[SECURITY] [DLA 3663-1] strongswan security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3663-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb November 24, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3642-1] request-tracker4 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3642-1 [email protected] https://www.debian.org/lts/security/ Salvatore Bonaccorso October 31, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5521-1] tomcat10 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5521-1 [email protected] https://www.debian.org/security/ Markus Koschany October 10, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3580-1] libapache-mod-jk security update

Debian LTS Advisory DLA-3580-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany September 24, 2023 https://wiki.debian.org/LTS Package : libapache-mod-jk Version : 1:1.2.46-1+deb10u2 CVE ID : CVE-2023-41081 Debian Bug : 1051956 The modjk component of Apache Tomcat...

[SECURITY] [DSA 5474-1] intel-microcode security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5474-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 11, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3191-1] python-django security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3191-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb November 17, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3136-1] barbican security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3136-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort October 04, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3091-1] sofia-sip security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3091-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA September 02, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA-3007-1] imagemagick security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3007-1 [email protected] https://www.debian.org/lts/security/ Andreas Rönnquist May 14, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3005-1] lrzip security update

Debian LTS Advisory DLA-3005-1 [email protected] https://www.debian.org/lts/security/ Stefano Rivera May 13, 2022 https://wiki.debian.org/LTS Package : lrzip Version : 0.631-1+deb9u3 CVE ID : CVE-2022-28044 lrzip, a compression program, was found to have a heap memory corruption bug. Fo...

[SECURITY] [DLA 2931-1] cyrus-sasl2 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2931-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz March 06, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2881-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2881-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort January 16, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5044-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5044-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 13, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5021-1] mediawiki security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5021-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 15, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4999-1] asterisk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4999-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 01, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4997-1] tiff security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4997-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 31, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2794-1] php7.0 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2794-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler October 27, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4935-1] php7.3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4935-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 05, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2685-1] squid3 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2685-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA June 14, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2599-1] shibboleth-sp2 security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2599-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta March 19, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2587-1] privoxy security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2587-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA March 09, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2539-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2539-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort February 02, 2021 https://wiki.debian.org/LTS -...

[SECURITY][DLA 2431-1] libonig security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2431-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany November 05, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2405-1] httpcomponents-client security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2405-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany October 10, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4744-1] roundcube security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4744-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 12, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4718-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4718-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 05, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2267-1] libmatio security update

Package : libmatio Version : 1.5.2-3+deb8u1 CVE ID : CVE-2019-17533 In libmatio, a library to read and write Matlab MAT files, a vulnerability was fixed in MatVarReadNextInfo4 in mat4.c that could lead to a heap-based buffer over-read in strdupvprintf. For Debian 8 "Jessie", this problem has been...

[SECURITY] [DSA 4702-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4702-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 11, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2232-1] python-httplib2 security update

Package : python-httplib2 Version : 0.9+dfsg-2+deb8u1 CVE ID : CVE-2020-11078 In httplib2, an attacker controlling unescaped part of uri for httplib2.Http.request could change request headers and body, send additional hidden requests to same server. This vulnerability impacts software that uses...

[SECURITY] [DLA 2179-1] jackson-databind security update

Package : jackson-databind Version : 2.4.2-2+deb8u14 CVE ID : CVE-2020-10968 CVE-2020-10969 CVE-2020-11111 CVE-2020-11112 CVE-2020-11113 CVE-2020-11619 CVE-2020-11620 Following CVEs were reported against the jackson-databind source package : CVE-2020-10968 FasterXML jackson-databind 2.x before...

[SECURITY] [DLA 2059-1] git security update

Package : git Version : 1:2.1.4-2.1+deb8u8 CVE ID : CVE-2019-1348 CVE-2019-1349 CVE-2019-1352 CVE-2019-1353 CVE-2019-1387 Several vulnerabilities have been discovered in git, a fast, scalable, distributed revision control system. CVE-2019-1348 It was reported that the --export-marks option of git...

[SECURITY] [DLA 1996-1] libapache2-mod-auth-openidc security update

Package : libapache2-mod-auth-openidc Version : 1.6.0-1+deb8u2 CVE ID : CVE-2019-14857 Debian Bug : 942165 A security vulnerability was found in libapache2-mod-auth-openidc, the OpenID Connect authentication module for the Apache HTTP server. Insufficient validation of URLs leads to an Open...

