[SECURITY] [DSA 1769-1] New openjdk-6 packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1769-1 [email protected] http://www.debian.org/security/ Florian Weimer April 11, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1731-1] New ndiswrapper packages fix arbitrary code execution vulnerability

------------------------------------------------------------------------ Debian Security Advisory DSA-1731-1 [email protected] http://www.debian.org/security/ Steffen Joeris March 02, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1467-1] New mantis packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1467-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 19, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1343-2] New file packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1343-2 [email protected] http://www.debian.org/security/ Florian Weimer September 25th, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1284-1] New qemu packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1284-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 1st, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1237-1] New Linux 2.4.27 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1237-1 [email protected] http://www.debian.org/security/ Dann Frazier December 17th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1017-1] New Linux kernel 2.6.8 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1017-1 [email protected] http://www.debian.org/security/ Dann Frazier, Simon Horman March 23th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 967-1] New elog packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 967-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 10th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 638-1] New gopher packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 638-1 [email protected] http://www.debian.org/security/ Martin Schulze January 13th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 628-1] New imlib2 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 628-1 [email protected] http://www.debian.org/security/ Martin Schulze January 6th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 614-1] New xzgv packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 614-1 [email protected] http://www.debian.org/security/ Martin Schulze December 21st, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 267-2] New lpr packages fix local root exploit (potato)

-------------------------------------------------------------------------- Debian Security Advisory DSA 267-2 [email protected] http://www.debian.org/security/ Martin Schulze April 15th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 6301-1] roundcube security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6301-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 27, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DLA 4228-1] nginx security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4228-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler June 24, 2025 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 4167-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4167-1 [email protected] https://www.debian.org/lts/security/ Lee Garrett May 18, 2025 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5665-1] tomcat10 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5665-1 [email protected] https://www.debian.org/security/ Markus Koschany April 17, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5634-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5634-1 [email protected] https://www.debian.org/security/ Andres Salomon February 28, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5614-1] zbar security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5614-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 03, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5612-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5612-1 [email protected] https://www.debian.org/security/ Andres Salomon February 01, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3492-1] yajl security update

Debian LTS Advisory DLA-3492-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost July 11, 2023 https://wiki.debian.org/LTS Package : yajl Version : 2.1.0-3+deb10u2 CVE ID : CVE-2017-16516 CVE-2022-24795 CVE-2023-33460 Debian Bug : 1040036 Multiple vulnerabilties have...

[SECURITY] [DLA 3221-1] node-cached-path-relative security update

Debian LTS Advisory DLA-3221-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin December 05, 2022 https://wiki.debian.org/LTS Package : node-cached-path-relative Version : 1.0.1-2+deb10u1 CVE ID : CVE-2018-16472 CVE-2021-23518 Debian Bug : 1004338 Cristian-Alexandru...

[SECURITY] [DLA 3207-1] jackson-databind security update

Debian LTS Advisory DLA-3207-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany November 27, 2022 https://wiki.debian.org/LTS Package : jackson-databind Version : 2.9.8-3+deb10u4 CVE ID : CVE-2020-36518 CVE-2022-42003 CVE-2022-42004 Debian Bug : 1007109 Several fla...

[SECURITY] [DLA 3137-1] nodejs security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3137-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler October 05, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5167-1] firejail security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5167-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 22, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3044-1] glib2.0 security update

Debian LTS Advisory DLA-3044-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany June 06, 2022 https://wiki.debian.org/LTS Package : glib2.0 Version : 2.50.3-2+deb9u3 CVE ID : CVE-2021-27218 CVE-2021-27219 CVE-2021-28153 Debian Bug : 984969 982778 982779 Several...

[SECURITY] [DSA 5123-1] xz-utils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5123-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 18, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2618-3] smarty3 regression update

Debian LTS Advisory DLA-2618-3 [email protected] https://www.debian.org/lts/security/ Markus Koschany October 20, 2021 https://wiki.debian.org/LTS Package : smarty3 Version : 3.1.31+20161214.1.c7d42e4+selfpack1-2+deb9u4 CVE ID : CVE-2018-13982 Debian Bug : 989141 The security update of...

