[SECURITY] [DSA 2949-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2949-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso June 05, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2901-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2901-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 12, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2882-1] extplorer security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2882-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano March 20, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2880-1] python2.7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2880-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 17, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2836-1] devscripts security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2836-1 [email protected] http://www.debian.org/security/ Raphael Geissert January 05, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2782-1] polarssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2782-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 20, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2559-1] libexif security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2559-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez October 11, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2524-1] openttd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2524-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 06, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2378-1] ffmpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2378-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 03, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA-2067-1] New mahara packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2067-1 [email protected] http://www.debian.org/security/ Raphael Geissert Jul 02, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA-1979-1] New lintian packages fix multiple vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1979-1 [email protected] http://www.debian.org/security/ Raphael Geissert January 27, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA-1965-1] New phpldapadmin packages fix remote file inclusion

------------------------------------------------------------------------ Debian Security Advisory DSA-1965 [email protected] http://www.debian.org/security/ Giuseppe Iuculano January 06, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1597-1] New mt-daapd packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1597-1 [email protected] http://www.debian.org/security/ Devin Carraway June 12, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1365-1] New id3lib3.8.3 packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1365-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 1st, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1282-1] New php4 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1282-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 26th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1271-1] New openafs packages fix remote privilege escalation bug

------------------------------------------------------------------------ Debian Security Advisory DSA-1271-1 [email protected] http://www.debian.org/security/ Noah Meyerhans March 20, 2007 - ------------------------------------------------------------------------ Package : openafs Vulnerability...

[SECURITY] [DSA 1133-1] New mantis packages fix execution of arbitrary web script code

-------------------------------------------------------------------------- Debian Security Advisory DSA 1133-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 1st, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1001-1] New crossfire packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1001-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 14th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 6301-1] roundcube security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6301-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 27, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DSA 6090-1] rails security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6090-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 21, 2025 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5957-1] mediawiki security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5957-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 03, 2025 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3866-1] ruby-tzinfo security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3866-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk September 03, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3738-1] iwd security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3738-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb February 22, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3717-1] zabbix security update

Debian LTS Advisory DLA-3717-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost January 24, 2024 https://wiki.debian.org/LTS Package : zabbix Version : 1:4.0.4+dfsg-1+deb10u4 CVE ID : CVE-2023-32721 CVE-2023-32723 CVE-2023-32726 Debian Bug : 1053877 Several security...

[SECURITY] [DLA 3621-1] nghttp2 security update

Debian LTS Advisory DLA-3621-1 [email protected] https://www.debian.org/lts/security/ Sean Whitton October 16, 2023 https://wiki.debian.org/LTS Package : nghttp2 Version : 1.36.0-2+deb10u2 CVE ID : CVE-2020-11080 CVE-2023-44487 Debian Bug : 962145 1053769 Multiple vulnerabilities were...

[SECURITY] [DLA 3477-1] python3.7 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3477-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk June 30, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3455-1] golang-go.crypto security update

Debian LTS Advisory DLA-3455-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany June 16, 2023 https://wiki.debian.org/LTS Package : golang-go.crypto Version : 1:0.0git20181203.505ab14-1+deb10u1 CVE ID : CVE-2019-11840 CVE-2019-11841 CVE-2020-9283 Debian Bug : 95246...

[SECURITY] [DSA 5417-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5417-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 31, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3050-1] vlc security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3050-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler June 10, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2907-1] apache2 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2907-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky February 01, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2851-1] libextractor security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2851-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk December 26, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2836-2] nss regression update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2836-2 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta December 08, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4905-1] shibboleth-sp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4905-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 27, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2598-1] squid3 security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2598-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta March 19, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2273-1] shiro security update

Package : shiro Version : 1.3.2-1+deb9u1 CVE IDs : CVE-2020-1957 CVE-2020-11989 Debian Bug : 955018 It was discovered that there was two issues in shiro, a security framework for Java application: CVE-2020-1957: Fix a path-traversal issue where a specially-crafted request could cause an...

[SECURITY] [DSA 4700-1] roundcube security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4700-1 [email protected] https://www.debian.org/security/ Sebastien Delafond June 11, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2182-1] git security update

Package : git Version : 1:2.1.4-2.1+deb8u10 CVE ID : CVE-2020-11008 Carlo Arenas discovered a flaw in git, a fast, scalable, distributed revision control system. With a crafted URL that contains a newline or empty host, or lacks a scheme, the credential helper machinery can be fooled into providi...

[SECURITY] [DLA 2164-1] gst-plugins-bad0.10 security update

Package : gst-plugins-bad0.10 Version : 0.10.23-7.4+deb8u3 CVE ID : CVE-2015-0797 CVE-2016-9809 CVE-2017-5843 CVE-2017-5848 Several issues have been found in gst-plugins-bad0.10, a package containing GStreamer plugins from the "bad" set. All issues are about use-after-free, out of bounds reads or...

[SECURITY] [DSA 4643-1] python-bleach security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4643-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 20, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2146-1] libvncserver security update

Package : libvncserver Version : 0.9.9+dfsg2-6.1+deb8u7 CVE ID : CVE-2019-15690 Debian Bug : 954163 In libvncserver, through libvncclient/cursor.c, there is a possibility of a heap overflow, as reported by Pavel Cheremushkin. For Debian 8 "Jessie", this problem has been fixed in version...

[SECURITY] [DSA 4624-1] evince security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4624-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 14, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2083-1] hiredis security update

Package : hiredis Version : 0.11.0-4+deb8u1 CVE ID : CVE-2020-7105 Debian Bug : 949995 It was discovered that there were a large number of NULL pointer dereferences due to unchecked return values from malloc and friends in hiredis, a minimalistic C client library. For Debian 8 "Jessie", these iss...

[SECURITY] [DLA 1942-2] phpbb3 regression update

This is a follow-up to DLA-1942-1. There was some confusion about the correct fix for CVE-2019-13776. The correct announcement for this DLA should have been: Package : phpbb3 Version : 3.0.12-5+deb8u4 CVE ID : CVE-2019-13776 CVE-2019-16993 CVE-2019-16993 In phpBB, includes/acp/acpbbcodes.php had...

[SECURITY] [DSA 4463-1] znc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4463-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 14, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4455-1] heimdal security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4455-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 03, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1601-1] perl security update

Package : perl Version : 5.20.2-3+deb8u12 CVE ID : CVE-2018-18311 Jayakrishna Menon and Christophe Hauser discovered an integer overflow vulnerability in Perlmysetenv leading to a heap-based buffer overflow with attacker-controlled input. For Debian 8 "Jessie", this problem has been fixed in...

[SECURITY] [DSA 4243-1] cups security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4243-1 [email protected] https://www.debian.org/security/ Luciano Bello July 11, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1410-1] python-pysaml2 security update

Package : python-pysaml2 Version : 2.0.0-1+deb8u2 CVE ID : CVE-2017-1000433 Debian Bug : 886423 Pysaml2, a Python implementation of the Security Assertion Markup Language, would accept any password when run with Python optimizations enabled. This allows attackers to log in as any user without...

[SECURITY] [DSA 4194-1] lucene-solr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4194-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 06, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1366-1] wordpress security update

Package : wordpress Version : 3.6.1+dfsg-1deb7u21 CVE ID : CVE-2018-10100 CVE-2018-10102 Debian Bug : 895034 Two vulnerabilities were discovered in wordpress, a web blogging tool. The Common Vulnerabilities and Exposures project identifies the following issues. CVE-2018-10100 The redirection URL...