[SECURITY] [DLA 1969-1] file security update

Package : file Version : 1:5.22+15-2+deb8u6 CVE ID : CVE-2019-18218 An issue has been found in file, a tool to determine file types by using magic numbers. The number of CDFVECTOR elements had to be restricted in order to prevent a heap-based buffer overflow 4-byte out-of-bounds write. For Debian...

[SECURITY] [DLA 1942-2] phpbb3 regression update

This is a follow-up to DLA-1942-1. There was some confusion about the correct fix for CVE-2019-13776. The correct announcement for this DLA should have been: Package : phpbb3 Version : 3.0.12-5+deb8u4 CVE ID : CVE-2019-13776 CVE-2019-16993 CVE-2019-16993 In phpBB, includes/acp/acpbbcodes.php had...

[SECURITY] [DSA 4469-1] libvirt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4469-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 22, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1711-1] systemd security update

Package : systemd Version : 215-17+deb8u11 CVE ID : CVE-2019-3815 Debian Bug : 924060 A memory leak was discovered in the backport of fixes for CVE-2018-16864 in systemd-journald. Function dispatchmessagereal in journald-server.c does not free allocated memory to store the CMDLINE= entry. A local...

[SECURITY] [DLA 1681-1] gsoap security update

Package : gsoap Version : 2.8.17-1+deb8u2 CVE ID : CVE-2019-7659 It was discovered that there was a denial of service vulnerability in gsoap a C/C++ language binding used for SOAP-based web services. For Debian 8 "Jessie", this issue has been fixed in gsoap version 2.8.17-1+deb8u2. We recommend...

[SECURITY] [DLA 1624-1] thunderbird security update

Package : thunderbird Version : 1:60.4.0-1deb8u1 CVE ID : not yet available Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code or denial of service. For Debian 8 "Jessie", this problem has been fixed in version 1:60.4.0-1deb8u1. We recommend...

[SECURITY] [DSA 4197-1] wavpack security updaze

------------------------------------------------------------------------- Debian Security Advisory DSA-4197-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 09, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4179-1] linux-tools security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4179-1 [email protected] https://www.debian.org/security/ Ben Hutchings April 24, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4138-1] mbedtls security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4138-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 15, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4023-1] slurm-llnl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4023-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 07, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1126-1] libxfont security update

Package : libxfont Version : 1:1.4.5-5+deb7u1 CVE IDs : CVE-2017-13720 CVE-2017-13722 It was discovered that there two vulnerabilities the library providing font selection and rasterisation, libxfont: CVE-2017-13720: If a pattern contained a ? character any character in the string is skipped even...

[SECURITY] [DSA 3979-1] pyjwt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3979-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 19, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1040-1] resiprocate security update

Package : resiprocate Version : 1.8.5-4+deb7u1 CVE ID : CVE-2017-11521 CVE-2017-11521 The SdpContents::Session::Medium::parse function in resip/stack/SdpContents.cxx in reSIProcate 1.10.2 allows remote attackers to cause a denial of service memory consumption by triggering many media connections...

[SECURITY] [DLA 1036-1] gsoap security update

Package : gsoap Version : 2.8.7-2+deb7u1 CVE ID : CVE-2017-9765 A vulnerability was discovered in gsoap, a library for the development of SOAP web services and clients, that may be exposed with a large and specific XML message over 2 GB in size. After receiving this 2 GB message, a buffer overflo...

[SECURITY] [DSA 3889-1] libffi security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3889-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez June 19, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 694-1] libwmf security update

Package : libwmf Version : 0.2.8.4-10.3+deb7u2 CVE ID : CVE-2016-9011 Debian Bug : 842090 Agostino Sarubbo from Gentoo discovered a flaw in libwmfs Windows Metafile Format WMF parser which caused allocation of excessive amount of memory potentially leading to a crash. For Debian 7 "Wheezy", these...

[SECURITY] [DLA 673-1] kdepimlibs security update

Package : kdepimlibs Version : 4:4.8.4-2+deb7u1 CVE ID : CVE-2016-7966 Debian Bug : 840546 Roland Tapken discovered that insufficient input sanitizing in KMails plain text viewer allowed attackers the injection of HTML code. This might open the way to the exploitation of other vulnerabilities in...

[SECURITY] [DLA 643-1] chicken security update

Package : chicken Version : 4.7.0-1+deb7u1 CVE ID : CVE-2016-6830 CVE-2016-6831 Multiple vulnerabilities have been found in the CHICKEN Scheme compiler: CVE-2016-6830 Buffer overrun in CHICKEN Schemes "process-execute" and "process-spawn" procedures from the posix unit CVE-2016-6831 Memory leak i...