[SECURITY] [DSA 5428-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5428-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 15, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3286-1] tor security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3286-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz January 28, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5164-1] exo security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5164-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez June 18, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3016-1] rsyslog security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3016-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler May 20, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2646-1] subversion security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2646-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky May 03, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4845-1] openldap security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4845-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 03, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4837-1] salt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4837-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 24, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4818-1] sympa security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4818-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 23, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2485-1] golang-golang-x-net-dev security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2485-1 [email protected] https://www.debian.org/lts/security/ Brian May December 09, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2467-1] lxml security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2467-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA November 26, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4788-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4788-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 10, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2352-1] php-horde-gollem security update

Debian LTS Advisory DLA-2352-1 [email protected] https://www.debian.org/lts/security/ Mike Gabriel August 29, 2020 https://wiki.debian.org/LTS Package : php-horde-gollem Version : 3.0.10-1+deb9u2 CVE ID : CVE-2017-15235 The File Manager gollem module in Horde Groupware has allowed remot...

[SECURITY] [DLA 2188-1] php5 security update

Package : php5 Version : 5.6.40+dfsg-0+deb8u11 CVE ID : CVE-2020-7064 CVE-2020-7066 CVE-2020-7067 Three issues have been found in php5, a server-side, HTML-embedded scripting language. CVE-2020-7064 A one byte out-of-bounds read, which could potentially lead to information disclosure or crash...

[SECURITY] [DLA 2178-1] awl security update

Package : awl Version : 0.55-1+deb8u1 CVE ID : CVE-2020-11728 CVE-2020-11729 Debian Bug : 956650 Following CVEs were reported against the awl source package: CVE-2020-11728 An issue was discovered in DAViCal Andrews Web Libraries AWL through 0.60. Session management does not use a sufficiently...

[SECURITY] [DSA 4623-1] postgresql-11 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4623-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 13, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4610-1] webkit2gtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4610-1 [email protected] https://www.debian.org/security/ Alberto Garcia January 29, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2008-1] nss security update

Package : nss Version : 2:3.26-1+debu8u7 CVE ID : CVE-2019-11745 A vulnerability has been discovered in nss, the Mozilla Network Security Service library. An out-of-bounds write can occur when passing an output buffer smaller than the block size to NSCEncryptUpdate. For Debian 8 "Jessie", this...

[SECURITY] [DLA 1901-1] dovecot security update

Package : dovecot Version : 1:2.2.13-12deb8u7 CVE ID : CVE-2019-11500 Nick Roessler and Rafi Rubin discovered that the IMAP and ManageSieve protocol parsers in the Dovecot email server do not properly validate input both pre- and post-login. A remote attacker can take advantage of this flaw to...

[SECURITY] [DLA 1882-1] atril security update

Package : atril Version : 1.8.1+dfsg1-4+deb8u2 CVE ID : CVE-2017-1000159 CVE-2019-11459 CVE-2019-1010006 A few issues were found in Atril, the MATE document viewer. CVE-2017-1000159 When printing from DVI to PDF, the dvipdfm tool was called without properly sanitizing the filename, which could le...

[SECURITY] [DLA 1695-1] sox security update

Package : sox Version : 14.4.1-5+deb8u2 CVE ID : CVE-2017-15370 CVE-2017-15372 CVE-2017-15642 CVE-2017-18189 Debian Bug : 878808, 878810, 882144, 881121 Multiple vulnerabilities have been discovered in SoX Sound eXchange, a sound processing program: CVE-2017-15370 The ImaAdpcmReadBlock function...

[SECURITY] [DLA 1493-1] xen security update

Package : xen Version : 4.4.4lts1-0+deb8u1 CVE ID : CVE-2016-4963 CVE-2017-14431 Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in denial of service, informations leaks or privilege escalation. For Debian 8 "Jessie", these problems have been fixed in versi...

[SECURITY] [DLA 1471-1] kamailio security update

Package : kamailio Version : 4.2.0-2+deb8u4 CVE ID : CVE-2018-14767 CVE-2018-14767 Fix for missing input validation, which could result in denial of service and potentially the execution of arbitrary code. For Debian 8 "Jessie", this problem has been fixed in version 4.2.0-2+deb8u4. We recommend...

