[continued from previous message]

| | |
| prometheus-node- | Do not adversely affect mirror network; |
| exporter- | fix deadlock with other apt update runs |
| collectors [123] | |
| | |
| pymongo [124] | Fix out-of-bounds read issue [CVE-2024- |
| | 5629] |
| | |
| pypy3 [125] | Strip C0 control and space characters in |
| | urlsplit [CVE-2023-24329]; avoid bypass |
| | of TLS handshake protections on closed |
| | sockets [CVE-2023-40217]; |
| | tempfile.TemporaryDirectory: fix symlink |
| | bug in cleanup [CVE-2023-6597]; protect |
| | zipfile from "quoted-overlap" zipbomb |
| | [CVE-2024-0450] |
| | |
| python-aiosmtpd [126] | Fix SMTP smuggling issue [CVE-2024- |
| | 27305]; fix STARTTLS unencrypted command |
| | injection issue [CVE-2024-34083] |
| | |
| python-asdf [127] | Remove unnecessary dependency on asdf- |
| | unit-schemas |
| | |
| python-channels- | Ensure pools are closed on loop close in |
| redis [128] | core |
| | |
| python-idna [129] | Fix denial of service issue [CVE-2024- |
| | 3651] |
| | |
| python-jwcrypto [130] | Fix denial of service issue [CVE-2024- |
| | 28102] |
| | |
| python-xapian- | Drop dependency on django.utils.six |
| haystack [131] | |
| | |
| python3.11 [132] | Fix use-after-free crash when |
| | deallocating a frame object; protect |
| | zipfile from "quoted-overlap" zipbomb |
| | [CVE-2024-0450]; |
| | tempfile.TemporaryDirectory: fix symlink |
| | bug in cleanup [CVE-2023-6597]; fix |
| | "os.path.normpath(): Path truncation at |
| | null bytes" [CVE-2023-41105]; avoid |
| | bypass of TLS handshake protections on |
| | closed sockets [CVE-2023-40217]; strip |
| | C0 control and space characters in |
| | urlsplit [CVE-2023-24329]; avoid a |
| | potential null pointer dereference in |
| | filleutils |
| | |
| qemu [133] | New upstream stable release; security |
| | fixes [CVE-2024-26327 CVE-2024-26328 |
| | CVE-2024-3446 CVE-2024-3447] |
| | |
| qtbase-opensource- | Fix regression in patch for CVE-2023- |
| src [134] | 24607; avoid using system CA |
| | certificates when not wanted [CVE-2023- |
| | 34410]; fix buffer overflow [CVE-2023- |
| | 37369]; fix infinite loop in XML |
| | recursive entity expansion [CVE-2023- |
| | 38197]; fix buffer overflow with crafted |
| | KTX image file [CVE-2024-25580]; fix |
| | HPack integer overflow check [CVE-2023- |
| | 51714] |
| | |
| rails [135] | Declare breaks and replaces on obsolete |
| | ruby-arel package |
| | |
| riseup-vpn [136] | Use system certificate bundle by |
| | default, restoring ability to connect to |
| | an endpoint using LetsEncrypt |
| | certificate |
| | |
| ruby-aws- | Ensure binary package includes |
| partitions [137] | partitions.json and partitions- |
| | metadata.json files |
| | |
| ruby-premailer- | Remove build-dependency on obsolete |
| rails [138] | ruby-arel |
| | |
| rust-cbindgen-web [139] | New source package to support builds of |
| | newer Firefox ESR versions |
| | |
| rustc-web [140] | New source package to support builds of |
| | web browsers |
| | |
| schleuder [141] | Fix argument parsing insufficient |
| | validation; fix importing keys from |
| | attachments sent by Thunderbird and |
| | handle mails without further content; |
| | look for keywords only at the start of |
| | mail; validate downcased email addresses |
| | when checking subscribers; consider From |
| | header for finding reply addresses |
| | |
| sendmail [142] | Fix SMTP smuggling issue [CVE-2023- |
| | 51765] |
| | |
| skeema [143] | Rebuild for outdated Built-Using |
