[SECURITY] [DLA 1040-1] resiprocate security update

Package : resiprocate Version : 1.8.5-4+deb7u1 CVE ID : CVE-2017-11521 CVE-2017-11521 The SdpContents::Session::Medium::parse function in resip/stack/SdpContents.cxx in reSIProcate 1.10.2 allows remote attackers to cause a denial of service memory consumption by triggering many media connections...

[SECURITY] [DLA 1036-1] gsoap security update

Package : gsoap Version : 2.8.7-2+deb7u1 CVE ID : CVE-2017-9765 A vulnerability was discovered in gsoap, a library for the development of SOAP web services and clients, that may be exposed with a large and specific XML message over 2 GB in size. After receiving this 2 GB message, a buffer overflo...

[SECURITY] [DSA 3889-1] libffi security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3889-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez June 19, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 694-1] libwmf security update

Package : libwmf Version : 0.2.8.4-10.3+deb7u2 CVE ID : CVE-2016-9011 Debian Bug : 842090 Agostino Sarubbo from Gentoo discovered a flaw in libwmfs Windows Metafile Format WMF parser which caused allocation of excessive amount of memory potentially leading to a crash. For Debian 7 "Wheezy", these...

[SECURITY] [DLA 673-1] kdepimlibs security update

Package : kdepimlibs Version : 4:4.8.4-2+deb7u1 CVE ID : CVE-2016-7966 Debian Bug : 840546 Roland Tapken discovered that insufficient input sanitizing in KMails plain text viewer allowed attackers the injection of HTML code. This might open the way to the exploitation of other vulnerabilities in...

[SECURITY] [DLA 643-1] chicken security update

Package : chicken Version : 4.7.0-1+deb7u1 CVE ID : CVE-2016-6830 CVE-2016-6831 Multiple vulnerabilities have been found in the CHICKEN Scheme compiler: CVE-2016-6830 Buffer overrun in CHICKEN Schemes "process-execute" and "process-spawn" procedures from the posix unit CVE-2016-6831 Memory leak i...

[SECURITY] [DSA 3665-1] openjpeg2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3665-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 11, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 605-1] eog security update

Package : eog Version : 3.4.2-1+build1+deb7u1 CVE ID : CVE-2016-6855 It was discovered that Eye of GNOME incorrectly handled certain invalid UTF-8 strings. If a user were tricked into opening a specially-crafted image, a remote attacker could use this issue to cause Eye of GNOME to crash, resulti...

[SECURITY] [DLA 520-1] horizon security update

Package : horizon Version : 2012.1.1-10+deb7u1 CVE ID : CVE-2016-4428 It was discovered that there was an XSS vulnerability in horizon, a Django module providing web interaction with OpenStack. For Debian 7 "Wheezy", this issue has been fixed in horizon version 2012.1.1-10+deb7u1. We recommend th...

[SECURITY] [DSA 3537-1] imlib2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3537-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 31, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3537-1] imlib2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3537-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 31, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3510-1] iceweasel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3510-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 09, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3438-1] xscreensaver security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3438-1 [email protected] https://www.debian.org/security/ Michael Gilbert January 09, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3379-1] miniupnpc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3379-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 25, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3320-1] openafs security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3320-1 [email protected] https://www.debian.org/security/ Sebastien Delafond July 30, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3204-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3204-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso March 24, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3202-1] mono security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3202-1 [email protected] http://www.debian.org/security/ Sebastien Delafond March 22, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3189-1] libav security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3189-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 15, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3175-1] kfreebsd-9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3175-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 25, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 129-1] polarssl security update

Package : polarssl Version : 1.2.9-1deb6u3 CVE ID : CVE-2014-8628 It was discovered that a memory leak in parsing X.509 certificates may result in denial of service...

[SECURITY] [DLA 53-1] apt security update

Package : apt Version : 0.8.10.3+squeeze3 CVE ID : CVE-2014-0487 CVE-2014-0488 CVE-2014-0489 It was discovered that APT, the high level package manager, does not properly invalidate unauthenticated data CVE-2014-0488, performs incorrect verification of 304 replies CVE-2014-0487 and does not perfo...

