[SECURITY] [DSA 4660-1] awl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4660-1 [email protected] https://www.debian.org/security/ Sebastien Delafond April 21, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4656-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4656-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 13, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2042-1] python-django security update

Package : python-django Version : 1.7.11-1+deb8u8 CVE ID : CVE-2019-19844 Debian Bug : 946937 It was discovered that there was a potential account hijack vulnerabilility in Django, the Python-based web development framework. Djangos password-reset form used a case-insensitive query to retrieve...

[SECURITY] [DSA 4564-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4564-1 [email protected] https://www.debian.org/security/ Ben Hutchings November 12, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4509-3] apache2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4509-3 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 15, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1772-1] libvirt security update

Package : libvirt Version : 1.2.9-9+deb8u6 CVE ID : CVE-2016-10746 libvirt-domain.c in libvirt supports virDomainGetTime API calls by guest agents with an RO connection, even though an RW connection was supposed to be required. This could lead to could lead to potentially disclosing unintended...

[SECURITY] [DSA 4344-1] roundcube security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4344-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 24, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4295-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4295-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 16, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4280-1] openssh security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4280-1 [email protected] https://www.debian.org/security/ Sebastien Delafond August 22, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1395-1] php-horde-image security update

Package : php-horde-image Version : 2.1.0-4+deb8u1 CVE IDs : CVE-2017-9774 CVE-2017-14650 Debian Bugs : 865505 876400 It was discovered that there were two remote code execution vulnerabilities in php-horde-image, the image processing library for the Horde https://www.horde.org/ groupware tool:...

[SECURITY] [DSA 4164-1] apache2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4164-1 [email protected] https://www.debian.org/security/ Stefan Fritsch April 03, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1316-1] freeplane security update

Package : freeplane Version : 1.1.3-2+deb7u1 CVE ID : CVE-2018-1000069 Debian Bug : 893663 Wojciech Reguła discovered that Freeplane, a program for working with mind maps, was affected by a XML External Entity XXE vulnerability in its mindmap loader that could compromise a users machine by openin...

[SECURITY] [DLA 1247-1] rsync security update

Package : rsync Version : 3.0.9-4+deb7u2 CVE ID : CVE-2018-5764 Debian Bug : 887588 It was discovered that there was an injection vulnerability in the rsync file-copying tool. For Debian 7 "Wheezy", this issue has been fixed in rsync version 3.0.9-4+deb7u2. We recommend that you upgrade your rsyn...

[SECURITY] [DLA 1150-1] wpa security update

Package : wpa Version : 1.0-3+deb7u5 CVE ID : CVE-2017-13077 CVE-2017-13078 CVE-2017-13079 CVE-2017-13080 CVE-2017-13081 CVE-2017-13082 CVE-2017-13086 CVE-2017-13087 CVE-2017-13088 A vulnerability was found in how WPA code can be triggered to reconfigure WPA/WPA2/RSN keys TK, GTK, or IGTK by...

[SECURITY] [DLA 1123-1] golang security update

Package : golang Version : 2:1.0.2-1.1+deb7u1 CVE ID : CVE-2017-1000098 It was discovered that there was an issue in the Go programming language library where an attacker could generate a MIME request such that the server ran out of file descriptors. For Debian 7 "Wheezy", this issue has been fix...

[SECURITY] [DSA 3940-1] iortcw security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3940-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 13, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3874-1] ettercap security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3874-1 [email protected] https://www.debian.org/security/ Sebastien Delafond June 09, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3870-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3870-1 [email protected] https://www.debian.org/security/ Sebastien Delafond June 01, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 815-1] ntfs-3g security update

Package : ntfs-3g Version : 1:2012.1.15AR.5-2.1+deb7u3 CVE ID : CVE-2017-0358 Jann Horn of Google Project Zero discovered that NTFS-3G, a read-write NTFS driver for FUSE, does not scrub the environment before executing modprobe with elevated privileges. A local user can take advantage of this fla...

[SECURITY] [DLA 781-1] asterisk security update

Package : asterisk Version : 1:1.8.13.1dfsg1-3+deb7u5 CVE ID : CVE-2014-2287 CVE-2016-7551 Debian Bug : 838832 741313 Two security vulnerabilities were discovered in Asterisk, an Open Source PBX and telephony toolkit. CVE-2014-2287 channels/chansip.c in Asterisk when chansip has a certain...

