[SECURITY] [DLA 1145-1] zoneminder security update

Package : zoneminder Version : 1.25.0-4+deb7u2 CVE ID : CVE-2017-5595 Multiple vulnerabilities have been found in zoneminder. This update fixes only a serious file disclosure vulnerability CVE-2017-5595. The application has been found to suffer from many other problems such as SQL injection...

[SECURITY] [DSA 3968-1] icedove/thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3968-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 11, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1094-1] tiff3 security update

Package : tiff3 Version : 3.9.6-11+deb7u8 CVE ID : CVE-2017-11335 Debian Bug : 868513 A heap based buffer overflow has been discovered in the tiff2pdf utility, part of the Tag Image File Format TIFF library. A PlanarConfig=Contig image can cause an out-of-bounds write related to the ZIPDecode...

[SECURITY] [DLA 1076-1] php5 security update

Package : php5 Version : 5.4.45-0+deb7u11 CVE ID : CVE-2017-12933 The finishnesteddata function in ext/standard/varunserializer.re in PHP is prone to a buffer over-read while unserializing untrusted data. Exploitation of this issue can have an unspecified impact on the integrity of PHP. For Debia...

[SECURITY] [DLA 928-1] libsndfile security update

Package : libsndfile Version : 1.0.25-9.1+deb7u1 CVE ID : CVE-2015-7805 CVE-2017-7585 CVE-2017-7586 CVE-2017-7741 CVE-2017-7742 Debian Bug : 860255 Multiple vulnerabilities were found in libsndfile, a popular library for reading/writing audio files. CVE-2017-7585 In libsndfile before 1.0.28, an...

[SECURITY] [DLA 839-2] tnef regression update

Package : tnef Version : 1.4.9-1+deb7u2 CVE ID : CVE-2017-6307 CVE-2017-6308 CVE-2017-6309 CVE-2017-6310 Debian Bug : 857342 While fixing the above mentioned CVEs, upstream introduced a regression. The new patches added for this upload take care of that. For Debian 7 "Wheezy", these problems have...

[SECURITY] [DSA 3800-1] libquicktime security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3800-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 02, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 812-1] ikiwiki security update

Package : ikiwiki Version : 3.20120629.2+deb7u2 CVE ID : CVE-2016-9646 CVE-2016-10026 CVE-2017-0356 Several vulnerabilities have been found in ikiwiki, a wiki compiler: CVE-2016-9646 Commit metadata forgery CVE-2016-10026 Authorization bypass when reverting changes CVE-2017-0356 Authentication...

[SECURITY] [DSA 3775-1] tcpdump security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3775-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 29, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 749-1] php5 security update

Package : php5 Version : 5.4.45-0+deb7u6 CVE ID : CVE-2016-5385 CVE-2016-7124 CVE-2016-7128 CVE-2016-7129 CVE-2016-7130 CVE-2016-7131 CVE-2016-7132 CVE-2016-7411 CVE-2016-7412 CVE-2016-7413 CVE-2016-7414 CVE-2016-7416 CVE-2016-7417 CVE-2016-7418 CVE-2016-5385 PHP through 7.0.8 does not attempt to...

[SECURITY] [DLA 667-1] libxv security update

Package : libxv Version : 2:1.0.7-1+deb7u2 CVE ID : CVE-2016-5407 Debian Bug : 840438 Tobias Stoeckmann from the OpenBSD project has discovered a number of issues in the way various X client libraries handle the responses they receive from servers. Insufficient validation of data from the X serve...

[SECURITY] [DSA 3657-1] libarchive security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3657-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 30, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3639-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3639-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 03, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3522-1] squid3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3522-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 20, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 384-1] inspircd security and regression update

Package : inspircd Version : 1.1.22+dfsg-4+squeeze3 CVE ID : CVE-2015-8702 Debian Bug : 668253 It was discovered that InspIRCd did not validate the names in DNS responses before using them in inter-server communication. A remote attacker controlling the reverse DNS server...

[SECURITY] [DSA 3338-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3338-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini August 18, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3114-1] mime-support security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3114-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 29, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3058-1] torque security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3058-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso October 27, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2974-1] php5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2974-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso July 08, 2014 http://www.debian.org/security/faq -...

[BSA-071] Security Update for request-tracker4

Dominic Hargreaves uploaded new packages for request-tracker4 which fixed the following security problems: CVE-2011-2082 The vulnerable-passwords scripts introduced for CVE-2011-0009 failed to correct the password hashes of disabled users. CVE-2011-2083 Several cross-site scripting issues have be...

[SECURITY] [DSA 2454-2] openssl incomplete fix

------------------------------------------------------------------------- Debian Security Advisory DSA-2454-2 [email protected] http://www.debian.org/security/ Raphael Geissert April 24, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2211-1] vlc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2211-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 06, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA-1989-1] New fuse packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1989-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano February 02, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1901-1] New mediawiki1.7 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1901-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano October 05, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1405-1] New zope-cmfplone packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1405-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst November 9th, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 947-1] New ClamAV packages fix heap overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 947-1 [email protected] http://www.debian.org/security/ Michael Stone January 21st, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 921-1] New Linux 2.4.27 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 921-1 [email protected] http://www.debian.org/security/ Martin Schulze December 14th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 764-1] New cacti packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 764-1 [email protected] http://www.debian.org/security/ Martin Schulze July 21st, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 6155-1] spip security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6155-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 03, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5957-1] mediawiki security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5957-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 03, 2025 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3662-1] freeimage security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3662-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky November 24, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5510-1] libvpx security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5510-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 29, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3394-1] asterisk security update

Debian LTS Advisory DLA-3394-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany April 19, 2023 https://wiki.debian.org/LTS Package : asterisk Version : 1:16.28.0dfsg-0+deb10u3 CVE ID : CVE-2023-27585 A flaw was found in Asterisk, an Open Source Private Branch...

[SECURITY] [DSA 5309-1] wpewebkit security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5309-1 [email protected] https://www.debian.org/security/ Alberto Garcia December 31, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5263-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5263-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 29, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3050-1] vlc security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3050-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler June 10, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5147-1] dpkg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5147-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 25, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2905-1] apache-log4j1.2 security update

Debian LTS Advisory DLA-2905-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany January 31, 2022 https://wiki.debian.org/LTS Package : apache-log4j1.2 Version : 1.2.17-7+deb9u2 CVE ID : CVE-2021-4104 CVE-2022-23302 CVE-2022-23305 CVE-2022-23307 Debian Bug : 1004482...

[SECURITY] [DSA 5021-1] mediawiki security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5021-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 15, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4985-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4985-1 [email protected] https://www.debian.org/security/ Sebastien Delafond October 14, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2755-1] btrbk security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2755-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz September 05, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4905-1] shibboleth-sp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4905-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 27, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2640-1] gst-plugins-good1.0 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2640-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort April 26, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2606-1] lxml security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2606-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz March 24, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4807-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4807-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 08, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4790-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4790-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 12, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2365-1] netty-3.9 security update

Debian LTS Advisory DLA-2365-1 [email protected] https://www.debian.org/lts/security/ Roberto C. Sánchez September 04, 2020 https://wiki.debian.org/LTS Package : netty-3.9 Version : 3.9.9.Final-1+deb9u1 CVE ID : CVE-2019-16869 CVE-2019-20444 CVE-2019-20445 Debian Bug : 941266 950966...

[SECURITY] [DSA 4744-1] roundcube security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4744-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 12, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4737-1] xrdp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4737-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 29, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4700-1] roundcube security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4700-1 [email protected] https://www.debian.org/security/ Sebastien Delafond June 11, 2020 https://www.debian.org/security/faq -...