[SECURITY] [DSA 5694-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5694-1 [email protected] https://www.debian.org/security/ Andres Salomon May 17, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3781-1] libgd2 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3781-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz April 07, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3664-1] symfony security update

Debian LTS Advisory DLA-3664-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany November 24, 2023 https://wiki.debian.org/LTS Package : symfony Version : 3.4.22+dfsg-2+deb10u3 CVE ID : CVE-2023-46734 Debian Bug : 1055774 Pierre Rudloff discovered a potential XSS...

[SECURITY] [DSA 5541-1] request-tracker5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5541-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 30, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3503-1] gst-plugins-bad1.0 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3503-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz July 25, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3209-1] ini4j security update

Debian LTS Advisory DLA-3209-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany November 28, 2022 https://wiki.debian.org/LTS Package : ini4j Version : 0.5.4-1deb10u1 CVE ID : CVE-2022-41404 It was discovered that ini4j, a Java library for handling the Windows ini...

[SECURITY] [DLA 3206-1] heimdal security update

Debian LTS Advisory DLA-3206-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin November 26, 2022 https://wiki.debian.org/LTS Package : heimdal Version : 7.5.0+dfsg-3+deb10u1 CVE ID : CVE-2019-14870 CVE-2021-3671 CVE-2021-44758 CVE-2022-3437 CVE-2022-41916...

[SECURITY] [DSA 5287-1] heimdal security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5287-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 22, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5207-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5207-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 15, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5188-1] openjdk-11 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5188-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 22, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3026-1] filezilla security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3026-1 [email protected] https://www.debian.org/lts/security/ Andreas Rönnquist May 26, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3013-1] needrestart security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-3013-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta May 18, 2022 https://wiki.debian.org/LTS - -----------------------------------------------------------------------...

[SECURITY] [DLA 3002-1] adminer security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3002-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb May 13, 2022 https://wiki.debian.org/LTS - -------------------------------------------------------------------------...

[SECURITY] [DLA 2977-1] xz-utils security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2977-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta April 10, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2970-1] qemu security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2970-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort April 04, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5107-1] php-twig security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5107-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 24, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2911-1] apng2gif security update

Debian LTS Advisory DLA-2911-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany February 04, 2022 https://wiki.debian.org/LTS Package : apng2gif Version : 1.8-0.1deb9u1 CVE ID : CVE-2017-6960 CVE-2017-6961 CVE-2017-6962 Debian Bug : 854447 Several vulnerabilities...

[SECURITY] [DLA 2901-1] libxfont security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2901-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz January 25, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5055-1] util-linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5055-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 24, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5024-1] apache-log4j2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5024-1 [email protected] https://www.debian.org/security/ Markus Koschany December 18, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2788-1] strongswan security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2788-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz October 20, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4989-1] strongswan security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4989-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez October 18, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2738-1] c-ares security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2738-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz August 10, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2700-1] htmldoc security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2700-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta July 01, 2021 https://wiki.debian.org/LTS - -----------------------------------------------------------------------...

[SECURITY] [DSA 4886-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4886-1 [email protected] https://www.debian.org/security/ Michael Gilbert April 06, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA-2530-1] drupal7 security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2530-1 [email protected] https://www.debian.org/lts/security/ Gunnar Wolf January 21, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4814-1] xerces-c security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4814-1 [email protected] https://www.debian.org/security/ Sebastien Delafond December 17, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4799-1] x11vnc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4799-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 28, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4797-1] webkit2gtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4797-1 [email protected] https://www.debian.org/security/ Alberto Garcia November 23, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2390-1] ruby-json-jwt security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2390-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta October 01, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2348-1] php-horde-core security update

Debian LTS Advisory DLA-2348-1 [email protected] https://www.debian.org/lts/security/ Mike Gabriel August 29, 2020 https://wiki.debian.org/LTS Package : php-horde-core Version : 2.27.6+debian1-2+deb9u1 CVE ID : CVE-2017-16907 Debian Bug : 909800 In Horde Groupware, there has been an XSS...

[SECURITY] [DSA 4749-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4749-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 26, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2321-1] firmware-nonfree new upstream version

Debian LTS Advisory DLA-2321-1 [email protected] https://www.debian.org/lts/security/ August 11, 2020 https://wiki.debian.org/LTS Package : firmware-nonfree Version : 20190114-2deb9u1 The firmware-nonfree package has been updated to include additional firmware that may be requested by...

