[SECURITY] [DSA 5304-1] xorg-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5304-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 20, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3226-1] cgal security update

Debian LTS Advisory DLA-3226-1 [email protected] https://www.debian.org/lts/security/ Helmut Grohne December 06, 2022 https://wiki.debian.org/LTS Package : cgal Version : 4.13-1+deb10u1 CVE ID : CVE-2020-28601 CVE-2020-28602 CVE-2020-28603 CVE-2020-28604 CVE-2020-28605 CVE-2020-28606...

[SECURITY] [DSA 5291-1] mujs security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5291-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 28, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5282-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5282-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 16, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5274-1] wpewebkit security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5274-1 [email protected] https://www.debian.org/security/ Alberto Garcia November 08, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5272-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5272-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 06, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5256-1] bcel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5256-1 [email protected] https://www.debian.org/security/ Markus Koschany October 18, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3151-1] squid security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3151-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA October 13, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3150-1] rexical security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3150-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler October 12, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3119-1] expat security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3119-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz September 25, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3104-1] paramiko security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3104-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb September 12, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5181-1] request-tracker4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5181-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 13, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4752-1] bind9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4752-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 27, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2332-1] sane-backends security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2332-1 [email protected] https://www.debian.org/lts/security/ August 17, 2020 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package...

[SECURITY] [DLA 2265-1] mailman security update

Package : mailman Version : 1:2.1.18-2+deb8u7 CVE ID : CVE-2020-15011 Debian Bug : GNU Mailman allowed arbitrary content injection via the Cgi/private.py private archive login page. For Debian 8 "Jessie", this problem has been fixed in version 1:2.1.18-2+deb8u7. We recommend that you upgrade your...

[SECURITY] [DSA 4709-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4709-1 [email protected] https://www.debian.org/security/ Sebastien Delafond June 23, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2170-1] firefox-esr security update

Package : firefox-esr Version : 68.7.0esr-1deb8u1 CVE ID : CVE-2020-6819 CVE-2020-6820 CVE-2020-6821 CVE-2020-6822 CVE-2020-6825 Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code. For Debian 8 "Jessie",...

[SECURITY] [DSA 4652-1] gnutls28 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4652-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 04, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2163-1] tinyproxy security update

Package : tinyproxy Version : 1.8.3-3+deb8u1 CVE ID : CVE-2017-11747 Debian Bug : 870307 948283 A minor security issue and a severe packaging bug have been fixed in tinyproxy, a lightweight http proxy daemon. CVE-2017-11747 main.c in Tinyproxy created a /var/run/tinyproxy/tinyproxy.pid file after...

[SECURITY] [DSA 4636-1] python-bleach security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4636-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 28, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4498-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4498-1 [email protected] https://www.debian.org/security/ Sebastien Delafond August 12, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4389-1] libu2f-host security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4389-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 11, 2019 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1525-1] mosquitto security update

Package : mosquitto Version : 1.3.4-2+deb8u3 CVE ID : CVE-2017-7653 CVE-2017-7654 CVE-2017-9868 CVE-2017-7653 As invalid UTF-8 strings are not correctly checked, an attacker could cause a denial of service to other clients by disconnecting them from the broker with special crafted topics...

[SECURITY] [DSA 4296-1] mbedtls security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4296-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 16, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4270-1] gdm3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4270-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 13, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1455-1] mutt security update

Package : mutt Version : 1.5.23-3+deb8u1 CVE ID : CVE-2018-14349 CVE-2018-14350 CVE-2018-14351 CVE-2018-14352 CVE-2018-14353 CVE-2018-14354 CVE-2018-14355 CVE-2018-14356 CVE-2018-14357 CVE-2018-14358 CVE-2018-14359 CVE-2018-14360 CVE-2018-14361 CVE-2018-14362 CVE-2018-14363 Debian Bug : 904051...

[SECURITY] [DSA 4195-1] wget security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4195-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 08, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4185-1] openjdk-8 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4185-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 28, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1350-1] qemu-kvm security update

Package : qemu-kvm Version : 1.1.2+dfsg-6+deb7u25 CVE ID : CVE-2018-7550 Debian Bug : 892041 The loadmultiboot function in hw/i386/multiboot.c in Quick Emulator aka QEMU allows local guest OS users to execute arbitrary code on the QEMU host via a mhloadendaddr value greater than mhbssendaddr, whi...

[SECURITY] [DLA 1344-1] squirrelmail security update

Package : squirrelmail Version : 2:1.4.23svn20120406-2+deb7u2 CVE ID : CVE-2018-8741 Debian Bug : 893202 Florian Grunow and Birk Kauer of ERNW discovered a path traversal vulnerability in SquirrelMail, a webmail application, allowing an authenticated remote attacker to retrieve or delete arbitrar...

[SECURITY] [DSA 4165-1] ldap-account-manager security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4165-1 [email protected] https://www.debian.org/security/ Luciano Bello April 03, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4134-1] util-linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4134-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 10, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4106-1] libtasn1-6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4106-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 07, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1267-1] squid security update

Package : squid Version : 2.7.STABLE9-4.1+deb7u3 CVE ID : CVE-2018-1000027 Debian Bug : 888720 Squid, a high-performance proxy caching server for web clients, has been found vulnerable to denial of service attacks associated with ESI response processing and intermediate CA certificate downloading...

