[SECURITY] [DLA 3187-1] dropbear security update

From: Utkarsh Gupta [email protected] To: [email protected] Subject: SECURITY DLA 3187-1 dropbear security update - ----------------------------------------------------------------------- Debian LTS Advisory DLA-3187-1 [email protected]...

[SECURITY] [DLA 3098-1] libmodbus security update

Debian LTS Advisory DLA-3098-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany September 04, 2022 https://wiki.debian.org/LTS Package : libmodbus Version : 3.1.4-2+deb10u2 CVE ID : CVE-2022-0367 A heap-based buffer overflow flaw was found in libmodbus, a library f...

[SECURITY] [DLA 3080-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3080-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky August 24, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5181-1] request-tracker4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5181-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 13, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3017-1] openldap security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3017-1 [email protected] https://www.debian.org/lts/security/ Dominik George May 20, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA-3007-1] imagemagick security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3007-1 [email protected] https://www.debian.org/lts/security/ Andreas Rönnquist May 14, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5131-1] openjdk-11 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5131-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 05, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2984-1] condor security update

Debian LTS Advisory DLA-2984-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany April 19, 2022 https://wiki.debian.org/LTS Package : condor Version : 8.4.11dfsg.1-1+deb9u2 CVE ID : CVE-2022-26110 Debian Bug : 1008634 Jaime Frey discovered a flaw in HTCondor, a...

[SECURITY] [DLA 2911-1] apng2gif security update

Debian LTS Advisory DLA-2911-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany February 04, 2022 https://wiki.debian.org/LTS Package : apng2gif Version : 1.8-0.1deb9u1 CVE ID : CVE-2017-6960 CVE-2017-6961 CVE-2017-6962 Debian Bug : 854447 Several vulnerabilities...

[SECURITY] [DLA 2890-1] libspf2 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2890-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz January 21, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2847-1] mediawiki security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2847-1 [email protected] https://www.debian.org/lts/security/ Moritz Muehlenhoff December 15, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5000-1] openjdk-11 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5000-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 01, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4955-1] libspf2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4955-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 11, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4918-1] ruby-rack-cors security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4918-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 18, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4883-1] underscore security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4883-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 01, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4879-1] spamassassin security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4879-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 27, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2599-1] shibboleth-sp2 security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2599-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta March 19, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2546-1] intel-microcode security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2546-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta February 06, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2541-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2541-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort February 02, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4831-1] ruby-redcarpet security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4831-1 [email protected] https://www.debian.org/security/ Sebastien Delafond January 15, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2397-1] php7.0 security update

Debian LTS Advisory DLA-2397-1 [email protected] https://www.debian.org/lts/security/ Roberto C. Sánchez October 06, 2020 https://wiki.debian.org/LTS Package : php7.0 Version : 7.0.33-0+deb9u10 CVE ID : CVE-2020-7070 A vulnerability was discovered in PHP, a server-side, HTML-embedded...

[SECURITY] [DSA 4759-1] ark security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4759-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 04, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4748-1] ghostscript security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4748-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 25, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2341-1] inetutils security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2341-1 [email protected] https://www.debian.org/lts/security/ August 24, 2020 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package...

[SECURITY] [DSA 4720-1] roundcube security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4720-1 [email protected] https://www.debian.org/security/ Sebastien Delafond July 08, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4719-1] php7.3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4719-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 06, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2250-1] drupal7 security update

Package : drupal7 Version : 7.32-1+deb8u18 CVE ID : CVE-2020-13662 Drupal 7 has an Open Redirect vulnerability. For example, a user could be tricked into visiting a specially crafted link which would redirect them to an arbitrary external URL. For Debian 8 "Jessie", this problem has been fixed in...

[SECURITY] [DLA 2189-1] rzip security update

Package : rzip Version : 2.1-2+deb8u1 CVE ID : CVE-2017-8364 Agostino Sarubbo of Gentoo discovered a heap buffer overflow write in the rzip program a compression program for large files when uncompressing maliciously crafted files. For Debian 8 "Jessie", this problem has been fixed in version...

