[SECURITY] [DSA 4806-1] minidlna security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4806-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 07, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4636-1] python-bleach security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4636-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 28, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2003-1] isc-dhcp security update

Package : isc-dhcp Version : 4.3.1-6+deb8u4 CVE ID : CVE-2016-2774 An issue has been found in isc-dhcp, a server for automatic IP address assignment. The number of simultaneous open TCP connections to OMAPI port of the server has to be limited to 200 in order to avoid a denial of service. For...

[SECURITY] [DLA 2002-1] libice security update

Package : libice Version : 2:1.0.9-1+deb8u1 CVE ID : CVE-2017-2626 It has been found, that libice, an X11 Inter-Client Exchange library, uses weak entropy to generate keys. Using arc4randombuf from libbsd should avoid this flaw. For Debian 8 "Jessie", this problem has been fixed in version...

[SECURITY] [DLA 1996-1] libapache2-mod-auth-openidc security update

Package : libapache2-mod-auth-openidc Version : 1.6.0-1+deb8u2 CVE ID : CVE-2019-14857 Debian Bug : 942165 A security vulnerability was found in libapache2-mod-auth-openidc, the OpenID Connect authentication module for the Apache HTTP server. Insufficient validation of URLs leads to an Open...

[SECURITY] [DSA 4570-1] mosquitto security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4570-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 17, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4509-3] apache2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4509-3 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 15, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1942-1] phpbb3 security update

Package : phpbb3 Version : 3.0.12-5+deb8u4 CVE ID : CVE-2019-16993 In phpBB, includes/acp/acpbbcodes.php had improper verification of a CSRF token on the BBCode page in the Administration Control Panel. An actual CSRF attack was possible if an attacker also managed to retrieve the session id of a...

[SECURITY] [DLA 1753-1] proftpd-dfsg security update

Package : proftpd-dfsg Version : 1.3.5e-0+deb8u1 CVE ID : not-available Debian Bug : 923926 Several memory leaks were discovered in proftpd-dfsg, a versatile, virtual-hosting FTP daemon, when modfacl or modsftp is used which could lead to memory exhaustion and a denial-of-service. For Debian 8...

[SECURITY] [DSA 4405-1] openjpeg2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4405-1 [email protected] https://www.debian.org/security/ Luciano Bello March 10, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1695-1] sox security update

Package : sox Version : 14.4.1-5+deb8u2 CVE ID : CVE-2017-15370 CVE-2017-15372 CVE-2017-15642 CVE-2017-18189 Debian Bug : 878808, 878810, 882144, 881121 Multiple vulnerabilities have been discovered in SoX Sound eXchange, a sound processing program: CVE-2017-15370 The ImaAdpcmReadBlock function...

[SECURITY] [DLA 1520-1] python3.4 security update

Package : python3.4 Version : 3.4.2-1+deb8u1 CVE ID : CVE-2017-1000158 CVE-2018-1060 CVE-2018-1061 CVE-2018-1000802 Multiple vulnerabilities were found in the CPython interpreter which can cause denial of service, information gain, and arbitrary code execution. CVE-2017-1000158 CPython aka Python...

[SECURITY] [DSA 4301-1] mediawiki security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4301-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 22, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4204-1] imagemagick security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4204-1 [email protected] https://www.debian.org/security/ Sebastien Delafond May 18, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4164-1] apache2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4164-1 [email protected] https://www.debian.org/security/ Stefan Fritsch April 03, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1333-1] dovecot security update

Package : dovecot Version : 1:2.1.7-7+deb7u2 CVE ID : CVE-2017-14461 CVE-2017-15130 CVE-2017-15132 Several vulnerabilities have been discovered in the Dovecot email server. The Common Vulnerabilities and Exposures project identifies the following issues: CVE-2017-14461 Aleksandar Nikolic of Cisco...

[SECURITY] [DSA 4106-1] libtasn1-6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4106-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 07, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1218-1] rsync security update

Package : rsync Version : 3.0.9-4+deb7u1 CVE ID : CVE-2017-16548 CVE-2017-17433 CVE-2017-17434 Several vulnerabilities were discovered in rsync, a fast, versatile, remote and local file-copying tool, allowing a remote attacker to bypass intended access restrictions or cause a denial of service. F...

[SECURITY] [DSA 4016-1] irssi security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4016-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 03, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1100-1] gdk-pixbuf security update

Package : gdk-pixbuf Version : 2.26.1-1+deb7u6 CVE ID : CVE-2017-2862 Debian Bug : 874552 Marcin Noga discovered a buffer overflow in the JPEG loader of the GDK Pixbuf library, which may result in the execution of arbitrary code if a malformed file is opened. For Debian 7 "Wheezy", these problems...

