[SECURITY] [DSA 844-1] New mod-auth-shadow packages fix authentication bypass

-------------------------------------------------------------------------- Debian Security Advisory DSA 844-1 [email protected] http://www.debian.org/security/ Martin Schulze October 5th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 671-1] New xemacs21 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 671-1 [email protected] http://www.debian.org/security/ Martin Schulze February 8th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 616-1] New telnetd-ssl packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 616-1 [email protected] http://www.debian.org/security/ Martin Schulze December 23rd, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 595-1] New bnc packages arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 595-1 [email protected] http://www.debian.org/security/ Martin Schulze November 24th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 557-1] New rp-pppoe packages fix potential root compromise

-------------------------------------------------------------------------- Debian Security Advisory DSA 557-1 [email protected] http://www.debian.org/security/ Martin Schulze October 4th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 429-1] New gnupg packages fix cryptographic weakness in ElGamal signing keys

-------------------------------------------------------------------------- Debian Security Advisory DSA 429-1 [email protected] http://www.debian.org/security/ Matt Zimmerman January 26th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 394-1] New openssl095 packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 394-1 [email protected] http://www.debian.org/security/ Martin Schulze October 11th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 277-1] New apcupsd packages fix remote root exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 277-1 [email protected] http://www.debian.org/security/ Martin Schulze April 3rd, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA 188-1] New Apache-SSL packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 188-1 [email protected] http://www.debian.org/security/ Martin Schulze November 5th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DLA 4498-1] linux security update

Debian LTS Advisory DLA-4498-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings March 13, 2026 https://wiki.debian.org/LTS Package : linux Version : 5.10.251-1 CVE ID : CVE-2022-50516 CVE-2025-38201 CVE-2025-71222 CVE-2025-71224 CVE-2025-71232 CVE-2025-71235...

[SECURITY] [DLA 4175-1] mongo-c-driver security update

Debian LTS Advisory DLA-4175-1 [email protected] https://www.debian.org/lts/security/ Roberto C. Sánchez May 20, 2025 https://wiki.debian.org/LTS Package : mongo-c-driver Version : 1.17.6-1+deb11u1 CVE ID : CVE-2021-32050 CVE-2023-0437 CVE-2024-6381 CVE-2024-6383 CVE-2025-0755 Multiple...

[SECURITY] [DLA 3762-1] unadf security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3762-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk March 15, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3617-2] tomcat9 regression update

Debian LTS Advisory DLA-3617-2 [email protected] https://www.debian.org/lts/security/ Markus Koschany October 17, 2023 https://wiki.debian.org/LTS Package : tomcat9 Version : 9.0.31-1deb10u10 CVE ID : CVE-2023-44487 A regression was discovered in the Http2UpgradeHandler class of Tomcat ...

[SECURITY] [DLA 3604-1] qemu security update

Debian LTS Advisory DLA-3604-1 [email protected] https://www.debian.org/lts/security/ Sean Whitton October 05, 2023 https://wiki.debian.org/LTS Package : qemu Version : 1:3.1+dfsg-8+deb10u11 CVE ID : CVE-2020-24165 CVE-2023-0330 CVE-2023-3180 Debian Bug : 1029155 Multiple issues were...

[SECURITY] [DSA 5462-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5462-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 30, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3483-1] nsis security update

Debian LTS Advisory DLA-3483-1 [email protected] https://www.debian.org/lts/security/ Sean Whitton July 07, 2023 https://wiki.debian.org/LTS Package : nsis Version : 3.04-1+deb9u1 CVE ID : CVE-2023-37378 It was discovered that the Nullsoft Scriptable Install System NSIS before version...

[SECURITY] [DLA 3237-1] node-tar security update

Debian LTS Advisory DLA-3237-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin December 12, 2022 https://wiki.debian.org/LTS Package : node-tar Version : 4.4.6+ds1-3+deb10u2 CVE ID : CVE-2021-37701 CVE-2021-37712 Debian Bug : 993981 Cache poisoning vulnerabilities...

[SECURITY] [DLA 3174-1] pysha3 security update

Debian LTS Advisory DLA-3174-1 [email protected] https://www.debian.org/lts/security/ Stefano Rivera October 31, 2022 https://wiki.debian.org/LTS Package : pysha3 Version : 1.0.2-2+deb10u1 CVE ID : CVE-2022-37454 Debian Bug : 1023030 Nicky Mouha discovered a buffer overflow in sha3, a...

[SECURITY] [DSA 5267-1] pysha3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5267-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 30, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5160-1] ntfs-3g security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5160-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 10, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3005-1] lrzip security update

Debian LTS Advisory DLA-3005-1 [email protected] https://www.debian.org/lts/security/ Stefano Rivera May 13, 2022 https://wiki.debian.org/LTS Package : lrzip Version : 0.631-1+deb9u3 CVE ID : CVE-2022-28044 lrzip, a compression program, was found to have a heap memory corruption bug. Fo...