[SECURITY] [DSA 4730-1] ruby-sanitize security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4730-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 19, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2243-1] firefox-esr security update [REVISED]

Package : firefox-esr Version : 68.9.0esr-1deb8u2 CVE ID : CVE-2020-12399 CVE-2020-12405 CVE-2020-12406 CVE-2020-12410 Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or a timing attack on cryptographic...

[SECURITY] [DSA 4688-1] dpdk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4688-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 18, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2071-1] thunderbird security update

Package : thunderbird Version : 1:68.4.1-1deb8u1 CVE ID : CVE-2019-17016 CVE-2019-17017 CVE-2019-17022 CVE-2019-17024 CVE-2019-17026 Multiple security issues have been found in Thunderbird which could potentially result in the execution of arbitrary code or information disclosure. For Debian 8...

[SECURITY] [DLA 1842-1] python-django security update

Package : python-django Version : 1.7.11-1+deb8u6 CVE ID : CVE-2019-12308 Debian Bug : 931316 It was discovered that the Django Python web development framework did not correct identify HTTP connections when a reverse proxy connected via HTTPS. When deployed behind a reverse-proxy connecting to...

[SECURITY] [DLA 1752-1] poppler security update

Package : poppler Version : 0.26.5-2+deb8u9 CVE ID : CVE-2019-9631 Debian Bug : A security issue was discovered in the poppler PDF rendering shared library. The Poppler shared library had a heap-based buffer over-read in the CairoRescaleBox.cc downsamplerowboxfilter function. For Debian 8 "Jessie...

[SECURITY] [DLA 1604-1] lxml security update

Package : lxml Version : 3.4.0-1+deb8u1 CVE ID : CVE-2018-19787 It was discovered that there was a XSS injection vulnerability in the LXML HTML/XSS manipulation library for Python. LXML did not remove "javascript:" URLs that used escaping such as "j a v a s c r i p t". This is a similar issue to...

[SECURITY] [DSA 4282-1] trafficserver security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4282-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 31, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4279-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4279-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 20, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4211-1] xdg-utils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4211-1 [email protected] https://www.debian.org/security/ Luciano Bello May 25, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4188-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4188-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 01, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4156-1] drupal7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4156-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 29, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1210-1] kildclient security update

Package : kildclient Version : 2.11.1-1+deb7u1 CVE ID : CVE-2017-17511 It was discovered that there was a command-injection vulnerability in kildclient, a "MUD" multiplayer real-time virtual world game. For Debian 7 "Wheezy", this issue has been fixed in kildclient version 2.11.1-1+deb7u1. Thanks...

[SECURITY] [DLA 1166-1] tomcat7 security update

Package : tomcat7 Version : 7.0.28-4+deb7u16 CVE ID : CVE-2017-12617 A remote code execution vulnerability has been discovered in tomcat7. When HTTP PUT was enabled e.g., via setting the readonly initialization parameter of the Default servlet to false it was possible to upload a JSP file to the...

[SECURITY] [DLA 1158-1] bchunk security update

Package : bchunk Version : 1.2.0-12+deb7u1 CVE ID : CVE-2017-15953 CVE-2017-15954 CVE-2017-15955 Debian Bug : 880116 Several vulnerabilities were discovered in bchunk, a tool to convert a CD image in .bin/.cue format into a set of .iso and .cdr/.wav tracks. It was possible to trigger a heap-based...

[SECURITY] [DLA 1132-1] xen security update

Package : xen Version : 4.1.6.lts1-9 CVE ID : CVE-2017-10912 CVE-2017-10913 CVE-2017-10914 CVE-2017-10915 CVE-2017-10918 CVE-2017-10920 CVE-2017-10921 CVE-2017-10922 CVE-2017-12135 CVE-2017-12137 CVE-2017-12855 CVE-2017-14316 CVE-2017-14317 CVE-2017-14318 CVE-2017-14319 Multiple vulnerabilities...

[SECURITY] [DLA 1111-1] weechat security update

Package : weechat Version : 0.3.8-1+deb7u3 CVE ID : CVE-2017-14727 Debian Bug : 876553 It was discovered that WeeChats logger plugin is vulnerable to an invalid buffer read which can be exploited remotely to trigger an application crash or other undefined behaviour. For Debian 7 "Wheezy", these...