[SECURITY] [DLA 2183-1] libgsf security update

Package : libgsf Version : 1.14.30-2+deb8u1 CVE ID : CVE-2016-9888 It was discovered that there was a null pointer deference exploit in libgsf, a I/O abstraction library for GNOME. An error within the "tardirectoryforfile" function could be exploited to trigger a null pointer dereference and...

[SECURITY] [DSA 4645-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4645-1 [email protected] https://www.debian.org/security/ Michael Gilbert March 22, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2122-1] libusbmuxd security update

Package : libusbmuxd Version : 1.0.9-1+deb8u1 CVE ID : CVE-2016-5104 Debian Bug : 825554 It was discovered that libusbmuxd incorrectly handled socket permissions. A remote attacker could use this issue to access services on iOS devices, contrary to expectations. For Debian 8 "Jessie", this proble...

[SECURITY] [DLA 1858-1] squid3 security update

Package : squid3 Version : 3.4.8-6+deb8u8 CVE ID : CVE-2019-12525 CVE-2019-12529 Squid, a high-performance proxy caching server for web clients, has been found vulnerable to denial of service attacks associated with HTTP authentication header processing. CVE-2019-12525 Due to incorrect buffer...

[SECURITY] [DLA 1718-1] sqlalchemy security update

Package : sqlalchemy Version : 0.9.8+dfsg-0.1+deb8u1 CVE ID : CVE-2019-7164 CVE-2019-7548 Debian Bug : 922669 Two vulnerabilities were discovered in SQLALchemy, a Python SQL Toolkit and Object Relational Mapper. CVE-2019-7164 SQLAlchemy allows SQL Injection via the orderby parameter. CVE-2019-754...

[SECURITY] [DLA 1596-1] squid3 security update

Package : squid3 Version : 3.4.8-6+deb8u6 CVE ID : CVE-2018-19132 Debian Bug : 912294 It was discovered that there can be a denial of service DoS vulnerability in squid3 due to a memory leak in SNMP query rejection code when SNMP is enabled. In environments where per-process memory restrictions a...

[SECURITY] [DSA 4316-1] imagemagick security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4316-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 12, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4306-1] python2.7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4306-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 27, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1408-1] simplesamlphp security update

Package : simplesamlphp Version : 1.13.1-2+deb8u2 CVE ID : CVE-2017-12868 CVE-2017-12872 CVE-2017-12872 / CVE-2017-12868 The 1 Htpasswd authentication source in the authcrypt module and 2 SimpleSAMLSession class in SimpleSAMLphp 1.14.11 and earlier allow remote attackers to conduct timing...

[SECURITY] [DSA 4186-1] gunicorn security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4186-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 28, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1249-1] smarty3 security update

Package : smarty3 Version : 3.1.10-2+deb7u2 CVE ID : CVE-2017-1000480 Debian Bug : 886460 It was discovered that there was a code-injection vulnerability in smarty3, a PHP template engine. A via specially-crafted filename in comments could result in arbitray code execution. Thanks to Mike Gabriel...

[SECURITY] [DLA 1206-1] tiff security update

Package : tiff Version : 4.0.2-6+deb7u17 CVE ID : CVE-2017-9935 Debian Bug : 866109 In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2pwritepdf function in tools/tiff2pdf.c. This heap overflow could lead to different damages. For example, a crafted TIFF document can lead to an...

[SECURITY] [DLA 994-1] zziplib security update

Package : zziplib Version : 0.13.56-1.1+deb7u1 CVE ID : CVE-2017-5974 CVE-2017-5975 CVE-2017-5976 CVE-2017-5978 CVE-2017-5979 CVE-2017-5980 CVE-2017-5981 CVE-2017-5974 Heap-based buffer overflow in the zzipget32 function in fetch.c in zziplib allows remote attackers to cause a denial of service...

[SECURITY] [DSA 3531-1] chromum-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3531-1 [email protected] https://www.debian.org/security/ Michael Gilbert March 25, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 246-2] linux-2.6 regression update

Package : linux-2.6 Version : 2.6.32-48squeeze13 CVE ID : CVE-2011-5321 CVE-2012-6689 CVE-2014-3184 CVE-2014-8159 CVE-2014-9683 CVE-2014-9728 CVE-2014-9729 CVE-2014-9730 CVE-2014-9731 CVE-2015-1805 CVE-2015-2041 CVE-2015-2042 CVE-2015-2830 CVE-2015-2922 CVE-2015-3339 CVE-2015-4167 Debian Bug :...

[SECURITY] [DSA 3120-1] mantis security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3120-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 06, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3067-1] qemu-kvm security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3067-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 06, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2748-1] exactimage security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2748-1 [email protected] http://www.debian.org/security/ Florian Weimer September 01, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2737-1] swift security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2737-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst August 12, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2727-1] openjdk-6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2727-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 25, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2014-1] New moin packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2014-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano March 12, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1711-1] New TYPO3 packages fix remote code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1711-1 [email protected] http://www.debian.org/security/ Nico Golde January 26, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DLA 4407-1] ruby-sidekiq security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-4407-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta December 15, 2025 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3842-1] linux-5.10 security update

Debian LTS Advisory DLA-3842-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings June 25, 2024 https://wiki.debian.org/LTS Package : linux-5.10 Version : 5.10.216-1deb10u1 CVE ID : CVE-2022-38096 CVE-2023-6270 CVE-2023-7042 CVE-2023-28746 CVE-2023-47233 CVE-2023-52429...

