[SECURITY] [DSA 5189-1] gsasl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5189-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 24, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5174-1] gnupg2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5174-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 03, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3009-1] cifs-utils security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-3009-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta May 16, 2022 https://wiki.debian.org/LTS - -----------------------------------------------------------------------...

[SECURITY] [DLA 2999-1] mutt security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2999-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta May 11, 2022 https://wiki.debian.org/LTS - -----------------------------------------------------------------------...

[SECURITY] [DSA 5120-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5120-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 13, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5115-1] webkit2gtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5115-1 [email protected] https://www.debian.org/security/ Alberto Garcia April 08, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2886-1] slurm-llnl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2886-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler January 17, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2832-1] opensc security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2832-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk November 29, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2810-1] redis security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2810-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb November 05, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4994-1] bind9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4994-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 28, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2742-2] ffmpeg regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2742-2 [email protected] https://www.debian.org/lts/security/ Anton Gladky August 22, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4954-1] c-ares security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4954-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 10, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2683-1] rxvt security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2683-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta June 09, 2021 https://wiki.debian.org/LTS - -----------------------------------------------------------------------...

[SECURITY] [DSA 4920-1] libx11 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4920-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 24, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2644-1] gst-libav1.0 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2644-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort April 27, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4898-1] wpa security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4898-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 22, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2584-1] libcaca security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2584-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA March 07, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2580-1] adminer security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2580-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta March 03, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4844-1] dnsmasq security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4844-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 02, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2516-1] gssproxy security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2516-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb January 04, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2446-1] moin security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2446-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz November 10, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2419-1] dompurify.js security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2419-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz October 29, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2379-2] mediawiki regression update

Debian LTS Advisory DLA-2379-2 [email protected] https://www.debian.org/lts/security/ Roberto C. Sánchez September 28, 2020 https://wiki.debian.org/LTS Package : mediawiki Version : 1:1.27.7-1deb9u5 Debian Bug : 971264 The update of mediawiki released as DLA-2379-1 contained a defect in...

[SECURITY] [DLA 2370-1] python-pip security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2370-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb September 11, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2316-1] ruby-kramdown security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2316-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA August 08, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4741-1] json-c security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4741-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 05, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4730-1] ruby-sanitize security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4730-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 19, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2260-1] mcabber security update

Package : mcabber Version : 0.10.2-1+deb8u1 CVE ID : CVE-2016-9928 It was discovered that there was a "roster push attack" in mcabber, a console-based Jabber XMPP client. This is identical to CVE-2015-8688 for gajim. For Debian 8 "Jessie", this problem has been fixed in version 0.10.2-1+deb8u1. W...

[SECURITY] [DLA 2233-2] python-django regression update

Package : python-django Version : 1.7.11-1+deb8u10 CVE ID : CVE-2020-13254 It was discovered that there was a regression in the latest update to Django, the Python web development framework. The upstream fix for CVE-2020-13254 to address data leakages via malformed memcached keys could, in some...

[SECURITY] [DSA 4703-1] mysql-connector-java security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4703-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 11, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2244-1] libphp-phpmailer security update

Package : libphp-phpmailer Version : 5.2.9+dfsg-2+deb8u6 CVE ID : CVE-2020-13625 It was discovered that there was an escaping issue in libphp-phpmailer, an email generation utility class for the PHP programming language. The Content-Type and Content-Disposition headers could have permitted file...

[SECURITY] [DSA 4666-1] openldap security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4666-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 28, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4530-1] expat security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4530-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 22, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4510-1] dovecot security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4510-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 28, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4472-1] expat security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4472-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 28, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1773-1] signing-party security update

Package : signing-party Version : 1.1.10-3+deb8u1 CVE ID : CVE-2019-11627 Debian Bug : 928256 An unsafe shell call enabling shell injection via a user ID was corrected in gpg-key2ps, a tool to generate a PostScript file with OpenPGP key fingerprint slips. For Debian 8 "Jessie", this problem has...

[SECURITY] [DSA 4413-1] ntfs-3g security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4413-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 21, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4316-1] imagemagick security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4316-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 12, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1517-1] dom4j security update

Package : dom4j Version : 1.6.1+dfsg.3-2+deb8u1 CVE ID : CVE-2018-1000632 Mario Areias discovered that dom4j, a XML framework for Java, was vulnerable to a XML injection attack. An attacker able to specify attributes or elements in the XML document might be able to modify the whole XML document...

[SECURITY] [DSA 4294-1] ghostscript security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4294-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 16, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4225-1] openjdk-7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4225-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 10, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4140-1] libvorbis security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4140-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 16, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1274-1] exim4 security update

Package : exim4 Version : 4.80-7+deb7u6 CVE ID : CVE-2018-6789 Debian Bug : 890000 Meh Chang discovered a buffer overflow flaw in a utility function used in the SMTP listener of Exim, a mail transport agent. A remote attacker can take advantage of this flaw to cause a denial of service, or...

[SECURITY] [DSA 4104-1] p7zip security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4104-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 04, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4094-2] smarty3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4094-2 [email protected] https://www.debian.org/security/ January 30, 2018 https://www.debian.org/security/faq - -------------------------------------------------------------------------...

[SECURITY] [DLA 1151-1] wordpress security update

Package : wordpress Version : 3.6.1+dfsg-1deb7u17 CVE ID : CVE-2016-9263 CVE-2017-14718 CVE-2017-14719 CVE-2017-14720 CVE-2017-14721 CVE-2017-14722 CVE-2017-14723 CVE-2017-14725 CVE-2017-14990 Debian Bug : 876274 877629 Several vulnerabilities were discovered in wordpress, a web blogging tool. Th...

[SECURITY] [DSA 4002-1] mysql-5.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4002-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 19, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1105-1] clamav security update

Package : clamav Version : 0.99.2+dfsg-0+deb7u3 CVE ID : CVE-2017-6418 CVE-2017-6420 clamav is vulnerable to multiple issues that can lead to denial of service when processing untrusted content. CVE-2017-6418 out-of-bounds read in libclamav/message.c, allowing remote attackers to cause a denial o...

[SECURITY] [DSA 3981-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3981-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 20, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1076-1] php5 security update

Package : php5 Version : 5.4.45-0+deb7u11 CVE ID : CVE-2017-12933 The finishnesteddata function in ext/standard/varunserializer.re in PHP is prone to a buffer over-read while unserializing untrusted data. Exploitation of this issue can have an unspecified impact on the integrity of PHP. For Debia...