[SECURITY] [DSA 5554-1] postgresql-13 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5554-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 13, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3571-1] openjdk-11 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3571-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort September 19, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5458-1] openjdk-17 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5458-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 25, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3466-1] avahi security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3466-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès June 21, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3461-1] libfastjson security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3461-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz June 20, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3450-1] ruby2.5 security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-3450-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta June 09, 2023 https://wiki.debian.org/LTS - -----------------------------------------------------------------------...

[SECURITY] [DSA 5408-1] libwebp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5408-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 21, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3409-1] libapache2-mod-auth-openidc security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3409-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk April 30, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5384-1] openimageio security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5384-1 [email protected] https://www.debian.org/security/ Markus Koschany April 10, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5377-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5377-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 23, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5375-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5375-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 17, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3363-1] pcre2 security update

Debian LTS Advisory DLA-3363-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin March 16, 2023 https://wiki.debian.org/LTS Package : pcre2 Version : 10.32-5+deb10u1 CVE ID : CVE-2019-20454 CVE-2022-1586 CVE-2022-1587 Debian Bug : 1011954 Multiple out-of-bounds read...

[SECURITY] [DSA 5366-1] multipath-tools security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5366-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 01, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5340-1] webkit2gtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5340-1 [email protected] https://www.debian.org/security/ Alberto Garcia February 06, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3299-1] node-qs security update

Debian LTS Advisory DLA-3299-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin January 30, 2023 https://wiki.debian.org/LTS Package : node-qs Version : 6.5.2-1+deb10u1 CVE ID : CVE-2022-24999 Nathanael Braun and Johan Brissaud discovered a prototype poisoning...

[SECURITY] [DLA 3257-1] emacs security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3257-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb December 31, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3228-1] node-json-schema security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-3228-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta December 07, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5286-1] krb5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5286-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 19, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3186-1] exiv2 security update

Debian LTS Advisory DLA-3186-1 [email protected] https://www.debian.org/lts/security/ Dominik George November 10, 2022 https://wiki.debian.org/LTS Package : exiv2 Version : 0.25-4+deb10u3 CVE ID : CVE-2017-11683 CVE-2020-19716 CVE-2022-3756 Debian Bug : 876893 Three vulnerabilities have...

[SECURITY] [DSA 5249-1] strongswan security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5249-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez October 06, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5245-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5245-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 02, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3124-1] webkit2gtk security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3124-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort September 28, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5240-1] webkit2gtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5240-1 [email protected] https://www.debian.org/security/ Alberto Garcia September 28, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3093-2] rails regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3093-2 [email protected] https://www.debian.org/lts/security/ Abhijith PA September 15, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3072-1] postgresql-11 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3072-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 11, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5198-1] jetty9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5198-1 [email protected] https://www.debian.org/security/ Markus Koschany August 02, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5175-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5175-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 04, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5171-1] squid security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5171-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 27, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5168-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5168-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 22, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3041-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3041-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort June 03, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3035-1] libdbi-perl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3035-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler May 30, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3033-1] smarty3 security update

Debian LTS Advisory DLA-3033-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany May 29, 2022 https://wiki.debian.org/LTS Package : smarty3 Version : 3.1.31+20161214.1.c7d42e4+selfpack1-2+deb9u6 CVE ID : CVE-2022-29221 Debian Bug : 1011758 Smarty3 is a template engi...

[SECURITY] [DSA 5145-1] lrzip security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5145-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 24, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2985-1] golang-1.7 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2985-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler April 28, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2984-1] condor security update

Debian LTS Advisory DLA-2984-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany April 19, 2022 https://wiki.debian.org/LTS Package : condor Version : 8.4.11dfsg.1-1+deb9u2 CVE ID : CVE-2022-26110 Debian Bug : 1008634 Jaime Frey discovered a flaw in HTCondor, a...

[SECURITY] [DSA 5086-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5086-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 23, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2817-1] postgresql-9.6 security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2817-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta November 12, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4944-1] krb5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4944-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 25, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2249-1] libexif security update

Package : libexif Version : 0.6.21-2+deb8u4 CVE ID : CVE-2020-0182 CVE-2020-0198 Debian Bug : 962345 The following CVEs were reported against src:libexif. CVE-2020-0182 In exifentrygetvalue of exif-entry.c, there is a possible out of bounds read due to a missing bounds check. This could lead to...

[SECURITY] [DLA 2214-1] libexif security update

Package : libexif Version : 0.6.21-2+deb8u2 CVE ID : CVE-2016-6328 CVE-2017-7544 CVE-2018-20030 CVE-2020-0093 CVE-2020-12767 Debian Bug : 960199 918730 876466 873022 Various vulnerabilities have been addressed in libexif, a library to parse EXIF metadata files. CVE-2016-6328 An integer overflow...

[SECURITY] [DLA 2181-1] shiro security update

Package : shiro Version : 1.2.3-1+deb8u1 CVE ID : CVE-2020-1957 Debian Bug : 955018 It was discovered that there was a path-traversal issue in Apache Shiro, a security framework for the Java programming language. A specially-crafted request could cause an authentication bypass. For Debian 8...

[SECURITY] [DSA 4615-1] spamassassin security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4615-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 01, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2083-1] hiredis security update

Package : hiredis Version : 0.11.0-4+deb8u1 CVE ID : CVE-2020-7105 Debian Bug : 949995 It was discovered that there were a large number of NULL pointer dereferences due to unchecked return values from malloc and friends in hiredis, a minimalistic C client library. For Debian 8 "Jessie", these iss...

[SECURITY] [DLA 2079-1] otrs2 security update

Package : otrs2 Version : 3.3.18-1+deb8u13 CVE ID : CVE-2020-1765 CVE-2020-1766 CVE-2020-1767 Several vulnerabilities have been discovered in the otrs2 package that may lead to unauthorized access, remote code execution and spoofing. CVE-2020-1765 An improper control of parameters allows the...

[SECURITY] [DSA 4598-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4598-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 07, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2030-1] jackson-databind security update

Package : jackson-databind Version : 2.4.2-2+deb8u10 CVE ID : CVE-2019-17267 CVE-2019-17531 More deserialization flaws were discovered in jackson-databind which could allow an unauthenticated user to perform remote code execution. The issue was resolved by extending the blacklist and blocking mor...

[SECURITY] [DLA 2006-1] libxdmcp security update

Package : libxdmcp Version : 1:1.1.1-1+deb8u1 CVE ID : CVE-2017-2625 It has been found, that libxdmcp, an X11 Display Manager Control Protocol library, uses weak entropy to generate keys. Using arc4randombuf from libbsd should avoid this flaw. For Debian 8 "Jessie", this problem has been fixed in...

[SECURITY] [DLA 1839-1] expat security update

Package : expat Version : 2.1.0-6+deb8u5 CVE ID : CVE-2018-20843 Debian Bug : 931031 It was discovered that Expat, an XML parsing C library, did not properly handle XML input including XML names that contain a large number of colons, potentially resulting in denial of service. For Debian 8...

[SECURITY] [DSA 4181-1] roundcube security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4181-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 28, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4139-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4139-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 15, 2018 https://www.debian.org/security/faq -...