[SECURITY] [DSA 5594-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5594-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 02, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5453-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5453-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 16, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3495-1] php-dompdf security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3495-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès July 13, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3375-1] xrdp security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3375-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb March 31, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5373-1] node-sqlite3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5373-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 14, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3195-1] jupyter-core security update

Debian LTS Advisory DLA-3195-1 [email protected] https://www.debian.org/lts/security/ Dominik George November 17, 2022 https://wiki.debian.org/LTS Package : jupyter-core Version : 4.4.0-2+deb10u1 CVE ID : CVE-2022-39286 Debian Bug : 1023361 It was discovered that jupyter-core, the base...

[SECURITY] [DLA 3034-1] haproxy security update

Debian LTS Advisory DLA-3034-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany May 30, 2022 https://wiki.debian.org/LTS Package : haproxy Version : 1.7.5-2+deb9u1 CVE ID : CVE-2018-20102 CVE-2018-20103 CVE-2019-18277 Debian Bug : 916308 916307 Nathan Davison...

[SECURITY] [DLA 2909-1] strongswan security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2909-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta February 03, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2873-1] aria2 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2873-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk December 31, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2766-1] openssl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2766-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz September 27, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2739-1] libspf2 security update

Debian LTS Advisory DLA-2739-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany August 11, 2021 https://wiki.debian.org/LTS Package : libspf2 Version : 1.2.10-7+deb9u1 CVE ID : CVE-2021-20314 Philipp Jeitner and Haya Shulman discovered a stack-based buffer overflow...

[SECURITY] [DLA 2640-1] gst-plugins-good1.0 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2640-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort April 26, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2446-1] moin security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2446-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz November 10, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2398-1] puma security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2398-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA October 07, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2362-1] uwsgi security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2362-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta September 03, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4627-1] tomcat9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4727-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 17, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2275-1] ruby-rack security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2275-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta July 10, 2020 https://wiki.debian.org/LTS - -----------------------------------------------------------------------...

[SECURITY] [DSA 4714-2] chromium regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4714-2 [email protected] https://www.debian.org/security/ Michael Gilbert July 04, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4711-1] coturn security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4711-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 29, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4692-1] netqmail security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4692-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 24, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2163-1] tinyproxy security update

Package : tinyproxy Version : 1.8.3-3+deb8u1 CVE ID : CVE-2017-11747 Debian Bug : 870307 948283 A minor security issue and a severe packaging bug have been fixed in tinyproxy, a lightweight http proxy daemon. CVE-2017-11747 main.c in Tinyproxy created a /var/run/tinyproxy/tinyproxy.pid file after...

[SECURITY] [DLA 2150-1] thunderbird security update

Package : thunderbird Version : 1:68.6.0-1deb8u1 CVE ID : CVE-2019-20503 CVE-2020-6805 CVE-2020-6806 CVE-2020-6807. CVE-2020-6811 CVE-2020-6812 CVE-2020-6814 Multiple security issues have been found in Thunderbird which could potentially result in the execution of arbitrary code. For Debian 8...

[SECURITY] [DLA 2110-1] netty-3.9 security update

Package : netty-3.9 Version : 3.9.0.Final-1+deb8u1 CVE ID : CVE-2014-0193 CVE-2014-3488 CVE-2019-16869 CVE-2019-20444 CVE-2019-20445 CVE-2020-7238 Debian Bug : 746639 941266 950966 950967 Several vulnerabilities were discovered in Netty, a Java NIO client/server socket framework: CVE-2014-0193...

[SECURITY] [DSA 4622-1] postgresql-9.6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4622-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 13, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4607-1] openconnect security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4607-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 20, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4571-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4571-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 17, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4569-1] ghostscript security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4569-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 14, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1968-1] imagemagick security update

Package : imagemagick Version : 8:6.8.9.9-5+deb8u18 CVE ID : CVE-2019-11470 CVE-2019-14981 CVE-2019-15139 CVE-2019-15140 Multiple vulnerabilities have been found in imagemagick, an image processing toolkit. CVE-2019-11470 Uncontrolled resource consumption caused by insufficiently sanitized image...

