[SECURITY] [DSA-344-1] New unzip packages fix directory traversal

-------------------------------------------------------------------------- Debian Security Advisory DSA 344-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 8th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 6313-1] dovecot security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6313-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 31, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5957-1] mediawiki security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5957-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 03, 2025 https://www.debian.org/security/faq -...

[SECURITY] [DLA 4180-1] pgbouncer security update

Debian LTS Advisory DLA-4180-1 [email protected] https://www.debian.org/lts/security/ Andreas Henriksson May 27, 2025 https://wiki.debian.org/LTS Package : pgbouncer Version : 1.15.0-1+deb11u1 CVE ID : CVE-2021-3935 CVE-2025-2291 Debian Bug : 1103394 PgBouncer is a lightweight connectio...

[SECURITY] [DSA 5637-1] squid security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5637-1 [email protected] https://www.debian.org/security/ Markus Koschany March 08, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5633-1] knot-resolver security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5633-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 27, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5609-1] slurm-wlm security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5609-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 28, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5556-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5556-1 [email protected] https://www.debian.org/security/ Andres Salomon November 15, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3644-1] phppgadmin security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3644-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb November 03, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3492-1] yajl security update

Debian LTS Advisory DLA-3492-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost July 11, 2023 https://wiki.debian.org/LTS Package : yajl Version : 2.1.0-3+deb10u2 CVE ID : CVE-2017-16516 CVE-2022-24795 CVE-2023-33460 Debian Bug : 1040036 Multiple vulnerabilties have...

[SECURITY] [DLA 3477-1] python3.7 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3477-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk June 30, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3394-1] asterisk security update

Debian LTS Advisory DLA-3394-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany April 19, 2023 https://wiki.debian.org/LTS Package : asterisk Version : 1:16.28.0dfsg-0+deb10u3 CVE ID : CVE-2023-27585 A flaw was found in Asterisk, an Open Source Private Branch...

[SECURITY] [DLA 3279-1] trafficserver security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3279-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA January 23, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3267-1] libxstream-java security update

Debian LTS Advisory DLA-3267-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany January 11, 2023 https://wiki.debian.org/LTS Package : libxstream-java Version : 1.4.11.1-1+deb10u4 CVE ID : CVE-2022-41966 Debian Bug : 1027754 XStream serializes Java objects to XML a...

[SECURITY] [DLA 3207-1] jackson-databind security update

Debian LTS Advisory DLA-3207-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany November 27, 2022 https://wiki.debian.org/LTS Package : jackson-databind Version : 2.9.8-3+deb10u4 CVE ID : CVE-2020-36518 CVE-2022-42003 CVE-2022-42004 Debian Bug : 1007109 Several fla...

[SECURITY] [DLA 3150-1] rexical security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3150-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler October 12, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3137-1] nodejs security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3137-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler October 05, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5219-1] webkit2gtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5219-1 [email protected] https://www.debian.org/security/ Alberto Garcia August 27, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5123-1] xz-utils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5123-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 18, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2930-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2930-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort March 01, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2836-2] nss regression update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2836-2 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta December 08, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2803-1] libsdl2 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2803-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk October 31, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2763-1] ruby-kaminari security update

Debian LTS Advisory DLA-2763-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany September 22, 2021 https://wiki.debian.org/LTS Package : ruby-kaminari Version : 0.17.0-3+deb9u1 CVE ID : CVE-2020-11082 Debian Bug : 961847 A security vulnerability has been found in...

[SECURITY] [DLA 2707-1] sogo security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2707-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky July 12, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2704-1] libxstream-java security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2704-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler July 05, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4899-1] openjdk-11 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4899-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 23, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4844-1] dnsmasq security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4844-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 02, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4787-1] moin security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4787-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 09, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4761-1] zeromq3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4761-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 07, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2278-1] squid3 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2278-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany July 10, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2194-1] yodl security update

Package : yodl Version : 3.04.00-1+deb8u1 CVE ID : CVE-2016-10375 An issue has been found in yodl, a pre-document language. Hanno Bock discovered that there was a buffer over-read vulnerability. For Debian 8 "Jessie", this problem has been fixed in version 3.04.00-1+deb8u1. We recommend that you...

[SECURITY] [DLA 2153-1] jackson-databind security update

Package : jackson-databind Version : 2.4.2-2+deb8u13 CVE ID : CVE-2020-10672 CVE-2020-10673 The following CVEs were reported against jackson-databind. CVE-2020-10672 FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to...

[SECURITY] [DLA 2132-1] libzypp security update

Package : libzypp Version : 14.29.1-2+deb8u1 CVE ID : CVE-2019-18900 It was discovered that there was an issue where incorrect default permissions on a HTTP cookie store could have allowed local attackers to read private credentials. For Debian 8 "Jessie", this issue has been fixed in libzypp...

