[SECURITY] [DLA 2024-1] phpmyadmin security update

Package : phpmyadmin Version : 4:4.2.12-2+deb8u7 CVE ID : CVE-2019-19617 phpMyAdmin before 4.9.2 does not escape certain Git information, related to libraries/displaygitrevision.lib.php and libraries/Footer.class.php. For Debian 8 "Jessie", this issue has been fixed in phpmyadmin version...

[SECURITY] [DLA 3093-1] rails security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3093-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA September 03, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2668-1] samba security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2668-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA May 29, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2023-1] openjdk-7 security update

Package : openjdk-7 Version : 7u241-2.6.20-1deb8u1 CVE ID : CVE-2019-2894 CVE-2019-2933 CVE-2019-2945 CVE-2019-2949 CVE-2019-2958 CVE-2019-2962 CVE-2019-2964 CVE-2019-2973 CVE-2019-2978 CVE-2019-2981 CVE-2019-2983 CVE-2019-2987 CVE-2019-2988 CVE-2019-2989 CVE-2019-2992 CVE-2019-2999 Several...

[SECURITY] [DSA 4479-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4479-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 11, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4457-1] evolution security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4457-1 [email protected] https://www.debian.org/security/ Sebastien Delafond June 07, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4453-1] openjdk-8 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4453-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 29, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1767-1] monit security update

Package : monit Version : 1:5.9-1+deb8u2 CVE ID : CVE-2019-11454 CVE-2019-11455 Zack Flack found several issues in monit, a utility for monitoring and managing daemons or similar programs. CVE-2019-11454 An XSS vulnerabilitty has been reported that could be prevented by HTML escaping the log file...

[SECURITY] [DSA 4404-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4404-1 [email protected] https://www.debian.org/security/ Michael Gilbert March 09, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4262-1] symfony security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4262-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 03, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1946-1] novnc security update

Package : novnc Version : 1:0.4+dfsg+1+20131010+gitf68af8af3d-4+deb8u1 CVE ID : CVE-2017-18635 An XSS vulnerability was discovered in noVNC in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages propagated to the status field, such as the VNC server...

[SECURITY] [DSA 4471-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4471-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 24, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4398-1] php7.0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4398-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 28, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1609-1] libapache-mod-jk security update

Package : libapache-mod-jk Version : 1.2.46-0+deb8u1 CVE ID : CVE-2018-11759 A vulnerability has been discovered in libapache-mod-jk, the Apache 2 connector for the Tomcat Java servlet engine. The libapache-mod-jk connector is susceptible to information disclosure and privilege escalation because...

[SECURITY] [DSA 4963-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4963-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 24, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4579-1] nss security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4579-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 06, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4551-1] golang-1.11 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4551-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 25, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1921-1] dnsmasq security update

Package : dnsmasq Version : 2.72-3+deb8u5 CVE ID : CVE-2019-14513 Samuel R Lovejoy discovered a security vulnerability in dnsmasq. Carefully crafted packets by DNS servers might result in out of bounds read operations, potentially leading to a crash and denial of service. For Debian 8 "Jessie",...

[SECURITY] [DLA 1795-1] graphicsmagick security update

Package : graphicsmagick Version : 1.3.20-3+deb8u7 CVE ID : CVE-2019-11473 CVE-2019-11474 CVE-2019-11505 CVE-2019-11506 Multiple vulnerabilities have been discovered in graphicsmagick, the image processing toolkit: CVE-2019-11473 The WriteMATLABImage function coders/mat.c is affected by a...

[SECURITY] [DLA 1081-1] imagemagick security update

Package : imagemagick Version : 6.7.7.10-5+deb7u16 CVE ID : CVE-2017-8352 CVE-2017-9144 CVE-2017-9501 CVE-2017-10928 CVE-2017-10995 CVE-2017-11141 CVE-2017-11170 CVE-2017-11188 CVE-2017-11352 CVE-2017-11360 CVE-2017-11446 CVE-2017-11448 CVE-2017-11449 CVE-2017-11450 CVE-2017-11478 CVE-2017-11505...

[SECURITY] [DSA 5372-1] rails security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5372-1 [email protected] https://www.debian.org/security/ Aron Xu March 13, 2023 https://www.debian.org/security/faq - -------------------------------------------------------------------------...

[SECURITY] [DSA 4632-1] ppp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4632-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 22, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4507-1] squid security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4507-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 24, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4480-1] redis security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4480-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 11, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4420-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4420-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 30, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4408-1] liblivemedia security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4408-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 17, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5371-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5371-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 09, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3255-1] mplayer security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3255-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz December 31, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA-1994-1] postgresql-common security update

Package : postgresql-common Version : 165+deb8u4 CVE ID : CVE-2019-3466 Rich Mirch discovered that the pgctlcluster script didnt drop privileges when creating socket/statistics temporary directories, which could result in local privilege escalation. For the oldoldstable distribution jessie, this...

