[SECURITY] [DSA 1233-1] New Linux 2.6.8 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1233-1 [email protected] http://www.debian.org/security/ Dann Frazier December 10th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DLA 4611-1] keystone security update

Debian LTS Advisory DLA-4611-1 [email protected] https://www.debian.org/lts/security/ Santiago Ruano Rincón May 31, 2026 https://wiki.debian.org/LTS Package : keystone Version : 2:18.1.0-1+deb11u3 CVE ID : CVE-2026-33551 CVE-2026-40683 CVE-2026-42998 CVE-2026-42999 CVE-2026-43000...

[SECURITY] [DLA 4200-1] symfony security update

Debian LTS Advisory DLA-4200-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin May 31, 2025 https://wiki.debian.org/LTS Package : symfony Version : 4.4.19+dfsg-2+deb11u7 CVE ID : CVE-2024-50343 CVE-2024-50345 Security vulnerabilities were found in symfony, a PHP...

[SECURITY] [DSA 5896-1] trafficserver security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5896-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 05, 2025 https://www.debian.org/security/faq -...

[SECURITY] [DLA 4048-1] cacti security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4048-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès February 10, 2025 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3772-1] python3.7 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3772-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk March 24, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3692-1] curl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3692-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk December 19, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3683-1] roundcube security update

Debian LTS Advisory DLA-3683-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin December 05, 2023 https://wiki.debian.org/LTS Package : roundcube Version : 1.3.17+dfsg.1-1deb10u5 CVE ID : CVE-2023-47272 Debian Bug : 1055421 Rene Rehme discovered a cross-site scripti...

[SECURITY] [DLA 3513-1] tiff security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3513-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk July 31, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3157-1] bluez security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3157-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler October 24, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2826-1] mbedtls security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2826-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort November 23, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4933-1] nettle security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4933-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 18, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2636-1] pjproject security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2636-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz April 23, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4864-1] python-aiohttp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4864-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 27, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2562-1] mumble security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2562-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb February 18, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4684-1] libreswan security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4684-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 13, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4637-1] network-manager-ssh security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4637-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 09, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2086-1] wget security update

Package : wget Version : 1.16-1+deb8u7 CVE ID : CVE-2016-7098 An issue has been found in wget, a tool to retrieve files from the web. A race condition might occur as files rejected by an access list are kept on the disk for the duration of a HTTP connection. For Debian 8 "Jessie", this problem ha...

[SECURITY] [DLA 2067-1] wordpress security update

Package : wordpress Version : 4.1.29+dfsg-0+deb8u1 CVE ID : CVE-2019-20041 Debian Bug : 946905 An input sanitization bypass was discovered in Wordpress, a popular content management framework. An attacker can use this flaw to send malicious scripts to an unsuspecting user. For Debian 8 "Jessie",...

[SECURITY] [DSA 4601-1] ldm security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4601-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 09, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2017-2] asterisk regression update

Package : asterisk Version : 1:11.13.1dfsg-2+deb8u8 The backport of the CVE-2019-13161 fix caused a regression and has been reverted. For Debian 8 "Jessie", this problem has been fixed in version 1:11.13.1dfsg-2+deb8u8. We recommend that you upgrade your asterisk packages. Further information abo...

[SECURITY] [DLA 1872-1] python-django security update

Package : python-django Version : 1.7.11-1+deb8u7 CVE IDs : CVE-2019-14232 CVE-2019-14233 Debian Bug : 934026 It was discovered that there were two vulnerabilities in the Django web development framework: CVE-2019-14232: Prevent a possible denial-of-service in django.utils.text.Truncator. If...

[SECURITY] [DSA 4490-1] subversion security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4490-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 01, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4465-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4465-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 17, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1818-1] dbus security update

Package : dbus Version : 1.8.22-0+deb8u2 CVE ID : CVE-2019-12749 Debian Bug : 930375 Joe Vennix discovered an authentication bypass vulnerability in dbus, an asynchronous inter-process communication system. The implementation of the DBUSCOOKIESHA1 authentication mechanism was susceptible to a...

[SECURITY] [DSA 4346-1] ghostscript security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4346-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 27, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1454-1] network-manager-vpnc security update

Package : network-manager-vpnc Version : 0.9.10.0-1+deb8u1 CVE ID : CVE-2018-10900 Debian Bug : 904255 Denis Andzakovic discovered that network-manager-vpnc, a plugin to provide VPNC support for NetworkManager, is prone to a privilege escalation vulnerability. A newline character can be used to...

[SECURITY] [DSA 4250-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4250-1 [email protected] https://www.debian.org/security/ Sebastien Delafond July 18, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1380-1] libmad security update

Package : libmad Version : 0.15.1b-7+deb7u1 CVE ID : CVE-2017-8372 CVE-2017-8373 CVE-2017-8374 Several vulnerabilities were discovered in MAD, an MPEG audio decoder library, which could result in denial of service if a malformed audio file is processed. For Debian 7 "Wheezy", these problems have...

