages fix multiple vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1502-1 [email protected] http://www.debian.org/security/ Noah Meyerhans February 22, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA-311-1] New kernel packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 311-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 8th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 5884-1] libxslt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5884-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 23, 2025 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5721-1] ffmpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5721-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 26, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3797-1] frr security update

Debian LTS Advisory DLA-3797-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost April 28, 2024 https://wiki.debian.org/LTS Package : frr Version : 7.5.1-1.1+deb10u2 CVE ID : CVE-2022-26125 CVE-2022-26126 CVE-2022-26127 CVE-2022-26128 CVE-2022-26129 CVE-2022-37035...

[SECURITY] [DLA 3385-1] trafficserver security update

Debian LTS Advisory DLA-3385-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany April 05, 2023 https://wiki.debian.org/LTS Package : trafficserver Version : 8.1.6+ds-1deb10u1 CVE ID : CVE-2022-31778 CVE-2022-31779 CVE-2022-32749 CVE-2022-37392 Several vulnerabiliti...

[SECURITY] [DSA 5360-1] emacs security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5360-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 23, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5127-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5127-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 02, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2966-1] libgc security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2966-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz March 30, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2946-1] tryton-proteus security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2946-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort March 11, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5040-1] lighttpd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5040-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 11, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2776-1] apache2 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2776-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler October 02, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2597-1] velocity-tools security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2597-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb March 17, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4870-1] pygments security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4870-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 12, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2590-1] pygments security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2590-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort March 12, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4807-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4807-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 08, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2373-1] qemu security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2373-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA September 13, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4714-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4714-1 [email protected] https://www.debian.org/security/ Michael Gilbert July 01, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4678-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4678-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 06, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4586-1] ruby2.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4586-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 17, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1878-1] php5 security update

Package : php5 Version : 5.6.40+dfsg-0+deb8u5 CVE ID : CVE-2019-11041 CVE-2019-11042 Two heap buffer overflows were found in the EXIF parsing code of PHP, a widely-used open source general purpose scripting language. For Debian 8 "Jessie", these problems have been fixed in version...

[SECURITY] [DLA 1649-1] spice security update

Package : spice Version : 0.12.5-1+deb8u7 CVE ID : CVE-2019-3813 Debian Bug : 920762 Christophe Fergeau discovered an out-of-bounds read vulnerability in spice, a SPICE protocol client and server library, which might result in denial of service spice server crash, or possibly, execution of...

[SECURITY] [DSA 4251-1] vlc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4251-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 18, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4245-1] imagemagick security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4245-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 14, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4244-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4244-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 13, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1334-1] mosquitto security update

Package : mosquitto Version : 0.15-2+deb7u3 CVE ID : CVE-2017-7651 CVE-2017-7652 CVE-2017-7651 A crafted CONNECT packet from an unauthenticated client could result in extraordinary memory consumption. CVE-2017-7652 In case all sockets/file descriptors are exhausted, a SIGHUP signal to reload the...