[SECURITY] [DLA 3513-1] tiff security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3513-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk July 31, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5178-1] intel-microcode security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5178-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 06, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5155-1] wpewebkit security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5155-1 [email protected] https://www.debian.org/security/ Alberto Garcia June 01, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2998-1] kicad security update

Debian LTS Advisory DLA-2998-1 [email protected] https://www.debian.org/lts/security/ Stefano Rivera May 09, 2022 https://wiki.debian.org/LTS Package : kicad Version : 4.0.5+dfsg1-4+deb9u1 CVE ID : CVE-2022-23803 CVE-2022-23804 CVE-2022-23946 CVE-2022-23947 KiCad is a suite of programs...

[SECURITY] [DLA 2995-1] smarty3 security update

Debian LTS Advisory DLA-2995-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany May 05, 2022 https://wiki.debian.org/LTS Package : smarty3 Version : 3.1.31+20161214.1.c7d42e4+selfpack1-2+deb9u5 CVE ID : CVE-2021-21408 CVE-2021-29454 Debian Bug : 1010375 Smarty3, a...

[SECURITY] [DSA 5107-1] php-twig security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5107-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 24, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2830-1] tar security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2830-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk November 28, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4963-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4963-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 24, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4924-1] squid security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4924-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 01, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4910-1] libimage-exiftool-perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4910-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 02, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2588-1] zeromq3 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2588-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky March 09, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2509-1] tzdata new upstream version

------------------------------------------------------------------------- Debian LTS Advisory DLA-2509-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort December 29, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2165-1] apng2gif security update

Package : apng2gif Version : 1.5-3+deb8u1 CVE ID : CVE-2017-6960 An issue has been found in apng2gif, a tool for converting APNG images to animated GIF format. One of the function contained an integer overflow resulting in a heap-based buffer over-read. For Debian 8 "Jessie", this problem has bee...

[SECURITY] [DSA 4639-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4639-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 11, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4600-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4600-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 09, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1942-1] phpbb3 security update

Package : phpbb3 Version : 3.0.12-5+deb8u4 CVE ID : CVE-2019-16993 In phpBB, includes/acp/acpbbcodes.php had improper verification of a CSRF token on the BBCode page in the Administration Control Panel. An actual CSRF attack was possible if an attacker also managed to retrieve the session id of a...

[SECURITY] [DLA 1941-1] netty security update

Package : netty Version : 1:3.2.6.Final-2+deb8u1 CVE ID : CVE-2019-16869 Netty mishandled whitespace before the colon in HTTP headers such as a “Transfer-Encoding : chunked” line, which lead to HTTP request smuggling. For Debian 8 "Jessie", this problem has been fixed in version...

[SECURITY] [DLA 1792-2] cups-filters regression update

Package : cups-filters Version : 1.0.61-5+deb8u4 Debian Bug : 926576 928936 928952 The update for ghostscript released as DLA-1792-1 uncovered an issue in cups-filters which was using the undocumented Ghostscript internal "pdfdict" now hidden in the ghostscript update. Updated cups-filters packag...

[SECURITY] [DSA 4401-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4401-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 01, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4313-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4313-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 08, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4279-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4279-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 20, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1454-1] network-manager-vpnc security update

Package : network-manager-vpnc Version : 0.9.10.0-1+deb8u1 CVE ID : CVE-2018-10900 Debian Bug : 904255 Denis Andzakovic discovered that network-manager-vpnc, a plugin to provide VPNC support for NetworkManager, is prone to a privilege escalation vulnerability. A newline character can be used to...

[SECURITY] [DLA 1446-1] intel-microcode security update

Package : intel-microcode Version : 3.20180703.2deb8u1 CVE ID : CVE-2018-3639 CVE-2018-3640 Security researchers identified two software analysis methods that, if used for malicious purposes, have the potential to improperly gather sensitive data from multiple types of computing devices with...

[SECURITY] [DSA 4250-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4250-1 [email protected] https://www.debian.org/security/ Sebastien Delafond July 18, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1380-1] libmad security update

Package : libmad Version : 0.15.1b-7+deb7u1 CVE ID : CVE-2017-8372 CVE-2017-8373 CVE-2017-8374 Several vulnerabilities were discovered in MAD, an MPEG audio decoder library, which could result in denial of service if a malformed audio file is processed. For Debian 7 "Wheezy", these problems have...

