[SECURITY] [DSA 5587-1] curl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5587-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 23, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5558-1] netty security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5558-1 [email protected] https://www.debian.org/security/ Markus Koschany November 18, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5557-1] webkit2gtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5557-1 [email protected] https://www.debian.org/security/ Alberto Garcia November 17, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3526-1] libreoffice security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3526-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès August 13, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3459-1] libxpm security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3459-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès June 20, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5422-1] jupyter-core security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5422-1 [email protected] https://www.debian.org/security/ Aron Xu June 09, 2023 https://www.debian.org/security/faq - -------------------------------------------------------------------------...

[SECURITY] [DLA 3442-1] nbconvert security update

Debian LTS Advisory DLA-3442-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin June 03, 2023 https://wiki.debian.org/LTS Package : nbconvert Version : 5.4-2+deb10u1 CVE ID : CVE-2021-32862 Alvaro Muñoz from the GitHub Security Lab discovered sixteen ways to exploit...

[SECURITY] [DLA 3363-1] pcre2 security update

Debian LTS Advisory DLA-3363-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin March 16, 2023 https://wiki.debian.org/LTS Package : pcre2 Version : 10.32-5+deb10u1 CVE ID : CVE-2019-20454 CVE-2022-1586 CVE-2022-1587 Debian Bug : 1011954 Multiple out-of-bounds read...

[SECURITY] [DLA 3331-2] python-cryptography security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3331-2 [email protected] https://www.debian.org/lts/security/ Chris Lamb February 27, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5353-1] nss security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5353-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 17, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3176-1] clickhouse security update

Debian LTS Advisory DLA-3176-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost November 03, 2022 https://wiki.debian.org/LTS Package : clickhouse Version : 18.16.1+ds-4+deb10u1 CVE ID : CVE-2021-42387 CVE-2021-42388 CVE-2021-43304 CVE-2021-43305 Debian Bug : 1008216...

[SECURITY] [DLA 3080-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3080-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky August 24, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3017-1] openldap security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3017-1 [email protected] https://www.debian.org/lts/security/ Dominik George May 20, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3004-1] htmldoc security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3004-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb May 13, 2022 https://wiki.debian.org/LTS - -------------------------------------------------------------------------...

[SECURITY] [DLA 2993-1] libz-mingw-w64 security update

-------------------------------------------------------------------------- Debian LTS Advisory DLA-2993-1 [email protected] https://www.debian.org/lts/security/ Andreas Rönnquist May 04, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5131-1] openjdk-11 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5131-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 05, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5087-1] cyrus-sasl2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5087-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 25, 2022 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2788-1] strongswan security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2788-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz October 20, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2754-1] pywps security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2754-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA September 04, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4940-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4940-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 18, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4939-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4939-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 14, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4926-1] lasso security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4926-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 03, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4908-1] libhibernate3-java security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4908-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 29, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4886-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4886-1 [email protected] https://www.debian.org/security/ Michael Gilbert April 06, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4883-1] underscore security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4883-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 01, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4875-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4875-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 25, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2599-1] shibboleth-sp2 security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2599-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta March 19, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2397-1] php7.0 security update

Debian LTS Advisory DLA-2397-1 [email protected] https://www.debian.org/lts/security/ Roberto C. Sánchez October 06, 2020 https://wiki.debian.org/LTS Package : php7.0 Version : 7.0.33-0+deb9u10 CVE ID : CVE-2020-7070 A vulnerability was discovered in PHP, a server-side, HTML-embedded...

[SECURITY] [DLA 2350-1] php-horde-kronolith security update

Debian LTS Advisory DLA-2350-1 [email protected] https://www.debian.org/lts/security/ Mike Gabriel August 29, 2020 https://wiki.debian.org/LTS Package : php-horde-kronolith Version : 4.2.19-1+deb9u1 CVE ID : CVE-2017-16908 Debian Bug : 909738 In Horde Groupware, there has been an XSS vi...

[SECURITY] [DSA 4747-1] icingaweb2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4747-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 23, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2317-1] pillow security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2317-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta August 08, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 4731-1] redis security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4731-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 19, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4730-1] ruby-sanitize security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4730-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 19, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2266-1] nss security update

Package : nss Version : 2:3.26-1+debu8u11 CVE ID : CVE-2020-12399 CVE-2020-12402 Several vulnerabilities were fixed in nss, the Network Security Service libraries. CVE-2020-12399 Force a fixed length for DSA exponentiation. CVE-2020-12402 Side channel vulnerabilities during RSA key generation. Fo...

[SECURITY] [DSA 4597-1] netty security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4597-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 03, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1973-1] libxslt security update

Package : libxslt Version : 1.1.28-2+deb8u6 CVE ID : CVE-2019-18197 Debian Bug : 942646 A security vulnerability was discovered in libxslt, a XSLT 1.0 processing library written in C. In xsltCopyText in transform.c, a pointer variable is not reset under certain circumstances. If the relevant memo...

[SECURITY] [DLA 1625-1] tzdata new upstream version

Package : tzdata Version : 2018i-0+deb8u1 This update includes the changes in tzdata 2018i. Notable changes are: - Qyzylorda, Kazakhstan moved from +06 to +05 on 2018-12-21. A new zone Asia/Qostanay has been added, because Qostanay, Kazakhstan didnt move. - Metlakatla, Alaska observes PST this...

[SECURITY] [DSA 4282-1] trafficserver security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4282-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 31, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1433-1] openjpeg2 security update

Package : openjpeg2 Version : 2.1.0-2+deb8u4 CVE ID : CVE-2015-1239 CVE-2016-5139 CVE-2015-1239 Fix for denial of service process crash via a crafted PDF. CVE-2016-5139 Fix for integer overflows, allowing a denial of service heap-based buffer overflow or possibly have unspecified other impact via...

[SECURITY] [DSA 4232-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4232-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 20, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4193-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4193-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 05, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1305-1] ming security update

Package : ming Version : 0.4.4-1.1+deb7u7 CVE ID : CVE-2018-5251 CVE-2018-5294 CVE-2018-6315 CVE-2018-6359 Multiple vulnerabilities have been discovered in Ming: CVE-2018-5251 Integer signedness error vulnerability left shift of a negative value in the readSBits function util/read.c. Remote...

[SECURITY] [DSA 4119-1] libav security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4119-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 19, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1236-1] plexus-utils security update

Package : plexus-utils Version : 1:1.5.15-4+deb7u1 CVE ID : CVE-2017-1000487 Charles Duffy discovered that the Commandline class in plexus-utils, a collection of components used by Apache Maven, does not correctly quote the contents of double-quoted strings. An attacker may use this flaw to injec...

[SECURITY] [DSA 4003-1] libvirt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4003-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 19, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3953-1] aodh security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3953-1 [email protected] https://www.debian.org/security/ Luciano Bello August 23, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3943-1] gajim security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3943-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 14, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1049-1] libsndfile security update

Package : libsndfile Version : 1.0.25-9.1+deb7u4 CVE ID : CVE-2017-12562 Debian Bug : 869166 It was discovered that there was a heap buffer overflow attack in libsndfile, a library for reading/writing audio files. An attacker could cause a remote denial of service attack by tricking the function...

[SECURITY] [DSA 3919-1] openjdk-8 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3919-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 25, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3886-2] linux regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3886-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 27, 2017 https://www.debian.org/security/faq -...