[SECURITY] [DLA 3396-1] redis security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3396-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb April 21, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3383-1] grunt security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3383-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb April 05, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5378-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5378-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 25, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3350-1] node-css-what security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3350-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucaries March 03, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3325-1] openssl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3325-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort February 20, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3273-1] libitext5-java security update

Debian LTS Advisory DLA-3273-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany January 18, 2023 https://wiki.debian.org/LTS Package : libitext5-java Version : 5.5.13-1+deb10u1 CVE ID : CVE-2021-43113 Debian Bug : 1014597 It was discovered that the CompareTool of...

[SECURITY] [DSA 5318-1] lava security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5318-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 13, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3230-1] jqueryui security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3230-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta December 07, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3229-1] node-log4js security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-3229-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta December 07, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5232-1] tinygltf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5232-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 21, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3070-1] gnutls28 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3070-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 11, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5185-1] mat2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5185-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 15, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5121-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5121-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 16, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2962-1] pjproject security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2962-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA March 28, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2923-1] h2database security update

Debian LTS Advisory DLA-2923-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany February 15, 2022 https://wiki.debian.org/LTS Package : h2database Version : 1.4.193-1+deb9u1 CVE ID : CVE-2021-42392 CVE-2022-23221 Debian Bug : 1003894 Security researchers of JFrog...

[SECURITY] [DLA 2919-1] python2.7 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2919-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky February 12, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5058-1] openjdk-17 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5058-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 24, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5057-1] openjdk-11 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5057-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 24, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2864-1] ruby-haml security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2864-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta December 29, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2722-1] libsndfile security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2722-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz July 30, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4918-1] ruby-rack-cors security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4918-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 18, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4868-1] flatpak security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4868-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 12, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2560-1] qemu security update

Debian LTS Advisory DLA-2560-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler February 18, 2021 https://wiki.debian.org/LTS Package : qemu Version : 1:2.8+dfsg-6+deb9u13 CVE ID : CVE-2020-15469 CVE-2020-15859 CVE-2020-25084 CVE-2020-28916 CVE-2020-29130...

[SECURITY] [DSA 4855-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4855-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 17, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2525-1] wavpack security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2525-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta January 15, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2508-1] roundcube security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2508-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta December 28, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2470-1] zsh security update

Debian LTS Advisory DLA-2470-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany November 30, 2020 https://wiki.debian.org/LTS Package : zsh Version : 5.3.1-4+deb9u4 CVE ID : CVE-2017-18206 CVE-2018-0502 CVE-2018-1071 CVE-2018-1083 CVE-2018-1100 CVE-2018-13259...

[SECURITY] [DLA 2453-1] restic security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2453-1 [email protected] https://www.debian.org/lts/security/ Brian May November 17, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4783-1] sddm security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4783-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 05, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2422-1] qtsvg-opensource-src security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2422-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk October 31, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2309-1] evolution-data-server security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2309-1 [email protected] https://www.debian.org/lts/security/ August 02, 2020 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package...

[SECURITY] [DSA 4733-1] qemu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4733-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 24, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2261-1] php5 security update

Package : php5 Version : 5.6.40+dfsg-0+deb8u12 CVE ID : CVE-2019-11048 It has been discovered, that a vulnerability in php5, a server-side, HTML-embedded scripting language, could lead to exhausted disk space on the server. When using overly long filenames or field names, a memory limit could be...

[SECURITY] [DLA 2136-1] libvpx security update

Package : libvpx Version : 1.3.0-3+deb8u3 CVE ID : CVE-2020-0034 It was discovered that there was an out-of-bounds buffer read vulnerability in libvpx, a library implementing the VP8 & VP9 video codecs. For Debian 8 "Jessie", this issue has been fixed in libvpx version 1.3.0-3+deb8u3. We recommen...

[SECURITY] [DLA 2111-1] jackson-databind security update

Package : jackson-databind Version : 2.4.2-2+deb8u11 CVE ID : CVE-2019-20330 CVE-2020-8840 It was found that jackson-databind, a Java library used to parse JSON and other data formats, could deserialize data without proper validation, allowing a maliciously client to perform remote code execution...

[SECURITY] [DSA 4525-1] ibus security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4525-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 18, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4498-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4498-1 [email protected] https://www.debian.org/security/ Sebastien Delafond August 12, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1622-1] debian-security-support security update

Package : debian-security-support Version : 2018.11.25deb8u2 debian-security-support, the Debian security support coverage checker, has been updated in jessie. The jessie relevant changes are: Mark jasperreports as end-of-life in Jessie. Mark webkit2gtk as unsupported in all releases. Closes:...

[SECURITY] [DSA 4273-2] intel-microcode security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4273-2 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 16, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1391-1] tiff security update

Package : tiff Version : 4.0.2-6+deb7u21 CVE ID : CVE-2017-11613 CVE-2018-5784 Debian Bug : 869823 890441 Multiple vulnerabilities have been discovered in the libtiff library and the included tools, which may result in denial of service: CVE-2017-11613 Ddenial of service vulnerability in the...

[SECURITY] [DLA 1362-1] gcc-4.9-backport new package

Package : gcc-4.9-backport Version : 4.9.2-10+deb7u1 GCC 4.9 has been packaged as gcc-4.9-backport for Debian 7. This package will be needed by future updates to linux, and possibly other packages, to implement the "retpoline" mitigation for CVE-2017-5715 Spectre variant 2. Further information...

[SECURITY] [DLA 1328-1] xerces-c security update

Package : xerces-c Version : 3.1.1-3+deb7u5 CVE ID : CVE-2017-12627 Debian Bug : 894050 Alberto Garcia, Francisco Oca and Suleman Ali of Offensive Research discovered that the Xerces-C XML parser mishandles certain kinds of external DTD references, resulting in dereference of a NULL pointer while...

[SECURITY] [DLA 1325-1] drupal7 security update

Package : drupal7 Version : 7.14-2+deb7u18 CVE ID : CVE-2018-7600 Jasper Mattsson found a remote code execution vulnerability in the Drupal content management system. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being...

[SECURITY] [DSA 4152-1] mupdf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4152-1 [email protected] https://www.debian.org/security/ Luciano Bello March 27, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1311-1] adminer security update

Package : adminer Version : 3.3.3-1+deb7u1 CVE ID : CVE-2018-7667 Debian Bug : 893668 It was discovered that there was a server-side request forgery exploit in adminer, a web-based database administration tool. Adminer allowed unauthenticated connections to be initiated to arbitrary systems and...

[SECURITY] [DSA 4078-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4078-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez January 04, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4055-1] heimdal security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4055-1 [email protected] https://www.debian.org/security/ Sebastien Delafond December 07, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1179-1] shibboleth-sp2 security update

Package : shibboleth-sp2 Version : 2.4.3+dfsg-5+deb7u2 CVE ID : CVE-2017-16852 Debian Bug : 881857 Rod Widdowson of Steading System Software LLP discovered a coding error in the "Dynamic" metadata plugin of the Shibboleth Service Provider, causing the plugin to fail configuring itself with the...

[SECURITY] [DSA 4025-1] libpam4j security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4025-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 08, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1037-1] catdoc security update

Package : catdoc Version : 0.94.4-1.1+deb7u1 CVE ID : CVE-2017-11110 Debian Bug : 867717 A heap-based buffer underflow flaw was discovered in catdoc, a text extractor for MS-Office files, which may lead to denial of service application crash or have unspecified other impact, if a specially crafte...