[SECURITY] [DLA 1266-1] squid3 security update

Package : squid3 Version : 3.1.20-2.2+deb7u8 CVE ID : CVE-2018-1000024 CVE-2018-1000027 Debian Bug : 888719 888720 Squid, a high-performance proxy caching server for web clients, has been found vulnerable to denial of service attacks associated with ESI response processing and intermediate CA...

[SECURITY] [DLA 1262-1] thunderbird security update

Package : thunderbird Version : 1:52.6.0-1deb7u1 CVE ID : CVE-2018-5089 CVE-2018-5095 CVE-2018-5096 CVE-2018-5097 CVE-2018-5098 CVE-2018-5099 CVE-2018-5102 CVE-2018-5103 CVE-2018-5104 CVE-2018-5117 Debian Bug : 885157 885158 887766 Multiple security issues have been found in the Mozilla Thunderbi...

[SECURITY] [DLA 1254-1] lucene-solr security update

Package : lucene-solr Version : 3.6.0+dfsg-1+deb7u3 CVE ID : CVE-2017-12629 Michael Stepankin and Olga Barinova discovered a remote code execution vulnerability in Apache Solr by exploiting XML External Entity processing XXE in conjunction with use of a Config API add-listener command to reach th...

[SECURITY] [DLA 1190-1] python2.6 security update

Package : python2.6 Version : 2.6.8-1.1+deb7u1 CVE ID : CVE-2017-1000158 A minor security vulnerability has been discovered in Python 2.7, an interactive high-level object-oriented language. CVE-2017-1000158 CPython the reference implementation of Python also commonly known as simply Python...

[SECURITY] [DSA 4034-1] varnish security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4034-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 15, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1141-1] mysql-5.5 security update

Package : mysql-5.5 Version : 5.5.58-0+deb7u1 CVE ID : CVE-2017-10268 CVE-2017-10378 CVE-2017-10379 CVE-2017-10384 Debian Bug : 878402 Several issues have been discovered in the MySQL database server. The vulnerabilities are addressed by upgrading MySQL to the new upstream version 5.5.58, which...

[SECURITY] [DLA 1113-1] ruby1.8 security update

Package : ruby1.8 Version : 1.8.7.358-7.1+deb7u4 CVE ID : CVE-2017-0898 CVE-2017-10784 Debian Bug : 875931 875936 Some vulnerabilities were found in the Ruby 1.8 package that affects the LTS distribution. CVE-2017-0898 Buffer underrun vulnerability in Kernel.sprintf CVE-2017-10784 Escape sequence...

[SECURITY] [DSA 3972-1] bluez security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3972-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 13, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3969-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3969-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 12, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1074-1] poppler security update

Package : poppler Version : 0.18.4-6+deb7u2 CVE ID : CVE-2013-4473 CVE-2013-4474 CVE-2017-9775 CVE-2017-9776 CVE-2017-9865 Several buffer and integer overflow issues were discovered in Poppler, a PDF library, that could lead to application crash or possibly other unspecified impact via maliciousl...

[SECURITY] [DLA 1068-1] git security update

Package : git Version : 1:1.7.10.4-1+wheezy5 CVE ID : CVE-2017-1000117 Joern Schneeweisz discovered that git, a distributed revision control system, did not correctly handle maliciously constructed ssh:// URLs. This allowed an attacker to run an arbitrary shell command, for instance via git...

[SECURITY] [DSA 3929-1] libsoup2.4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3929-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 10, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3912-1] heimdal security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3912-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 16, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1007-1] icedove/thunderbird security update

Package : icedove Version : 1:52.2.1-1deb7u1 CVE ID : CVE-2017-5470 CVE-2017-5472 CVE-2017-7749 CVE-2017-7750 CVE-2017-7751 CVE-2017-7752 CVE-2017-7754 CVE-2017-7756 CVE-2017-7757 CVE-2017-7758 CVE-2017-7764 CVE-2017-7771 CVE-2017-7772 CVE-2017-7773 CVE-2017-7774 CVE-2017-7775 CVE-2017-7776...

[SECURITY] [DLA 963-1] exiv2 security update

Package : exiv2 Version : 0.23-1+deb7u1 CVE ID : CVE-2017-9239 Debian Bug : 863410 It was discovered that the exiv2 library fails to parse some crafted tiff images, leading to denial of service via application crash. For Debian 7 "Wheezy", these problems have been fixed in version 0.23-1+deb7u1. ...

[SECURITY] [DLA 905-1] ghostscript security update

Package : ghostscript Version : 9.05dfsg-6.3+deb7u5 CVE ID : CVE-2016-10219 CVE-2016-10220 CVE-2017-5951 ghostscript is vulnerable to multiple issues that can lead to denial of service when processing untrusted content. CVE-2016-10219 Application crash with division by 0 in scan conversion code...