[SECURITY] [DLA 3604-1] qemu security update

Debian LTS Advisory DLA-3604-1 [email protected] https://www.debian.org/lts/security/ Sean Whitton October 05, 2023 https://wiki.debian.org/LTS Package : qemu Version : 1:3.1+dfsg-8+deb10u11 CVE ID : CVE-2020-24165 CVE-2023-0330 CVE-2023-3180 Debian Bug : 1029155 Multiple issues were...

[SECURITY] [DLA 3558-1] python-django security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3558-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb September 07, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5466-1] ntpsec security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5466-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 04, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3483-1] nsis security update

Debian LTS Advisory DLA-3483-1 [email protected] https://www.debian.org/lts/security/ Sean Whitton July 07, 2023 https://wiki.debian.org/LTS Package : nsis Version : 3.04-1+deb9u1 CVE ID : CVE-2023-37378 It was discovered that the Nullsoft Scriptable Install System NSIS before version...

[SECURITY] [DSA 5391-1] libxml2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5391-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 20, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3331-2] python-cryptography security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3331-2 [email protected] https://www.debian.org/lts/security/ Chris Lamb February 27, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5295-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5295-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 04, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5294-1] jhead security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5294-1 [email protected] https://www.debian.org/security/ Markus Koschany December 04, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3216-1] vlc security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-3216-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta December 03, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3202-1] libarchive security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3202-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler November 22, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3136-1] barbican security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3136-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort October 04, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3107-1] sqlite3 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3107-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb September 13, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5220-1] wpewebkit security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5220-1 [email protected] https://www.debian.org/security/ Alberto Garcia August 27, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3030-1] zipios++ security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3030-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz May 27, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2931-1] cyrus-sasl2 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2931-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz March 06, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5067-1] ruby2.7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5067-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 03, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2780-1] ruby2.3 security update

---------------------------------------------------------------------- Debian LTS Advisory DLA-2780-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta October 11, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4960-1] haproxy security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4960-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 17, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4947-1] libsndfile security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4947-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 30, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4940-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4940-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 18, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4899-2] openjdk-11-jre-dcevm update

------------------------------------------------------------------------- Debian Security Advisory DSA-4899-2 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 31, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4819-1] kitty security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4819-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 26, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2467-2] lxml regression update

Debian LTS Advisory DLA-2467-2 [email protected] https://www.debian.org/lts/security/ Roberto C. Sánchez December 18, 2020 https://wiki.debian.org/LTS Package : lxml Version : 3.7.1-1+deb9u3 CVE ID : CVE-2020-27783 The fix for CVE-2020-27783, released as DLA 2467-1, was incomplete as th...

[SECURITY] [DLA 2360-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2360-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 31, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2311-1] zabbix security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2311-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb August 3, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2298-1] libapache2-mod-auth-openidc security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2298-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz July 29, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4715-1] imagemagick security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4715-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 02, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2228-2] json-c regression update

Package : json-c Version : 0.11-4+deb8u2 CVE ID : CVE-2020-12762 Debian Bug : 960326 The json-c shared library had an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbufmemappend. This follow-up version now uses an upstream sanctioned patch that was...

[SECURITY] [DLA 2196-2] pound regression update

Package : pound Version : 2.6-6+deb8u3 CVE ID : CVE-2016-10711 A regression has been found in the patch for CVE-2016-10711 of pound, a reverse proxy, load balancer and HTTPS front-end for Web servers. Without the fix pound can be tricked to use 100% CPU. For Debian 8 "Jessie", this problem has be...

[SECURITY] [DSA 4583-1] spip security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4583-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 13, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4509-3] apache2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4509-3 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 15, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4542-1] jackson-databind security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4542-1 [email protected] https://www.debian.org/security/ Sebastien Delafond October 06, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4468-1] php-horde-form security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4468-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 21, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4280-1] openssh security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4280-1 [email protected] https://www.debian.org/security/ Sebastien Delafond August 22, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4167-1] sharutils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4167-1 [email protected] https://www.debian.org/security/ Luciano Bello April 05, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4161-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4161-1 [email protected] https://www.debian.org/security/ Luciano Bello April 01, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1328-1] xerces-c security update

Package : xerces-c Version : 3.1.1-3+deb7u5 CVE ID : CVE-2017-12627 Debian Bug : 894050 Alberto Garcia, Francisco Oca and Suleman Ali of Offensive Research discovered that the Xerces-C XML parser mishandles certain kinds of external DTD references, resulting in dereference of a NULL pointer while...

[SECURITY] [DLA 1280-1] pound security update

Package : pound Version : 2.6-2+deb7u2 CVE ID : CVE-2016-10711 Debian Bug : 888786 A request smuggling vulnerability was discovered in pound that may allow attackers to send a specially crafted http request to a web server or reverse proxy while pound may see a different set of requests. This...

[SECURITY] [DSA 4109-1] ruby-omniauth security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4109-1 [email protected] https://www.debian.org/security/ February 09, 2018 https://www.debian.org/security/faq - -------------------------------------------------------------------------...

[SECURITY] [DSA 4099-1] ffmpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4099-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 27, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4039-1] opensaml2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4039-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 16, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1066-1] php5 security update

Package : php5 Version : 5.4.45-0+deb7u10 CVE ID : CVE-2017-11628 A stack-based buffer overflow in the zendinidoop function in Zend/zendiniparser.c could cause a denial of service or potentially allow executing code. NOTE: this is only relevant for PHP applications that accept untrusted input...

[SECURITY] [DSA 3951-1] smb4k security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3951-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 22, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3922-1] mysql-5.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3922-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 28, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1001-1] exim4 security update

Package : exim4 Version : 4.80-7+deb7u5 CVE ID : CVE-2017-1000369 Exim supports the use of multiple "-p" command line arguments which are malloced and never freeed, used in conjunction with other issues allows attackers to cause arbitrary code execution. For Debian 7 "Wheezy", these problems have...

[SECURITY] [DSA 3869-1] tnef security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3869-1 [email protected] https://www.debian.org/security/ Sebastien Delafond June 01, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3763-1] pdns-recursor security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3763-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 13, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3759-1] python-pysaml2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3759-1 [email protected] https://www.debian.org/security/ Sebastien Delafond January 12, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 770-2] libphp-phpmailer regression update

Package : libphp-phpmailer Version : 5.1-1.2 CVE ID : CVE-2016-10033 Debian Bug : 849365 Dawid Golunski discovered that PHPMailer, a popular library to send email from PHP applications, allowed a remote attacker to execute code if they were able to provide a crafted Sender address. Note that for...

[SECURITY] [DLA 713-1] sniffit security update

Package : sniffit Version : 0.3.7.beta-16.1+deb7u1 CVE ID : CVE-2014-5439 Debian Bug : 845122 It was discovered that there was a buffer overflow in the packet sniffer and monitoring tool "sniffit" which allowed a specially-crafted configuration file to provide a root shell. For Debian 7 "Wheezy",...