[SECURITY] [DLA 2364-1] netty security update

Debian LTS Advisory DLA-2364-1 [email protected] https://www.debian.org/lts/security/ Roberto C. Sánchez September 04, 2020 https://wiki.debian.org/LTS Package : netty Version : 1:4.1.7-2+deb9u2 CVE ID : CVE-2019-20444 CVE-2019-20445 CVE-2020-7238 CVE-2020-11612 Debian Bug : 950966 9509...

[SECURITY] [DSA 4753-1] mupdf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4753-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 29, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4742-1] firejail security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4742-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 06, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2189-1] rzip security update

Package : rzip Version : 2.1-2+deb8u1 CVE ID : CVE-2017-8364 Agostino Sarubbo of Gentoo discovered a heap buffer overflow write in the rzip program a compression program for large files when uncompressing maliciously crafted files. For Debian 8 "Jessie", this problem has been fixed in version...

[SECURITY] [DSA 4629-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4629-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 19, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1953-2] clamav regression update

Package : clamav Version : 0.101.4+dfsg-0+deb8u2 CVE ID : CVE-2019-12625 CVE-2019-12900 Debian Bug : 942172 The update of clamav released as DLA 1953-1 led to permission issues on /var/run/clamav. This caused several users to experience issues restarting the clamav daemon. This regression is caus...

[SECURITY] [DSA 4509-1] apache2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4509-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 26, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1625-1] tzdata new upstream version

Package : tzdata Version : 2018i-0+deb8u1 This update includes the changes in tzdata 2018i. Notable changes are: - Qyzylorda, Kazakhstan moved from +06 to +05 on 2018-12-21. A new zone Asia/Qostanay has been added, because Qostanay, Kazakhstan didnt move. - Metlakatla, Alaska observes PST this...

[SECURITY] [DSA 4357-1] libapache-mod-jk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4357-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 20, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4306-1] python2.7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4306-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 27, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA-1419-1] ruby-sprockets security update

Package : ruby-sprockets Version : 2.12.3-1+deb8u1 CVE IDs : CVE-2018-3760 Debian Bug : 901913 It was discovered that there was a discovered a path traversal flaw in ruby-sprockets, a Rack-based asset packaging system. A remote attacker could take advantage of this flaw to read arbitrary files...

[SECURITY] [DSA 4204-1] imagemagick security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4204-1 [email protected] https://www.debian.org/security/ Sebastien Delafond May 18, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1368-1] libvorbis security update

Package : libvorbis Version : 1.3.2-1.3+deb7u1 CVE ID : CVE-2017-11333 CVE-2017-14632 CVE-2017-14633 CVE-2018-5146 Serious vulnerabilities were found in the libvorbis library, commonly used to encode and decode audio in OGG containers. 2017-14633 In Xiph.Org libvorbis 1.3.5, an out-of-bounds arra...

[SECURITY] [DSA 4161-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4161-1 [email protected] https://www.debian.org/security/ Luciano Bello April 01, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4120-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4120-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez February 22, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1218-1] rsync security update

Package : rsync Version : 3.0.9-4+deb7u1 CVE ID : CVE-2017-16548 CVE-2017-17433 CVE-2017-17434 Several vulnerabilities were discovered in rsync, a fast, versatile, remote and local file-copying tool, allowing a remote attacker to bypass intended access restrictions or cause a denial of service. F...

[SECURITY] [DLA 1104-1] newsbeuter security update

Package : newsbeuter Version : 2.5-2+deb7u3 CVE ID : CVE-2017-14500 Debian Bug : 876004 It was discovered that podbeuter, the podcast fetcher in newsbeuter, a text-mode RSS feed reader, did not properly escape the name of the media enclosure the podcast file, allowing a remote attacker to run an...

[SECURITY] [DSA 3925-1] qemu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3925-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 04, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 877-1] tiff security update

Package : tiff Version : 4.0.2-6+deb7u11 CVE ID : CVE-2016-10266 CVE-2016-10267 CVE-2016-10268 CVE-2016-10269 libtiff is vulnerable to multiple buffer overflows and integer overflows that can lead to application crashes denial of service or worse. CVE-2016-10266 Integer overflow that can lead to...

[SECURITY] [DLA 871-1] python3.2 security update

Package : python3.2 Version : 3.2.3-7+deb7u1 CVE ID : CVE-2016-0772 It was discovered that there was a TLS stripping vulnerability in the smptlib library distributed with the CPython interpreter. The library did not return an error if StartTLS failed, which might have allowed man-in-the-middle...

