[SECURITY] [DSA 4293-1] discount security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4293-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini September 14, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1502-1] mgetty security update

Package : mgetty Version : 1.1.36-2.1+deb8u1 CVE ID : CVE-2018-16741 Two input sanitization failures have been found in the faxrunq and faxq binaries in mgetty. An attacker could leverage them to insert commands via shell metacharacters in jobs id and have them executed with the privilege of the...

[SECURITY] [DSA 4282-1] trafficserver security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4282-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 31, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1433-1] openjpeg2 security update

Package : openjpeg2 Version : 2.1.0-2+deb8u4 CVE ID : CVE-2015-1239 CVE-2016-5139 CVE-2015-1239 Fix for denial of service process crash via a crafted PDF. CVE-2016-5139 Fix for integer overflows, allowing a denial of service heap-based buffer overflow or possibly have unspecified other impact via...

[SECURITY] [DSA 4119-1] libav security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4119-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 19, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4107-1] django-anymail security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4107-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 07, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4055-1] heimdal security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4055-1 [email protected] https://www.debian.org/security/ Sebastien Delafond December 07, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4037-1] jackson-databind security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4037-1 [email protected] https://www.debian.org/security/ Sebastien Delafond November 16, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4024-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4024-1 [email protected] https://www.debian.org/security/ Michael Gilbert November 08, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1165-1] libpam4j security update

Package : libpam4j Version : 1.4-2+deb7u1 CVE ID : CVE-2017-12197 Debian Bug : 879001 It was discovered that libpam4j, a Java binding for libpam.so, does not call pamacctmgmt. As a consequence, the PAM account is not properly verified. Any user with a valid password but with deactivated or disabl...

[SECURITY] [DSA 4014-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4014-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 01, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3943-1] gajim security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3943-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 14, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3877-1] tor security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3877-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 10, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3842-1] tomcat7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3842-1 [email protected] https://www.debian.org/security/ Sebastien Delafond May 03, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 918-1] freetype security update

Package : freetype Version : 2.4.9-1.1+deb7u6 CVE ID : CVE-2017-8105 Debian Bug : 861220 860303 It was found that an out of bounds write caused by a heap-based buffer overflow could be triggered in freetype via a crafted font. This update also reverts the fix for CVE-2016-10328, as it was...

[SECURITY] [DLA 882-1] tryton-server security update

Package : tryton-server Version : 2.2.4-1+deb7u4 CVE ID : CVE-2017-0360 It was discovered that there was a path suffix injection attack in tryton-server, a general purpose application platform. For Debian 7 "Wheezy", this issue has been fixed in tryton-server version 2.2.4-1+deb7u4. We recommend...

[SECURITY] [DSA 3825-1] jhead security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3825-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 31, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3801-1] ruby-zip security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3801-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 04, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 815-1] ntfs-3g security update

Package : ntfs-3g Version : 1:2012.1.15AR.5-2.1+deb7u3 CVE ID : CVE-2017-0358 Jann Horn of Google Project Zero discovered that NTFS-3G, a read-write NTFS driver for FUSE, does not scrub the environment before executing modprobe with elevated privileges. A local user can take advantage of this fla...

[SECURITY] [DLA 788-1] pdns-recursor security update

Package : pdns-recursor Version : 3.3-3+deb7u2 CVE ID : CVE-2016-9139 Florian Heinz and Martin Kluge reported that pdns-recursor, a recursive DNS server, parses all records present in a query regardless of whether they are needed or even legitimate, allowing a remote, unauthenticated attacker to...

[SECURITY] [DLA 761-1] python-bottle security update

Package : python-bottle Version : 0.10.11-1+deb7u2 CVE ID : CVE-2016-9964 Debian Bug : 848392 It was discovered that bottle, a WSGI-framework for the Python programming language, did not properly filter "\r\n" sequences when handling redirections. This allowed an attacker to perform CRLF attacks...