[SECURITY] [DSA 4492-1] postgresql-9.6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4492-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 08, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1769-1] gst-plugins-base0.10 security update

rom: Thorsten Alteholz [email protected] To: [email protected] Subject: SECURITY DLA 1769-1 gst-plugins-base0.10 security update Package : gst-plugins-base0.10 Version : 0.10.36-2+deb8u1 CVE ID : CVE-2019-9928 Debian Bug : The RTSP connection parser in the base GStreamer...

[SECURITY] [DSA 4370-1] drupal7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4370-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 17, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1627-1] qtbase-opensource-src security update

Package : qtbase-opensource-src Version : 5.3.2+dfsg-4+deb8u3 CVE ID : CVE-2018-15518 CVE-2018-19870 CVE-2018-19873 Multiple issues were fixed in Qt. CVE-2018-15518 A double-free or corruption during parsing of a specially crafted illegal XML document. CVE-2018-19870 A malformed GIF image might...

[SECURITY] [DLA 1562-2] poppler security update

Package : poppler Version : 0.26.5-2+deb8u6 CVE ID : CVE-2018-16646 A regression issue has been resolved in the poppler PDF rendering shared library introduced with version 0.26.5-2+deb8u5. CVE-2018-16646 In Poppler 0.68.0, the Parser::getObj function in Parser.cc may cause infinite recursion via...

[SECURITY] [DSA 4309-1] strongswan security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4309-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez October 01, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4263-1] cgit security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4263-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 04, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1354-1] opencv security update

Package : opencv Version : 2.3.1-11+deb7u4 CVE ID : CVE-2018-5268 CVE-2018-5269 Debian Bug : 886674 886675 Two vulnerabilities were found in OpenCV, the "Open Computer Vision Library". CVE-2018-5268 In OpenCV 3.3.1, a heap-based buffer overflow happens in cv::Jpeg2KDecoder::readComponent8u in...

[SECURITY] [DSA 4170-1] pjproject security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4170-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 09, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1239-1] poco security update

Package : poco Version : 1.3.6p1-4+deb7u1 CVE ID : CVE-2017-1000472...

[SECURITY] [DSA 4056-1] nova security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4056-1 [email protected] https://www.debian.org/security/ Sebastien Delafond December 07, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1116-1] poppler security update

Package : poppler Version : 0.18.4-6+deb7u3 CVE ID : CVE-2017-14517 CVE-2017-14519 CVE-2017-14617 Debian Bug : 876086 876385 876079 It was discovered that poppler, a PDF rendering library, was affected by several denial-of-service application crash, null pointer dereferences and memory corruption...

[SECURITY] [DLA 1100-1] gdk-pixbuf security update

Package : gdk-pixbuf Version : 2.26.1-1+deb7u6 CVE ID : CVE-2017-2862 Debian Bug : 874552 Marcin Noga discovered a buffer overflow in the JPEG loader of the GDK Pixbuf library, which may result in the execution of arbitrary code if a malformed file is opened. For Debian 7 "Wheezy", these problems...

[SECURITY] [DSA 3856-1] deluge security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3856-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 18, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 839-1] tnef security update

Package : tnef Version : 1.4.9-1+deb7u1 CVE ID : CVE-2017-6307 CVE-2017-6308 CVE-2017-6309 CVE-2017-6310 CVE-2017-6307 An issue was discovered in tnef before 1.4.13. Two OOB Writes have been identified in src/mapiattr.c:mapiattrread. These might lead to invalid read and write operations, controll...

[SECURITY] [DSA 3761-1] rabbitmq-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3761-1 [email protected] https://www.debian.org/security/ Sebastien Delafond January 13, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3733-1] apt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3733-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 13, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3353-1] openslp-dfsg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3353-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini September 05, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3338-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3338-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini August 18, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3277-1] wireshark security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3277-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 02, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3178-1] unace security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3178-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso March 02, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 155-1] linux-2.6 security update

Package : linux-2.6 Version : 2.6.32-48squeeze11 CVE ID : CVE-2013-6885 CVE-2014-7822 CVE-2014-8133 CVE-2014-8134 CVE-2014-8160 CVE-2014-9420 CVE-2014-9584 CVE-2014-9585 CVE-2015-1421 CVE-2015-1593 This update fixes the CVEs described below. A further issue, CVE-2014-9419, was considered, but...