[SECURITY] [DLA 1598-1] ghostscript security update

Package : ghostscript Version : 9.06dfsg-2+deb8u12 CVE ID : CVE-2018-19409 CVE-2018-19475 CVE-2018-19476 CVE-2018-19477 Several security vulnerabilities were discovered in Ghostscript, an interpreter for the PostScript language, which could result in denial of service, the creation of files or th...

[SECURITY] [DSA 4301-1] mediawiki security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4301-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 22, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4276-1] php-horde-image security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4276-1 [email protected] https://www.debian.org/security/ Sebastien Delafond August 17, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1454-1] network-manager-vpnc security update

Package : network-manager-vpnc Version : 0.9.10.0-1+deb8u1 CVE ID : CVE-2018-10900 Debian Bug : 904255 Denis Andzakovic discovered that network-manager-vpnc, a plugin to provide VPNC support for NetworkManager, is prone to a privilege escalation vulnerability. A newline character can be used to...

[SECURITY] [DLA 1384-1] xdg-utils security update

Package : xdg-utils Version : 1.1.0rc1+git20111210-6+deb7u4 CVE ID : CVE-2017-18266 Debian Bug : 898317 It was found that the openenvvar function in xdg-utils does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers t...

[SECURITY] [DSA 4179-1] linux-tools security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4179-1 [email protected] https://www.debian.org/security/ Ben Hutchings April 24, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1339-1] openjdk-7 security update

Package : openjdk-7 Version : 7u171-2.6.13-1deb7u1 CVE ID : CVE-2018-2579 CVE-2018-2588 CVE-2018-2599 CVE-2018-2602 CVE-2018-2603 CVE-2018-2618 CVE-2018-2629 CVE-2018-2633 CVE-2018-2634 CVE-2018-2637 CVE-2018-2641 CVE-2018-2663 CVE-2018-2677 CVE-2018-2678 Debian Bug : 891330 Several vulnerabiliti...

[SECURITY] [DSA 4164-1] apache2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4164-1 [email protected] https://www.debian.org/security/ Stefan Fritsch April 03, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1133-1] ming security update

Package : ming Version : 1:0.4.4-1.1+deb7u4 CVE ID : CVE-2017-11704 CVE-2017-11728 CVE-2017-11729 CVE-2017-11730 CVE-2017-11731 CVE-2017-11734 Multiple vulnerabilities have been discovered in Ming: CVE-2017-11704 Heap-based buffer over-read in the function decompileIF in util/decompile.c in Ming ...

[SECURITY] [DLA 1082-1] graphicsmagick security update

Package : graphicsmagick Version : 1.3.16-1.1+deb7u9 CVE ID : CVE-2017-12935 CVE-2017-12936 CVE-2017-12937 CVE-2017-13063 CVE-2017-13064 CVE-2017-13065 CVE-2017-13776 CVE-2017-13777 CVE-2017-13776 CVE-2017-13777 denial of service issue in ReadXBMImage CVE-2017-12935 The ReadMNGImage function in...

[SECURITY] [DSA 3893-1] jython security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3893-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 22, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 885-1] python-django security update

Package : python-django Version : 1.4.22-1+deb7u3 CVE ID : CVE-2017-7233, CVE-2017-7234 Debian Bug : 859515, 859516 It was discovered that there were two vulnerabilities in python-django, a high-level Python web development framework. CVE-2017-7233 859515: Open redirect and possible XSS attack vi...

[SECURITY] [DSA 3741-1] tor security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3741-1 [email protected] https://www.debian.org/security/ Sebastien Delafond December 20, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3608-1] libreoffice security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3608-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 29, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 474-1] dosfstools security update

Package : dosfstools Version : 3.0.13-1+deb7u1 CVE IDs : CVE-2015-8872 CVE-2016-4804 It was discovered that there was an invalid memory and heap overflow vulnerability in dosfstools, a collection of utilities for making and checking MS-DOS FAT filesystems. For Debian 7 "Wheezy", this issue has be...