[SECURITY] [DSA 3732-1] php5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3732-1 [email protected] https://www.debian.org/security/ Sebastien Delafond December 13, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3729-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3729-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 07, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3725-1] icu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3725-1 [email protected] https://www.debian.org/security/ Luciano Bello November 27, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3719-1] wireshark security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3719-1 [email protected] https://www.debian.org/security/ Sebastien Delafond November 21, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3683-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3683-1 [email protected] https://www.debian.org/security/ Michael Gilbert October 02, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 627-1] pdns security update

Package : pdns Version : 3.1-4.1+deb7u2 CVE ID : CVE-2016-5426 CVE-2016-5427 CVE-2016-6172 Debian Bug : 830808 Multiple vulnerabilities have been discovered in pdns, an authoritative DNS server. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2016-5426 /...

[SECURITY] [DLA 452-1] smarty3 security update

Package : smarty3 Version : 3.1.10-2+deb7u1 CVE ID : CVE-2014-8350 Debian Bug : 765920 Smarty3, a template engine for PHP, allowed remote attackers to bypass the secure mode restrictions and execute arbitrary PHP code as demonstrated by "literal/literalscript language=php" in a template. For Debi...

[SECURITY] [DSA 3358-1] php5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3358-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 13, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3118-1] strongswan security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3118-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez January 05, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 97-1] eglibc security update

Package : eglibc Version : 2.11.3-4+deb6u2 CVE ID : CVE-2012-6656 CVE-2014-6040 CVE-2014-7817 CVE-2012-6656 Fix validation check when converting from ibm930 to utf. When converting IBM930 code with iconv, if IBM930 code which includes invalid multibyte character "0xffff" is specified, then iconv...

[SECURITY] [DLA 58-2] apt regression fix

Package : apt Version : 0.8.10.3+squeeze6 CVE ID : CVE-2014-6273 This update fixes a regression introduced in 0.8.10.3+squeeze5 where apt would send invalid HTTP requests when sending If-Range queries. Thanks to Steven McDonald who reported1 the regression and to Michael Vogt for having uploaded ...

[SECURITY] [DSA 2826-1] denyhosts security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2826-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez December 22, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2772-1] typo3-src security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2772-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 10, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2756-1] wireshark security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2756-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 13, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2717-1] xml-security-c security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2717-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso June 28, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2645-1] inetutils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2645-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez March 14, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2611-1] movabletype-opensource security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2611-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez January 22, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2544-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2544-1 [email protected] http://www.debian.org/security/ Raphael Geissert September 08, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2507-1] openjdk-6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2507-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 04, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2442-1] openarena security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2442-1 [email protected] http://www.debian.org/security/ Florian Weimer March 26, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2207-1] tomcat5.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2207-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 30, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2176-1] cups security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2176-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 02, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2093-1] New ghostscript packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2093-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano August 19, 2010 http://www.debian.org/security/faq -...

[Backports-security-announce] Security update for silc-client/silc-toolkit

Jérémy Bobbio uploaded new packages for silc-client/silc-toolkit which fixed the following security problems: DSA 1879-1 Several vulnerabilities have been discovered in the software suite for the SILC protocol, a network protocol designed to provide end-to-end security for conferencing services...

[SECURITY] [DSA 1630-1] New Linux 2.6.18 packages fix several vulnerabilities

---------------------------------------------------------------------- Debian Security Advisory DSA-1630-1 [email protected] http://www.debian.org/security/ dann frazier Aug 21, 2008 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

[SECURITY] [DSA 1554-2] New roundup packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1554-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 06, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1569-2] New cacti packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1569-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 06, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1513-1] New lighttpd packages fix CGI source disclosure

------------------------------------------------------------------------ Debian Security Advisory DSA-1513-1 [email protected] http://www.debian.org/security/ Steve Kemp March 06, 2008 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

[SECURITY] [DSA 1500-1] New splitvt packages fix privilege escalation

------------------------------------------------------------------------ Debian Security Advisory DSA-1500-1 [email protected] http://www.debian.org/security/ Steve Kemp February 21, 2008 http://www.debian.org/security/faq -...