[SECURITY] [DSA 4978-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4978-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 25, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4899-1] openjdk-11 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4899-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 23, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2489-1] minidlna security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2489-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz December 10, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4700-1] roundcube security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4700-1 [email protected] https://www.debian.org/security/ Sebastien Delafond June 11, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2176-1] inetutils security update

Package : inetutils Version : 2:1.9.2.39.3a460-3+deb8u1 CVE ID : CVE-2020-10188 Debian Bug : 956084 NOTE: This DLA was intially sent on 2020-04-14 but for reasons unknown failed to reach the mailing list. It is being re-sent now to ensure that it appears in the mailing list archive. No new versio...

[SECURITY] [DSA 4668-1] openjdk-8 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4668-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 28, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2153-1] jackson-databind security update

Package : jackson-databind Version : 2.4.2-2+deb8u13 CVE ID : CVE-2020-10672 CVE-2020-10673 The following CVEs were reported against jackson-databind. CVE-2020-10672 FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to...

[SECURITY] [DLA 2102-1] firefox-esr security update

Package : firefox-esr Version : 68.5.0esr-1deb8u1 CVE ID : CVE-2020-6796 CVE-2020-6798 CVE-2020-6800 Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code. For Debian 8 "Jessie", these problems have been fixe...

[SECURITY] [DSA 4617-1] qtbase-opensource-src security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4617-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 03, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1928-1] php5 security update

Package : php5 Version : 5.6.40+dfsg-0+deb8u6 Debian Bug : 805222 An update has been made to php5, a server-side, HTML-embedded scripting language. Specficially, as reported in 805222, the ability to build extensions in certain older versions of PHP within Debian has been hindered by an upstream...

[SECURITY] [DSA 4492-1] postgresql-9.6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4492-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 08, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4487-1] neovim security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4487-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 23, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4370-1] drupal7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4370-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 17, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4349-1] tiff security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4349-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 30, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1601-1] perl security update

Package : perl Version : 5.20.2-3+deb8u12 CVE ID : CVE-2018-18311 Jayakrishna Menon and Christophe Hauser discovered an integer overflow vulnerability in Perlmysetenv leading to a heap-based buffer overflow with attacker-controlled input. For Debian 8 "Jessie", this problem has been fixed in...

[SECURITY] [DLA 1491-1] tomcat8 security update

Package : tomcat8 Version : 8.0.14-1+deb8u13 CVE ID : CVE-2018-1336 CVE-2018-8034 Two security issues have been discovered in the Tomcat servlet and JSP engine. CVE-2018-1336 An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the...

[SECURITY] [DLA 1470-1] confuse security update

Package : confuse Version : 2.7-5+deb8u1 CVE ID : CVE-2018-14447 Debian Bug : 904159 An out of bound read was discoverd in libConfuse, a configuration file parser library. CVE-2018-14447 An out of bound read in trimwhitespace, fixed thanks to Sebastian Roland [email protected]. For Debian 8...

[SECURITY] [DSA 4128-1] trafficserver security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4128-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 02, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4037-1] jackson-databind security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4037-1 [email protected] https://www.debian.org/security/ Sebastien Delafond November 16, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1145-1] zoneminder security update

Package : zoneminder Version : 1.25.0-4+deb7u2 CVE ID : CVE-2017-5595 Multiple vulnerabilities have been found in zoneminder. This update fixes only a serious file disclosure vulnerability CVE-2017-5595. The application has been found to suffer from many other problems such as SQL injection...

[SECURITY] [DLA 1104-1] newsbeuter security update

Package : newsbeuter Version : 2.5-2+deb7u3 CVE ID : CVE-2017-14500 Debian Bug : 876004 It was discovered that podbeuter, the podcast fetcher in newsbeuter, a text-mode RSS feed reader, did not properly escape the name of the media enclosure the podcast file, allowing a remote attacker to run an...

[SECURITY] [DLA 1040-1] resiprocate security update

Package : resiprocate Version : 1.8.5-4+deb7u1 CVE ID : CVE-2017-11521 CVE-2017-11521 The SdpContents::Session::Medium::parse function in resip/stack/SdpContents.cxx in reSIProcate 1.10.2 allows remote attackers to cause a denial of service memory consumption by triggering many media connections...

[SECURITY] [DLA 996-1] tomcat7 security update

Package : tomcat7 Version : 7.0.28-4+deb7u14 CVE ID : CVE-2017-5664 Debian Bug : 864447 The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an error page is configured for the error that occurred, the original request and response are forwarded to th...