Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Gollem, as used in Horde Groupware Webmail Edition and other products, had been affected by a reflected Cross-Site Scripting (XSS) vulnerability via the HTTP GET dir parameter in the browser functionality, affecting . Package : php-horde-gollem Version : 3.0.3-2+deb8u1 CVE ID : CVE-2020-8034 Debian Bug : 961649 Gollem, as used in Horde Groupware Webmail Edition and other products, had been affected by a reflected Cross-Site Scripting (XSS) vulnerability via the HTTP GET dir parameter in the browser functionality, affecting breadcrumb output. An attacker could have obtained access to a victim's webmail account by making them visit a malicious URL. For Debian 8 "Jessie", this problem has been fixed in version 3.0.3-2+deb8u1. We recommend that you upgrade your php-horde-gollem packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS -- mike gabriel aka sunweaver (Debian Developer) fon: +49 (1520) 1976 148 GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22 0782 9AF4 6B30 2577 1B31 mail:
An issue has been found in igraph, a library for creating and manipulating graphs. A NULL pointer dereference vulneribility was detected in . Package : igraph Version : 0.7.1-2+deb8u1 CVE ID : CVE-2018-20349 An issue has been found in igraph, a library for creating and manipulating graphs. A NULL pointer dereference vulneribility was detected in igraph_i_strdiff(). For Debian 8 "Jessie", this problem has been fixed in version 0.7.1-2+deb8u1. We recommend that you upgrade your igraph packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Upgrade igraph package to version 0.7.1-3+deb8u1 to address critical vulnerabilities in Debian LTS.. igraph Security Update, Debian LTS, NULL Pointer Compliance. . Severity: Critical. LinuxSecurity.com Team
Mike Salvatore discovered that the fixes for these heap-based buffer overflows had not been properly applied in the Debian package. For Debian 8 "Jessie", this problem has been fixed in version . Package : sox Version : 14.4.1-5+deb8u1 CVE ID : CVE-2014-8145 Debian Bug : 773720 Mike Salvatore discovered that the fixes for these heap-based buffer overflows had not been properly applied in the Debian package. For Debian 8 "Jessie", this problem has been fixed in version 14.4.1-5+deb8u1. We recommend that you upgrade your sox packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Package : sox Version : 14.4.1-5+deb8u1 CVE ID : CVE-2014-8145 Debian Bug : 773720 Mike Salvatore di. salvatore, fixes, these, heap-based, buffer, overflows, properly. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.