[SECURITY] [DLA 3340-1] libgit2 security update

Debian LTS Advisory DLA-3340-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost February 23, 2023 https://wiki.debian.org/LTS Package : libgit2 Version : 0.27.7+dfsg.1-0.2+deb10u1 CVE ID : CVE-2020-12278 CVE-2020-12279 CVE-2023-22742 Debian Bug : 1029368 A vulnerabili...

[SECURITY] [DSA 5352-1] wpewebkit security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5352-1 [email protected] https://www.debian.org/security/ Alberto Garcia February 17, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5350-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5350-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 15, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3293-1] modsecurity-crs security update

Debian LTS Advisory DLA-3293-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost January 30, 2023 https://wiki.debian.org/LTS Package : modsecurity-crs Version : 3.2.3-0+deb10u3 CVE ID : CVE-2018-16384 CVE-2020-22669 CVE-2021-35368 CVE-2022-39955 CVE-2022-39956...

[SECURITY] [DLA 3252-1] cacti security update

Debian LTS Advisory DLA-3252-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin December 31, 2022 https://wiki.debian.org/LTS Package : cacti Version : 1.2.2+ds1-2+deb10u5 CVE ID : CVE-2020-8813 CVE-2020-23226 CVE-2020-25706 CVE-2022-0730 CVE-2022-46169 Debian Bug :...

[SECURITY] [DSA 5295-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5295-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 04, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3191-1] python-django security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3191-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb November 17, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5271-1] libxml2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5271-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 05, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5251-1] isc-dhcp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5251-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 06, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3125-1] libvncserver security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3125-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz September 30, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3107-1] sqlite3 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3107-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb September 13, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5225-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5225-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 06, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5214-1] kicad security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5214-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 21, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3078-1] kicad security update

Debian LTS Advisory DLA-3078-1 [email protected] https://www.debian.org/lts/security/ Stefano Rivera August 20, 2022 https://wiki.debian.org/LTS Package : kicad Version : 5.0.2+dfsg1-1+deb10u1 CVE ID : CVE-2022-23803 CVE-2022-23804 CVE-2022-23946 CVE-2022-23947 KiCad is a suite of...

[SECURITY] [DSA 5202-1] unzip security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5202-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 08, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5120-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5120-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 13, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5116-1] wpewebkit security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5116-1 [email protected] https://www.debian.org/security/ Alberto Garcia April 08, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5098-1] tryton-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5098-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 10, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2921-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2921-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort February 14, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2913-1] xterm security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2913-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta February 07, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2879-1] ghostscript security update

Debian LTS Advisory DLA-2879-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany January 14, 2022 https://wiki.debian.org/LTS Package : ghostscript Version : 9.26adfsg-0+deb9u8 CVE ID : CVE-2021-45944 CVE-2021-45949 Multiple security issues were discovered in...

[SECURITY] [DLA 2819-1] ntfs-3g security update

Debian LTS Advisory DLA-2819-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany November 16, 2021 https://wiki.debian.org/LTS Package : ntfs-3g Version : 1:2016.2.22AR.1+dfsg-1+deb9u2 CVE ID : CVE-2021-33285 CVE-2021-33286 CVE-2021-33287 CVE-2021-33289 CVE-2021-352...

[SECURITY] [DLA 2810-1] redis security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2810-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb November 05, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2758-1] sssd security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2758-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky September 15, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4907-1] composer security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4907-1 [email protected] https://www.debian.org/security/ Sebastien Delafond April 29, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4834-1] vlc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4834-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 22, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2475-1] pdfresurrect security update

Debian LTS Advisory DLA-2475-1 [email protected] https://www.debian.org/lts/security/ Roberto C. Sánchez December 01, 2020 https://wiki.debian.org/LTS Package : pdfresurrect Version : 0.12-6+deb9u1 CVE ID : CVE-2019-14934 CVE-2020-20740 Vulnerabilities have been discovered in...

[SECURITY] [DLA 2441-1] sympa security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2441-1 [email protected] https://www.debian.org/lts/security/ November 09, 2020 https://wiki.debian.org/LTS - -------------------------------------------------------------------------...

[SECURITY] [DLA 2406-1] jackson-databind security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2406-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb October 14, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2379-2] mediawiki regression update

Debian LTS Advisory DLA-2379-2 [email protected] https://www.debian.org/lts/security/ Roberto C. Sánchez September 28, 2020 https://wiki.debian.org/LTS Package : mediawiki Version : 1:1.27.7-1deb9u5 Debian Bug : 971264 The update of mediawiki released as DLA-2379-1 contained a defect in...