[SECURITY] [DLA 1980-1] wordpress security update

Package : wordpress Version : 4.1.28+dfsg-0+deb8u1 CVE ID : CVE-2019-17669 CVE-2019-17670 CVE-2019-17671 CVE-2019-17675 Debian Bug : 942459 Several vulnerabilities in wordpress, a web blogging tool, have been fixed. CVE-2019-17669 Server Side Request Forgery SSRF vulnerability because URL...

[SECURITY] [DLA 1369-1] linux security update

Package : linux Version : 3.2.101-1 CVE ID : CVE-2017-0861 CVE-2017-5715 CVE-2017-13166 CVE-2017-16526 CVE-2017-16911 CVE-2017-16912 CVE-2017-16913 CVE-2017-16914 CVE-2017-18017 CVE-2017-18203 CVE-2017-18216 CVE-2018-1068 CVE-2018-1092 CVE-2018-5332 CVE-2018-5333 CVE-2018-5750 CVE-2018-5803...

[SECURITY] [DLA 3382-1] openimageio security update

Debian LTS Advisory DLA-3382-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany April 05, 2023 https://wiki.debian.org/LTS Package : openimageio Version : 2.0.5dfsg0-1+deb10u1 CVE ID : CVE-2022-36354 CVE-2022-41639 CVE-2022-41838 CVE-2022-41977 CVE-2022-41981...

[SECURITY] [DLA 3236-1] openexr security update

Debian LTS Advisory DLA-3236-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany December 12, 2022 https://wiki.debian.org/LTS Package : openexr Version : 2.2.1-4.1+deb10u2 CVE ID : CVE-2020-16587 CVE-2020-16588 CVE-2020-16589 CVE-2021-3474 CVE-2021-3475 CVE-2021-34...

[SECURITY] [DSA 4917-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4917-1 [email protected] https://www.debian.org/security/ Michael Gilbert May 17, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4677-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4677-1 [email protected] https://www.debian.org/security/ Sebastien Delafond May 06, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1862-1] linux security update

Package : linux Version : 3.16.70-1 CVE ID : CVE-2019-2101 CVE-2019-10639 CVE-2019-13272 Debian Bug : 930904 Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. CVE-2019-2101 Andrey Konovalov discovered...

[SECURITY] [DSA 4478-1] dosbox security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4478-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 10, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4467-2] vim regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4467-2 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 23, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4373-1] coturn security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4373-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez January 28, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 333-1] cakephp security update

Package : cakephp Version : 1.3.2-1.1+deb6u11 CakePHP, an open-source web application framework for PHP, was vulnerable to SSRF Server Side Request Forgery attacks. Remote attacker can utilize it for at least DoS Denial of Service attacks, if the target application accepts XML as an input. It is...

[SECURITY] [DLA 1902-1] djvulibre security update

Package : djvulibre Version : 3.5.25.4-4+deb8u1 CVE ID : CVE-2019-15142 CVE-2019-15143 CVE-2019-15144 CVE-2019-15145 Hongxu Chen found several issues in djvulibre, a library and set of tools to handle images in the DjVu format. The issues are a heap-buffer-overflow, a stack-overflow, an infinite...

[SECURITY] [DLA 1807-1] vcftools security update

Package : vcftools Version : 0.1.12+dfsg-1+deb8u1 CVE ID : CVE-2018-11099 CVE-2018-11129 CVE-2018-11130 Webin security lab - dbapp security Ltd found three issues in vcftools, a collection of tools to work with VCF files. Different functions in header.cpp are vulnerable to denial of services due ...

[SECURITY] [DSA 4517-1] exim4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4517-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 06, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4394-1] rdesktop security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4394-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 18, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3980-1] python3.9 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3980-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk December 02, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5223-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5223-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 01, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2034-1] davical security update

Package : davical Version : 1.1.3.1-1+deb8u1 CVE ID : CVE-2019-18345 CVE-2019-18346 CVE-2019-18347 Debian Bug : 946343 Multiple cross-site scripting and cross-site request forgery issues were discovered in the DAViCal CalDAV Server. For Debian 8 "Jessie", these problems have been fixed in version...

[SECURITY] [DLA 2025-1] openslp-dfsg security update

Package : openslp-dfsg Version : 1.2.1-10+deb8u2 CVE IDs : CVE-2017-17833 CVE-2019-5544 The OpenSLP package had two open security issues: CVE-2017-17833 OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-servic...

[SECURITY] [DSA 4545-1] mediawiki security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4545-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 18, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4539-3] openssl regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4539-3 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 13, 2019 https://www.debian.org/security/faq -...