| | |
| skopeo [144] | Rebuild for outdated Built-Using |
| | |
| software- | software-properties-qt: Add Conflicts |
| properties [145] | +Replaces: on software-properties-kde |
| | for smoother upgrades from bullseye |
| | |
| supermin [146] | Rebuild to fix outdated Built-Using |
| | |
| symfony [147] | Force system dependency loading; |
| | DateTypTest: ensure submitted year is |
| | accepted choice |
| | |
| systemd [148] | New upstream stable release; fix denial |
| | of service issues [CVE-2023-50387 |
| | CVE-2023-50868]; libnss-myhostname.nss: |
| | Install after "files" ; libnss- |
| | mymachines.nss: Install before |
| | "resolve" and "dns" |
| | |
| termshark [149] | Rebuild to fix outdated Built-Using |
| | |
| tripwire [150] | Rebuild to fix outdated Built-Using |
| | |
| tryton-client [151] | Only send compressed content in |
| | authenticated sessions |
| | |
| tryton-server [152] | Prevent "zip-bomb" attacks from |
| | unauthenticated sources |
| | |
| u-boot [153] | Fix orion-timer for booting sheevaplug |
| | and related platforms |
| | |
| uif [154] | Support VLAN interface names |
| | |
| umoci [155] | Rebuild for outdated Built-Using |
| | |
| user-mode-linux [156] | Rebuilt to fix outdated Built-Using |
| | |
| wayfire [157] | Add missing dependencies |
| | |
| what-is-python [158] | Declare breaks and replaces on python- |
| | dev-is-python2; fix version mangling in |
| | build rules |
| | |
| wpa [159] | Fix authentication bypass issue |
| | [CVE-2023-52160] |
| | |
| xscreensaver [160] | Disable warning about old versions |
| | |
| yapet [161] | Do not call |
| | EVP_CIPHER_CTX_set_key_length() in |
| | crypt/blowfish and crypt/aes |
| | |
| zsh [162] | Rebuild to fix outdated Built-Using |
| | | +--------------------------+------------------------------------------+

1: https://packages.debian.org/src:aide
2: https://packages.debian.org/src:amavisd-new
3: https://packages.debian.org/src:archlinux-keyring
4: https://packages.debian.org/src:base-files
5: https://packages.debian.org/src:bash
6: https://packages.debian.org/src:bioawk
7: https://packages.debian.org/src:bluez
8: https://packages.debian.org/src:cdo
9: https://packages.debian.org/src:chkrootkit
10: https://packages.debian.org/src:cjson
11: https://packages.debian.org/src:clamav
12: https://packages.debian.org/src:cloud-init
13: https://packages.debian.org/src:comitup
14: https://packages.debian.org/src:cpu
15: https://packages.debian.org/src:crmsh
16: https://packages.debian.org/src:crowdsec-custom-bouncer
17: https://packages.debian.org/src:crowdsec-firewall-bouncer
18: https://packages.debian.org/src:curl
19: https://packages.debian.org/src:dar
20: https://packages.debian.org/src:dcmtk
21: https://packages.debian.org/src:debian-installer
22: https://packages.debian.org/src:debian-installer-netboot-images
23: https://packages.debian.org/src:debvm
24: https://packages.debian.org/src:dhcpcd5
25: https://packages.debian.org/src:distro-info-data
26: https://packages.debian.org/src:djangorestframework
27: https://packages.debian.org/src:dm-writeboost
28: https://packages.debian.org/src:dns-root-data
29: https://packages.debian.org/src:dpdk
30: https://packages.debian.org/src:ebook-speaker
31: https://packages.debian.org/src:emacs
32: https://packages.debian.org/src:extrepo-data
33: https://packages.debian.org/src:flatpak
34: https://packages.debian.org/src:fpga-icestorm
35: https://packages.debian.org/src:freetype
36: https://packages.debian.org/src:galera-4
