Debian LTS: DLA-3044-1: glib2.0 security update
Several security vulnerabilities were found in glib2.0, a general-purpose utility library for the GNOME environment. CVE-2021-27218
Debian LTS: DLA-3043-1: pidgin security update
An issue was discovered in Pidgin before 2.14.9. A remote attacker who can spoof DNS responses can redirect a client connection to a malicious server. The client will perform TLS certificate verification of the malicious domain name instead of the original
Debian LTS: DLA-3042-1: clamav security update
Several vulnerabilities have been found in the ClamAV antivirus toolkit, that could result in denial of service or other unspecified impact. For Debian 9 stretch, these problems have been fixed in version
Debian LTS: DLA-3041-1: thunderbird security update
Multiple security issues have been found in Thunderbird, which could potentially result in the execution of arbitrary code, information disclosure or spoofing.
Debian LTS: DLA-3040-1: firefox-esr security update
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information disclosure or spoofing.
Debian LTS: DLA-3039-1: pypdf2 security update
Sebastian Krause discovered that manipulated inline images can force PyPDF2, a pure Python PDF library, into an infinite loop, if a maliciously crafted PDF file is processed.
Debian LTS: DLA-3038-1: debian-security-support security update
debian-security-support, the Debian security support coverage checker, has been updated in stretch-security to mark the end of life of the following packages:
Debian LTS: DLA-3037-1: libjpeg-turbo security update
Several integer overflows have been discovered in TurboJPEG, a JPEG image library, which can lead to a denial of service (application crash) if someone attempts to compress or decompress gigapixel images with the TurboJPEG API.
Debian LTS: DLA-3036-1: pjproject security update
Multiple security issues were discovered in pjproject, is a free and open source multimedia communication library CVE-2022-24763
