[SECURITY] [DLA 4126-2] jinja2 regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4126-2 [email protected] https://www.debian.org/lts/security/ Lucas Kanashiro April 30, 2025 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 4143-1] glibc security update

Debian LTS Advisory DLA-4143-1 [email protected] https://www.debian.org/lts/security/ Sean Whitton April 30, 2025 https://wiki.debian.org/LTS Package : glibc Version : 2.31-13+deb11u12 CVE ID : CVE-2025-0395 A flaw was discovered in the implementation of the assert function in the GNU C...

[SECURITY] [DLA 4142-1] libraw security update

Debian LTS Advisory DLA-4142-1 [email protected] https://www.debian.org/lts/security/ Andreas Henriksson April 29, 2025 https://wiki.debian.org/LTS Package : libraw Version : 0.20.2-1+deb11u2 CVE ID : CVE-2025-43961 CVE-2025-43962 CVE-2025-43963 CVE-2025-43964 Debian Bug : 1103781 11037...

[SECURITY] [DLA 3976-1] tgt security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3976-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz November 30, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3716-1] ruby-httparty security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3716-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb January 23, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3657-1] activemq security update

Debian LTS Advisory DLA-3657-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany November 20, 2023 https://wiki.debian.org/LTS Package : activemq Version : 5.15.16-0+deb10u1 CVE ID : CVE-2020-13920 CVE-2021-26117 CVE-2023-46604 Debian Bug : 1054909 982590 Several...

[SECURITY] [DLA 3475-1] trafficserver security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3475-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk June 30, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5438-1] asterisk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5438-1 [email protected] https://www.debian.org/security/ Markus Koschany June 22, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3426-2] netatalk regression update

Debian LTS Advisory DLA-3426-2 [email protected] https://www.debian.org/lts/security/ Markus Koschany June 01, 2023 https://wiki.debian.org/LTS Package : netatalk Version : 3.1.12ds-3+deb10u2 CVE ID : CVE-2022-23121 Debian Bug : 1036740 The security update of netatalk, the Apple Filing...

[SECURITY] [DLA 3383-1] grunt security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3383-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb April 05, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3325-1] openssl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3325-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort February 20, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3273-1] libitext5-java security update

Debian LTS Advisory DLA-3273-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany January 18, 2023 https://wiki.debian.org/LTS Package : libitext5-java Version : 5.5.13-1+deb10u1 CVE ID : CVE-2021-43113 Debian Bug : 1014597 It was discovered that the CompareTool of...

[SECURITY] [DLA 3246-1] node-hawk security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3246-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb December 23, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3230-1] jqueryui security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3230-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta December 07, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5232-1] tinygltf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5232-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 21, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3070-1] gnutls28 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3070-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 11, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5185-1] mat2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5185-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 15, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3057-1] request-tracker4 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3057-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb June 23, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3029-1] cups security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3029-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz May 27, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5121-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5121-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 16, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5076-1] h2database security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5076-1 [email protected] https://www.debian.org/security/ Markus Koschany February 15, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5036-1] sphinxsearch security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5036-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 06, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2864-1] ruby-haml security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2864-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta December 29, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2722-1] libsndfile security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2722-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz July 30, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4918-1] ruby-rack-cors security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4918-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 18, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4914-1] graphviz security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4914-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 12, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4892-1] python-bleach security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4892-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 18, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4871-1] tor security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4871-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 16, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4868-1] flatpak security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4868-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 12, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2560-1] qemu security update

Debian LTS Advisory DLA-2560-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler February 18, 2021 https://wiki.debian.org/LTS Package : qemu Version : 1:2.8+dfsg-6+deb9u13 CVE ID : CVE-2020-15469 CVE-2020-15859 CVE-2020-25084 CVE-2020-28916 CVE-2020-29130...

[SECURITY] [DSA 4845-1] openldap security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4845-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 03, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2525-1] wavpack security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2525-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta January 15, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2524-1] spice-vdagent security update

Debian LTS Advisory DLA-2524-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA January 13, 2021 https://wiki.debian.org/LTS Package : spice-vdagent Version : 0.17.0-1+deb9u1 CVE ID : CVE-2017-15108 CVE-2020-25650 CVE-2020-25651 CVE-2020-25652 CVE-2020-25653 Debian Bug...

[SECURITY] [DLA 2519-1] pacemaker security update

Debian LTS Advisory DLA-2519-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany January 06, 2021 https://wiki.debian.org/LTS Package : pacemaker Version : 1.1.24-0+deb9u1 CVE ID : CVE-2018-16877 CVE-2018-16878 CVE-2020-25654 Several security vulnerabilities were...