37: https://packages.debian.org/src:gdk-pixbuf
38: https://packages.debian.org/src:glewlwyd
39: https://packages.debian.org/src:glib2.0
40: https://packages.debian.org/src:glibc
41: https://packages.debian.org/src:gnutls28
42: https://packages.debian.org/src:golang-github-containers-storage
43: https://packages.debian.org/src:golang-github-google-nftables
44: https://packages.debian.org/src:golang-github-openshift-imagebuilder
45: https://packages.debian.org/src:gosu
46: https://packages.debian.org/src:gpaste
47: https://packages.debian.org/src:gross
48: https://packages.debian.org/src:hovercraft
49: https://packages.debian.org/src:icinga2
50: https://packages.debian.org/src:igtf-policy-bundle
51: https://packages.debian.org/src:intel-microcode
52: https://packages.debian.org/src:jose
53: https://packages.debian.org/src:json-smart
54: https://packages.debian.org/src:kio
55: https://packages.debian.org/src:lacme
56: https://packages.debian.org/src:libapache2-mod-auth-openidc
57: https://packages.debian.org/src:libesmtp
58: https://packages.debian.org/src:libimage-imlib2-perl
59: https://packages.debian.org/src:libjwt
60: https://packages.debian.org/src:libkf5ksieve
61: https://packages.debian.org/src:libmail-dkim-perl
62: https://packages.debian.org/src:libpod
63: https://packages.debian.org/src:libreoffice
64: https://packages.debian.org/src:libseccomp
65: https://packages.debian.org/src:libtommath
66: https://packages.debian.org/src:libtool
67: https://packages.debian.org/src:libxml-stream-perl
68: https://packages.debian.org/src:linux
69: https://packages.debian.org/src:linux-signed-amd64
70: https://packages.debian.org/src:linux-signed-arm64
71: https://packages.debian.org/src:linux-signed-i386
72: https://packages.debian.org/src:lua5.4
73: https://packages.debian.org/src:lxc-templates
74: https://packages.debian.org/src:mailman3
75: https://packages.debian.org/src:mksh
76: https://packages.debian.org/src:mobian-keyring
77: https://packages.debian.org/src:ms-gsl
78: https://packages.debian.org/src:nano
79: https://packages.debian.org/src:netcfg
80: https://packages.debian.org/src:ngircd
81: https://packages.debian.org/src:node-babel7
82: https://packages.debian.org/src:node-undici
83: https://packages.debian.org/src:node-v8-compile-cache
84: https://packages.debian.org/src:node-zx
85: https://packages.debian.org/src:nodejs
86: https://packages.debian.org/src:nsis
87: https://packages.debian.org/src:nvidia-graphics-drivers
88: https://packages.debian.org/src:nvidia-graphics-drivers-tesla
89: https://packages.debian.org/src:nvidia-graphics-drivers-tesla-470
90: https://packages.debian.org/src:nvidia-modprobe
91: https://packages.debian.org/src:nvidia-open-gpu-kernel-modules
92: https://packages.debian.org/src:nvidia-persistenced
93: https://packages.debian.org/src:nvidia-settings
94: https://packages.debian.org/src:nvidia-xconfig
95: https://packages.debian.org/src:openrc
96: https://packages.debian.org/src:openssl
97: https://packages.debian.org/src:openvpn-dco-dkms
98: https://packages.debian.org/src:orthanc-dicomweb
99: https://packages.debian.org/src:orthanc-gdcm
100: https://packages.debian.org/src:orthanc-mysql
101: https://packages.debian.org/src:orthanc-neuro
102: https://packages.debian.org/src:orthanc-postgresql
103: https://packages.debian.org/src:orthanc-python
104: https://packages.debian.org/src:orthanc-webviewer
105: https://packages.debian.org/src:orthanc-wsi
106: https://packages.debian.org/src:ovn
