[SECURITY] [DLA 4026-1] tiff security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4026-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk January 20, 2025 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3874-1] nsis security update

Debian LTS Advisory DLA-3874-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert September 05, 2024 https://wiki.debian.org/LTS Package : nsis Version : 3.06.1-1+deb11u1 CVE ID : CVE-2023-37378 Debian Bug : 1040880 CVE-2023-37378 Nullsoft Scriptable Install System NS...

[SECURITY] [DLA 3858-1] ruby2.7 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3858-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler September 02, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5617-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5617-1 [email protected] https://www.debian.org/security/ Andres Salomon February 08, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3663-1] strongswan security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3663-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb November 24, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3516-1] burp security update

Debian LTS Advisory DLA-3516-1 [email protected] https://www.debian.org/lts/security/ Sean Whitton August 05, 2023 https://wiki.debian.org/LTS Package : burp Version : 2.1.32-2+deb10u1 CVE ID : CVE-2017-16516 CVE-2022-24795 CVE-2023-33460 Debian Bug : 1040036 Multiple vulnerabilities ha...

[SECURITY] [DSA 5466-1] ntpsec security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5466-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 04, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3345-1] php7.3 security update

Debian LTS Advisory DLA-3345-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin February 26, 2023 https://wiki.debian.org/LTS Package : php7.3 Version : 7.3.31-1deb10u3 CVE ID : CVE-2022-31631 CVE-2023-0567 CVE-2023-0568 CVE-2023-0662 Debian Bug : 1031368 Multiple...

[SECURITY] [DSA 5283-1] jackson-databind security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5283-1 [email protected] https://www.debian.org/security/ Markus Koschany November 17, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3187-1] dropbear security update

From: Utkarsh Gupta [email protected] To: [email protected] Subject: SECURITY DLA 3187-1 dropbear security update - ----------------------------------------------------------------------- Debian LTS Advisory DLA-3187-1 [email protected]...

[SECURITY] [DLA 3140-1] libpgjava security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3140-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb October 07, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3128-1] node-thenify security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3128-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta October 01, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3080-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3080-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky August 24, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5217-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5217-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 24, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3030-1] zipios++ security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3030-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz May 27, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3017-1] openldap security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3017-1 [email protected] https://www.debian.org/lts/security/ Dominik George May 20, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5131-1] openjdk-11 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5131-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 05, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2984-1] condor security update

Debian LTS Advisory DLA-2984-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany April 19, 2022 https://wiki.debian.org/LTS Package : condor Version : 8.4.11dfsg.1-1+deb9u2 CVE ID : CVE-2022-26110 Debian Bug : 1008634 Jaime Frey discovered a flaw in HTCondor, a...

[SECURITY] [DSA 5065-1] ipython security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5065-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 31, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2890-1] libspf2 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2890-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz January 21, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2794-1] php7.0 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2794-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler October 27, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4955-1] libspf2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4955-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 11, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4883-1] underscore security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4883-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 01, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2599-1] shibboleth-sp2 security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2599-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta March 19, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4854-1] webkit2gtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4854-1 [email protected] https://www.debian.org/security/ Alberto Garcia February 17, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2551-1] slirp security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2551-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz February 09, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2541-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2541-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort February 02, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2526-1] ruby-redcarpet security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2526-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta January 15, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4819-1] kitty security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4819-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 26, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2499-1] sympa security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2499-1 [email protected] https://www.debian.org/lts/security/ December 17, 2020 https://wiki.debian.org/LTS - -------------------------------------------------------------------------...

[SECURITY] [DLA 2376-1] qtbase-opensource-src security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2376-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk September 21, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2341-1] inetutils security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2341-1 [email protected] https://www.debian.org/lts/security/ August 24, 2020 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package...

[SECURITY] [DSA 4734-1] openjdk-11 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4734-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 26, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2282-1] rails security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2282-1 [email protected] https://www.debian.org/lts/security/ July 20, 2020 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package :...

[SECURITY] [DLA 2250-1] drupal7 security update

Package : drupal7 Version : 7.32-1+deb8u18 CVE ID : CVE-2020-13662 Drupal 7 has an Open Redirect vulnerability. For example, a user could be tricked into visiting a specially crafted link which would redirect them to an arbitrary external URL. For Debian 8 "Jessie", this problem has been fixed in...

[SECURITY] [DSA 4597-1] netty security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4597-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 03, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2042-1] python-django security update

Package : python-django Version : 1.7.11-1+deb8u8 CVE ID : CVE-2019-19844 Debian Bug : 946937 It was discovered that there was a potential account hijack vulnerabilility in Django, the Python-based web development framework. Djangos password-reset form used a case-insensitive query to retrieve...

[SECURITY] [DLA 1842-1] python-django security update

Package : python-django Version : 1.7.11-1+deb8u6 CVE ID : CVE-2019-12308 Debian Bug : 931316 It was discovered that the Django Python web development framework did not correct identify HTTP connections when a reverse proxy connected via HTTPS. When deployed behind a reverse-proxy connecting to...

[SECURITY] [DLA 1772-1] libvirt security update

Package : libvirt Version : 1.2.9-9+deb8u6 CVE ID : CVE-2016-10746 libvirt-domain.c in libvirt supports virDomainGetTime API calls by guest agents with an RO connection, even though an RW connection was supposed to be required. This could lead to could lead to potentially disclosing unintended...

[SECURITY] [DLA 1711-1] systemd security update

Package : systemd Version : 215-17+deb8u11 CVE ID : CVE-2019-3815 Debian Bug : 924060 A memory leak was discovered in the backport of fixes for CVE-2018-16864 in systemd-journald. Function dispatchmessagereal in journald-server.c does not free allocated memory to store the CMDLINE= entry. A local...

[SECURITY] [DLA 1624-1] thunderbird security update

Package : thunderbird Version : 1:60.4.0-1deb8u1 CVE ID : not yet available Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code or denial of service. For Debian 8 "Jessie", this problem has been fixed in version 1:60.4.0-1deb8u1. We recommend...

[SECURITY] [DLA 1527-1] ghostscript security update

Package : ghostscript Version : 9.06dfsg-2+deb8u9 CVE ID : CVE-2018-16543 CVE-2018-17183 Debian Bug : 908303 Tavis Ormandy discovered multiple vulnerabilities in Ghostscript, an interpreter for the PostScript language, which could result in denial of service, the creation of files or the executio...

[SECURITY] [DSA 4277-1] mutt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4277-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 17, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4167-1] sharutils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4167-1 [email protected] https://www.debian.org/security/ Luciano Bello April 05, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4094-1] smarty3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4094-1 [email protected] https://www.debian.org/security/ January 22, 2018 https://www.debian.org/security/faq - -------------------------------------------------------------------------...

[SECURITY] [DSA 4058-1] optipng security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4058-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 08, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4002-1] mysql-5.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4002-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 19, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3951-1] smb4k security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3951-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 22, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1036-1] gsoap security update

Package : gsoap Version : 2.8.7-2+deb7u1 CVE ID : CVE-2017-9765 A vulnerability was discovered in gsoap, a library for the development of SOAP web services and clients, that may be exposed with a large and specific XML message over 2 GB in size. After receiving this 2 GB message, a buffer overflo...

[BSA-116] Security Update for openvpn

Bernhard Schmidt uploaded new packages for openvpn which fixed the following security problems: CVE-2017-7479 It was discovered that openvpn did not properly handle the rollover of packet identifiers. This would allow an authenticated remote attacker to cause a denial-of-service via application...