[SECURITY] [DLA 2525-1] wavpack security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2525-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta January 15, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4805-1] trafficserver security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4805-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 07, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4796-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4796-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 21, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2379-3] mediawiki regression update

Debian LTS Advisory DLA-2379-3 [email protected] https://www.debian.org/lts/security/ Roberto C. Sánchez November 21, 2020 https://wiki.debian.org/LTS Package : mediawiki Version : 1:1.27.7-1deb9u6 The update of mediawiki released as DLA-2379-2 contained a defect in the patch for...

[SECURITY] [DSA 4788-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4788-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 10, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2320-1] golang-github-seccomp-libseccomp-golang security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2320-1 [email protected] https://www.debian.org/lts/security/ August 10, 2020 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package...

[SECURITY] [DSA 4729-1] libopenmpt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4729-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 19, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4717-1] php7.0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4717-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 05, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4702-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4702-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 11, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2149-1] rails security update

Package : rails Version : 2:4.1.8-1+deb8u6 CVE ID : CVE-2020-5267 Debian Bug : 954304 In ActionView before versions 6.0.2.2 and 5.2.4.2, there is a possible XSS vulnerability in ActionViews JavaScript literal escape helpers. Views that use the j or escapejavascript methods may be susceptible to X...

[SECURITY] [DSA 4641-1] webkit2gtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4641-1 [email protected] https://www.debian.org/security/ Alberto Garcia March 16, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4623-1] postgresql-11 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4623-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 13, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1977-1] libvncserver security update

Package : libvncserver Version : 0.9.9+dfsg2-6.1+deb8u6 CVE ID : CVE-2019-15681 Debian Bug : 943793 LibVNC contained a memory leak CWE-655 in VNC server code, which allowed an attacker to read stack memory and could be abused for information disclosure. For Debian 8 "Jessie", this problem has bee...

[SECURITY] [DSA 4465-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4465-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 17, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4401-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4401-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 01, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4251-1] vlc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4251-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 18, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4218-1] memcached security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4218-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 06, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1380-1] libmad security update

Package : libmad Version : 0.15.1b-7+deb7u1 CVE ID : CVE-2017-8372 CVE-2017-8373 CVE-2017-8374 Several vulnerabilities were discovered in MAD, an MPEG audio decoder library, which could result in denial of service if a malformed audio file is processed. For Debian 7 "Wheezy", these problems have...

[SECURITY] [DSA 4158-1] openssl1.0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4158-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 29, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4129-1] freexl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4129-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 02, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1258-1] wireshark security update

Package : wireshark Version : 1.12.1+g01b65bf-4+deb8u6deb7u9 CVE ID : CVE-2018-5334 CVE-2018-5335 CVE-2018-5336 Kamil Frankowicz and Young found that several parsers of wireshark could be crashed by malformed packets. For Debian 7 "Wheezy", these problems have been fixed in version...

[SECURITY] [DLA 1191-1] python-werkzeug security update

Package : python-werkzeug Version : 0.8.3+dfsg-1+deb7u1 CVE ID : CVE-2016-10516 A security issue that allows XSS on the Werkzeug debugger allows remote attackers to inject arbitrary stuff via a field that contains an exception message. For Debian 7 "Wheezy", these problems have been fixed in...

[SECURITY] [DLA 1079-1] libdbd-mysql-perl security update

Package : libdbd-mysql-perl Version : 4.021-1+deb7u3 CVE ID : CVE-2017-10788 CVE-2017-10789 Debian Bug : 866818 866821 The Perl library for communicating with MySQL database, used in the "mysql" commandline client is vulnerable to a man in the middle attack in SSL configurations and remote crash...

[SECURITY] [DLA 1046-1] lucene-solr security update

Package : lucene-solr Version : 3.6.0+dfsg-1+deb7u2 CVE ID : CVE-2017-3163 Debian Bug : 867712 lucene-solr handler supports an HTTP API /replication?command=filecontent&file=filename which is vulnerable to path traversal attack. Specifically, this API does not perform any validation of the user...

[SECURITY] [DLA 603-1] ruby-activesupport-3.2 security update

Package : ruby-activesupport-3.2 Version : 3.2.6-6+deb7u2 CVE ID : CVE-2015-3227 The support and utility classes used by the Rails 3.2 framework allow remote attackers to cause a denial of service SystemStackError via a large XML document depth. For Debian 7 "Wheezy", these problems have been fix...

[SECURITY] [DLA 559-1] ntp security update

Package : ntp Version : 1:4.2.6.p5+dfsg-2+deb7u7 CVE ID : CVE-2015-7974 CVE-2015-7977 CVE-2015-7978 CVE-2015-7979 CVE-2015-8138 CVE-2015-8158 CVE-2016-1547 CVE-2016-1548 CVE-2016-1550 CVE-2016-2516 CVE-2016-2518 Several vulnerabilities were discovered in the Network Time Protocol daemon and utili...