107: https://packages.debian.org/src:pdudaemon
108: https://packages.debian.org/src:php-composer-class-map-generator
109: https://packages.debian.org/src:php-composer-pcre
110: https://packages.debian.org/src:php-composer-xdebug-handler
111: https://packages.debian.org/src:php-doctrine-annotations
112: https://packages.debian.org/src:php-doctrine-deprecations
113: https://packages.debian.org/src:php-doctrine-lexer
114: https://packages.debian.org/src:php-phpseclib
115: https://packages.debian.org/src:php-phpseclib3
116: https://packages.debian.org/src:php-proxy-manager
117: https://packages.debian.org/src:php-symfony-contracts
118: https://packages.debian.org/src:php-zend-code
119: https://packages.debian.org/src:phpldapadmin
120: https://packages.debian.org/src:phpseclib
121: https://packages.debian.org/src:postfix
122: https://packages.debian.org/src:postgresql-15
123: https://packages.debian.org/src:prometheus-node-exporter-collectors
124: https://packages.debian.org/src:pymongo
125: https://packages.debian.org/src:pypy3
126: https://packages.debian.org/src:python-aiosmtpd
127: https://packages.debian.org/src:python-asdf
128: https://packages.debian.org/src:python-channels-redis
129: https://packages.debian.org/src:python-idna
130: https://packages.debian.org/src:python-jwcrypto
131: https://packages.debian.org/src:python-xapian-haystack
132: https://packages.debian.org/src:python3.11
133: https://packages.debian.org/src:qemu
134: https://packages.debian.org/src:qtbase-opensource-src
135: https://packages.debian.org/src:rails
136: https://packages.debian.org/src:riseup-vpn
137: https://packages.debian.org/src:ruby-aws-partitions
138: https://packages.debian.org/src:ruby-premailer-rails
139: https://packages.debian.org/src:rust-cbindgen-web
140: https://packages.debian.org/src:rustc-web
141: https://packages.debian.org/src:schleuder
142: https://packages.debian.org/src:sendmail
143: https://packages.debian.org/src:skeema
144: https://packages.debian.org/src:skopeo
145: https://packages.debian.org/src:software-properties
146: https://packages.debian.org/src:supermin
147: https://packages.debian.org/src:symfony
148: https://packages.debian.org/src:systemd
149: https://packages.debian.org/src:termshark
150: https://packages.debian.org/src:tripwire
151: https://packages.debian.org/src:tryton-client
152: https://packages.debian.org/src:tryton-server
153: https://packages.debian.org/src:u-boot
154: https://packages.debian.org/src:uif
155: https://packages.debian.org/src:umoci
156: https://packages.debian.org/src:user-mode-linux
157: https://packages.debian.org/src:wayfire
158: https://packages.debian.org/src:what-is-python
159: https://packages.debian.org/src:wpa
160: https://packages.debian.org/src:xscreensaver
161: https://packages.debian.org/src:yapet
162: https://packages.debian.org/src:zsh

Security Updates
----------------

This revision adds the following security updates to the stable release.
The Security Team has already released an advisory for each of these
updates:

+----------------+---------------------------+
| Advisory ID | Package | +----------------+---------------------------+
| DSA-5575 [163] | webkit2gtk [164] |
| | |
| DSA-5580 [165] | webkit2gtk [166] |
| | |
| DSA-5589 [167] | nodejs [168] |
| | |
| DSA-5609 [169] | slurm-wlm-contrib [170] |
| | |
| DSA-5616 [171] | ruby-sanitize [172] |
| | |
| DSA-5618 [173] | webkit2gtk [174] |
| | |
| DSA-5619 [175] | libgit2 [176] |
| | |
| DSA-5620 [177] | unbound [178] |
| | |
| DSA-5621 [179] | bind9 [180] |
