[SECURITY] [DSA 4761-1] zeromq3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4761-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 07, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4757-1] apache2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4757-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 31, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4743-1] ruby-kramdown security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4743-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 10, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4742-1] firejail security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4742-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 06, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2182-1] git security update

Package : git Version : 1:2.1.4-2.1+deb8u10 CVE ID : CVE-2020-11008 Carlo Arenas discovered a flaw in git, a fast, scalable, distributed revision control system. With a crafted URL that contains a newline or empty host, or lacks a scheme, the credential helper machinery can be fooled into providi...

[SECURITY] [DLA 2132-1] libzypp security update

Package : libzypp Version : 14.29.1-2+deb8u1 CVE ID : CVE-2019-18900 It was discovered that there was an issue where incorrect default permissions on a HTTP cookie store could have allowed local attackers to read private credentials. For Debian 8 "Jessie", this issue has been fixed in libzypp...

[SECURITY] [DLA 2083-1] hiredis security update

Package : hiredis Version : 0.11.0-4+deb8u1 CVE ID : CVE-2020-7105 Debian Bug : 949995 It was discovered that there were a large number of NULL pointer dereferences due to unchecked return values from malloc and friends in hiredis, a minimalistic C client library. For Debian 8 "Jessie", these iss...

[SECURITY] [DLA 2032-1] cacti security update

Package : cacti Version : 0.8.8b+dfsg-8+deb8u8 CVE ID : CVE-2019-17358 It was discovered that there was unsafe deserialisation issue in cacti, server monitoring system system. Unsafe deserialisation of objects which can lead to abuse of the application logic, deny service or even execute arbitrar...

[SECURITY] [DSA 4570-1] mosquitto security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4570-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 17, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1976-1] imapfilter security update

Package : imapfilter Version : 1:2.5.2-2+deb8u1 CVE ID : CVE-2016-10937 Debian Bug : 939702 The imapfilter tool, a utility for scripting IMAP operations in lua, lacked server name / certificate peer hostname validation support. For Debian 8 "Jessie", this problem has been fixed in version...

[SECURITY] [DSA 4539-2] openssh regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4539-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 07, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4341-1] mariadb-10.1 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4341-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 19, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4314-1] net-snmp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4314-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 11, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4312-1] tinc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4312-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 08, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1449-1] openssl security update

Package : openssl Version : 1.0.1t-1+deb8u9 CVE ID : CVE-2018-0732 CVE-2018-0737 Debian Bug : 895844 Two issues were discovered in OpenSSL, the Secure Sockets Layer toolkit. CVE-2018-0732 Denial of service by a malicious server that sends a very large prime value to the client during TLS handshak...

[SECURITY] [DSA 4254-1] slurm-llnl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4254-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 24, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1270-1] xen security update

Package : xen Version : 4.1.6.lts1-12 CVE ID : CVE-2016-9603 CVE-2016-9637 CVE-2017-2620 Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in privilege escalation. For Debian 7 "Wheezy", these problems have been fixed in version 4.1.6.lts1-12. We recommend th...

[SECURITY] [DLA 1160-1] wordpress security update

Package : wordpress Version : 3.6.1+dfsg-1deb7u18 CVE ID : CVE-2017-16510 Debian Bug : 880528 WordPress, a web blogging tool, was affected by an issue where $wpdb-prepare can create unexpected and unsafe queries leading to potential SQL injection SQLi in plugins and themes, as demonstrated by a...

[SECURITY] [DSA 3889-1] libffi security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3889-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez June 19, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 967-1] gajim security update

Package : gajim Version : 0.15.1-4.1+deb7u3 CVE ID : CVE-2016-10376 Debian Bug : 863445 Gajim implements XEP-0146, an XMPP extension to run commands remotely from another client. However it was found that malicious servers can trigger commands, which could lead to leaking private conversations fr...

