rootserverprojekt.de

Package : thunderbird

CVE ID : CVE-2021-29956 CVE-2021-29957 CVE-2021-29967


Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. In adddition two security issues were addressed in…

Package : lasso

CVE ID : CVE-2021-28091


It was discovered that lasso, a library which implements SAML 2.0 and Liberty Alliance standards, did not properly verify that all assertions in a SAML response were properly signed, allowing an…

Package : firefox-esr

CVE ID : CVE-2021-29967


Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.


For the stable distribution (buster), this problem…

Package : squid

CVE ID : CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806

CVE-2021-31807 CVE-2021-31808

Debian Bug : 988891 988892 988893 989043


Multiple denial of service vulnerabilities were discovered in the Squid proxy…

Package : webkit2gtk

CVE ID : CVE-2021-1788 CVE-2021-1844 CVE-2021-1871


The following vulnerabilities have been discovered in the webkit2gtk web engine:


CVE-2021-1788


Francisco Alonso discovered that processing maliciously crafted

web content…

Package : openjdk-11-jre-dcevm

Debian Bug : 942876


The Dynamic Code Evolution Virtual Machine (DCE VM), an alternative VM for OpenJDK 11 with enhanced class redefinition, has been updated for compatibility with OpenJDK 11.0.11.


For the stable…

Package : hyperkitty

CVE ID : CVE-2021-33038


Amir Sarabadani and Kunal Mehta discovered that the import functionality of Hyperkitty, the web user interface to access Mailman 3 archives, did not restrict the visibility of private archives…

Package : nginx

CVE ID : CVE-2021-23017

Debian Bug : 989095


Luis Merino, Markus Vervier and Eric Sesterhenn discovered an off-by-one in Nginx, a high-performance web and reverse proxy server, which could result in denial of service and…

Package : libx11

CVE ID : CVE-2021-31535

Debian Bug : 988737


Roman Fiedler reported that missing length validation in various functions provided by libx11, the X11 client-side library, allow to inject X11 protocol commands on X clients,…

Package : lz4

CVE ID : CVE-2021-3520

Debian Bug : 987856


Jasper Lievisse Adriaanse reported an integer overflow flaw in lz4, a fast LZ compression algorithm library, resulting in memory corruption.


For the stable distribution (buster),…