[SECURITY] [DLA 1447-1] libidn security update

Package : libidn Version : 1.29-1+deb8u3 CVE ID : CVE-2017-14062 Debian Bug : 873903 An integer overflow vulnerability was discovered in libidn, the GNU library for Internationalized Domain Names IDNs, in its Punycode handling a Unicode characters to ASCII encoding allowing a remote attacker to...

[SECURITY] [DSA 4243-1] cups security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4243-1 [email protected] https://www.debian.org/security/ Luciano Bello July 11, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4085-1] xmltooling security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4085-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 12, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1238-1] awstats security update

Package : awstats Version : 7.0dfsg-7+deb7u1 CVE ID : CVE-2017-1000501 Debian Bug : 885835 Awstats version 7.6 and earlier is vulnerable to a path traversal flaw in the handling of the "config" and "migrate" parameters resulting in unauthenticated remote code execution. For Debian 7 "Wheezy", the...

[SECURITY] [DLA 1193-1] roundcube security update

Package : roundcube Version : 0.7.2-9+deb7u9 CVE ID : CVE-2017-16651 A file disclosure vulnerability was discovered in roundcube, a skinnable AJAX based webmail solution for IMAP servers. CVE-2017-16651 An authenticated attacker can take advantage of this flaw to read roundcubes configuration fil...

[SECURITY] [DSA 4026-1] bchunk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4026-1 [email protected] https://www.debian.org/security/ Sebastien Delafond November 09, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4016-1] irssi security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4016-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 03, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3991-1] qemu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3991-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 03, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3961-1] libgd2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3961-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 03, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3870-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3870-1 [email protected] https://www.debian.org/security/ Sebastien Delafond June 01, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3764-1] pdns security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3764-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 13, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 537-1] roundcube security update

Package : roundcube Version : 0.7.2-9+deb7u3 CVE ID : CVE-2015-8864 Roundcube, a webmail solution for IMAP servers, was susceptible to cross-site-scripting XSS vulnerabilities when handling SVG images. When right-clicking on the download link of an attached image, it was possible that embedded...

[SECURITY] [DSA 3602-1] php5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3602-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 14, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3452-1] claws-mail security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3452-1 [email protected] https://www.debian.org/security/ Ben Hutchings January 23, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3372-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3372-1 [email protected] https://www.debian.org/security/ Ben Hutchings October 13, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3353-1] openslp-dfsg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3353-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini September 05, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3149-1] condor security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3149-1 [email protected] http://www.debian.org/security/ Sebastien Delafond February 02, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3142-1] eglibc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3142-1 [email protected] http://www.debian.org/security/ Florian Weimer January 27, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 68-1] fex security update

Package : fex Version : 20100208+debian1-1+squeeze4 CVE ID : CVE-2014-3875 CVE-2014-3876 CVE-2014-3877 CVE-2014-3875 When inserting encoded newline characters into a request to rup, additional HTTP headers can be injected into the reply, as well as new HTML code on the top of the website...

[SECURITY] [DSA 2959-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2959-1 [email protected] http://www.debian.org/security/ Michael Gilbert June 14, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2578-1] rssh security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2578-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez November 28, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2493-1] asterisk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2493-1 [email protected] http://www.debian.org/security/ Florian Weimer June 12, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2097-1] New phpmyadmin packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2097-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst August 29, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1966-1] New horde3 packages fix cross-site scripting

------------------------------------------------------------------------ Debian Security Advisory DSA-1966-1 [email protected] http://www.debian.org/security/ Steffen Joeris January 07, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1039-1] New blender packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1039-1 [email protected] http://www.debian.org/security/ Martin Schulze April 24th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1039-1] New blender packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1039-1 [email protected] http://www.debian.org/security/ Martin Schulze April 24th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1000-1] New Apache2::Request packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1000-1 [email protected] http://www.debian.org/security/ Martin Schulze March 14th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 737-1] New clamav packages fix potential DOS

------------------------------------------------------------------------ Debian Security Advisory DSA 737-1 [email protected] http://www.debian.org/security/ Michael Stone July 05, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...