[SECURITY] [DLA 1171-1] libxml-libxml-perl security update

Package : libxml-libxml-perl Version : 2.0001+dfsg-1+deb7u2 CVE ID : CVE-2017-10672 Debian Bug : 866676 The XML::LibXML perl module is affected by a "use-after-free" vulnerability which allows remote attackers to execute arbitrary code by controlling the arguments to a replaceChild call. For Debi...

[SECURITY] [DSA 4011-1] quagga security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4011-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 30, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1046-1] lucene-solr security update

Package : lucene-solr Version : 3.6.0+dfsg-1+deb7u2 CVE ID : CVE-2017-3163 Debian Bug : 867712 lucene-solr handler supports an HTTP API /replication?command=filecontent&file=filename which is vulnerable to path traversal attack. Specifically, this API does not perform any validation of the user...

[SECURITY] [DSA 3849-1] kde4libs security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3849-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 12, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 782-1] icedove security update

Package : icedove Version : 45.6.0-2 CVE ID : CVE-2016-9893 CVE-2016-9895 CVE-2016-9897 CVE-2016-9898 CVE-2016-9899 CVE-2016-9900 CVE-2016-9904 CVE-2016-9905 Multiple security issues have been found in Icedove, Debians version of the Mozilla Thunderbird mail client: Multiple vulnerabilities may...

[SECURITY] [DSA 3727-1] hdf5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3727-1 [email protected] https://www.debian.org/security/ Sebastien Delafond November 30, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3696-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3696-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 19, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3588-1] symfony security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3588-1 [email protected] https://www.debian.org/security/ Luciano Bello May 29, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 442-1] lxc security update

Package : lxc Version : 0.7.2-1+deb6u1 CVE ID : CVE-2013-6441 CVE-2015-1335 Debian Bug : 800471 Brief introduction CVE-2013-6441 The template script lxc-sshd used to mount itself as /sbin/init in the container using a writable bind-mount. This update resolved the above issue by using a read-only...

[SECURITY] [DLA 217-1] xdg-utils security update

The two below CVE issues have recently been fixed in Debian squeeze-lts: CVE-2014-9622 John Houwer discovered a way to cause xdg-open, a tool that automatically opens URLs in a users preferred application, to execute arbitrary commands remotely. CVE-2015-1877 Jiri Horner discovered a way to cause...

[SECURITY] [DSA 2548-1] tor security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2548-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 13, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2368-1] lighttpd security update

--------------------------------------------------------------------------- Debian Security Advisory DSA-2368-1 [email protected] http://www.debian.org/security/ Nico Golde Dec 20th, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2366-1] mediawiki security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2366-1 [email protected] http://www.debian.org/security/ Jonathan Wiltshire December 18, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2358-1] openjdk-6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2358-1 [email protected] http://www.debian.org/security/ December 05, 2011 http://www.debian.org/security/faq - -------------------------------------------------------------------------...

[SECURITY] [DSA 2322-1] bugzilla security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2322-1 [email protected] http://www.debian.org/security/ Jonathan Wiltshire October 10, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1914-1] New mapserver packages fix serveral vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA-1914-1 [email protected] http://www.debian.org/security/ Nico Golde October 22nd, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1653-1] New Linux 2.6.18 packages fix several vulnerabilities

---------------------------------------------------------------------- Debian Security Advisory DSA-1653-1 [email protected] http://www.debian.org/security/ dann frazier Oct 13, 2008 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

[SECURITY] [DSA 1069-1] New Linux kernel 2.4.18 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1069-1 [email protected] http://www.debian.org/security/ Martin Schulze, Dann Frazier May 20th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 493-1] New xchat packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 493-1 [email protected] http://www.debian.org/security/ Martin Schulze April 21st, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 5909-1] request-tracker5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5909-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 30, 2025 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5512-1] exim4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5512-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 02, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3462-1] wordpress security update

Debian LTS Advisory DLA-3462-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany June 21, 2023 https://wiki.debian.org/LTS Package : wordpress Version : 5.0.19+dfsg1-0+deb10u1 CVE ID : CVE-2023-2745 Debian Bug : 1036296 Several security vulnerabilities have been...

[SECURITY] [DLA 3385-1] trafficserver security update

Debian LTS Advisory DLA-3385-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany April 05, 2023 https://wiki.debian.org/LTS Package : trafficserver Version : 8.1.6+ds-1deb10u1 CVE ID : CVE-2022-31778 CVE-2022-31779 CVE-2022-32749 CVE-2022-37392 Several vulnerabiliti...

[SECURITY] [DSA 5231-1] connman security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5231-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 17, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5161-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5161-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 11, 2022 https://www.debian.org/security/faq -...