[SECURITY] [DLA 3987-1] renderdoc security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3987-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk December 08, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5675-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5675-1 [email protected] https://www.debian.org/security/ Andres Salomon April 26, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3717-1] zabbix security update

Debian LTS Advisory DLA-3717-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost January 24, 2024 https://wiki.debian.org/LTS Package : zabbix Version : 1:4.0.4+dfsg-1+deb10u4 CVE ID : CVE-2023-32721 CVE-2023-32723 CVE-2023-32726 Debian Bug : 1053877 Several security...

[SECURITY] [DSA 5582-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5582-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 21, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5522-3] tomcat9 regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-5522-3 [email protected] https://www.debian.org/security/ Markus Koschany October 16, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5497-1] libwebp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5497-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 13, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5434-1] minidlna security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5434-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 21, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA-3210-1] gerbv security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3210-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb November 28, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3160-1] tomcat9 security update

Debian LTS Advisory DLA-3160-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany October 26, 2022 https://wiki.debian.org/LTS Package : tomcat9 Version : 9.0.31-1deb10u7 CVE ID : CVE-2021-43980 CVE-2022-23181 CVE-2022-29885 Several security vulnerabilities have been...

[SECURITY] [DSA 5161-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5161-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 11, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5135-1] postgresql-11 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5135-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 12, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5103-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5103-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 15, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2922-1] pgbouncer security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2922-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort February 14, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2845-1] libsamplerate security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2845-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz December 14, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2743-2] amd64-microcode update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2743-2 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta October 18, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4836-1] openvswitch security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4836-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 22, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2512-1] libhibernate3-java security update

Debian LTS Advisory DLA-2512-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany January 03, 2021 https://wiki.debian.org/LTS Package : libhibernate3-java Version : 3.6.10.Final-6+deb9u1 CVE ID : CVE-2020-25638 A flaw was found in hibernate-core. A SQL injection in...

[SECURITY] [DLA 2459-1] golang-1.7 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2459-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz November 21, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2443-1] zeromq3 security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2443-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta November 10, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4746-1] net-snmp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4746-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 15, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2287-1] poppler security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2287-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort July 23, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2176-1] inetutils security update

Package : inetutils Version : 2:1.9.2.39.3a460-3+deb8u1 CVE ID : CVE-2020-10188 Debian Bug : 956084 NOTE: This DLA was intially sent on 2020-04-14 but for reasons unknown failed to reach the mailing list. It is being re-sent now to ensure that it appears in the mailing list archive. No new versio...

[SECURITY] [DLA 2102-1] firefox-esr security update

Package : firefox-esr Version : 68.5.0esr-1deb8u1 CVE ID : CVE-2020-6796 CVE-2020-6798 CVE-2020-6800 Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code. For Debian 8 "Jessie", these problems have been fixe...

[SECURITY] [DSA 4585-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4585-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 15, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1939-1] poppler security update

Package : poppler Version : 0.26.5-2+deb8u11 CVE ID : CVE-2018-20650 CVE-2018-21009 CVE-2019-12493 Several issues in poppler, a PDF rendering library, have been fixed. CVE-2018-20650 A missing check for the dict data type could lead to a denial of service. CVE-2018-21009 An integer overflow might...

[SECURITY] [DLA 1447-1] libidn security update

Package : libidn Version : 1.29-1+deb8u3 CVE ID : CVE-2017-14062 Debian Bug : 873903 An integer overflow vulnerability was discovered in libidn, the GNU library for Internationalized Domain Names IDNs, in its Punycode handling a Unicode characters to ASCII encoding allowing a remote attacker to...

[SECURITY] [DLA 1399-1] ruby-passenger security update

Package : ruby-passenger Version : 4.0.53-1+deb8u1 CVE ID : CVE-2015-7519 CVE-2018-12029 Debian Bug : 864651 Two flaws were discovered in ruby-passenger for Ruby Rails and Rack support that allowed attackers to spoof HTTP headers or exploit a race condition which made privilege escalation under...