| | |
| DSA-5623 [181] | postgresql-15 [182] |
| | |
| DSA-5624 [183] | edk2 [184] |
| | |
| DSA-5625 [185] | engrampa [186] |
| | |
| DSA-5626 [187] | pdns-recursor [188] |
| | |
| DSA-5627 [189] | firefox-esr [190] |
| | |
| DSA-5628 [191] | imagemagick [192] |
| | |
| DSA-5630 [193] | thunderbird [194] |
| | |
| DSA-5631 [195] | iwd [196] |
| | |
| DSA-5632 [197] | composer [198] |
| | |
| DSA-5633 [199] | knot-resolver [200] |
| | |
| DSA-5635 [201] | yard [202] |
| | |
| DSA-5637 [203] | squid [204] |
| | |
| DSA-5638 [205] | libuv1 [206] |
| | |
| DSA-5640 [207] | openvswitch [208] |
| | |
| DSA-5641 [209] | fontforge [210] |
| | |
| DSA-5642 [211] | php-dompdf-svg-lib [212] |
| | |
| DSA-5643 [213] | firefox-esr [214] |
| | |
| DSA-5644 [215] | thunderbird [216] |
| | |
| DSA-5645 [217] | firefox-esr [218] |
| | |
| DSA-5646 [219] | cacti [220] |
| | |
| DSA-5650 [221] | util-linux [222] |
| | |
| DSA-5651 [223] | mediawiki [224] |
| | |
| DSA-5653 [225] | gtkwave [226] |
| | |
| DSA-5655 [227] | cockpit [228] |
| | |
| DSA-5657 [229] | xorg-server [230] |
| | |
| DSA-5658 [231] | linux-signed-amd64 [232] |
| | |
| DSA-5658 [233] | linux-signed-arm64 [234] |
| | |
| DSA-5658 [235] | linux-signed-i386 [236] |
| | |
| DSA-5658 [237] | linux [238] |
| | |
| DSA-5659 [239] | trafficserver [240] |
| | |
| DSA-5661 [241] | php8.2 [242] |
| | |
| DSA-5662 [243] | apache2 [244] |
| | |
| DSA-5663 [245] | firefox-esr [246] |
| | |
| DSA-5664 [247] | jetty9 [248] |
| | |
| DSA-5665 [249] | tomcat10 [250] |
| | |
| DSA-5666 [251] | flatpak [252] |
| | |
| DSA-5669 [253] | guix [254] |
| | |
| DSA-5670 [255] | thunderbird [256] |
| | |
| DSA-5672 [257] | openjdk-17 [258] |
| | |
| DSA-5673 [259] | glibc [260] |
| | |
| DSA-5674 [261] | pdns-recursor [262] |
| | |
| DSA-5677 [263] | ruby3.1 [264] |
| | |
| DSA-5678 [265] | glibc [266] |
| | |
| DSA-5679 [267] | less [268] |
| | |
| DSA-5680 [269] | linux-signed-amd64 [270] |
| | |
| DSA-5680 [271] | linux-signed-arm64 [272] |
| | |
| DSA-5680 [273] | linux-signed-i386 [274] |
| | |
| DSA-5680 [275] | linux [276] |
| | |
| DSA-5682 [277] | glib2.0 [278] |
| | |
| DSA-5682 [279] | gnome-shell [280] |
| | |
| DSA-5684 [281] | webkit2gtk [282] |
| | |
| DSA-5685 [283] | wordpress [284] |
| | |
| DSA-5686 [285] | dav1d [286] |
| | |
| DSA-5688 [287] | atril [288] |
| | |
| DSA-5690 [289] | libreoffice [290] |
| | |
| DSA-5691 [291] | firefox-esr [292] |
| | |
| DSA-5692 [293] | ghostscript [294] |
| | |
| DSA-5693 [295] | thunderbird [296] |
| | |
| DSA-5695 [297] | webkit2gtk [298] |
| | |
| DSA-5698 [299] | ruby-rack [300] |
| | |
| DSA-5699 [301] | redmine [302] |
| | |
| DSA-5700 [303] | python-pymysql [304] |
| | |
| DSA-5702 [305] | gst-plugins-base1.0 [306] |
| | |
| DSA-5704 [307] | pillow [308] |
| | |
| DSA-5705 [309] | tinyproxy [310] |
| | |
| DSA-5706 [311] | libarchive [312] |
| | |
| DSA-5707 [313] | vlc [314] |
| | |
| DSA-5708 [315] | cyrus-imapd [316] |
| | |
| DSA-5709 [317] | firefox-esr [318] |
| | |
| DSA-5711 [319] | thunderbird [320] |
| | |
| DSA-5712 [321] | ffmpeg [322] |
| | |
| DSA-5713 [323] | libndp [324] |
| | |
| DSA-5714 [325] | roundcube [326] |
| | |
| DSA-5715 [327] | composer [328] |
| | |
| DSA-5717 [329] | php8.2 [330] |
| | | +----------------+---------------------------+

163: https://www.debian.org/security/2023/dsa-5575
164: https://packages.debian.org/src:webkit2gtk
165: https://www.debian.org/security/2023/dsa-5580
166: https://packages.debian.org/src:webkit2gtk
