[SECURITY] [DSA 4656-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4656-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 13, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4618-1] libexif security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4618-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 06, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2049-1] imagemagick security update

Package : imagemagick Version : 8:6.8.9.9-5+deb8u19 CVE ID : CVE-2019-19948 CVE-2019-19949 Debian Bug : 947309 947308 Multiple vulnerabilities have been found in imagemagick, an image processing toolkit. CVE-2019-19948 Heap-buffer-overflow in WriteSGIImage coders/sgi.c caused by insufficient...

[SECURITY] [DLA 2007-1] ruby2.1 security update

Package : ruby2.1 Version : 2.1.5-2+deb8u8 CVE ID : CVE-2019-15845 CVE-2019-16201 CVE-2019-16254 CVE-2019-16255 Several flaws have been found in ruby2.1, an interpreter of an object-oriented scripting language. CVE-2019-15845 Path matching might pass in File.fnmatch and File.fnmatch? due to a NUL...

[SECURITY] [DLA 1973-1] libxslt security update

Package : libxslt Version : 1.1.28-2+deb8u6 CVE ID : CVE-2019-18197 Debian Bug : 942646 A security vulnerability was discovered in libxslt, a XSLT 1.0 processing library written in C. In xsltCopyText in transform.c, a pointer variable is not reset under certain circumstances. If the relevant memo...

[SECURITY] [DLA 1713-2] libsdl1.2 regression update

Package : libsdl1.2 Version : 1.2.15-10+deb8u2 CVE ID : CVE-2019-7572 CVE-2019-7573 CVE-2019-7574 CVE-2019-7575 CVE-2019-7576 CVE-2019-7577 CVE-2019-7578 CVE-2019-7635 CVE-2019-7636 CVE-2019-7637 CVE-2019-7638 The update of libsdl1.2 released as DLA 1713-1 led to a regression, caused by an...

[SECURITY] [DLA 1957-1] tzdata new upstream version

Package : tzdata Version : 2019c-0+deb8u1 This update includes the changes in tzdata 2018c. Notable changes are: - Brazil has canceled DST and will stay on standard time indefinitely. - Fijis next DST transitions will be 2019-11-10 and 2020-01-12 instead of 2019-11-03 and 2020-01-19. - Norfolk...

[SECURITY] [DLA 1870-1] thunderbird security update

Package : thunderbird Version : 1:60.8.0-1deb8u1 CVE ID : CVE-2019-9811 CVE-2019-11709 CVE-2019-11711 CVE-2019-11712 CVE-2019-11713 CVE-2019-11715 CVE-2019-11717 CVE-2019-11730 Multiple security issues have been found in Thunderbird which could potentially result in the execution of arbitrary cod...

[SECURITY] [DSA 4263-1] cgit security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4263-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 04, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4006-1] mupdf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4006-1 [email protected] https://www.debian.org/security/ October 24, 2017 https://www.debian.org/security/faq - -------------------------------------------------------------------------...

[SECURITY] [DSA 3961-1] libgd2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3961-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 03, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3849-1] kde4libs security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3849-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 12, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3823-1] eject security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3823-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 28, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3749-1] dcmtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3749-1 [email protected] https://www.debian.org/security/ Sebastien Delafond December 29, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 765-1] qemu-kvm security update

Package : qemu-kvm Version : 1.1.2+dfsg-6+deb7u19 CVE ID : CVE-2016-9911 CVE-2016-9921 CVE-2016-9922 Multiple vulnerabilities have been found in qemu-kvm: CVE-2016-9911 qemu-kvm built with the USB EHCI Emulation support is vulnerable to a memory leakage issue. It could occur while processing pack...

[SECURITY] [DSA 3746-1] graphicsmagick security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3746-1 [email protected] https://www.debian.org/security/ Luciano Bello December 24, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 667-1] libxv security update

Package : libxv Version : 2:1.0.7-1+deb7u2 CVE ID : CVE-2016-5407 Debian Bug : 840438 Tobias Stoeckmann from the OpenBSD project has discovered a number of issues in the way various X client libraries handle the responses they receive from servers. Insufficient validation of data from the X serve...

[SECURITY] [DSA 3631-1] php5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3631-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 26, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3528-1] pidgin-otr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3528-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 23, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3500-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3500-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini March 01, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 430-1] libfcgi security update

Package : libfcgi Version : 2.4.0-8+deb6u1 CVE ID : CVE-2012-6687 Debian Bug : 681591 It was discovered that there was a remote denial of service in libfcgi, a library for implementing the FastCGI web server protocol. For Debian 6 Squeeze, this issue has been fixed in libfcgi version...