[SECURITY] [DLA 1334-1] mosquitto security update

Package : mosquitto Version : 0.15-2+deb7u3 CVE ID : CVE-2017-7651 CVE-2017-7652 CVE-2017-7651 A crafted CONNECT packet from an unauthenticated client could result in extraordinary memory consumption. CVE-2017-7652 In case all sockets/file descriptors are exhausted, a SIGHUP signal to reload the...

[SECURITY] [DSA 4105-2] mpv security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4105-2 [email protected] https://www.debian.org/security/ February 08, 2018 https://www.debian.org/security/faq - -------------------------------------------------------------------------...

[SECURITY] [DSA 4082-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4082-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 09, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4011-1] quagga security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4011-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 30, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 804-1] libgd2 security update

Package : libgd2 Version : 2.0.36rc1dfsg-6.1+deb7u8 CVE ID : CVE-2016-9317 CVE-2016-10167 CVE-2016-10168 Multiple security issues have been found in the GD Graphics Library. They may lead to the execution of arbitrary code or causing application crash. CVE-2016-9317 Signed integer overflow in...

[SECURITY] [DLA 755-1] dcmtk security update

Package : dcmtk Version : 3.6.0-12+deb7u1 CVE ID : CVE-2015-8979 Debian Bug : 848830 At several places in the code a wrong length of ACSE data structures received over the network can cause overflows or underflows when processing those data structures. Related checks have been added at various...

[SECURITY] [DSA 3738-1] tomcat7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3738-1 [email protected] https://www.debian.org/security/ Sebastien Delafond December 18, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 717-1] moin security update

Package : moin Version : 1.9.4-8+deb7u3 CVE ID : CVE-2016-7146 CVE-2016-9119 Debian Bug : 844338 844340 Several cross-site scripting vulnerabilities were discovered in moin, a Python clone of WikiWiki. A remote attacker can conduct cross-site scripting attacks via the GUI editors attachment...

[SECURITY] [DSA 3696-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3696-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 19, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3696-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3696-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 19, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 613-1] roundcube security update

Package : roundcube Version : 0.7.2-9+deb7u4 CVE ID : CVE-2014-9587 CVE-2015-1433 CVE-2016-4069 Debian Bug : 822333 775576 776700 Multiple CSRF and XSS issues allow remote attackers to hijack the authentication and execute roundcube operations without the consent of the user. In some cases, this...

[SECURITY] [DLA 603-1] ruby-activesupport-3.2 security update

Package : ruby-activesupport-3.2 Version : 3.2.6-6+deb7u2 CVE ID : CVE-2015-3227 The support and utility classes used by the Rails 3.2 framework allow remote attackers to cause a denial of service SystemStackError via a large XML document depth. For Debian 7 "Wheezy", these problems have been fix...

[SECURITY] [DLA 484-1] graphicsmagick security update

Version : 1.3.16-1.1+deb7u1 CVE ID : CVE-2015-8808 CVE-2016-2317 CVE-2016-2318 CVE-2016-3714 CVE-2016-3715 CVE-2016-3716 CVE-2016-3717 CVE-2016-3718 Debian Bug : 814732 Several security vulnerabilities were discovered in graphicsmagick a tool to manipulate image files. GraphicsMagick is a fork of...

[SECURITY] [DSA 3554-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3554-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 21, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3513-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3513-1 [email protected] https://www.debian.org/security/ Michael Gilbert March 10, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3463-1] prosody security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3463-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 31, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3344-1] php5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3344-1 [email protected] https://www.debian.org/security/ Sebastien Delafond August 27, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DLA 185-1] freetype security update

Package : freetype Version : 2.4.2-2.1+squeeze5 CVE ID : CVE-2014-9656 CVE-2014-9657 CVE-2014-9658 CVE-2014-9660 CVE-2014-9661 CVE-2014-9663 CVE-2014-9664 CVE-2014-9665 CVE-2014-9666 CVE-2014-9667 CVE-2014-9669 CVE-2014-9670 CVE-2014-9671 CVE-2014-9672 CVE-2014-9673 CVE-2014-9674 CVE-2014-9675...

[SECURITY] [DLA 142-1] privoxy security update

Package : privoxy Version : 3.0.16-1+deb6u1 CVE ID : CVE-2015-1031 CVE-2015-1381 CVE-2015-1382 Several vulnerabilities have been fixed in privoxy, a privacy enhancing HTTP proxy: CVE-2015-1031, CID66394: unmap: Prevent use-after-free if the map only consists of one item. CVE-2015-1031, CID66376 a...

[SECURITY] [DSA 2758-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2758-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso September 17, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2453-2] gajim regression

------------------------------------------------------------------------- Debian Security Advisory DSA-2453-2 [email protected] http://www.debian.org/security/ Nico Golde April 19, 2012 http://www.debian.org/security/faq -...