[SECURITY] [DSA 5044-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5044-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 13, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5021-1] mediawiki security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5021-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 15, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4999-1] asterisk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4999-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 01, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4997-1] tiff security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4997-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 31, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2794-1] php7.0 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2794-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler October 27, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4935-1] php7.3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4935-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 05, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2700-1] htmldoc security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2700-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta July 01, 2021 https://wiki.debian.org/LTS - -----------------------------------------------------------------------...

[SECURITY] [DLA 2685-1] squid3 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2685-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA June 14, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2599-1] shibboleth-sp2 security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2599-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta March 19, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2539-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2539-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort February 02, 2021 https://wiki.debian.org/LTS -...

[SECURITY][DLA 2431-1] libonig security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2431-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany November 05, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2405-1] httpcomponents-client security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2405-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany October 10, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4744-1] roundcube security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4744-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 12, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2304-1] libpam-radius-auth security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2304-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta August 01, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4718-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4718-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 05, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2267-1] libmatio security update

Package : libmatio Version : 1.5.2-3+deb8u1 CVE ID : CVE-2019-17533 In libmatio, a library to read and write Matlab MAT files, a vulnerability was fixed in MatVarReadNextInfo4 in mat4.c that could lead to a heap-based buffer over-read in strdupvprintf. For Debian 8 "Jessie", this problem has been...

[SECURITY] [DSA 4702-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4702-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 11, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2232-1] python-httplib2 security update

Package : python-httplib2 Version : 0.9+dfsg-2+deb8u1 CVE ID : CVE-2020-11078 In httplib2, an attacker controlling unescaped part of uri for httplib2.Http.request could change request headers and body, send additional hidden requests to same server. This vulnerability impacts software that uses...

[SECURITY] [DLA 2179-1] jackson-databind security update

Package : jackson-databind Version : 2.4.2-2+deb8u14 CVE ID : CVE-2020-10968 CVE-2020-10969 CVE-2020-11111 CVE-2020-11112 CVE-2020-11113 CVE-2020-11619 CVE-2020-11620 Following CVEs were reported against the jackson-databind source package : CVE-2020-10968 FasterXML jackson-databind 2.x before...

[SECURITY] [DLA 2059-1] git security update

Package : git Version : 1:2.1.4-2.1+deb8u8 CVE ID : CVE-2019-1348 CVE-2019-1349 CVE-2019-1352 CVE-2019-1353 CVE-2019-1387 Several vulnerabilities have been discovered in git, a fast, scalable, distributed revision control system. CVE-2019-1348 It was reported that the --export-marks option of git...

[SECURITY] [DLA 1996-1] libapache2-mod-auth-openidc security update

Package : libapache2-mod-auth-openidc Version : 1.6.0-1+deb8u2 CVE ID : CVE-2019-14857 Debian Bug : 942165 A security vulnerability was found in libapache2-mod-auth-openidc, the OpenID Connect authentication module for the Apache HTTP server. Insufficient validation of URLs leads to an Open...

[SECURITY] [DLA 1969-1] file security update

Package : file Version : 1:5.22+15-2+deb8u6 CVE ID : CVE-2019-18218 An issue has been found in file, a tool to determine file types by using magic numbers. The number of CDFVECTOR elements had to be restricted in order to prevent a heap-based buffer overflow 4-byte out-of-bounds write. For Debian...

[SECURITY] [DLA 1942-2] phpbb3 regression update

This is a follow-up to DLA-1942-1. There was some confusion about the correct fix for CVE-2019-13776. The correct announcement for this DLA should have been: Package : phpbb3 Version : 3.0.12-5+deb8u4 CVE ID : CVE-2019-13776 CVE-2019-16993 CVE-2019-16993 In phpBB, includes/acp/acpbbcodes.php had...

[SECURITY] [DSA 4469-1] libvirt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4469-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 22, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1711-1] systemd security update

Package : systemd Version : 215-17+deb8u11 CVE ID : CVE-2019-3815 Debian Bug : 924060 A memory leak was discovered in the backport of fixes for CVE-2018-16864 in systemd-journald. Function dispatchmessagereal in journald-server.c does not free allocated memory to store the CMDLINE= entry. A local...

[SECURITY] [DLA 1681-1] gsoap security update

Package : gsoap Version : 2.8.17-1+deb8u2 CVE ID : CVE-2019-7659 It was discovered that there was a denial of service vulnerability in gsoap a C/C++ language binding used for SOAP-based web services. For Debian 8 "Jessie", this issue has been fixed in gsoap version 2.8.17-1+deb8u2. We recommend...

[SECURITY] [DLA 1624-1] thunderbird security update

Package : thunderbird Version : 1:60.4.0-1deb8u1 CVE ID : not yet available Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code or denial of service. For Debian 8 "Jessie", this problem has been fixed in version 1:60.4.0-1deb8u1. We recommend...

