[SECURITY] [DLA 3175-1] python3.7 security update

Debian LTS Advisory DLA-3175-1 [email protected] https://www.debian.org/lts/security/ Stefano Rivera November 01, 2022 https://wiki.debian.org/LTS Package : python3.7 Version : 3.7.3-2+deb10u4 CVE ID : CVE-2022-37454 Nicky Mouha discovered a buffer overflow in sha3, the SHA-3 hashing...

[SECURITY] [DLA 3141-1] wordpress security update

Debian LTS Advisory DLA-3141-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany October 10, 2022 https://wiki.debian.org/LTS Package : wordpress Version : 5.0.17+dfsg1-0+deb10u1 CVE ID : CVE-2019-17670 Debian Bug : 942459 Several security vulnerabilities were...

[SECURITY] [DSA 5236-1] expat security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5236-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 22, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3087-1] webkit2gtk security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3087-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky August 30, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5219-1] webkit2gtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5219-1 [email protected] https://www.debian.org/security/ Alberto Garcia August 27, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5205-1] samba security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5205-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 11, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5179-1] php7.4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5179-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 08, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5144-1] condor security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5144-1 [email protected] https://www.debian.org/security/ Markus Koschany May 22, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5129-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5129-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 04, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2987-1] libarchive security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2987-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz April 30, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5125-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5125-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 27, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5118-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5118-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 10, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5094-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5094-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 08, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5090-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5090-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 06, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5084-1] wpewebkit security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5084-1 [email protected] https://www.debian.org/security/ Alberto Garcia February 19, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5060-1] webkit2gtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5060-1 [email protected] https://www.debian.org/security/ Alberto Garcia January 25, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2893-1] pillow security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2893-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort January 23, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2784-1] icu security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2784-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb October 12, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2751-1] postgresql-9.6 security update

Debian LTS Advisory DLA-2751-1 [email protected] https://www.debian.org/lts/security/ Christoph Berg August 31, 2021 https://wiki.debian.org/LTS Package : postgresql-9.6 Version : 9.6.23-0+deb9u1 CVE ID : CVE-2021-3449 PostgreSQL 9.6.23 fixes this security issue: Disallow SSL...

[SECURITY] [DLA 2682-1] mrxvt security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2682-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta June 09, 2021 https://wiki.debian.org/LTS - -----------------------------------------------------------------------...

[SECURITY] [DLA 2675-1] caribou regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2675-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort June 03, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2649-1] cgal security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2649-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky May 04, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2620-1] python-bleach security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2620-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb April 06, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2583-1] activemq security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2583-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA March 05, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4860-1] openldap security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4860-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 20, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4851-1] subversion security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4851-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 13, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4829-1] coturn security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4829-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 11, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2520-1] golang-websocket security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2520-1 [email protected] https://www.debian.org/lts/security/ Brian May January 07, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2503-1] node-ini security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2503-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb December 21, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4808-1] apt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4808-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 09, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2471-1] libxstream-java security update

Debian LTS Advisory DLA-2471-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany November 30, 2020 https://wiki.debian.org/LTS Package : libxstream-java Version : 1.4.9-2+deb9u1 CVE ID : CVE-2020-26217 It was found that XStream is vulnerable to Remote Code Execution...

[SECURITY] [DLA 2465-1] php-pear security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2465-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb November 23, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4778-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4778-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 21, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4767-1] mediawiki security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4767-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 25, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4765-1] modsecurity security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4765-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 18, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2359-1] xorg-server security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2359-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz August 30, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2343-1] icingaweb2 security update

Debian LTS Advisory DLA-2343-1 [email protected] https://www.debian.org/lts/security/ August 24, 2020 https://wiki.debian.org/LTS Package : icingaweb2 Version : 2.4.1-1+deb9u1 CVE ID : CVE-2020-24368 Debian Bug : 968833 A directory traversal vulnerability was discovered in Icinga Web 2,...

[SECURITY] [DLA 2302-1] libjpeg-turbo security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2302-1 [email protected] https://www.debian.org/lts/security/ July 31, 2020 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package :...

[SECURITY] [DSA 4713-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4713-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 01, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2196-2] pound regression update

Package : pound Version : 2.6-6+deb8u3 CVE ID : CVE-2016-10711 A regression has been found in the patch for CVE-2016-10711 of pound, a reverse proxy, load balancer and HTTPS front-end for Web servers. Without the fix pound can be tricked to use 100% CPU. For Debian 8 "Jessie", this problem has be...

[SECURITY] [DLA 2195-1] w3m security update

Package : w3m Version : 0.5.3-19+deb8u3 CVE ID : CVE-2018-6196 CVE-2018-6197 Two issues have been found in w3m, WWW browsable pager with excellent tables/frames support. One issue is related to a stack overflow, the other one is a fix for a null pointer dereference. Brief introduction CVE-2018-61...

[SECURITY] [DLA 2180-1] file-roller security update

Package : file-roller Version : 3.14.1-1+deb8u2 CVE ID : CVE-2020-11736 Debian Bug : 956638 fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a files parent is a symlink to a directory outside of the intend...

[SECURITY] [DLA 2138-1] wpa security update

Package : wpa Version : 2.3-1+deb8u10 CVE ID : CVE-2019-10064 Similar to CVE-2016-10743 the host access point daemon, hostapd, in EAP mode used a low quality pseudorandom number generator that leads to insufficient entropy. The problem was resolved by using the osgetrandom function which provides...

[SECURITY] [DLA 2012-1] libvpx security update

Package : libvpx Version : 1.3.0-3+deb8u2 CVE ID : CVE-2019-9232 CVE-2019-9433 Several issues have been found in libvpx, a VP8 and VP9 video codec. CVE-2019-9232 There is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no addition...

[SECURITY] [DLA 1978-1] python-ecdsa security update

Package : python-ecdsa Version : 0.11-1+deb8u1 CVE ID : CVE-2019-14853 CVE-2019-14859 It was discovered that python-ecdsa, a cryptographic signature library for Python, did not correctly verify DER encoded signatures. Malformed signatures could lead to unexpected exceptions and in some cases did...

[SECURITY] [DLA 1964-1] sudo security update

Package : sudo Version : 1.8.10p3-1+deb8u6 CVE ID : CVE-2019-14287 Debian Bug : 942322 In sudo, a program that provides limited super user privileges to specific users, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can caus...

[SECURITY] [DLA 1769-1] gst-plugins-base0.10 security update

rom: Thorsten Alteholz [email protected] To: [email protected] Subject: SECURITY DLA 1769-1 gst-plugins-base0.10 security update Package : gst-plugins-base0.10 Version : 0.10.36-2+deb8u1 CVE ID : CVE-2019-9928 Debian Bug : The RTSP connection parser in the base GStreamer...

[SECURITY] [DLA 1733-1] wpa security update

Package : wpa Version : 2.3-1+deb8u7 CVE ID : CVE-2016-10743 It was found that the fallback mechanism for generating a WPS pin in hostapd, an IEEE 802.11 AP and IEEE 802.1X/WPA/WPA2/EAP Authenticator, used a low quality pseudorandom number generator. This was resolved by using only the high quali...

[SECURITY] [DSA 4314-1] net-snmp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4314-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 11, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4313-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4313-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 08, 2018 https://www.debian.org/security/faq -...