[SECURITY] [DLA 1330-1] openssl security update

Package : openssl Version : 1.0.1t-1+deb7u4 CVE ID : CVE-2018-0739 It was discovered that constructed ASN.1 types with a recursive definition could exceed the stack, potentially leading to a denial of service. Details can be found in the upstream advisory:...

[SECURITY] [DLA 1249-2] smarty3 regression update

Package : smarty3 Version : 3.1.10-2+deb7u3 CVE ID : CVE-2017-1000480 Debian Bug : 886460 It was previously discovered that there was a code-injection vulnerability in smarty3, a PHP template engine. A via specially-crafted filename in comments could result in arbitrary code execution. However, t...

[SECURITY] [DSA 3753-1] libvncserver security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3753-1 [email protected] https://www.debian.org/security/ Sebastien Delafond January 05, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 517-1] imagemagick security update

Package : imagemagick Version : 8:6.7.7.10-5+deb7u7 CVE ID : CVE-2016-4563 The code did not check the integer didnt overflow before trying to resize a buffer. A specially crafted file could result in using memory past the end of the allocated buffer. This security CVEs for this issue CVE-2016-456...

[SECURITY] [DLA 474-1] dosfstools security update

Package : dosfstools Version : 3.0.13-1+deb7u1 CVE IDs : CVE-2015-8872 CVE-2016-4804 It was discovered that there was an invalid memory and heap overflow vulnerability in dosfstools, a collection of utilities for making and checking MS-DOS FAT filesystems. For Debian 7 "Wheezy", this issue has be...

[SECURITY] [DSA 3400-1] lxc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3400-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 19, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3385-1] mariadb-10.0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3385-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 31, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3352-1] screen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3352-1 [email protected] https://www.debian.org/security/ Laszlo Boszormenyi GCS September 04, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3317-1] lxc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3317-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 25, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3206-1] dulwich security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3206-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso March 28, 2015 http://www.debian.org/security/faq -...

[SECURITY] [email protected]

Package : bash Version : 4.1-3+deb6u1 CVE ID : CVE-2014-6271 Stephane Chazelas discovered a vulnerability in bash, the GNU Bourne-Again Shell, related to how environment variables are processed. In many common configurations, this vulnerability is exploitable over the network, especially if bash...

[SECURITY] [DSA 2266-1] php5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2266-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 29, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 502-1] New exim-tls packages fix buffer overflows

-------------------------------------------------------------------------- Debian Security Advisory DSA 502-1 [email protected] http://www.debian.org/security/ Martin Schulze May 11th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 496-1] New eterm packages fix indirect arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 496-1 [email protected] http://www.debian.org/security/ Martin Schulze April 29th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 444-1] New Linux 2.4.17 packages fix local root exploit (ia64)

-------------------------------------------------------------------------- Debian Security Advisory DSA 444-1 [email protected] http://www.debian.org/security/ Martin Schulze February 20th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA-311-1] New kernel packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 311-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 8th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DLA 4057-1] openssh security update

Debian LTS Advisory DLA-4057-1 [email protected] https://www.debian.org/lts/security/ Colin Watson February 18, 2025 https://wiki.debian.org/LTS Package : openssh Version : 1:8.4p1-5+deb11u4 CVE ID : CVE-2025-26465 The Qualys Threat Research Unit TRU discovered that the OpenSSH client i...

[SECURITY] [DSA 5675-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5675-1 [email protected] https://www.debian.org/security/ Andres Salomon April 26, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5591-1] libssh security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5591-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 28, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5581-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5581-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 20, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3617-2] tomcat9 regression update

Debian LTS Advisory DLA-3617-2 [email protected] https://www.debian.org/lts/security/ Markus Koschany October 17, 2023 https://wiki.debian.org/LTS Package : tomcat9 Version : 9.0.31-1deb10u10 CVE ID : CVE-2023-44487 A regression was discovered in the Http2UpgradeHandler class of Tomcat ...

[SECURITY] [DSA 5524-1] libcue security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5524-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 11, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3525-1] linux-5.10 security update

Debian LTS Advisory DLA-3525-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings August 11, 2023 https://wiki.debian.org/LTS Package : linux-5.10 Version : 5.10.179-5deb10u1 CVE ID : CVE-2022-40982 CVE-2023-20569 CVE-2022-40982 Daniel Moghimi discovered Gather Data...

[SECURITY] [DSA 5318-1] lava security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5318-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 13, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3223-1] giflib security update

Debian LTS Advisory DLA-3223-1 [email protected] https://www.debian.org/lts/security/ Helmut Grohne December 05, 2022 https://wiki.debian.org/LTS Package : giflib Version : 5.1.4-3+deb10u1 CVE ID : CVE-2018-11490 CVE-2019-15133 Debian Bug : 904114 This update fixes two file format...

[SECURITY] [DLA-3210-1] gerbv security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3210-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb November 28, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3141-1] wordpress security update

Debian LTS Advisory DLA-3141-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany October 10, 2022 https://wiki.debian.org/LTS Package : wordpress Version : 5.0.17+dfsg1-0+deb10u1 CVE ID : CVE-2019-17670 Debian Bug : 942459 Several security vulnerabilities were...

[SECURITY] [DSA 5191-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5191-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 26, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3058-1] libsndfile security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3058-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz June 26, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2975-1] openjpeg2 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2975-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky April 10, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5101-1] libphp-adodb security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5101-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 13, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5000-2] openjdk-11 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5000-2 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 22, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2777-1] tiff security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2777-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta October 03, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2632-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2632-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort April 22, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4896-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4896-1 [email protected] https://www.debian.org/security/ Sebastien Delafond April 22, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4885-1] netty security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4885-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 05, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4878-1] pygments security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4878-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 27, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2505-1] spip security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2505-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA December 23, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2453-1] restic security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2453-1 [email protected] https://www.debian.org/lts/security/ Brian May November 17, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2354-1] ndpi security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2354-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz August 29, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2310-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2310-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 02, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2307-1] ruby-zip security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2307-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta August 02, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4686-1] apache-log4j1.2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4686-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 16, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4663-1] python-reportlab security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4663-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 25, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2163-1] tinyproxy security update

Package : tinyproxy Version : 1.8.3-3+deb8u1 CVE ID : CVE-2017-11747 Debian Bug : 870307 948283 A minor security issue and a severe packaging bug have been fixed in tinyproxy, a lightweight http proxy daemon. CVE-2017-11747 main.c in Tinyproxy created a /var/run/tinyproxy/tinyproxy.pid file after...

[SECURITY] [DLA 2117-1] zsh security update

Package : zsh Version : 5.0.7-5+deb8u1 CVE ID : CVE-2019-20044 Debian Bug : 951458 A privilege escalation vulnerability was discovered in zsh, a shell with lots of features, whereby a user could regain a formerly elevated privelege level even when such an action should not be permitted. For Debia...

[SECURITY] [DSA 4624-1] evince security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4624-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 14, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1878-1] php5 security update

Package : php5 Version : 5.6.40+dfsg-0+deb8u5 CVE ID : CVE-2019-11041 CVE-2019-11042 Two heap buffer overflows were found in the EXIF parsing code of PHP, a widely-used open source general purpose scripting language. For Debian 8 "Jessie", these problems have been fixed in version...

[SECURITY] [DSA 4456-1] exim4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4456-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 05, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4389-1] libu2f-host security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4389-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 11, 2019 https://www.debian.org/security/faq -...