[BSA-120] Security Update for mosquitto

Philippe Coval uploaded new packages for mosquitto which fixed the following security problems: CVE-2024-8376 In Eclipse Mosquitto up to version 2.0.18a, an attacker can achieve memory leaking, segmentation fault or heap-use-after-free by sending specific sequences of "CONNECT", "DISCONNECT",...

[SECURITY] [DLA 3950-1] libarchive security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3950-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk November 11, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5810-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5810-1 [email protected] https://www.debian.org/security/ Andres Salomon November 11, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5811-1] mpg123 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5811-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 11, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5809-1] symfony security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5809-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 11, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5808-1] ghostscript security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5808-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 11, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3949-1] ruby-saml security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3949-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA November 11, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5807-1] nss security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5807-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 10, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5806-1] libarchive security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5806-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 09, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5805-1] guix security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5805-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 08, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5804-1] webkit2gtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5804-1 [email protected] https://www.debian.org/security/ Alberto Garcia November 07, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3948-1] pypy3 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3948-1 [email protected] https://www.debian.org/lts/security/ Andrej Shadura November 07, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3947-1] puma security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3947-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA November 06, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3945-1] libheif security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3945-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb November 05, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3946-1] context bugfix update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3946-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès November 05, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5803-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5803-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 05, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3944-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3944-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort November 03, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5802-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5802-1 [email protected] https://www.debian.org/security/ Andres Salomon November 03, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3942-2] openssl regression update

Debian LTS Advisory DLA-3942-2 [email protected] https://www.debian.org/lts/security/ Sean Whitton November 03, 2024 https://wiki.debian.org/LTS Package : openssl Version : 1.1.1w-0+deb11u2 CVE ID : CVE-2023-5678 CVE-2024-0727 CVE-2024-2511 CVE-2024-4741 CVE-2024-5535 CVE-2024-9143 Debi...

[SECURITY] [DLA 3943-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3943-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort October 31, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5801-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5801-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 31, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3942-1] openssl security update

Debian LTS Advisory DLA-3942-1 [email protected] https://www.debian.org/lts/security/ Sean Whitton October 31, 2024 https://wiki.debian.org/LTS Package : openssl Version : 1.1.1n-0+deb11u6 CVE ID : CVE-2023-5678 CVE-2024-0727 CVE-2024-2511 CVE-2024-4741 CVE-2024-5535 CVE-2024-9143 Debia...

[SECURITY] [DLA 3941-1] texlive-bin security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3941-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès October 29, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5800-1] xorg-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5800-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 29, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3940-1] xorg-server security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3940-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz October 29, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3939-1] python-git security update

Debian LTS Advisory DLA-3939-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert October 29, 2024 https://wiki.debian.org/LTS Package : python-git Version : 3.1.14-1+deb11u1 CVE ID : CVE-2022-24439 CVE-2023-40267 CVE-2023-41040 Debian Bug : 1027163 1043503 GitPython...

[SECURITY] [DLA 3938-1] exim4 security update

Debian LTS Advisory DLA-3938-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany October 29, 2024 https://wiki.debian.org/LTS Package : exim4 Version : 4.94.2-7+deb11u4 CVE ID : CVE-2021-38371 CVE-2022-3559 CVE-2023-42117 CVE-2023-42119 Debian Bug : 992172 Multiple...

[SECURITY] [DLA 3937-1] nss security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3937-1 [email protected] https://www.debian.org/lts/security/ Arturo Borrero Gonzalez October 27, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5799-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5799-1 [email protected] https://www.debian.org/security/ Andres Salomon October 28, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5798-1] activemq security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5798-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 26, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5797-1] twisted security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5797-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 25, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5796-1] libheif security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5796-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 25, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3936-1] activemq security update

Debian LTS Advisory DLA-3936-1 [email protected] https://www.debian.org/lts/security/ Santiago Ruano Rincón October 25, 2024 https://wiki.debian.org/LTS Package : activemq Version : 5.16.1-1+deb11u1 CVE ID : CVE-2022-41678 CVE-2023-46604 Debian Bug : 1054909 Two vulnerabilities were fou...

[SECURITY] [DLA 3935-1] distro-info-data database update

Debian LTS Advisory DLA-3935-1 [email protected] https://www.debian.org/lts/security/ Stefano Rivera October 24, 2024 https://wiki.debian.org/LTS Package : distro-info-data Version : 0.51+deb11u7 This is a routine update of the distro-info-data database for Debian LTS users. It adds...

[SECURITY] [DLA 3934-1] libheif security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3934-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb October 22, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3933-1] dmitry security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3933-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk October 22, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3932-1] python-sql security update

Debian LTS Advisory DLA-3932-1 [email protected] https://www.debian.org/lts/security/ Santiago Ruano Rincón October 22, 2024 https://wiki.debian.org/LTS Package : python-sql Version : 1.2.1-1+deb11u1 CVE ID : CVE-2024-9774 Cédric Krier discovered that python-sql, a library to write SQL...

[SECURITY] [DLA 3931-1] ghostscript security update

Debian LTS Advisory DLA-3931-1 [email protected] https://www.debian.org/lts/security/ Sean Whitton October 22, 2024 https://wiki.debian.org/LTS Package : ghostscript Version : 9.53.3dfsg-7+deb11u8 CVE ID : CVE-2024-29508 A heap-based pointer disclosure problem was found in Ghostscript, ...

[SECURITY] [DLA 3930-1] libsepol security update

Debian LTS Advisory DLA-3930-1 [email protected] https://www.debian.org/lts/security/ Sean Whitton October 22, 2024 https://wiki.debian.org/LTS Package : libsepol Version : 3.1-1+deb11u1 CVE ID : CVE-2021-36084 CVE-2021-36085 CVE-2021-36086 CVE-2021-36087 Debian Bug : 990526 Multiple...

[SECURITY] [DSA 5795-1] python-sql security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5795-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 21, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5794-1] openjdk-17 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5794-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 21, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3929-1] openjdk-11 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3929-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort October 21, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3928-1] ffmpeg security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3928-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort October 21, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3927-1] openjdk-17 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3927-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort October 21, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3926-1] perl security update

Debian LTS Advisory DLA-3926-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin October 21, 2024 https://wiki.debian.org/LTS Package : perl Version : 5.32.1-4+deb11u4 CVE ID : CVE-2020-16156 CVE-2023-31484 Debian Bug : 1015985 1035109 Vulnerabilities were found in...

[SECURITY] [DLA 3925-1] asterisk security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3925-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz October 20, 2024 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5793-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5793-1 [email protected] https://www.debian.org/security/ Andres Salomon October 20, 2024 https://www.debian.org/security/faq -...

[SECURITY] [DLA 3924-1] php-horde-mime-viewer security update

Debian LTS Advisory DLA-3924-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost October 19, 2024 https://wiki.debian.org/LTS Package : php-horde-mime-viewer Version : 2.2.4+debian0-2deb11u1 CVE ID : CVE-2022-26874 Debian Bug : It was discovered that there was a...

[SECURITY] [DLA 3923-1] php-horde-turba security update

Debian LTS Advisory DLA-3923-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost October 19, 2024 https://wiki.debian.org/LTS Package : php-horde-turba Version : 4.2.25-5+deb11u2 CVE ID : CVE-2022-30287 Debian Bug : 1012279 It was discovered that there was an arbitrary...

[SECURITY] [DLA 3921-1] apache2 regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3921-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès October 16, 2024 https://wiki.debian.org/LTS -...