[SECURITY] [DSA 3752-1] pcsc-lite security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3752-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 04, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 770-2] libphp-phpmailer regression update

Package : libphp-phpmailer Version : 5.1-1.2 CVE ID : CVE-2016-10033 Debian Bug : 849365 Dawid Golunski discovered that PHPMailer, a popular library to send email from PHP applications, allowed a remote attacker to execute code if they were able to provide a crafted Sender address. Note that for...

[SECURITY] [DLA 766-1] libcrypto++ security update

Package : libcrypto++ Version : 5.6.1-6+deb7u3 CVE ID : CVE-2016-9939 Debian Bug : 848009 Gergely Gábor Nagy from Tresorit discovered that libcrypto++, a C++ cryptographic library, contained a bug in several ASN.1 parsing routines. This would allow an attacker to remotely cause a denial of servic...

[SECURITY] [DSA 3742-1] flightgear security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3742-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 20, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3732-1] php5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3732-1 [email protected] https://www.debian.org/security/ Sebastien Delafond December 13, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3729-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3729-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 07, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 733-1] openafs security update

Package : openafs Version : 1.6.1-3+deb7u7 CVE ID : CVE-2016-9772 It was discovered that there was an information leak vulnerability in openafs, a distributed filesystem. Due to incomplete initialization or clearing of reused memory, OpenAFS directory objects are likely to contain dead directory...

[SECURITY] [DLA 713-1] sniffit security update

Package : sniffit Version : 0.3.7.beta-16.1+deb7u1 CVE ID : CVE-2014-5439 Debian Bug : 845122 It was discovered that there was a buffer overflow in the packet sniffer and monitoring tool "sniffit" which allowed a specially-crafted configuration file to provide a root shell. For Debian 7 "Wheezy",...

[SECURITY] [DLA 643-1] chicken security update

Package : chicken Version : 4.7.0-1+deb7u1 CVE ID : CVE-2016-6830 CVE-2016-6831 Multiple vulnerabilities have been found in the CHICKEN Scheme compiler: CVE-2016-6830 Buffer overrun in CHICKEN Schemes "process-execute" and "process-spawn" procedures from the posix unit CVE-2016-6831 Memory leak i...

[SECURITY] [DSA 3655-1] mupdf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3655-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 26, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3653-1] flex security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3653-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 25, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 540-1] qemu security update

Package : qemu Version : 1.1.2+dfsg-6a+deb7u13 CVE ID : CVE-2016-3710 CVE-2016-3712 Debian Bug : 823830 Several vulnerabilities were discovered in qemu, a fast processor emulator. CVE-2016-3710 Wei Xiao and Qinghao Tang of 360.cn Inc discovered an out-of-bounds read and write flaw in the QEMU VGA...

[SECURITY] [DSA 3595-1] mariadb-10.0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3595-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 05, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 501-1] gdk-pixbuf security update

Package : gdk-pixbuf Version : 2.26.1-1+deb7u5 CVE ID : CVE-2015-7552 It was discovered that the original fix for CVE-2015-7552 DLA-450-1 was incomplete. A heap-based buffer overflow in gdk-pixbuf, a library for image loading and saving facilities, fast scaling and compositing of pixbufs, allows...

[SECURITY] [DSA 3579-1] xerces-c security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3579-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 16, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3500-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3500-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini March 01, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3447-1] tomcat7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3447-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 17, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3444-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3444-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 13, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3438-1] xscreensaver security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3438-1 [email protected] https://www.debian.org/security/ Michael Gilbert January 09, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3382-1] phpmyadmin security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3382-1 [email protected] https://www.debian.org/security/ Thijs Kinkhorst October 28, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3363-1] owncloud-client security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3363-1 [email protected] https://www.debian.org/security/ Luciano Bello September 20, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3321-2] opensaml2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3321-2 [email protected] https://www.debian.org/security/ Alessandro Ghedini August 08, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3263-1] proftpd-dfsg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3263-1 [email protected] http://www.debian.org/security/ Sebastien Delafond May 19, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3253-1] pound security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3253-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 07, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2997-1] reportbug security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2997-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 05, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2950-2] openssl update

------------------------------------------------------------------------- Debian Security Advisory DSA-2950-2 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 16, 2014 http://www.debian.org/security/faq - -...

[SECURITY] [DSA 2867-1] otrs2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2867-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 23, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2818-1] mysql-5.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2818-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 16, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2755-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2755-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso September 11, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2741-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2741-1 [email protected] http://www.debian.org/security/ Michael Gilbert August 25, 2013 http://www.debian.org/security/faq -...