[SECURITY] [DSA 3853-1] bitlbee security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3853-1 [email protected] https://www.debian.org/security/ Sebastien Delafond May 15, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3823-1] eject security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3823-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 28, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3801-1] ruby-zip security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3801-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 04, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3749-1] dcmtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3749-1 [email protected] https://www.debian.org/security/ Sebastien Delafond December 29, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 694-1] libwmf security update

Package : libwmf Version : 0.2.8.4-10.3+deb7u2 CVE ID : CVE-2016-9011 Debian Bug : 842090 Agostino Sarubbo from Gentoo discovered a flaw in libwmfs Windows Metafile Format WMF parser which caused allocation of excessive amount of memory potentially leading to a crash. For Debian 7 "Wheezy", these...

[SECURITY] [DLA 641-1] ruby-activesupport-3.2 security update

Package : ruby-activesupport-3.2 Version : 3.23.2.6-6+deb7u3 CVE ID : CVE-2016-0753 Active Support in Ruby on Rails 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 supports the use of instance-level writers for class accessors, which allows remote attackers to bypass...

[SECURITY] [DLA 561-1] uclibc security update

Package : uclibc Version : 0.9.32-1+deb7u1 CVE ID : CVE-2016-2224 CVE-2016-2225 CVE-2016-6264 Several vulnerabilities have been discovered in uClibc, an implementation of the standard C library that is much smaller than glibc, which makes it useful for embedded systems. CVE-2016-2224 Fix possible...

[SECURITY] [DSA 3573-1] qemu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3573-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 09, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3568-1] libtasn1-6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3568-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 05, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3528-1] pidgin-otr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3528-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 23, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3513-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3513-1 [email protected] https://www.debian.org/security/ Michael Gilbert March 10, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3450-1] ecryptfs-utils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3450-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 20, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3438-1] xscreensaver security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3438-1 [email protected] https://www.debian.org/security/ Michael Gilbert January 09, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3416-1] libphp-phpmailer security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3416-1 [email protected] https://www.debian.org/security/ Luciano Bello December 13, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3393-1] iceweasel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3393-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 04, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3158-1] unrtf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3158-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 09, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 133-1] unrtf security update

Package : unrtf Version : 0.19.3-1.1+deb6u1 CVE ID : CVE-2014-9274 CVE-2014-9275 Debian Bug : 772811 CVE-2014-9274: check that accesses to color table stay within bounds Patches taken from upstream commits: - CVE-2014-9274: b0cef89a170a66bc48f8dd288ce562ea8ca91f7a CVE-2014-9275: various crashes ....

[SECURITY] [DLA 53-1] apt security update

Package : apt Version : 0.8.10.3+squeeze3 CVE ID : CVE-2014-0487 CVE-2014-0488 CVE-2014-0489 It was discovered that APT, the high level package manager, does not properly invalidate unauthenticated data CVE-2014-0488, performs incorrect verification of 304 replies CVE-2014-0487 and does not perfo...

[SECURITY] [DSA 2930-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2930-1 [email protected] http://www.debian.org/security/ Michael Gilbert May 17, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2901-3] wordpress regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-2901-3 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 21, 2014 http://www.debian.org/security/faq -...

[BSA-086] Security update for strongswan

Updated strongswan packages for squeeze-backports and wheezy-backports fix the following vulnerabilities: - CVE-2013-2944: When using the openssl plugin for ECDSA based authentication, an empty, zeroed or otherwise invalid signature is handled as a legitimate one. - CVE-2013-6075: DoS vulnerabili...

[SECURITY] [DSA 2729-1] openafs security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2729-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 28, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2649-1] lighttpd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2649-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez March 15, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2644-1] wireshark security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2644-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 14, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2591-1] mahara security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2591-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 27, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2501-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2501-1 [email protected] http://www.debian.org/security/ Florian Weimer June 24, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2399-1] php5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2399-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 31, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2323-1] radvd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2323-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez October 26, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2222-1] tinyproxy security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2222-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 20, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1978-1] New phpgroupware packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1978-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 26, 2010 http://www.debian.org/security/faq -...