[SECURITY] [DLA 2841-1] runc security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2841-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb December 06, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2820-1] atftp security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2820-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz November 17, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5007-1] postgresql-13 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5007-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 11, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2811-1] sqlalchemy security update

Debian LTS Advisory DLA-2811-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany November 06, 2021 https://wiki.debian.org/LTS Package : sqlalchemy Version : 1.0.15+ds1-1+deb9u1 CVE ID : CVE-2019-7164 CVE-2019-7548 Debian Bug : 922669 Two SQL injection vulnerabiliti...

[SECURITY] [DLA 2805-1] libmspack security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2805-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk October 31, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4977-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4977-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 20, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4969-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4969-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 09, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4962-2] ledgersmb regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4962-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 31, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2739-1] libspf2 security update

Debian LTS Advisory DLA-2739-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany August 11, 2021 https://wiki.debian.org/LTS Package : libspf2 Version : 1.2.10-7+deb9u1 CVE ID : CVE-2021-20314 Philipp Jeitner and Haya Shulman discovered a stack-based buffer overflow...

[SECURITY] [DSA 4953-1] lynx security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4953-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 10, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2727-1] pyxdg security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2727-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb August 03, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2717-1] redis security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2717-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb July 22, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4892-1] python-bleach security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4892-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 18, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4864-1] python-aiohttp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4864-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 27, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2506-1] awstats security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2506-1 [email protected] https://www.debian.org/lts/security/ December 23, 2020 https://wiki.debian.org/LTS - -------------------------------------------------------------------------...

[SECURITY] [DLA 2499-1] sympa security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2499-1 [email protected] https://www.debian.org/lts/security/ December 17, 2020 https://wiki.debian.org/LTS - -------------------------------------------------------------------------...

[SECURITY] [DLA 2479-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2479-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort December 04, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4800-1] libproxy security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4800-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 28, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4783-1] sddm security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4783-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 05, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2404-1] eclipse-wtp security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2404-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany October 09, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4769-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4769-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 02, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2395-1] libvirt security update

Debian LTS Advisory DLA-2395-1 [email protected] https://www.debian.org/lts/security/ Roberto C. Sánchez October 02, 2020 https://wiki.debian.org/LTS Package : libvirt Version : 3.0.0-4+deb9u5 CVE ID : CVE-2020-25637 Debian Bug : 971555 A double free vulnerability was discovered in...

[SECURITY] [DLA 2338-1] proftpd-dfsg security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2338-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany August 22, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4746-1] net-snmp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4746-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 15, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2319-1] xrdp security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2319-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA August 09, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4710-1] trafficserver security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4710-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 27, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4635-1] proftpd-dfsg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4635-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 26, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4498-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4498-1 [email protected] https://www.debian.org/security/ Sebastien Delafond August 12, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4443-1] samba security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4443-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 14, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4389-1] libu2f-host security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4389-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 11, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4352-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4352-1 [email protected] https://www.debian.org/security/ Michael Gilbert December 07, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4332-1] ruby2.3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4332-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 03, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1437-1] slurm-llnl security update

Package : slurm-llnl Version : 14.03.9-5+deb8u3 CVE ID : CVE-2018-7033 CVE-2018-10995 CVE-2018-7033 Fix for issue in accountingstorage/mysql plugin by always escaping strings within the slurmdbd. CVE-2018-10995 Fix for mishandling of user names aka username fields and group ids aka gid fields. Fo...

[SECURITY] [DSA 4251-1] vlc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4251-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 18, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1418-1] bouncycastle security update

Package : bouncycastle Version : 1.49+dfsg-3+deb8u3 CVE ID : CVE-2016-1000338 CVE-2016-1000339 CVE-2016-1000341 CVE-2016-1000342 CVE-2016-1000343 CVE-2016-1000345 CVE-2016-1000346 Several security vulnerabilities were found in Bouncy Castle, a Java implementation of cryptographic algorithms...

[SECURITY] [DSA 4219-1] jruby security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4219-1 [email protected] https://www.debian.org/security/ Sebastien Delafond June 08, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1385-1] batik security update

Package : batik Version : 1.7+dfsg-3+deb7u3 CVE ID : CVE-2018-8013 Debian Bug : 899374 Man Yue Mo discovered a security vulnerability in Apache Batik, an SVG image library. A missing check for the class type before calling newInstance when deserializing a subclass of AbstractDocument could lead t...

[SECURITY] [DLA 1384-1] xdg-utils security update

Package : xdg-utils Version : 1.1.0rc1+git20111210-6+deb7u4 CVE ID : CVE-2017-18266 Debian Bug : 898317 It was found that the openenvvar function in xdg-utils does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers t...

[SECURITY] [DLA 1379-1] curl security update

Package : curl Version : 7.26.0-1+wheezy25+deb7u1 CVE ID : CVE-2018-1000301 Debian Bug : 898856 It was discovered that there was an issue in the curl a command-line tool for downloading eg. data over HTTP. curl could have be tricked into reading data beyond the end of a heap based buffer used to...

[SECURITY] [DLA 1365-1] drupal7 security update

Package : drupal7 Version : 7.14-2+deb7u19 CVE ID : CVE-2018-7602 Debian Bug : 895778 A remote code execution vulnerability has been found within multiple subsystems of Drupal. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site...

[SECURITY] [DSA 4180-1] drupal7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4180-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 25, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4180-1] drupal7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4180-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 25, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4178-1] libreoffice security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4178-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 20, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1353-1] wireshark security update

Package : wireshark Version : 1.12.1+g01b65bf-4+deb8u6deb7u10 CVE ID : CVE-2018-7322 CVE-2018-7323 CVE-2018-7324 CVE-2018-7332 CVE-2018-7334 CVE-2018-7335 CVE-2018-7336 CVE-2018-7337 CVE-2018-7417 CVE-2018-7418 CVE-2018-7419 CVE-2018-7420 It was discovered that wireshark, a network protocol...

[SECURITY] [DLA 1346-1] tiff security update

Package : tiff Version : 4.0.2-6+deb7u19 CVE ID : CVE-2018-7456 Debian Bug : 891288 A NULL Pointer Dereference was discovered in the TIFFPrintDirectory function tifprint.c when using the tiffinfo tool to print crafted TIFF information. This vulnerability could be leveraged by remote attackers to...

[SECURITY] [DSA 4165-1] ldap-account-manager security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4165-1 [email protected] https://www.debian.org/security/ Luciano Bello April 03, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1327-1] thunderbird security update

Package : thunderbird Version : 1:52.7.0-1deb7u1 CVE ID : CVE-2018-5125 CVE-2018-5127 CVE-2018-5129 CVE-2018-5144 CVE-2018-5145 CVE-2018-5146 Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code, denial of service or information disclosure. Fo...

[SECURITY] [DSA 4154-1] net-snmp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4154-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 28, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1312-1] libvorbisidec security update

Package : libvorbisidec Version : 1.0.2+svn18153-0.2+deb7u1 CVE ID : CVE-2018-5147 Huzaifa Sidhpurwala discovered that an out-of-bounds memory write in the codebook parsing code of the Libtremor multimedia library could result in the execution of arbitrary code if a malformed Vorbis file is opene...

[SECURITY] [DSA 4133-1] isc-dhcp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4133-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 07, 2018 https://www.debian.org/security/faq -...