[SECURITY] [DSA 3870-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3870-1 [email protected] https://www.debian.org/security/ Sebastien Delafond June 01, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 961-1] mosquitto security update

Package : mosquitto Version : 0.15-2+deb7u1 CVE ID : CVE-2017-7650 Debian Bug : CVE-2017-7650: Pattern based ACLs can be bypassed by clients that set their username/client id to ‘’ or ‘+’. This allows locally or remotely connected clients to access MQTT topics that they do have the rights to. The...

[SECURITY] [DSA 3813-1] r-base security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3813-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 19, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3733-1] apt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3733-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 13, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 537-1] roundcube security update

Package : roundcube Version : 0.7.2-9+deb7u3 CVE ID : CVE-2015-8864 Roundcube, a webmail solution for IMAP servers, was susceptible to cross-site-scripting XSS vulnerabilities when handling SVG images. When right-clicking on the download link of an attached image, it was possible that embedded...

[SECURITY] [DSA 3570-1] mercurial security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3570-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 05, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3562-1] tardiff security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3562-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 01, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3353-1] openslp-dfsg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3353-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini September 05, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DLA 268-1] virtualbox-ose security update

Package : virtualbox-ose Version : 3.2.10-dfsg-1+squeeze4 CVE ID : CVE-2015-0377 CVE-2015-0418 CVE-2015-3456 Debian Bug : 775888 785424 Three vulnerabilities have been fixed in the Debian squeeze-lts version of VirtualBox package name: virtualbox-ose, a x86 virtualisation solution. CVE-2015-0377...

[SECURITY] [DSA 3263-1] proftpd-dfsg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3263-1 [email protected] http://www.debian.org/security/ Sebastien Delafond May 19, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 219-1] icu security update

Package : icu Version : 4.4.1-8+squeeze3 CVE ID : CVE-2013-1569 CVE-2013-2383 CVE-2013-2384 CVE-2013-2419 CVE-2014-6585 CVE-2014-6591 CVE-2014-7923 CVE-2014-7926 CVE-2014-7940 CVE-2014-9654 Several vulnerabilities were discovered in the International Components for Unicode ICU library:...

[SECURITY] [DSA 3195-1] php5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3195-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 18, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 170-1] mod-gnutls security update

Package : mod-gnutls Version : 0.5.6-1+squeeze2 CVE ID : CVE-2015-2091 Debian Bug : 578663 Thomas Klute discovered that in mod-gnutls, an Apache module providing SSL and TLS encryption with GnuTLS, a bug caused the servers client verify mode not to be considered at all, in case the directorys...

[SECURITY] [DSA 3142-1] eglibc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3142-1 [email protected] http://www.debian.org/security/ Florian Weimer January 27, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2959-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2959-1 [email protected] http://www.debian.org/security/ Michael Gilbert June 14, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2732-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2732-1 [email protected] http://www.debian.org/security/ Michael Gilbert July 31, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2526-1] libotr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2526-1 [email protected] http://www.debian.org/security/ Nico Golde August 12, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2202-1] apache2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2202-1 [email protected] http://www.debian.org/security/ Stefan Fritsch March 23, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA-2141-1] New openssl packages fix protocol design flaw

------------------------------------------------------------------------ Debian Security Advisory DSA-2141-1 [email protected] http://www.debian.org/security/ Stefan Fritsch January 06, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1325-1] New evolution packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1325-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 29th, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1184-1] New Linux 2.6.8 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1184-1 [email protected] http://www.debian.org/security/ Dann Frazier September 25th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 664-1] New cpio packages fix insecure file permissions

-------------------------------------------------------------------------- Debian Security Advisory DSA 664-1 [email protected] http://www.debian.org/security/ Martin Schulze February 2nd, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 426-1] New netpbm-free packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 426-1 [email protected] http://www.debian.org/security/ Matt Zimmerman January 18th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 379-1] New sane-backends packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 379-1 [email protected] http://www.debian.org/security/ Martin Schulze September 11th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DLA 4289-1] python-eventlet security update

Debian LTS Advisory DLA-4289-1 [email protected] https://www.debian.org/lts/security/ Thomas Goirand September 02, 2025 https://wiki.debian.org/LTS Package : python-eventlet Version : 0.26.1-7+deb11u2 CVE ID : CVE-2025-58068 Debian Bug : CVE-2025-58068 Eventlet is a concurrent networkin...

[SECURITY] [DLA 3941-1] texlive-bin security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3941-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès October 29, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3901-1] ruby-loofah security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3901-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk September 28, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5662-1] apache2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5662-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 16, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5577-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5577-1 [email protected] https://www.debian.org/security/ Andres Salomon December 13, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3678-1] horizon security update - CORRECTED ANNOUNCEMENT

Debian LTS Advisory DLA-3678-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin December 30, 2023 https://wiki.debian.org/LTS Package : horizon Version : 3:14.0.2-3+deb10u3 CVE ID : CVE-2022-45582 NB: The original message sent included the wrong DLA reference ID. Th...