[SECURITY] [DLA 2766-1] openssl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2766-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz September 27, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2726-1] shiro security update

Debian LTS Advisory DLA-2726-1 [email protected] https://www.debian.org/lts/security/ Roberto C. Sánchez August 02, 2021 https://wiki.debian.org/LTS Package : shiro Version : 1.3.2-1+deb9u2 CVE ID : CVE-2020-13933 CVE-2020-17510 Debian Bug : 968753 It was discovered that there were two...

[SECURITY] [DLA 2707-1] sogo security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2707-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky July 12, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2587-1] privoxy security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2587-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA March 09, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4830-2] flatpak regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4830-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 22, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4836-1] openvswitch security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4836-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 22, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2332-2] sane-backends regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2332-2 [email protected] https://www.debian.org/lts/security/ October 07, 2020 https://wiki.debian.org/LTS - -------------------------------------------------------------------------...

[SECURITY] [DLA 2273-1] shiro security update

Package : shiro Version : 1.3.2-1+deb9u1 CVE IDs : CVE-2020-1957 CVE-2020-11989 Debian Bug : 955018 It was discovered that there was two issues in shiro, a security framework for Java application: CVE-2020-1957: Fix a path-traversal issue where a specially-crafted request could cause an...

[SECURITY] [DSA 4701-1] intel-microcode security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4701-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 11, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4700-1] roundcube security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4700-1 [email protected] https://www.debian.org/security/ Sebastien Delafond June 11, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2136-1] libvpx security update

Package : libvpx Version : 1.3.0-3+deb8u3 CVE ID : CVE-2020-0034 It was discovered that there was an out-of-bounds buffer read vulnerability in libvpx, a library implementing the VP8 & VP9 video codecs. For Debian 8 "Jessie", this issue has been fixed in libvpx version 1.3.0-3+deb8u3. We recommen...

[SECURITY] [DSA 4622-1] postgresql-9.6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4622-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 13, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2032-1] cacti security update

Package : cacti Version : 0.8.8b+dfsg-8+deb8u8 CVE ID : CVE-2019-17358 It was discovered that there was unsafe deserialisation issue in cacti, server monitoring system system. Unsafe deserialisation of objects which can lead to abuse of the application logic, deny service or even execute arbitrar...

[SECURITY] [DLA 2019-1] exiv2 security update

Package : exiv2 Version : 0.24-4.1+deb8u5 CVE ID : CVE-2019-17402 A corrupted or specially crafted CRW images might exceed the overall buffersize to cause a denial of service. For Debian 8 "Jessie", this problem has been fixed in version 0.24-4.1+deb8u5. We recommend that you upgrade your exiv2...

[SECURITY] [DSA 4557-1] libarchive security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4557-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 31, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4546-1] openjdk-11 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4546-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 20, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4455-1] heimdal security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4455-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 03, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4194-1] lucene-solr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4194-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 06, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4128-1] trafficserver security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4128-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 02, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1297-1] freexl security update

Package : freexl Version : 1.0.0b-1+deb7u5 CVE ID : CVE-2018-7435 CVE-2018-7436 CVE-2018-7437 CVE-2018-7438 CVE-2018-7439 Leon reported five heap-based buffer-overflow vulnerabilities in FreeXL. CVE-2018-7435 There is a heap-based buffer over-read in the freexl::destroycell function. CVE-2018-743...

[SECURITY] [DLA 1160-1] wordpress security update

Package : wordpress Version : 3.6.1+dfsg-1deb7u18 CVE ID : CVE-2017-16510 Debian Bug : 880528 WordPress, a web blogging tool, was affected by an issue where $wpdb-prepare can create unexpected and unsafe queries leading to potential SQL injection SQLi in plugins and themes, as demonstrated by a...

[SECURITY] [DLA 1146-1] mosquitto security update

Package : mosquitto Version : 0.15-2+deb7u2 CVE ID : CVE-2017-9868 Debian Bug : 865959 mosquittos persistence file mosquitto.db was created in a world-readable way thus allowing local users to obtain sensitive MQTT topic information. While the application has been fixed to set proper permissions ...