[SECURITY] [DSA 5701-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5701-1 [email protected] https://www.debian.org/security/ Andres Salomon May 31, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3541-1] w3m security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3541-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler August 24, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5441-1] maradns security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5441-1 [email protected] https://www.debian.org/security/ Aron Xu June 29, 2023 https://www.debian.org/security/faq - -------------------------------------------------------------------------...

[SECURITY] [DLA 3415-1] python-django security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3415-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb May 05, 2023 https://wiki.debian.org/LTS - -------------------------------------------------------------------------...

[SECURITY] [DSA 5246-1] php-twig security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5246-1 [email protected] https://www.debian.org/security/ Sebastien Delafond October 04, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3031-1] modsecurity-apache security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3031-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb May 28, 2022 https://wiki.debian.org/LTS - -------------------------------------------------------------------------...

[SECURITY] [DLA 2514-1] flac security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2514-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk January 04, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4808-1] apt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4808-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 09, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4765-1] modsecurity security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4765-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 18, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2258-1] zziplib security update

Package : zziplib Version : 0.13.62-3+deb8u2 CVE ID : CVE-2018-6381 CVE-2018-6484 CVE-2018-6540 CVE-2018-6541 CVE-2018-6869 CVE-2018-7725 CVE-2018-7726 CVE-2018-16548 Several issues have been fixed in zziplib, a library providing read access on ZIP-archives. They are basically all related to...

[SECURITY] [DSA 4626-1] php7.3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4626-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 17, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1732-1] openjdk-7 security update

Package : openjdk-7 Version : 7u211-2.6.17-1deb8u1 CVE ID : CVE-2019-2422 A memory disclosure vulnerability was discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in information disclosure or bypass of sandbox restrictions. For Debian 8 "Jessie", this problem has been...

[SECURITY] [DLA 1476-1] dropbear security update

Package : dropbear Version : 2014.65-1+deb8u3 CVE ID : CVE-2018-15599 Debian Bug : 906890 A vulnerability in dropbear, a lightweight SSH2 server and client, making it possible to guess valid usernames has been found: CVE-2018-15599: The recvmsguserauthrequest function in svr-auth.c in is prone to...

[SECURITY] [DLA-1478-1] libextractor security update

Package : libextractor Version : 1:1.3-2+deb8u2 CVE ID : CVE-2018-14346 CVE-2018-14347 Debian Bug : 904903 904905 It was discovered that there were two vulnerabilities in libextractor, a library to obtain metadata from files of arbitrary type. A stack-based buffer overflow in unzip.c...

[SECURITY] [DLA 1451-1] wireshark security update

Package : wireshark Version : 1.12.1+g01b65bf-4+deb8u15 CVE ID : CVE-2018-14339 CVE-2018-14340 CVE-2018-14341 CVE-2018-14342 CVE-2018-14343 CVE-2018-14368 CVE-2018-14369 CVE-2018-14339 CVE-2018-14340 CVE-2018-14341 CVE-2018-14342 CVE-2018-14343 CVE-2018-14368 CVE-2018-14369 Due to several flaws...

[SECURITY] [DSA 4092-1] awstats security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4092-1 [email protected] https://www.debian.org/security/ Sebastien Delafond January 19, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1228-1] poppler security update

Package : poppler Version : 0.18.4-6+deb7u5 CVE ID : CVE-2017-1000456 Jason Crain discovered a overflow vulnerability in the poppler PDF rendering library. For Debian 7 "Wheezy", this issue has been fixed in poppler version 0.18.4-6+deb7u5. We recommend that you upgrade your poppler packages...

[SECURITY] [DLA 1042-1] libquicktime security update

Package : libquicktime Version : 2:1.2.4-3+deb7u2 CVE ID : CVE-2017-9122 CVE-2017-9123 CVE-2017-9124 CVE-2017-9125 CVE-2017-9126 CVE-2017-9127 CVE-2017-9128 Debian Bug : 864664 CVE-2017-9122 The quicktimereadmoov function in moov.c in libquicktime 1.2.4 allows remote attackers to cause a denial o...

[SECURITY] [DSA 3855-1] jbig2dec security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3855-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 18, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 868-1] imagemagick security update

Package : imagemagick Version : 8:6.7.7.10-5+deb7u12 CVE ID : CVE-2016-10062 CVE-2017-6498 CVE-2017-6500 Debian Bug : 849439 856878 856879 Several issues have been discovered in ImageMagick, a popular set of programs and libraries for image manipulation. These issues include denial of service and...

[SECURITY] [DSA 3760-1] ikiwiki security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3760-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 12, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3659-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3659-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 04, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3658-1] libidn security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3658-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 01, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3587-1] libgd2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3587-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 27, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3562-1] tardiff security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3562-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 01, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3272-1] ipsec-tools security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3272-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 23, 2015 http://www.debian.org/security/faq -...