[SECURITY] [DSA 3628-1] perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3628-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 25, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3618-1] php5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3618-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 14, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3602-1] php5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3602-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 14, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 484-1] graphicsmagick security update

Version : 1.3.16-1.1+deb7u1 CVE ID : CVE-2015-8808 CVE-2016-2317 CVE-2016-2318 CVE-2016-3714 CVE-2016-3715 CVE-2016-3716 CVE-2016-3717 CVE-2016-3718 Debian Bug : 814732 Several security vulnerabilities were discovered in graphicsmagick a tool to manipulate image files. GraphicsMagick is a fork of...

[SECURITY] [DSA 3468-1] polarssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3468-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 06, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3462-1] radicale security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3462-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez January 30, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3272-1] ipsec-tools security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3272-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 23, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 142-1] privoxy security update

Package : privoxy Version : 3.0.16-1+deb6u1 CVE ID : CVE-2015-1031 CVE-2015-1381 CVE-2015-1382 Several vulnerabilities have been fixed in privoxy, a privacy enhancing HTTP proxy: CVE-2015-1031, CID66394: unmap: Prevent use-after-free if the map only consists of one item. CVE-2015-1031, CID66376 a...

[SECURITY] [DSA 3114-1] mime-support security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3114-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 29, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3109-1] firebird2.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3109-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 21, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 79-1] dokuwiki security update

Package : dokuwiki Version : 0.0.20091225c-10+squeeze3 CVE ID : CVE-2014-8763 CVE-2014-8764 Debian Bug : 766545 This fixes a possibility of bypasswing the wiki authentication when an Active Directory is used for LDAP authentication. These two CVE are almost the same, one apparently being a supers...

[SECURITY] [DLA 74-1] ppp security update

Package : ppp Version : 2.4.5-4+deb6u1 CVE ID : CVE-2014-3158 Debian Bug : http://bugs.debian.org/762789 This updates fixes a potential integer overflow in option parsing. A user in the group "dip" could provide a specially crafted configuration file of more than 2G and generate an integer...

[SECURITY] [DSA 2421-1] moodle security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2421-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 29, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2384-2] cacti regression

------------------------------------------------------------------------- Debian Security Advisory DSA-2384-2 [email protected] http://www.debian.org/security/ February 04, 2012 http://www.debian.org/security/faq - -------------------------------------------------------------------------...

[BSA-023] Security Update for drupal6

Gerfried Fuchs uploaded new packages for drupal6 which fixed the following security problems: CVE-2010-2250 A user-supplied value is directly output during installation allowing a malicious user to craft a URL and perform a cross-site scripting attack. The exploit can only be conducted on sites n...

[SECURITY] [DSA 1691-1] New moodle packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1691-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst December 22, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1233-1] New Linux 2.6.8 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1233-1 [email protected] http://www.debian.org/security/ Dann Frazier December 10th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 546-1] New gdk-pixbuf packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 546-1 [email protected] http://www.debian.org/security/ Martin Schulze September 16th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 493-1] New xchat packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 493-1 [email protected] http://www.debian.org/security/ Martin Schulze April 21st, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DLA 4149-1] nagvis security update

Debian LTS Advisory DLA-4149-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert May 01, 2025 https://wiki.debian.org/LTS Package : nagvis Version : 1:1.9.25-2+deb11u1 CVE ID : CVE-2021-33178 CVE-2022-3979 CVE-2022-46945 CVE-2023-46287 CVE-2024-13722 CVE-2024-13723...

[SECURITY] [DLA 3975-1] proftpd-dfsg security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3975-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès November 29, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3782-1] util-linux security update

Debian LTS Advisory DLA-3782-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin April 07, 2024 https://wiki.debian.org/LTS Package : util-linux Version : 2.33.1-0.1+deb10u1 CVE ID : CVE-2021-37600 CVE-2024-28085 Debian Bug : 826596 991619 1067849 CVE-2024-28085 Skyl...

[SECURITY] [DLA 3683-1] roundcube security update

Debian LTS Advisory DLA-3683-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin December 05, 2023 https://wiki.debian.org/LTS Package : roundcube Version : 1.3.17+dfsg.1-1deb10u5 CVE ID : CVE-2023-47272 Debian Bug : 1055421 Rene Rehme discovered a cross-site scripti...

[SECURITY] [DLA 3620-1] poppler security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3620-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk October 16, 2023 https://wiki.debian.org/LTS -...