[SECURITY] [DSA 3979-1] pyjwt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3979-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 19, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3900-1] openvpn security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3900-1 [email protected] https://www.debian.org/security/ Sebastien Delafond June 27, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3889-1] libffi security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3889-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez June 19, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3823-1] eject security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3823-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 28, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3801-1] ruby-zip security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3801-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 04, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3736-1] libupnp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3736-1 [email protected] https://www.debian.org/security/ Sebastien Delafond December 16, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 684-1] libx11 security update

Package : libx11 Version : 2:1.5.0-1+deb7u3 CVE ID : CVE-2016-7942 CVE-2016-7943 Debian Bug : 840439 Tobias Stoeckmann from the OpenBSD project discovered the following vulnerability in libX11, the X11 client-side library: Insufficient validation of data from the X server can cause out of boundar...

[SECURITY] [DSA 3693-1] libgd2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3693-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 14, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 605-1] eog security update

Package : eog Version : 3.4.2-1+build1+deb7u1 CVE ID : CVE-2016-6855 It was discovered that Eye of GNOME incorrectly handled certain invalid UTF-8 strings. If a user were tricked into opening a specially-crafted image, a remote attacker could use this issue to cause Eye of GNOME to crash, resulti...

[SECURITY] [DLA 520-1] horizon security update

Package : horizon Version : 2012.1.1-10+deb7u1 CVE ID : CVE-2016-4428 It was discovered that there was an XSS vulnerability in horizon, a Django module providing web interaction with OpenStack. For Debian 7 "Wheezy", this issue has been fixed in horizon version 2012.1.1-10+deb7u1. We recommend th...

[SECURITY] [DSA 3513-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3513-1 [email protected] https://www.debian.org/security/ Michael Gilbert March 10, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 419-1] gtk+2.0 security update

Package : gtk+2.0 Version : 2.20.1-2+deb6u1 CVE ID : CVE-2013-7447 Debian Bug : 799275 Gtk+2.0, a graphical user interface library, was susceptible to an integer overflow in its gdkcairosetsourcepixbuf function when allocating a large block of memory. For Debian 6 "Squeeze", this issue has been...

[SECURITY] [DSA 3438-1] xscreensaver security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3438-1 [email protected] https://www.debian.org/security/ Michael Gilbert January 09, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3412-1] redis security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3412-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 03, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DLA 307-1] php5 security update

Package : php5 Version : 5.3.3.1-7+squeeze27 CVE ID : CVE-2015-3307 CVE-2015-3411 CVE-2015-3412 CVE-2015-4021 CVE-2015-4022 CVE-2015-4025 CVE-2015-4026 CVE-2015-4147 CVE-2015-4148 CVE-2015-4598 CVE-2015-4599 CVE-2015-4600 CVE-2015-4601 CVE-2015-4602 CVE-2015-4604 CVE-2015-4605 CVE-2015-4643...

[SECURITY] [DSA 3348-1] qemu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3348-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 02, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DLA 247-1] openssl security update

Package : openssl Version : 0.9.8o-4squeeze21 CVE ID : CVE-2014-8176 CVE-2015-1789 CVE-2015-1790 CVE-2015-1791 CVE-2015-1792 CVE-2015-4000 Multiple vulnerabilities were discovered in OpenSSL, a Secure Sockets Layer toolkit. CVE-2014-8176 Praveen Kariyanahalli, Ivan Fratric and Felix Groebert...

[SECURITY] [DSA 3197-2] openssl regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3197-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso March 24, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3158-1] unrtf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3158-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 09, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2987-1] openjdk-7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2987-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 23, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2901-3] wordpress regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-2901-3 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 21, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2880-1] python2.7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2880-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 17, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2782-1] polarssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2782-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 20, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2644-1] wireshark security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2644-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 14, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2612-2] ircd-ratbox update

------------------------------------------------------------------------- Debian Security Advisory DSA-2612-2 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 10, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2321-1] moin security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2321-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 10, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2180-1] iceape security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2180-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 03, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA-2067-1] New mahara packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2067-1 [email protected] http://www.debian.org/security/ Raphael Geissert Jul 02, 2010 http://www.debian.org/security/faq -...