[SECURITY] [DSA 3517-1] exim4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3517-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 14, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 442-1] lxc security update

Package : lxc Version : 0.7.2-1+deb6u1 CVE ID : CVE-2013-6441 CVE-2015-1335 Debian Bug : 800471 Brief introduction CVE-2013-6441 The template script lxc-sshd used to mount itself as /sbin/init in the container using a writable bind-mount. This update resolved the above issue by using a read-only...

[SECURITY] [DLA 392-1] roundcube security update

Package : roundcube Version : 0.3.1-6+deb6u1 CVE ID : CVE-2015-8770 High-Tech Bridge Security Research Lab discovered a path traversal vulnerability in a popular webmail client Roundcube. Vulnerability can be exploited to gain access to sensitive information and under certain circumstances to...

[SECURITY] [DSA 3404-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3404-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 25, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3364-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3364-1 [email protected] https://www.debian.org/security/ Ben Hutchings September 21, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3187-1] icu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3187-1 [email protected] http://www.debian.org/security/ Michael Gilbert March 15, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3091-1] getmail4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3091-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano December 07, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3030-1] mantis security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3030-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 20, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3017-1] php-cas security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3017-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst September 2, 2014 http://www.debian.org/security/faq -...

[BSA-095] Security Update for openssh

Colin Watson uploaded new packages for openssh which fixed the following security problems: CVE-2014-2532 DSA-2894-1 Jann Horn discovered that OpenSSH incorrectly handled wildcards in AcceptEnv lines. A remote attacker could use this issue to trick OpenSSH into accepting any environment variable...

[SECURITY] [DSA 2760-1] chrony security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2760-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 18, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2444-1] tryton-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2444-1 [email protected] http://www.debian.org/security/ Florian Weimer March 29, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2245-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2245-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano May 29, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA-1989-1] New fuse packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1989-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano February 02, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1966-1] New horde3 packages fix cross-site scripting

------------------------------------------------------------------------ Debian Security Advisory DSA-1966-1 [email protected] http://www.debian.org/security/ Steffen Joeris January 07, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1721-1] New libpam-krb5 packages fix local privilege escalation

------------------------------------------------------------------------ Debian Security Advisory DSA-1721-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 11, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1018-1] New Linux kernel 2.4.27 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1018-1 [email protected] http://www.debian.org/security/ Dann Frazier, Simon Horman March 26th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1011-1] New kernel-patch-vserver packages fix root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 1011-1 [email protected] http://www.debian.org/security/ Martin Schulze March 21st, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 921-1] New Linux 2.4.27 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 921-1 [email protected] http://www.debian.org/security/ Martin Schulze December 14th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 5911-1] request-tracker4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5911-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 30, 2025 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5867-1] gnutls28 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5867-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 17, 2025 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3997-1] php-laravel-framework security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3997-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb December 21, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3975-1] proftpd-dfsg security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3975-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès November 29, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5728-1] exim4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5728-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 10, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5522-2] tomcat9 regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-5522-2 [email protected] https://www.debian.org/security/ Markus Koschany October 12, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5526-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5526-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 12, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3286-1] tor security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3286-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz January 28, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3243-1] php7.3 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3243-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort December 15, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5186-1] djangorestframework security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5186-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 22, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3033-1] smarty3 security update

Debian LTS Advisory DLA-3033-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany May 29, 2022 https://wiki.debian.org/LTS Package : smarty3 Version : 3.1.31+20161214.1.c7d42e4+selfpack1-2+deb9u6 CVE ID : CVE-2022-29221 Debian Bug : 1011758 Smarty3 is a template engi...

[SECURITY] [DSA 5147-1] dpkg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5147-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 25, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2980-1] zabbix security update

Debian LTS Advisory DLA-2980-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany April 12, 2022 https://wiki.debian.org/LTS Package : zabbix Version : 1:3.0.32+dfsg-0+deb9u3 CVE ID : CVE-2022-24349 CVE-2022-24917 CVE-2022-24919 Several security vulnerabilities have...

[SECURITY] [DLA 2945-1] tryton-server security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2945-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort March 11, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5062-1] nss security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5062-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 25, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2849-1] wireshark security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2849-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk December 26, 2021 https://wiki.debian.org/LTS -...