Letzte Aktivitäten

Package : ffmpeg
CVE ID : CVE-2019-12730

Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if malformed files/streams…

Package : libreoffice
CVE ID : CVE-2019-9850 CVE-2019-9851 CVE-2019-9852

It was discovered that the code fixes to address CVE-2018-16858 and
CVE-2019-9848 were not complete.

For the oldstable distribution (stretch), these problems have…

Package : chromium
CVE ID : CVE-2019-5805 CVE-2019-5806 CVE-2019-5807 CVE-2019-5808
CVE-2019-5809 CVE-2019-5810 CVE-2019-5811 CVE-2019-5813
CVE-2019-5814 CVE-2019-5815 CVE-2019-5818 CVE-2019-5819
CVE-2019-5820 CVE-2019-5821 CVE-2019-5822…

Package : ghostscript
CVE ID : CVE-2019-10216
Debian Bug : 934638

Netanel reported that the .buildfont1 procedure in Ghostscript, the GPL PostScript/PDF interpreter, does not properly restrict privileged calls, which could result in…

Package : linux
CVE ID : CVE-2015-8553 CVE-2018-5995 CVE-2018-20836 CVE-2018-20856
CVE-2019-1125 CVE-2019-3882 CVE-2019-3900 CVE-2019-10207
CVE-2019-10638 CVE-2019-10639 CVE-2019-13631 CVE-2019-13648
CVE-2019-14283 CVE-2019-14284

Several…

Package : pango1.0
CVE ID : CVE-2019-1010238
Debian Bug : 933860

Benno Fuenfstueck discovered that Pango, a library for layout and rendering of text with an emphasis on internationalization, is prone to a heap-based buffer overflow…

Package : python-django
CVE ID : CVE-2019-14232 CVE-2019-14233 CVE-2019-14234 CVE-2019-14235
Debian Bug : 934026

Several vulnerabilities were discovered in python-django, a web development framework. They could lead to remote…

Package : linux
CVE ID : CVE-2018-20836 CVE-2019-1125 CVE-2019-1999 CVE-2019-10207
CVE-2019-10638 CVE-2019-12817 CVE-2019-12984 CVE-2019-13233
CVE-2019-13631 CVE-2019-13648 CVE-2019-14283 CVE-2019-14284

Several vulnerabilities have been…

Package : kconfig
CVE ID : CVE-2019-14744

Dominik Penner discovered that KConfig, the KDE configuration settings framework, supported a feature to define shell command execution in .desktop files. If a user is provided with a malformed…

Package : postgresql-11
CVE ID : CVE-2019-10208 CVE-2019-10209

Two security issues have been discovered in the PostgreSQL database system, which could result in privilege escalation, denial of service or memory disclosure.

For…

Package : postgresql-9.6
CVE ID : CVE-2019-10208

A issue has been discovered in the PostgreSQL database system, which could result in privilege escalation.

For additional information please refer to the upstream announcement at …

Package : proftpd-dfsg
CVE ID : CVE-2019-12815
Debian Bug : 932453

Tobias Maedel discovered that the mod_copy module of ProFTPD, a FTP/SFTP/FTPS server, performed incomplete permission validation for the CPFR/CPTO commands.

For the…

Package : subversion
CVE ID : CVE-2018-11782 CVE-2019-0203

Several vulnerabilities were discovered in Subversion, a version control system. The Common Vulnerabilities and Exposures project identifies the following problems:

…

Package : patch
CVE ID : CVE-2019-13636 CVE-2019-13638
Debian Bug : 932401 933140

Imre Rad discovered several vulnerabilities in GNU patch, leading to shell command injection or escape from the working directory and access and…

Package : exim4
CVE ID : CVE-2019-13917

Jeremy Harris discovered that Exim, a mail transport agent, does not properly handle the ${sort } expansion. This flaw can be exploited by a remote attacker to execute programs with root privileges…

Package : neovim
CVE ID : CVE-2019-12735

User "Arminius" discovered a vulnerability in Vim, an enhanced version of the standard UNIX editor Vi (Vi IMproved), which also affected the Neovim fork, an extensible editor focused on modern…

Package : openjdk-11
CVE ID : CVE-2019-2745 CVE-2019-2762 CVE-2019-2769 CVE-2019-2786
CVE-2019-2816 CVE-2019-2818 CVE-2019-2821

Several vulnerabilities have been discovered in the OpenJDK Java runtime, resulting in information…

Package : openjdk-8
CVE ID : CVE-2019-2745 CVE-2019-2762 CVE-2019-2769 CVE-2019-2786
CVE-2019-2816 CVE-2019-2842

Several vulnerabilities have been discovered in the OpenJDK Java runtime, resulting in information disclosure, denial of…

Package : linux
CVE ID : CVE-2019-13272

Jann Horn discovered that the ptrace subsystem in the Linux kernel mishandles the management of the credentials of a process that wants to create a ptrace relationship, allowing a local user to…

Package : libreoffice
CVE ID : CVE-2019-9848 CVE-2019-9849

Two security issues have been discovered in LibreOffice:

CVE-2019-9848

Nils Emmerich discovered that malicious documents could execute
arbitrary Python code via LibreLogo.

…