[SECURITY] [DLA 2106-1] libgd2 security update

Package : libgd2 Version : 2.1.0-5+deb8u14 CVE ID : CVE-2018-14553 Debian Bug : 951287 A vulnerability was discovered in libgd2, the GD graphics library, whereby an attacker can employ a specific function call sequence to trigger a NULL pointer dereference, subsequently crash the application usin...

[SECURITY] [DLA 2102-1] firefox-esr security update

Package : firefox-esr Version : 68.5.0esr-1deb8u1 CVE ID : CVE-2020-6796 CVE-2020-6798 CVE-2020-6800 Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code. For Debian 8 "Jessie", these problems have been fixe...

[SECURITY] [DLA 2083-1] hiredis security update

Package : hiredis Version : 0.11.0-4+deb8u1 CVE ID : CVE-2020-7105 Debian Bug : 949995 It was discovered that there were a large number of NULL pointer dereferences due to unchecked return values from malloc and friends in hiredis, a minimalistic C client library. For Debian 8 "Jessie", these iss...

[SECURITY] [DLA 1762-2] systemd regression update

Package : systemd Version : 215-17+deb8u13 In the recently uploaded systemd security update 215-17+deb8u12 via DLA-1762-1, a regression was discovered in the fix for CVE-2017-18078. The observation of Debian jessie LTS users was, that after upgrading to +deb8u12 temporary files would not have the...

[SECURITY] [DSA 4346-2] ghostscript regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4346-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 23, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4349-1] tiff security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4349-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 30, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1491-1] tomcat8 security update

Package : tomcat8 Version : 8.0.14-1+deb8u13 CVE ID : CVE-2018-1336 CVE-2018-8034 Two security issues have been discovered in the Tomcat servlet and JSP engine. CVE-2018-1336 An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the...

[SECURITY] [DLA 1410-1] python-pysaml2 security update

Package : python-pysaml2 Version : 2.0.0-1+deb8u2 CVE ID : CVE-2017-1000433 Debian Bug : 886423 Pysaml2, a Python implementation of the Security Assertion Markup Language, would accept any password when run with Python optimizations enabled. This allows attackers to log in as any user without...

[SECURITY] [DSA 4164-1] apache2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4164-1 [email protected] https://www.debian.org/security/ Stefan Fritsch April 03, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1145-1] zoneminder security update

Package : zoneminder Version : 1.25.0-4+deb7u2 CVE ID : CVE-2017-5595 Multiple vulnerabilities have been found in zoneminder. This update fixes only a serious file disclosure vulnerability CVE-2017-5595. The application has been found to suffer from many other problems such as SQL injection...

[SECURITY] [DLA 1126-1] libxfont security update

Package : libxfont Version : 1:1.4.5-5+deb7u1 CVE IDs : CVE-2017-13720 CVE-2017-13722 It was discovered that there two vulnerabilities the library providing font selection and rasterisation, libxfont: CVE-2017-13720: If a pattern contained a ? character any character in the string is skipped even...

[SECURITY] [DLA 1104-1] newsbeuter security update

Package : newsbeuter Version : 2.5-2+deb7u3 CVE ID : CVE-2017-14500 Debian Bug : 876004 It was discovered that podbeuter, the podcast fetcher in newsbeuter, a text-mode RSS feed reader, did not properly escape the name of the media enclosure the podcast file, allowing a remote attacker to run an...

[SECURITY] [DLA 1041-1] nasm security update

Package : nasm Version : 2.10.01-1+deb7u1 CVE ID : CVE-2017-10686 CVE-2017-11111 CVE-2017-10686 In Netwide Assembler NASM 2.14rc0, there are multiple heap use after free vulnerabilities in the tool nasm. The related heap is allocated in the token function and freed in the detoken function called ...

[SECURITY] [DLA 993-1] linux security update

Package : linux Version : 3.2.89-1 CVE ID : CVE-2017-0605 CVE-2017-7487 CVE-2017-7645 CVE-2017-7895 CVE-2017-8890 CVE-2017-8924 CVE-2017-8925 CVE-2017-9074 CVE-2017-9075 CVE-2017-9076 CVE-2017-9077 CVE-2017-9242 CVE-2017-1000364 Several vulnerabilities have been discovered in the Linux kernel tha...

[SECURITY] [DLA 967-1] gajim security update

Package : gajim Version : 0.15.1-4.1+deb7u3 CVE ID : CVE-2016-10376 Debian Bug : 863445 Gajim implements XEP-0146, an XMPP extension to run commands remotely from another client. However it was found that malicious servers can trigger commands, which could lead to leaking private conversations fr...

[SECURITY] [DLA 914-1] minicom security update

Package : minicom Version : 2.6.1-1+deb7u1 CVE ID : CVE-2017-7467 Debian Bug : 860940 CVE-2017-7467 Out of bounds write in vt100.c For Debian 7 "Wheezy", these problems have been fixed in version 2.6.1-1+deb7u1. We recommend that you upgrade your minicom packages. Further information about Debian...

[SECURITY] [DSA 3764-1] pdns security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3764-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 13, 2017 https://www.debian.org/security/faq -...