[SECURITY] [DLA 1882-1] atril security update

Package : atril Version : 1.8.1+dfsg1-4+deb8u2 CVE ID : CVE-2017-1000159 CVE-2019-11459 CVE-2019-1010006 A few issues were found in Atril, the MATE document viewer. CVE-2017-1000159 When printing from DVI to PDF, the dvipdfm tool was called without properly sanitizing the filename, which could le...

[SECURITY] [DLA 1773-1] signing-party security update

Package : signing-party Version : 1.1.10-3+deb8u1 CVE ID : CVE-2019-11627 Debian Bug : 928256 An unsafe shell call enabling shell injection via a user ID was corrected in gpg-key2ps, a tool to generate a PostScript file with OpenPGP key fingerprint slips. For Debian 8 "Jessie", this problem has...

[SECURITY] [DSA 4346-2] ghostscript regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4346-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 23, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1445-2] busybox regression update

Package : busybox Version : 1:1.22.0-9+deb8u3 The security update of busybox announced as DLA-1445-1 introduced a regression due to an incomplete fix for CVE-2015-9261. It was no longer possible to decompress gzip archives which exceeded a certain file size. For Debian 8 "Jessie", this problem ha...

[SECURITY] [DLA 1399-1] ruby-passenger security update

Package : ruby-passenger Version : 4.0.53-1+deb8u1 CVE ID : CVE-2015-7519 CVE-2018-12029 Debian Bug : 864651 Two flaws were discovered in ruby-passenger for Ruby Rails and Rack support that allowed attackers to spoof HTTP headers or exploit a race condition which made privilege escalation under...

[SECURITY] [DLA 1297-1] simplesamlphp security update

Package : simplesamlphp Version : 1.9.2-1+deb7u3 CVE ID : CVE-2016-9814 CVE-2016-9955 Several vulnerabilities have been discovered in SimpleSAMLphp, a framework for authentication, primarily via the SAML protocol. CVE-2016-9814 & CVE-2016-9955 An incorrect check of return values in the signature...

[SECURITY] [DSA 4023-1] slurm-llnl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4023-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 07, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 928-1] libsndfile security update

Package : libsndfile Version : 1.0.25-9.1+deb7u1 CVE ID : CVE-2015-7805 CVE-2017-7585 CVE-2017-7586 CVE-2017-7741 CVE-2017-7742 Debian Bug : 860255 Multiple vulnerabilities were found in libsndfile, a popular library for reading/writing audio files. CVE-2017-7585 In libsndfile before 1.0.28, an...

[SECURITY] [DSA 3594-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3594-1 [email protected] https://www.debian.org/security/ Michael Gilbert June 04, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3587-1] libgd2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3587-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 27, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 473-1] wpa security update

Package : wpa Version : 1.0-3+deb7u4 CVE ID : CVE-2016-4476 CVE-2016-4477 Debian Bug : 823411 A vulnerability was found in how hostapd and wpasupplicant writes the configuration file update for the WPA/WPA2 passphrase parameter. If this parameter has been updated to include control characters...

[SECURITY] [DSA 3545-1] cgit security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3545-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 07, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 340-1] krb5 security update

Package : krb5 Version : 1.8.3+dfsg-4squeeze10 CVE ID : CVE-2015-2695 CVE-2015-2697 Several vulnerabilities were discovered in krb5, the MIT implementation of Kerberos. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2015-2695 It was discovered that...

[SECURITY] [DSA 3344-1] php5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3344-1 [email protected] https://www.debian.org/security/ Sebastien Delafond August 27, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3313-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3313-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 23, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3183-1] movabletype-opensource security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3183-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso March 12, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 168-1] konversation security update

Package : konversation Version : 1.3.1-2+deb6u1 CVE ID : CVE-2014-8483 Debian Bug : 768191 It was discovered that Konversation, an IRC client for KDE, could by crashed when receiving malformed messages using FiSH encryption...

