Debian LTS: DLA-3280-1: libde265 security update
Multiple issues were found in libde265, an open source implementation of the H.265 video codec, which may result in denial of service or have unspecified other impact.
Debian LTS: DLA-3279-1: trafficserver security update
Multiple vulnerabilities were found in trafficserver, a caching proxy server. CVE-2021-37150
Debian LTS: DLA-3278-1: tiff security update
Multiple vulnerabilities were found in tiff, a library and tools providing support for the Tag Image File Format (TIFF), leading to denial of service (DoS) and possibly local code execution.
Debian LTS: DLA-3277-1: powerline-gitstatus security update
Powerline Gitstatus, a status line plugin for the VIM editor, allows arbitrary code execution. Git repositories can contain per-repository configuration that changes the behavior of git, including running arbitrary commands. When using powerline-gitstatus, changing to a directory
Debian LTS: DLA-3276-1: lava security update
Igor Ponomarev discovered that LAVA, a continuous integration system for deploying operating systems onto physical and virtual hardware for running tests, was susceptible to denial of service via recursive XML entity expansion.
Debian LTS: DLA-3275-1: firefox-esr security update
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information disclosure or spoofing.
Debian LTS: DLA-3274-1: webkit2gtk security update
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2022-42852
Debian LTS: DLA-3273-1: libitext5-java security update
It was discovered that the CompareTool of iText, a Java PDF library which uses the external ghostscript software to compare PDFs at a pixel level, allowed command injection when parsing a specially crafted filename.
Debian LTS: DLA-3272-1: sudo security update
Matthieu Barjole and Victor Cutillas discovered that sudoedit in sudo, a program designed to provide limited super user privileges to specific users, does not properly handle '--' to separate the editor and arguments
