[SECURITY] [DLA 3431-1] sqlite security update

Debian LTS Advisory DLA-3431-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost May 22, 2023 https://wiki.debian.org/LTS Package : sqlite Version : 2.8.17-15+deb10u1 CVE ID : CVE-2016-6153 CVE-2018-8740 Debian Bug : Two vulnerabilities have been fixed in sqlite V2 whi...

[SECURITY] [DSA 5383-1] ghostscript security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5383-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 05, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5378-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5378-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 25, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3351-1] apache2 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3351-1 [email protected] https://www.debian.org/lts/security/ Lee Garrett March 03, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5347-1] imagemagick security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5347-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 13, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3239-2] git regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3239-2 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler December 14, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3234-1] hsqldb security update

Debian LTS Advisory DLA-3234-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany December 10, 2022 https://wiki.debian.org/LTS Package : hsqldb Version : 2.4.1-2+deb10u1 CVE ID : CVE-2022-41853 Debian Bug : 1023573 It was found that those using java.sql.Statement or...

[SECURITY] [DSA 5285-1] asterisk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5285-1 [email protected] https://www.debian.org/security/ Markus Koschany November 17, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5231-1] connman security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5231-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 17, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5217-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5217-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 24, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3079-1] jetty9 security update

Debian LTS Advisory DLA-3079-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany August 22, 2022 https://wiki.debian.org/LTS Package : jetty9 Version : 9.4.16-0+deb10u2 CVE ID : CVE-2022-2047 CVE-2022-2048 Two security vulnerabilities were discovered in Jetty, a Jav...

[SECURITY] [DLA 3068-1] xorg-server security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3068-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 04, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3055-1] ntfs-3g security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3055-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler June 21, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3001-1] libgoogle-gson-java security update

Debian LTS Advisory DLA-3001-1 [email protected] https://www.debian.org/lts/security/ Dominik George May 13, 2022 https://wiki.debian.org/LTS Package : libgoogle-gson-java Version : 2.4-1+deb9u1 CVE ID : CVE-2022-25647 Debian Bug : 1010670 It was discovered that the package...

[SECURITY] [DLA 2980-1] zabbix security update

Debian LTS Advisory DLA-2980-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany April 12, 2022 https://wiki.debian.org/LTS Package : zabbix Version : 1:3.0.32+dfsg-0+deb9u3 CVE ID : CVE-2022-24349 CVE-2022-24917 CVE-2022-24919 Several security vulnerabilities have...

[SECURITY] [DLA 2962-1] pjproject security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2962-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA March 28, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2939-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2939-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort March 09, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5076-1] h2database security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5076-1 [email protected] https://www.debian.org/security/ Markus Koschany February 15, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2916-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2916-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort February 09, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5060-1] webkit2gtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5060-1 [email protected] https://www.debian.org/security/ Alberto Garcia January 25, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA-2889-1] drupal7 security update

Package : drupal7 Version : 7.52-2+deb9u17 CVE ID : CVE-2021-41182 CVE-2021-41183 CVE-2016-7103 CVE-2010-5312 The Drupal project includes a very old version of jQuery. Security vulnerabilities leading to cross-site scripting attacks in different components of the jQuery UI libraries were found an...

[SECURITY] [DSA 5043-1] lxml security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5043-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 12, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5034-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5034-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 02, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4946-2] openjdk-11-jre-dcevm update

------------------------------------------------------------------------- Debian Security Advisory DSA-4946-2 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 11, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4828-1] libxstream-java security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4828-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 07, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2412-2] openjdk-8 regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2412-2 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort December 22, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2484-1] python-certbot - switch to ACMEv2 API

----------------------------------------------------------------------- Debian LTS Advisory DLA-2484-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta December 07, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2371-1] wordpress security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2371-1 [email protected] https://www.debian.org/lts/security/ September 11, 2020 https://wiki.debian.org/LTS - -------------------------------------------------------------------------...

[SECURITY] [DSA 4758-1] xorg-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4758-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 04, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4720-1] roundcube security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4720-1 [email protected] https://www.debian.org/security/ Sebastien Delafond July 08, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2268-1] mutt security update

Package : mutt Version : 1.5.23-3+deb8u2 CVE ID : CVE-2020-14093 CVE-2020-14954 Debian Bug : 962897 Two vulnerabilities have been discovered in mutt, a console email client. CVE-2020-14093 Mutt allowed an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response. CVE-2020-14954 Mutt had a...

[SECURITY] [DLA 2194-1] yodl security update

Package : yodl Version : 3.04.00-1+deb8u1 CVE ID : CVE-2016-10375 An issue has been found in yodl, a pre-document language. Hanno Bock discovered that there was a buffer over-read vulnerability. For Debian 8 "Jessie", this problem has been fixed in version 3.04.00-1+deb8u1. We recommend that you...

[SECURITY] [DSA 4576-1] php-imagick security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4576-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 25, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4574-1] redmine security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4574-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 19, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4523-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4523-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 15, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1770-1] gst-plugins-base1.0 security update

Package : gst-plugins-base1.0 Version : 1.4.4-2+deb8u2 CVE ID : CVE-2019-9928 The RTSP connection parser in the base GStreamer packages version 1.0, which is a streaming media framework, was vulnerable against an heap-based buffer overflow by sending a longer than allowed session id in a response...

[SECURITY] [DSA 4351-1] libphp-phpmailer security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4351-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 07, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4289-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4289-1 [email protected] https://www.debian.org/security/ Michael Gilbert September 07, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4287-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4287-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 07, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4259-1] ruby2.3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4259-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 31, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1449-1] openssl security update

Package : openssl Version : 1.0.1t-1+deb8u9 CVE ID : CVE-2018-0732 CVE-2018-0737 Debian Bug : 895844 Two issues were discovered in OpenSSL, the Secure Sockets Layer toolkit. CVE-2018-0732 Denial of service by a malicious server that sends a very large prime value to the client during TLS handshak...

[SECURITY] [DLA 1433-1] openjpeg2 security update

Package : openjpeg2 Version : 2.1.0-2+deb8u4 CVE ID : CVE-2015-1239 CVE-2016-5139 CVE-2015-1239 Fix for denial of service process crash via a crafted PDF. CVE-2016-5139 Fix for integer overflows, allowing a denial of service heap-based buffer overflow or possibly have unspecified other impact via...

[SECURITY] [DLA 1411-1] tiff security update

Package : tiff Version : 4.0.3-12.3+deb8u6 CVE ID : CVE-2017-11613 CVE-2018-5784 CVE-2018-7456 CVE-2018-8905 CVE-2018-10963 Debian Bug : 869823 898348 890441 891288 893806 Several issues were discovered in TIFF, the Tag Image File Format library, that allowed remote attackers to cause a...

[SECURITY] [DSA 4232-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4232-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 20, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4204-1] imagemagick security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4204-1 [email protected] https://www.debian.org/security/ Sebastien Delafond May 18, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4199-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4199-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 10, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4166-1] openjdk-7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4166-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 04, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4106-1] libtasn1-6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4106-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 07, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1270-1] xen security update

Package : xen Version : 4.1.6.lts1-12 CVE ID : CVE-2016-9603 CVE-2016-9637 CVE-2017-2620 Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in privilege escalation. For Debian 7 "Wheezy", these problems have been fixed in version 4.1.6.lts1-12. We recommend th...

[SECURITY] [DSA 4102-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4102-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 30, 2018 https://www.debian.org/security/faq -...