[SECURITY] [DSA 1731-1] New ndiswrapper packages fix arbitrary code execution vulnerability

------------------------------------------------------------------------ Debian Security Advisory DSA-1731-1 [email protected] http://www.debian.org/security/ Steffen Joeris March 02, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1688-2] New courier-authlib packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1688-2 [email protected] http://www.debian.org/security/ Steffen Joeris December 22, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1578-1] New php4 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1578-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 17, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1332-1] New vlc packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1332-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 9th, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1243-1] New evince packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1243-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 28th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1004-1] New vlc packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1004-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 16th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 952-1] New libapache-auth-ldap packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 952-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 23rd, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 691-1] New abuse packages fix local root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 691-1 [email protected] http://www.debian.org/security/ Martin Schulze March 7th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 636-1] New libc6 packages fix insecure temporary files

-------------------------------------------------------------------------- Debian Security Advisory DSA 636-1 [email protected] http://www.debian.org/security/ Martin Schulze January 12th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 610-1] New cscope packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 610-1 [email protected] http://www.debian.org/security/ Martin Schulze December 17th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 6301-1] roundcube security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6301-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 27, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DLA 4145-1] expat security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4145-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz April 30, 2025 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5624-1] edk2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5624-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 14, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5597-1] exim4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5597-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 04, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3700-1] cjson security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3700-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz December 30, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3664-1] symfony security update

Debian LTS Advisory DLA-3664-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany November 24, 2023 https://wiki.debian.org/LTS Package : symfony Version : 3.4.22+dfsg-2+deb10u3 CVE ID : CVE-2023-46734 Debian Bug : 1055774 Pierre Rudloff discovered a potential XSS...

[SECURITY] [DLA 3604-1] qemu security update

Debian LTS Advisory DLA-3604-1 [email protected] https://www.debian.org/lts/security/ Sean Whitton October 05, 2023 https://wiki.debian.org/LTS Package : qemu Version : 1:3.1+dfsg-8+deb10u11 CVE ID : CVE-2020-24165 CVE-2023-0330 CVE-2023-3180 Debian Bug : 1029155 Multiple issues were...

[SECURITY] [DSA 5474-1] intel-microcode security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5474-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 11, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5353-1] nss security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5353-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 17, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5295-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5295-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 04, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5264-1] batik security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5264-1 [email protected] https://www.debian.org/security/ Markus Koschany October 29, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3158-1] wkhtmltopdf security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3158-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort October 24, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3147-1] twig security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3147-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb October 11, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3136-1] barbican security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3136-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort October 04, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3081-1] open-vm-tools security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3081-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA August 25, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5056-1] strongswan security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5056-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez January 24, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4947-1] libsndfile security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4947-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 30, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4899-2] openjdk-11-jre-dcevm update

------------------------------------------------------------------------- Debian Security Advisory DSA-4899-2 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 31, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2576-1] redis security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2576-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb February 25, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2477-1] jupyter-notebook security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2477-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb December 02, 2020 https://wiki.debian.org/LTS -...

[SECURITY][DLA 2431-1] libonig security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2431-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany November 05, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2270-1] jackson-databind security update

Package : jackson-databind Version : 2.4.2-2+deb8u15 CVE ID : CVE-2020-14060 CVE-2020-14061 CVE-2020-14062 CVE-2020-14195 There were several CVEs reported against src:jackson-databind, which are as follows: CVE-2020-14060 FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction...

[SECURITY] [DSA 4690-1] dovecot security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4690-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 20, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2196-2] pound regression update

Package : pound Version : 2.6-6+deb8u3 CVE ID : CVE-2016-10711 A regression has been found in the patch for CVE-2016-10711 of pound, a reverse proxy, load balancer and HTTPS front-end for Web servers. Without the fix pound can be tricked to use 100% CPU. For Debian 8 "Jessie", this problem has be...

[SECURITY] [DLA 2179-1] jackson-databind security update

Package : jackson-databind Version : 2.4.2-2+deb8u14 CVE ID : CVE-2020-10968 CVE-2020-10969 CVE-2020-11111 CVE-2020-11112 CVE-2020-11113 CVE-2020-11619 CVE-2020-11620 Following CVEs were reported against the jackson-databind source package : CVE-2020-10968 FasterXML jackson-databind 2.x before...

[SECURITY] [DLA 2113-1] cloud-init security update

Package : cloud-init Version : 0.7.6bzr976-2+deb8u1 CVE ID : CVE-2020-8631 CVE-2020-8632 Debian Bug : 951362 951363 CVE-2020-8631 In cloud-init, relies on Mersenne Twister for a random password, which makes it easier for attackers to predict passwords, because randstr in cloudinit/util.py calls t...

[SECURITY] [DSA 4629-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4629-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 19, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4621-1] openjdk-8 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4621-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 12, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4583-1] spip security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4583-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 13, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4532-1] spip security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4532-1 [email protected] https://www.debian.org/security/ Sebastien Delafond September 25, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4474-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4474-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 01, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4315-1] wireshark security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4315-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 12, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4280-1] openssh security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4280-1 [email protected] https://www.debian.org/security/ Sebastien Delafond August 22, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4236-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4236-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 27, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4194-1] lucene-solr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4194-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 06, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1366-1] wordpress security update

Package : wordpress Version : 3.6.1+dfsg-1deb7u21 CVE ID : CVE-2018-10100 CVE-2018-10102 Debian Bug : 895034 Two vulnerabilities were discovered in wordpress, a web blogging tool. The Common Vulnerabilities and Exposures project identifies the following issues. CVE-2018-10100 The redirection URL...

[SECURITY] [DLA 1344-1] squirrelmail security update

Package : squirrelmail Version : 2:1.4.23svn20120406-2+deb7u2 CVE ID : CVE-2018-8741 Debian Bug : 893202 Florian Grunow and Birk Kauer of ERNW discovered a path traversal vulnerability in SquirrelMail, a webmail application, allowing an authenticated remote attacker to retrieve or delete arbitrar...

[SECURITY] [DLA 1316-1] freeplane security update

Package : freeplane Version : 1.1.3-2+deb7u1 CVE ID : CVE-2018-1000069 Debian Bug : 893663 Wojciech Reguła discovered that Freeplane, a program for working with mind maps, was affected by a XML External Entity XXE vulnerability in its mindmap loader that could compromise a users machine by openin...

[SECURITY] [DLA 1229-1] imagemagick security update

Package : imagemagick Version : 8:6.7.7.10-5+deb7u20 CVE ID : CVE-2017-1000445, CVE-2017-1000476 Debian Bug : 886281 It was discovered that there were two vulnerabilities in the imagemagick image manipulation program: CVE-2017-1000445: A null pointer dereference in the MagickCore component which...

[SECURITY] [DSA 4010-1] git-annex security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4010-1 [email protected] https://www.debian.org/security/ Sebastien Delafond October 30, 2017 https://www.debian.org/security/faq -...