[SECURITY] [DSA 4821-1] roundcube security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4821-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 28, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4815-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4815-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 17, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2453-1] restic security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2453-1 [email protected] https://www.debian.org/lts/security/ Brian May November 17, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4776-1] mariadb-10.3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4776-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 20, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2197-1] miniupnpc security update

Package : miniupnpc Version : 1.9.20140610-2+deb8u2 CVE ID : CVE-2017-8798 It was discovered that there was a integer signedness error in the miniupnpc UPnP client that could allow remote attackers to cause a denial of service attack. For Debian 8 "Jessie", this problem has been fixed in version...

[SECURITY] [DSA 4668-1] openjdk-8 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4668-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 28, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2111-1] jackson-databind security update

Package : jackson-databind Version : 2.4.2-2+deb8u11 CVE ID : CVE-2019-20330 CVE-2020-8840 It was found that jackson-databind, a Java library used to parse JSON and other data formats, could deserialize data without proper validation, allowing a maliciously client to perform remote code execution...

[SECURITY] [DLA 2036-1] thunderbird security update

Package : thunderbird Version : 1:68.3.0-2deb8u1 CVE ID : CVE-2019-17005 CVE-2019-17008 CVE-2019-17010 CVE-2019-17011 CVE-2019-17012 Multiple security issues have been found in Thunderbird which could potentially result in the execution of arbitrary code. For Debian 8 "Jessie", these problems hav...

[SECURITY] [DLA 1932-1] openssl security update

Package : openssl Version : 1.0.1t-1+deb8u12 CVE ID : CVE-2019-1547 CVE-2019-1563 Two security vulnerabilities were found in OpenSSL, the Secure Sockets Layer toolkit. CVE-2019-1547 Normally in OpenSSL EC groups always have a co-factor present and this is used in side channel resistant code paths...

[SECURITY] [DLA 1903-1] subversion security update

Package : subversion Version : 1.8.10-6+deb8u7 CVE ID : CVE-2018-11782 CVE-2019-0203 Several vulnerabilities were discovered in Subversion, a version control system. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2018-11782 Ace Olszowka reported that the...

[SECURITY] [DLA-1474-1] openssh security update

Package : openssh Version : 1:6.7p1-5+deb8u5 CVE ID : CVE-2018-15473 Debian Bug : 906236 It was discovered that there was a user enumeration vulnerability in OpenSSH. A remote attacker couldtest whether a certain user exists on a target server. For Debian 8 "Jessie", this issue has been fixed in...

[SECURITY] [DLA 1440-1] libarchive-zip-perl security update

Package : libarchive-zip-perl Version : 1.39-1+deb8u1 CVE ID : CVE-2018-10860 Debian Bug : 902882 The libarchive-zip-perl package is vulnerable to a directory traversal attack in Archive::Zip. It was found that the Archive::Zip module did not properly sanitize paths while extracting zip files. An...

[SECURITY] [DLA 1426-1] cups security update

Package : cups Version : 1.7.5-11+deb8u4 CVE ID : CVE-2018-4180 CVE-2018-4181 CVE-2018-6553 Several vulnerabilities were discovered in CUPS, the Common UNIX Printing System. These issues have been identified with the following CVE ids: CVE-2018-4180 Dan Bastone of Gotham Digital Science discovere...

[SECURITY] [DLA 1391-1] tiff security update

Package : tiff Version : 4.0.2-6+deb7u21 CVE ID : CVE-2017-11613 CVE-2018-5784 Debian Bug : 869823 890441 Multiple vulnerabilities have been discovered in the libtiff library and the included tools, which may result in denial of service: CVE-2017-11613 Ddenial of service vulnerability in the...

[SECURITY] [DLA 1328-1] xerces-c security update

Package : xerces-c Version : 3.1.1-3+deb7u5 CVE ID : CVE-2017-12627 Debian Bug : 894050 Alberto Garcia, Francisco Oca and Suleman Ali of Offensive Research discovered that the Xerces-C XML parser mishandles certain kinds of external DTD references, resulting in dereference of a NULL pointer while...

[SECURITY] [DLA 1305-1] ming security update

Package : ming Version : 0.4.4-1.1+deb7u7 CVE ID : CVE-2018-5251 CVE-2018-5294 CVE-2018-6315 CVE-2018-6359 Multiple vulnerabilities have been discovered in Ming: CVE-2018-5251 Integer signedness error vulnerability left shift of a negative value in the readSBits function util/read.c. Remote...