[SECURITY] [DSA 3481-1] glibc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3481-1 [email protected] https://www.debian.org/security/ Florian Weimer February 16, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3412-1] redis security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3412-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 03, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3379-1] miniupnpc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3379-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 25, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3298-1] jackrabbit security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3298-1 [email protected] https://www.debian.org/security/ Markus Koschany July 01, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DLA 241-1] libraw security update

Package : libraw Version : 0.9.1-1+deb6u1 CVE ID : CVE-2015-3885 Debian Bug : 786788 CVE-2015-3885: Integer overflow in the ljpegstart function in dcraw 7.00 and earlier allows remote attackers to cause a denial of service crash via a crafted image, which triggers a buffer overflow, related to th...

[SECURITY] [DLA 228-1] exactimage security update

Package : exactimage Version : 0.8.1-3+deb6u4 CVE ID : CVE-2015-3885 Debian Bug : 786785 A vulnerability has been discovered in the ExactImage image manipulation programs. CVE-2015-3885 Eduardo Castellanos discovered an Integer overflow in the dcraw version included in ExactImage. This...

[SECURITY] [DSA 3158-1] unrtf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3158-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 09, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 139-1] eglibc security update

Package : eglibc Version : 2.11.3-4+deb6u4 CVE ID : CVE-2015-0235 A vulnerability has been fixed in eglibc, Debians version of the GNU C library: CVE-2015-0235 Qualys discovered that the gethostbyname and gethostbyname2 functions were subject to a buffer overflow if provided with a crafted IP...

[SECURITY] [DSA 2851-1] drupal6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2851-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 02, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2796-1] torque security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2796-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 13, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2537-1] typo3-src security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2537-1 [email protected] http://www.debian.org/security/ Florian Weimer August 30, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2500-1] mantis security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2500-1 [email protected] http://www.debian.org/security/ Florian Weimer June 24, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2436-1] libapache2-mod-fcgid security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2436-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst March 19, 2012 http://www.debian.org/security/faq -...

BSA-011 Security Update for znc

Patrick Matthäi pmatthaei uploaded new packages for znc which fixed the following security problems: CVE-2010-2934 Multiple unspecified vulnerabilities in ZNC 0.092 allow remote attackers to cause a denial of service exception and daemon crash via unknown vectors related to "unsafe substr calls."...

[SECURITY] [DSA 1986-1] New moodle packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1986-1 [email protected] http://www.debian.org/security/ Steffen Joeris February 02, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1978-1] New phpgroupware packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1978-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 26, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1927-1] New Linux 2.6.26 packages fix several vulnerabilities

---------------------------------------------------------------------- Debian Security Advisory DSA-1927-1 [email protected] http://www.debian.org/security/ dann frazier November 5, 2009 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

[SECURITY] [DSA 1133-1] New mantis packages fix execution of arbitrary web script code

-------------------------------------------------------------------------- Debian Security Advisory DSA 1133-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 1st, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1051-1] New Mozilla Thunderbird packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1051-1 [email protected] http://www.debian.org/security/ Martin Schulze May 4th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 628-1] New imlib2 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 628-1 [email protected] http://www.debian.org/security/ Martin Schulze January 6th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 614-1] New xzgv packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 614-1 [email protected] http://www.debian.org/security/ Martin Schulze December 21st, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 502-1] New exim-tls packages fix buffer overflows

-------------------------------------------------------------------------- Debian Security Advisory DSA 502-1 [email protected] http://www.debian.org/security/ Martin Schulze May 11th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 6250-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6250-1 [email protected] https://www.debian.org/security/ Andres Salomon May 07, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DLA 4130-1] shadow security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4130-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler April 18, 2025 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5634-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5634-1 [email protected] https://www.debian.org/security/ Andres Salomon February 28, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5609-1] slurm-wlm security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5609-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 28, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5568-1] fastdds security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5568-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 27, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3654-1] freerdp2 security update

Debian LTS Advisory DLA-3654-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost November 17, 2023 https://wiki.debian.org/LTS Package : freerdp2 Version : 2.3.0+dfsg1-2+deb10u4 CVE ID : CVE-2021-41160 CVE-2022-24883 CVE-2022-39282 CVE-2022-39283 CVE-2022-39316...

[SECURITY] [DLA 3650-1] audiofile security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3650-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès November 12, 2023 https://wiki.debian.org/LTS -...