[SECURITY] [DSA 4656-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4656-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 13, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2107-1] spamassassin security update

Package : spamassassin Version : 3.4.2-0+deb8u3 CVE ID : CVE-2020-1930 CVE-2020-1931 Debian Bug : 950258 Two vulnerabilities were discovered in spamassassin, a Perl-based spam filter using text analysis. Malicious rule or configuration files, possibly downloaded from an updates server, could...

[SECURITY] [DLA 1842-1] python-django security update

Package : python-django Version : 1.7.11-1+deb8u6 CVE ID : CVE-2019-12308 Debian Bug : 931316 It was discovered that the Django Python web development framework did not correct identify HTTP connections when a reverse proxy connected via HTTPS. When deployed behind a reverse-proxy connecting to...

[SECURITY] [DSA 4469-1] libvirt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4469-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 22, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1527-1] ghostscript security update

Package : ghostscript Version : 9.06dfsg-2+deb8u9 CVE ID : CVE-2018-16543 CVE-2018-17183 Debian Bug : 908303 Tavis Ormandy discovered multiple vulnerabilities in Ghostscript, an interpreter for the PostScript language, which could result in denial of service, the creation of files or the executio...

[SECURITY] [DSA 4277-1] mutt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4277-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 17, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1440-1] libarchive-zip-perl security update

Package : libarchive-zip-perl Version : 1.39-1+deb8u1 CVE ID : CVE-2018-10860 Debian Bug : 902882 The libarchive-zip-perl package is vulnerable to a directory traversal attack in Archive::Zip. It was found that the Archive::Zip module did not properly sanitize paths while extracting zip files. An...

[SECURITY] [DSA 4190-1] jackson-databind security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4190-1 [email protected] https://www.debian.org/security/ Sebastien Delafond May 03, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4167-1] sharutils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4167-1 [email protected] https://www.debian.org/security/ Luciano Bello April 05, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4115-1] quagga security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4115-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 15, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4097-1] poppler security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4097-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 25, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1210-1] kildclient security update

Package : kildclient Version : 2.11.1-1+deb7u1 CVE ID : CVE-2017-17511 It was discovered that there was a command-injection vulnerability in kildclient, a "MUD" multiplayer real-time virtual world game. For Debian 7 "Wheezy", this issue has been fixed in kildclient version 2.11.1-1+deb7u1. Thanks...

[SECURITY] [DLA 1151-2] wordpress regression update

Package : wordpress Version : 3.6.1+dfsg-1deb7u19 Debian Bug : 881088 The fix for CVE-2017-14990 issued as DLA-1151-1 was incomplete and caused a regression. It was discovered that an additional database upgrade and further code changes would be necessary. At the moment these changes are deemed a...

[SECURITY] [DSA 4009-1] shadowsocks-libev security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4009-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 29, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1123-1] golang security update

Package : golang Version : 2:1.0.2-1.1+deb7u1 CVE ID : CVE-2017-1000098 It was discovered that there was an issue in the Go programming language library where an attacker could generate a MIME request such that the server ran out of file descriptors. For Debian 7 "Wheezy", this issue has been fix...

[SECURITY] [DLA 1036-1] gsoap security update

Package : gsoap Version : 2.8.7-2+deb7u1 CVE ID : CVE-2017-9765 A vulnerability was discovered in gsoap, a library for the development of SOAP web services and clients, that may be exposed with a large and specific XML message over 2 GB in size. After receiving this 2 GB message, a buffer overflo...

[SECURITY] [DSA 3886-2] linux regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3886-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 27, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3874-1] ettercap security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3874-1 [email protected] https://www.debian.org/security/ Sebastien Delafond June 09, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3870-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3870-1 [email protected] https://www.debian.org/security/ Sebastien Delafond June 01, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 949-1] miniupnpc security update

Package : miniupnpc Version : 1.5-2+deb7u2 CVE ID : CVE-2017-8798 Debian Bug : 862273 It was discovered that there was a integer signedness error in the miniupnpc UPnP client that could allow remote attackers to cause a denial of service attack. For Debian 7 "Wheezy", this issue has been fixed in...

[SECURITY] [DSA 3839-1] freetype security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3839-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 28, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3796-1] apache2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3796-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 26, 2017 https://www.debian.org/security/faq -...