[SECURITY] [DLA 861-1] r-base security update

Package : r-base Version : 2.15.1-4+deb7u1 CVE ID : CVE-2016-8714 Debian Bug : 857466 An exploitable buffer overflow vulnerability exists in the LoadEncoding functionality of the R programming language. A specially crafted R script can cause a buffer overflow resulting in a memory corruption. An...

[SECURITY] [DLA 840-1] libplist security update

Package : libplist Version : 1.8-1+deb7u2 CVE ID : CVE-2017-5834 CVE-2017-5835 Debian Bug : 854000 Several vulnerabilities were discovered in libplist, a library for reading and writing the Apple binary and XML property lists format. A maliciously crafted plist file could cause an application to...

[SECURITY] [DSA 3711-1] mariadb-10.0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3711-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 11, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3669-1] tomcat7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3669-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 15, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 480-1] nss security update

Package : nss Version : 3.14.5-1+deb7u6 CVE ID : CVE-2015-7181 CVE-2015-7182 CVE-2016-1938 CVE-2016-1950 CVE-2016-1978 CVE-2016-1979 This security update fixes serious security issues in NSS including arbitrary code execution and remote denial service attacks. For Debian 7 "wheezy", these problem...

[SECURITY] [DSA 3481-1] glibc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3481-1 [email protected] https://www.debian.org/security/ Florian Weimer February 16, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 413-1] gajim security update

Package : gajim Version : 0.13.4-3+squeeze4 CVE ID : CVE-2015-8688 Debian Bug : 809900 Affected versions of gajim allow remote attackers to modify the roster and intercept messages via a crafted roster-push IQ stanza. This has been fixed in squeeze-lts by version 0.13.4-3+squeeze4. - -- Brian May...

[SECURITY] [DSA 3317-1] lxc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3317-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 25, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3275-1] fusionforge security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3275-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 30, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 231-1] dulwich security update

Package : dulwich Version : 0.6.1-1+deb6u1 CVE ID : CVE-2015-0838 Ivan Fratric of the Google Security Team has found a buffer overflow in the C implementation of the applydelta function, used when accessing Git objects in pack files. An attacker could take advantage of this flaw to cause the...

[SECURITY] [DLA 202-1] wesnoth-1.8 security update

Package : wesnoth-1.8 Version : 1:1.8.5-1+deb6u1 CVE ID : CVE-2015-0844 Ignacio R. Morelle discovered that missing path restrictions in the "Battle of Wesnoth" game could result in the disclosure of arbitrary files in the users home directory if malicious campaigns/maps are loaded. For the...

[SECURITY] [DLA 185-1] freetype security update

Package : freetype Version : 2.4.2-2.1+squeeze5 CVE ID : CVE-2014-9656 CVE-2014-9657 CVE-2014-9658 CVE-2014-9660 CVE-2014-9661 CVE-2014-9663 CVE-2014-9664 CVE-2014-9665 CVE-2014-9666 CVE-2014-9667 CVE-2014-9669 CVE-2014-9670 CVE-2014-9671 CVE-2014-9672 CVE-2014-9673 CVE-2014-9674 CVE-2014-9675...

[SECURITY] [DSA 3140-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3140-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 27, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 133-1] unrtf security update

Package : unrtf Version : 0.19.3-1.1+deb6u1 CVE ID : CVE-2014-9274 CVE-2014-9275 Debian Bug : 772811 CVE-2014-9274: check that accesses to color table stay within bounds Patches taken from upstream commits: - CVE-2014-9274: b0cef89a170a66bc48f8dd288ce562ea8ca91f7a CVE-2014-9275: various crashes ....

[SECURITY] [DSA 3112-1] sox security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3112-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 23, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3067-1] qemu-kvm security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3067-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 06, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3011-1] mediawiki security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3011-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 23, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3010-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3010-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 22, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2930-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2930-1 [email protected] http://www.debian.org/security/ Michael Gilbert May 17, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2901-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2901-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 12, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2854-1] mumble security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2854-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 05, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2818-1] mysql-5.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2818-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 16, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2787-1] roundcube security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2787-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso October 27, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2654-1] libxslt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2654-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 03, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2570-1] openoffice.org security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2570-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez October 31, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2524-1] openttd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2524-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 06, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2464-1] icedove security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2464-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 02, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2430-1] python-pam security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2430-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 10, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2075-1] New xulrunner packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2075-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 27, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2033-1] New ejabberd packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-2033-1 [email protected] http://www.debian.org/security/ Sébastien Delafond April 15th, 2010 http://www.debian.org/security/faq -...