[SECURITY] [DSA 4196-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4196-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 08, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1333-1] dovecot security update

Package : dovecot Version : 1:2.1.7-7+deb7u2 CVE ID : CVE-2017-14461 CVE-2017-15130 CVE-2017-15132 Several vulnerabilities have been discovered in the Dovecot email server. The Common Vulnerabilities and Exposures project identifies the following issues: CVE-2017-14461 Aleksandar Nikolic of Cisco...

[SECURITY] [DSA 4106-1] libtasn1-6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4106-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 07, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4050-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4050-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 28, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4023-1] slurm-llnl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4023-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 07, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1164-1] mupdf security update

Package : mupdf Version : 0.9-2+deb7u4 CVE ID : CVE-2017-14687 CVE-2017-15587 Debian Bug : 877379 879055 Two security issues were discovered in mupdf, a lightweight PDF viewer. CVE-2017-14687 MuPDF allows attackers to cause a denial of service or possibly have unspecified other impact via a craft...

[SECURITY] [DLA 978-1] perl security update

Package : perl Version : 5.14.2-21+deb7u5 CVE ID : CVE-2017-6512 Debian Bug : 863870 The cPanel Security Team reported a time of check to time of use TOCTTOU race condition flaw in File::Path, a core module from Perl to create or remove directory trees. An attacker can take advantage of this flaw...

[SECURITY] [DSA 3764-1] pdns security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3764-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 13, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 714-1] wireshark security update

Package : wireshark Version : 1.12.1+g01b65bf-4+deb8u6deb7u5 CVE ID : CVE-2016-9373 CVE-2016-9374 CVE-2016-9375 CVE-2016-9376 The following vulnerabilities have been discovered in the Debian Wheezys Wireshark version: CVE-2016-9373 The DCERPC dissector could crash CVE-2016-9374 The AllJoyn...

[SECURITY] [DSA 3530-1] tomcat6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3530-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 25, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3468-1] polarssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3468-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 06, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3450-1] ecryptfs-utils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3450-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 20, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3431-1] ganeti security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3431-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 01, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 301-1] python-django security update

Package : python-django Version : 1.2.3-3+squeeze14 CVE ID : CVE-2015-5963 CVE-2015-5964 Denial-of-service possibility in logout view by filling session store Previously, a session could be created when anonymously accessing the django.contrib.auth.views.logout view provided it wasnt decorated wi...

[SECURITY] [DLA 280-1] ghostscript security update

Package : ghostscript Version : 8.71dfsg2-9+squeeze2 CVE ID : CVE-2015-3228 Debian Bug : 793489 In gsheapallocbytes, add a sanity check to ensure we dont overflow the variable holding the actual number of bytes we allocate...

[SECURITY] [DLA 263-1] ruby1.9.1 security update

Package : ruby1.9.1 Version : 1.9.2.0-2+deb6u5 CVE ID : CVE-2012-5371 CVE-2013-0269 Debian Bug : 693024 700471 Two vulnerabilities were identified in the Ruby language interpreter, version 1.9.1. CVE-2012-5371 Jean-Philippe Aumasson identified that Ruby computed hash values without properly...

[SECURITY] [DLA 133-1] unrtf security update

Package : unrtf Version : 0.19.3-1.1+deb6u1 CVE ID : CVE-2014-9274 CVE-2014-9275 Debian Bug : 772811 CVE-2014-9274: check that accesses to color table stay within bounds Patches taken from upstream commits: - CVE-2014-9274: b0cef89a170a66bc48f8dd288ce562ea8ca91f7a CVE-2014-9275: various crashes ....

[SECURITY] [DSA 3101-1] c-icap security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3101-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 13, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 78-1] torque security update

Package : torque Version : 2.4.8+dfsg-9squeeze5 CVE ID : CVE-2014-3684 Chad Vizino reported a vulnerability in torque, a PBS-derived batch processing queueing system. A non-root user could exploit the flaw in the tmadopt library call to kill any process, including root-owned ones on any node in a...

[SECURITY] [DSA 2915-1] dpkg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2915-1 [email protected] http://www.debian.org/security/ Raphael Geissert April 28, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2901-3] wordpress regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-2901-3 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 21, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2888-1] ruby-actionpack-3.2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2888-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 27, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2866-1] gnutls26 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2866-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 22, 2014 http://www.debian.org/security/faq -...