Debian 10716 Published by Philipp Esselbach 0

A tomcat8 security update has been released for Debian GNU/Linux 8 LTS to address several security vulnerabilities in the Tomcat servlet and JSP engine.

Debian 10716 Published by Philipp Esselbach 0

A sqlite3 security update has been released for Debian GNU/Linux 8 LTS to address an integer overflow vulnerability in the sqlite3_str_vappendf function of src/printf.c.

Debian 10716 Published by Philipp Esselbach 0

A cracklib2 security update has been released for Debian GNU/Linux 8 LTS to address a stack-based buffer overflow when parsing large GECOS fields in cracklib2

Debian 10716 Published by Philipp Esselbach 0

A feh security update has been released for Debian GNU/Linux 8 LTS to address an out-of-boundary heap write with the image viewer feh while receiving an IPC message.

Debian 10716 Published by Philipp Esselbach 0

A tomcat7 security update has been released for Debian GNU/Linux 7 Extended LTS to address a potential remote code execution via deserialization of local files on the filesystem within tomcat7.

Debian 10716 Published by Philipp Esselbach 0

A ruby-rack security update has been released for Debian GNU/Linux 8 LTS to address a possible directory traversal vulnerability in the Rack::Directory app that is bundled with Rack.

Debian 10716 Published by Philipp Esselbach 0

A pdns-recursor security update has been released for Debian GNU/Linux 10 to address two vulnerabilities, a traffic amplification attack against third party authoritative name servers (NXNSAttack) and insufficient validation of NXDOMAIN responses lacking an SOA.

Debian 10716 Published by Philipp Esselbach 0

A dovecot security update has been released for Debian GNU/Linux 10 to address several vulnerabilities, which could cause crashes in the submission, submission-login or lmtp services, resulting in denial of service.