Debian LTS: DLA-3436-1: sssd security update
Multiple vulnerabilities were found in sssd, a set of daemons to manage access to remote directories and authentication mechanisms, which could lead to privilege escalation.
Debian LTS: DLA-3435-1: rainloop security update
Cross-site scripting (XSS) vulnerabilities were found in rainloop, a web-based email client, which could lead to information disclosure including passphrase leak.
Debian LTS: DLA-3434-1: sysstat security update
It was discovered that sysstat, a system performance tools for Linux, incompletely fixed CVE-2022-39377 (as published in DLA-3188-1), which could lead to crashes and possibly remote code execution.
Debian LTS: DLA-3433-1: libraw security update
Buffer Overflow vulnerabilities were found in libraw, a raw image decoder library, which could lead to application crash or privilege escalation.
Debian LTS: DLA-3432-1: python2.7 security update
Multiple security issues were discovered in Python, an interactive high-level object-oriented language. An attacker may cause command injection, denial of service (DoS), request smuggling and port scanning.
Debian LTS: DLA-3428-1: node-nth-check security update
node-nth-check, a NodeJS module module used to parse and compile nth-checks, as they are found in CSS 3's nth-child() and nth-last-of-type(). This module was vulnerable to a regular expression denial of service
Debian LTS: DLA-3431-1: sqlite security update
Two vulnerabilities have been fixed in sqlite (V2) which which might allow local users to obtain sensitive information, cause a denial of service (application crash), or have unspecified other impact.
Debian LTS: DLA-3430-1: cups-filters security update
It was discovered that missing input sanitising in cups-filters, when using the Backend Error Handler (beh) backend to create an accessible network printer, may result in the execution of arbitrary commands.
Debian LTS: DLA-3429-1: imagemagick security update
Multiple vulnerabilities were fixed in imagemagick, a software suite, used for editing and manipulating digital images. CVE-2021-20176