167: https://www.debian.org/security/2023/dsa-5589
168: https://packages.debian.org/src:nodejs
169: https://www.debian.org/security/2024/dsa-5609
170: https://packages.debian.org/src:slurm-wlm-contrib
171: https://www.debian.org/security/2024/dsa-5616
172: https://packages.debian.org/src:ruby-sanitize
173: https://www.debian.org/security/2024/dsa-5618
174: https://packages.debian.org/src:webkit2gtk
175: https://www.debian.org/security/2024/dsa-5619
176: https://packages.debian.org/src:libgit2
177: https://www.debian.org/security/2024/dsa-5620
178: https://packages.debian.org/src:unbound
179: https://www.debian.org/security/2024/dsa-5621
180: https://packages.debian.org/src:bind9
181: https://www.debian.org/security/2024/dsa-5623
182: https://packages.debian.org/src:postgresql-15
183: https://www.debian.org/security/2024/dsa-5624
184: https://packages.debian.org/src:edk2
185: https://www.debian.org/security/2024/dsa-5625
186: https://packages.debian.org/src:engrampa
187: https://www.debian.org/security/2024/dsa-5626
188: https://packages.debian.org/src:pdns-recursor
189: https://www.debian.org/security/2024/dsa-5627
190: https://packages.debian.org/src:firefox-esr
191: https://www.debian.org/security/2024/dsa-5628
192: https://packages.debian.org/src:imagemagick
193: https://www.debian.org/security/2024/dsa-5630
194: https://packages.debian.org/src:thunderbird
195: https://www.debian.org/security/2024/dsa-5631
196: https://packages.debian.org/src:iwd
197: https://www.debian.org/security/2024/dsa-5632
198: https://packages.debian.org/src:composer
199: https://www.debian.org/security/2024/dsa-5633
200: https://packages.debian.org/src:knot-resolver
201: https://www.debian.org/security/2024/dsa-5635
202: https://packages.debian.org/src:yard
203: https://www.debian.org/security/2024/dsa-5637
204: https://packages.debian.org/src:squid
205: https://www.debian.org/security/2024/dsa-5638
206: https://packages.debian.org/src:libuv1
207: https://www.debian.org/security/2024/dsa-5640
208: https://packages.debian.org/src:openvswitch
209: https://www.debian.org/security/2024/dsa-5641
210: https://packages.debian.org/src:fontforge
211: https://www.debian.org/security/2024/dsa-5642
212: https://packages.debian.org/src:php-dompdf-svg-lib
213: https://www.debian.org/security/2024/dsa-5643
214: https://packages.debian.org/src:firefox-esr
215: https://www.debian.org/security/2024/dsa-5644
216: https://packages.debian.org/src:thunderbird
217: https://www.debian.org/security/2024/dsa-5645
218: https://packages.debian.org/src:firefox-esr
219: https://www.debian.org/security/2024/dsa-5646
220: https://packages.debian.org/src:cacti
221: https://www.debian.org/security/2024/dsa-5650
222: https://packages.debian.org/src:util-linux
223: https://www.debian.org/security/2024/dsa-5651
224: https://packages.debian.org/src:mediawiki
225: https://www.debian.org/security/2024/dsa-5653
226: https://packages.debian.org/src:gtkwave
227: https://www.debian.org/security/2024/dsa-5655
228: https://packages.debian.org/src:cockpit
229: https://www.debian.org/security/2024/dsa-5657
230: https://packages.debian.org/src:xorg-server
231: https://www.debian.org/security/2024/dsa-5658
232: https://packages.debian.org/src:linux-signed-amd64
233: https://www.debian.org/security/2024/dsa-5658
234: https://packages.debian.org/src:linux-signed-arm64
235: https://www.debian.org/security/2024/dsa-5658

[continued in next message]

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)