[SECURITY] [DSA 2915-1] dpkg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2915-1 [email protected] http://www.debian.org/security/ Raphael Geissert April 28, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2867-1] otrs2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2867-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 23, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2649-1] lighttpd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2649-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez March 15, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2644-1] wireshark security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2644-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 14, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2184-1] isc-dhcp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2184-1 [email protected] http://www.debian.org/security/ Florian Weimer March 05, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2168-1] openafs security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2168-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 16, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1918-1] New phpmyadmin packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1918-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst October 25, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1850-1] New libmodplug packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1850-1 [email protected] http://www.debian.org/security/ Steffen Joeris August 04, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1826-1] New eggdrop packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1826-1 [email protected] http://www.debian.org/security/ Steffen Joeris July 04, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1432-1] New link-grammar packages fix execution of code

------------------------------------------------------------------------ Debian Security Advisory DSA-1432-1 [email protected] http://www.debian.org/security/ Steve Kemp December 16, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1481-1] New Linux 2.6.18 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1428-1 [email protected] http://www.debian.org/security/ dann frazier December 10th, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1365-1] New id3lib3.8.3 packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1365-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 1st, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1330-1] New php5 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1330-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 7th, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1070-1] New Linux kernel 2.4.19 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1070-1 [email protected] http://www.debian.org/security/ Martin Schulze, Dann Frazier May 21th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1044-1] New Mozilla Firefox packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1044-1 [email protected] http://www.debian.org/security/ Martin Schulze April 26th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1020-1] New flex packages fix insecure code generation

-------------------------------------------------------------------------- Debian Security Advisory DSA 1020-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 28th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 967-1] New elog packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 967-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 10th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 788-1] New kismet packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 788-1 [email protected] http://www.debian.org/security/ Martin Schulze August 29th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 745-1] New drupal package fixes multiple vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA 745-1 [email protected] http://www.debian.org/security/ Michael Stone July 10, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

[SECURITY] [DSA 695-1] New xli packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 695-1 [email protected] http://www.debian.org/security/ Martin Schulze March 21st, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 628-1] New imlib2 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 628-1 [email protected] http://www.debian.org/security/ Martin Schulze January 6th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 532-1] New libapache-mod-ssl packages fix multiple vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 532-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 22nd, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DLA 4436-1] linux-6.1 security update

Debian LTS Advisory DLA-4436-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings January 14, 2026 https://wiki.debian.org/LTS Package : linux-6.1 Version : 6.1.159-1deb11u1 CVE ID : CVE-2024-47666 CVE-2025-37899 CVE-2025-38057 CVE-2025-38556 CVE-2025-38593...

[SECURITY] [DLA 4180-1] pgbouncer security update

Debian LTS Advisory DLA-4180-1 [email protected] https://www.debian.org/lts/security/ Andreas Henriksson May 27, 2025 https://wiki.debian.org/LTS Package : pgbouncer Version : 1.15.0-1+deb11u1 CVE ID : CVE-2021-3935 CVE-2025-2291 Debian Bug : 1103394 PgBouncer is a lightweight connectio...

[SECURITY] [DLA 4167-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4167-1 [email protected] https://www.debian.org/lts/security/ Lee Garrett May 18, 2025 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 4156-1] openssh security update

Debian LTS Advisory DLA-4156-1 [email protected] https://www.debian.org/lts/security/ Colin Watson May 08, 2025 https://wiki.debian.org/LTS Package : openssh Version : 1:8.4p1-5+deb11u5 CVE ID : CVE-2025-32728 Debian Bug : 1102603...

[SECURITY] [DSA 5654-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5654-1 [email protected] https://www.debian.org/security/ Andres Salomon April 03, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5609-1] slurm-wlm security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5609-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 28, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5587-1] curl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5587-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 23, 2023 https://www.debian.org/security/faq -...