[SECURITY] [DSA 4179-1] linux-tools security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4179-1 [email protected] https://www.debian.org/security/ Ben Hutchings April 24, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4138-1] mbedtls security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4138-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 15, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA-1271-1] postgresql-9.1 security update

Package : postgresql-9.1 Version : 9.1.24lts2-0+deb7u2 CVE ID : CVE-2018-1053 A vulnerabilities has been found in the PostgreSQL database system: CVE-2018-1053 Tom Lane discovered that pgupgrade, a tool used to upgrade PostgreSQL database clusters, creates temporary files containing password hash...

[SECURITY] [DSA 4023-1] slurm-llnl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4023-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 07, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1126-1] libxfont security update

Package : libxfont Version : 1:1.4.5-5+deb7u1 CVE IDs : CVE-2017-13720 CVE-2017-13722 It was discovered that there two vulnerabilities the library providing font selection and rasterisation, libxfont: CVE-2017-13720: If a pattern contained a ? character any character in the string is skipped even...

[SECURITY] [DSA 3979-1] pyjwt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3979-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 19, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1040-1] resiprocate security update

Package : resiprocate Version : 1.8.5-4+deb7u1 CVE ID : CVE-2017-11521 CVE-2017-11521 The SdpContents::Session::Medium::parse function in resip/stack/SdpContents.cxx in reSIProcate 1.10.2 allows remote attackers to cause a denial of service memory consumption by triggering many media connections...

[SECURITY] [DLA 1036-1] gsoap security update

Package : gsoap Version : 2.8.7-2+deb7u1 CVE ID : CVE-2017-9765 A vulnerability was discovered in gsoap, a library for the development of SOAP web services and clients, that may be exposed with a large and specific XML message over 2 GB in size. After receiving this 2 GB message, a buffer overflo...

[SECURITY] [DLA 993-1] linux security update

Package : linux Version : 3.2.89-1 CVE ID : CVE-2017-0605 CVE-2017-7487 CVE-2017-7645 CVE-2017-7895 CVE-2017-8890 CVE-2017-8924 CVE-2017-8925 CVE-2017-9074 CVE-2017-9075 CVE-2017-9076 CVE-2017-9077 CVE-2017-9242 CVE-2017-1000364 Several vulnerabilities have been discovered in the Linux kernel tha...

[SECURITY] [DSA 3889-1] libffi security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3889-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez June 19, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 694-1] libwmf security update

Package : libwmf Version : 0.2.8.4-10.3+deb7u2 CVE ID : CVE-2016-9011 Debian Bug : 842090 Agostino Sarubbo from Gentoo discovered a flaw in libwmfs Windows Metafile Format WMF parser which caused allocation of excessive amount of memory potentially leading to a crash. For Debian 7 "Wheezy", these...

[SECURITY] [DLA 673-1] kdepimlibs security update

Package : kdepimlibs Version : 4:4.8.4-2+deb7u1 CVE ID : CVE-2016-7966 Debian Bug : 840546 Roland Tapken discovered that insufficient input sanitizing in KMails plain text viewer allowed attackers the injection of HTML code. This might open the way to the exploitation of other vulnerabilities in...

[SECURITY] [DLA 643-1] chicken security update

Package : chicken Version : 4.7.0-1+deb7u1 CVE ID : CVE-2016-6830 CVE-2016-6831 Multiple vulnerabilities have been found in the CHICKEN Scheme compiler: CVE-2016-6830 Buffer overrun in CHICKEN Schemes "process-execute" and "process-spawn" procedures from the posix unit CVE-2016-6831 Memory leak i...

[SECURITY] [DSA 3665-1] openjpeg2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3665-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 11, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 605-1] eog security update

Package : eog Version : 3.4.2-1+build1+deb7u1 CVE ID : CVE-2016-6855 It was discovered that Eye of GNOME incorrectly handled certain invalid UTF-8 strings. If a user were tricked into opening a specially-crafted image, a remote attacker could use this issue to cause Eye of GNOME to crash, resulti...

[SECURITY] [DLA 520-1] horizon security update

Package : horizon Version : 2012.1.1-10+deb7u1 CVE ID : CVE-2016-4428 It was discovered that there was an XSS vulnerability in horizon, a Django module providing web interaction with OpenStack. For Debian 7 "Wheezy", this issue has been fixed in horizon version 2012.1.1-10+deb7u1. We recommend th...

[SECURITY] [DSA 3537-1] imlib2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3537-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 31, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3537-1] imlib2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3537-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 31, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3510-1] iceweasel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3510-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 09, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3438-1] xscreensaver security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3438-1 [email protected] https://www.debian.org/security/ Michael Gilbert January 09, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3379-1] miniupnpc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3379-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 25, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3320-1] openafs security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3320-1 [email protected] https://www.debian.org/security/ Sebastien Delafond July 30, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3257-1] mercurial security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3257-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 11, 2015 http://www.debian.org/security/faq -...