[SECURITY] [DSA 2598-1] weechat security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2598-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 05, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2559-1] libexif security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2559-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez October 11, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2362-1] acpid security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2362-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 10, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2078-1] New mapserver packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA-2078-1 [email protected] http://www.debian.org/security/ Nico Golde July 31nd, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA-1940-1] New php5 packages fix several issues

------------------------------------------------------------------------ Debian Security Advisory DSA-1940-1 [email protected] http://www.debian.org/security/ Stefan Fritsch November 25, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1715-1] New moin packages fix insufficient input sanitising

------------------------------------------------------------------------ Debian Security Advisory DSA-1715 [email protected] http://www.debian.org/security/ Steffen Joeris January 29, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1601-1] New wordpress packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1601-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst July 04, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1586-1] New xine-lib packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1586-1 [email protected] http://www.debian.org/security/ Devin Carraway May 22, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1448-1] New eggdrop packages fix execution of arbitrary code

------------------------------------------------------------------------ Debian Security Advisory DSA-1448-1 [email protected] http://www.debian.org/security/ Steve Kemp January 05, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 946-2] New sudo packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 946-2 [email protected] http://www.debian.org/security/ Martin Schulze April 8th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1017-1] New Linux kernel 2.6.8 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1017-1 [email protected] http://www.debian.org/security/ Dann Frazier, Simon Horman March 23th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 674-2] New mailman packages really fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 674-2 [email protected] http://www.debian.org/security/ Martin Schulze February 11th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 159-2] New Python packages fix problem introduced by security fix

-------------------------------------------------------------------------- Debian Security Advisory DSA 159-2 [email protected] http://www.debian.org/security/ Martin Schulze September 9th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 6007-1] ffmpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6007-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 21, 2025 https://www.debian.org/security/faq -...

[SECURITY] [DLA 4092-1] libcap2 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4092-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb March 26, 2025 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 4047-1] sssd security update

Debian LTS Advisory DLA-4047-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin February 09, 2025 https://wiki.debian.org/LTS Package : sssd Version : 2.4.1-2+deb11u1 CVE ID : CVE-2021-3621 CVE-2023-3758 Debian Bug : 992710 1070369 Vulnerabilities were found in sssd...

[SECURITY] [DLA 3901-1] ruby-loofah security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3901-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk September 28, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5582-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5582-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 21, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5434-1] minidlna security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5434-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 21, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5393-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5393-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 22, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA-3210-1] gerbv security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3210-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb November 28, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5161-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5161-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 11, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2743-2] amd64-microcode update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2743-2 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta October 18, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4922-1] hyperkitty security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4922-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 29, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2540-1] python-django security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2540-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb February 01, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4836-1] openvswitch security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4836-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 22, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2512-1] libhibernate3-java security update

Debian LTS Advisory DLA-2512-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany January 03, 2021 https://wiki.debian.org/LTS Package : libhibernate3-java Version : 3.6.10.Final-6+deb9u1 CVE ID : CVE-2020-25638 A flaw was found in hibernate-core. A SQL injection in...

[SECURITY] [DSA 4809-1] python-apt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4809-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 09, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2443-1] zeromq3 security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2443-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta November 10, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2441-1] sympa security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2441-1 [email protected] https://www.debian.org/lts/security/ November 09, 2020 https://wiki.debian.org/LTS - -------------------------------------------------------------------------...

[SECURITY] [DLA 2343-1] icingaweb2 security update

Debian LTS Advisory DLA-2343-1 [email protected] https://www.debian.org/lts/security/ August 24, 2020 https://wiki.debian.org/LTS Package : icingaweb2 Version : 2.4.1-1+deb9u1 CVE ID : CVE-2020-24368 Debian Bug : 968833 A directory traversal vulnerability was discovered in Icinga Web 2,...

[SECURITY] [DSA 4706-1] drupal7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4706-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 18, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2176-1] inetutils security update

Package : inetutils Version : 2:1.9.2.39.3a460-3+deb8u1 CVE ID : CVE-2020-10188 Debian Bug : 956084 NOTE: This DLA was intially sent on 2020-04-14 but for reasons unknown failed to reach the mailing list. It is being re-sent now to ensure that it appears in the mailing list archive. No new versio...