[SECURITY] [DLA 2988-1] tinyxml security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2988-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz May 01, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5075-1] minetest security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5075-1 [email protected] https://www.debian.org/security/ Markus Koschany February 14, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5004-1] libxstream-java security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5004-1 [email protected] https://www.debian.org/security/ Markus Koschany November 10, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2740-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2740-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 12, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4943-1] lemonldap-ng security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4943-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 23, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2613-1] underscore security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2613-1 [email protected] https://www.debian.org/lts/security/ Yadd March 31, 2021 https://wiki.debian.org/LTS - -------------------------------------------------------------------------...

[SECURITY] [DLA 2521-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2521-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort January 08, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2502-1] postsrsd security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2502-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk December 20, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2449-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2449-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort November 13, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4783-1] sddm security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4783-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 05, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4774-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4774-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 19, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2365-1] netty-3.9 security update

Debian LTS Advisory DLA-2365-1 [email protected] https://www.debian.org/lts/security/ Roberto C. Sánchez September 04, 2020 https://wiki.debian.org/LTS Package : netty-3.9 Version : 3.9.9.Final-1+deb9u1 CVE ID : CVE-2019-16869 CVE-2019-20444 CVE-2019-20445 Debian Bug : 941266 950966...

[SECURITY] [DLA 2308-1] libopenmpt security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2308-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta August 02, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2285-1] librsvg security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2285-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort July 22, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2248-1] intel-microcode security update

Package : intel-microcode Version : 3.20200609.2deb8u1 CVE ID : CVE-2020-0543 CVE-2020-0548 CVE-2020-0549 The following CVEs were reported against src:intel-microcode. CVE-2020-0543 A new domain bypass transient execution attack known as Special Register Buffer Data Sampling SRBDS has been found...

[SECURITY] [DLA 2177-1] git security update

Package : git Version : 1:2.1.4-2.1+deb8u9 CVE ID : CVE-2020-5260 Felix Wilhelm of Google Project Zero discovered a flaw in git, a fast, scalable, distributed revision control system. With a crafted URL that contains a newline, the credential helper machinery can be fooled to return credential...

[SECURITY] [DSA 4657-1] git security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4657-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 14, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1759-1] clamav security update

Package : clamav Version : 0.100.3+dfsg-0+deb8u1 CVE ID : CVE-2019-1787 CVE-2019-1788 CVE-2019-1789 Debian Bug : Out-of-bounds read and write conditions have been fixed in clamav. CVE-2019-1787 An out-of-bounds heap read condition may occur when scanning PDF documents. The defect is a failure to...

[SECURITY] [DLA 1642-1] postgresql-9.4 new minor release

Package : postgresql-9.4 Version : 9.4.20-0+deb8u1 The PostgreSQL project has release a new minor release of the 9.4 branch. For Debian 8 "Jessie", this has been uploaded as version 9.4.20-0+deb8u1. We recommend that you upgrade your postgresql-9.4 packages. Further information about Debian LTS...

[SECURITY] [DLA 1446-1] intel-microcode security update

Package : intel-microcode Version : 3.20180703.2deb8u1 CVE ID : CVE-2018-3639 CVE-2018-3640 Security researchers identified two software analysis methods that, if used for malicious purposes, have the potential to improperly gather sensitive data from multiple types of computing devices with...

[SECURITY] [DSA 4211-1] xdg-utils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4211-1 [email protected] https://www.debian.org/security/ Luciano Bello May 25, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1367-1] slurm-llnl security update

Package : slurm-llnl Version : 2.3.4-2+deb7u2 CVE ID : CVE-2018-7033 CVE-2018-7033 An issue that could be used for SQL Injection attacks against SlurmDBD has been fixed. For Debian 7 "Wheezy", these problems have been fixed in version 2.3.4-2+deb7u2. We recommend that you upgrade your slurm-llnl...

[SECURITY] [DSA 4158-1] openssl1.0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4158-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 29, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1206-1] tiff security update

Package : tiff Version : 4.0.2-6+deb7u17 CVE ID : CVE-2017-9935 Debian Bug : 866109 In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2pwritepdf function in tools/tiff2pdf.c. This heap overflow could lead to different damages. For example, a crafted TIFF document can lead to an...

[SECURITY] [DSA 4039-1] opensaml2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4039-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 16, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4024-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4024-1 [email protected] https://www.debian.org/security/ Michael Gilbert November 08, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1109-1] libraw security update

Package : libraw Version : 0.14.6-2+deb7u3 CVE ID : CVE-2017-14608 CVE-2017-14608 An out of bounds read flaw related to kodak65000loadraw has been reported in dcraw/dcraw.c and internal/dcrawcommon.cpp. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause...

[SECURITY] [DSA 3967-1] mbedtls security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3967-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 08, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3944-1] mariadb-10.0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3944-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 17, 2017 https://www.debian.org/security/faq -...