[SECURITY] [DLA 2363-1] asyncpg security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2363-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta September 03, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4747-1] icingaweb2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4747-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 23, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4705-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4705-1 [email protected] https://www.debian.org/security/ Sebastien Delafond June 18, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2233-2] python-django regression update

Package : python-django Version : 1.7.11-1+deb8u10 CVE ID : CVE-2020-13254 It was discovered that there was a regression in the latest update to Django, the Python web development framework. The upstream fix for CVE-2020-13254 to address data leakages via malformed memcached keys could, in some...

[SECURITY] [DLA 2244-1] libphp-phpmailer security update

Package : libphp-phpmailer Version : 5.2.9+dfsg-2+deb8u6 CVE ID : CVE-2020-13625 It was discovered that there was an escaping issue in libphp-phpmailer, an email generation utility class for the PHP programming language. The Content-Type and Content-Disposition headers could have permitted file...

[SECURITY] [DLA 2239-1] libpam-tacplus security update

Package : libpam-tacplus Version : 1.3.8-2+deb8u1 CVE ID : CVE-2020-13881 It was discovered that there was an issue in libpam-tacplus a security module for using the TACACS+ authentication service where shared secrets such as private server keys were being added in the clear to various logs. For...

[SECURITY] [DSA 4666-1] openldap security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4666-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 28, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2087-1] suricata security update

Package : suricata Version : 2.0.7-2+deb8u5 CVE ID : CVE-2019-18625 CVE-2019-18792 Two vulnerabilities have recently been discovered in the stream-tcp code of the intrusion detection and prevention tool Suricata. CVE-2019-18625 It was possible to bypass/evade any tcp based signature by faking a...

[SECURITY] [DSA 4599-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4599-1 [email protected] https://www.debian.org/security/ Sebastien Delafond January 08, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1773-1] signing-party security update

Package : signing-party Version : 1.1.10-3+deb8u1 CVE ID : CVE-2019-11627 Debian Bug : 928256 An unsafe shell call enabling shell injection via a user ID was corrected in gpg-key2ps, a tool to generate a PostScript file with OpenPGP key fingerprint slips. For Debian 8 "Jessie", this problem has...

[SECURITY] [DLA 1518-1] polarssl security update

Package : polarssl Version : 1.3.9-2.1+deb8u4 CVE ID : CVE-2013-0169 CVE-2018-0497 CVE-2018-0498 CVE-2018-9988 CVE-2018-9989 Debian Bug : Two vulnerabilities were discovered in polarssl, a lightweight crypto and SSL/TLS library nowadays continued under the name mbedtls which could result in plain...

[SECURITY] [DLA 1498-1] curl security update

Package : curl Version : 7.38.0-4+deb8u12 CVE IDs : CVE-2018-14618 CVE-2018-14618 It was discovered that there was a an integer overflow vulnerability in curl, a command line tool for transferring data over HTTP, etc. For more information, please see: https://curl.haxx.se/docs/CVE-2018-14618.html...

[SECURITY] [DLA 1481-1] linux-4.9 security update

Package : linux-4.9 Version : 4.9.110-3+deb9u4deb8u1 CVE ID : CVE-2018-3620 CVE-2018-3646 Debian Bug : 906769 Multiple researchers have discovered a vulnerability in the way the Intel processor designs have implemented speculative execution of instructions in combination with handling of...

[SECURITY] [DLA 1452-1] wordpress security update

Package : wordpress Version : 4.1+dfsg-1+deb8u18 CVE ID : CVE-2016-5836 CVE-2018-12895 Debian Bug : 902876 Two vulnerabilities were discovered in wordpress, a web blogging tool. The Common Vulnerabilities and Exposures project identifies the following issues. CVE-2016-5836 The oEmbed protocol...

[SECURITY] [DSA 4182-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4182-1 [email protected] https://www.debian.org/security/ Michael Gilbert April 28, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4154-1] net-snmp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4154-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 28, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4110-1] exim4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4110-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 10, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4103-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4103-1 [email protected] https://www.debian.org/security/ Michael Gilbert January 31, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4064-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4064-1 [email protected] https://www.debian.org/security/ Michael Gilbert December 12, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4048-1] openjdk-7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4048-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 23, 2017 https://www.debian.org/security/faq -...