[SECURITY] [DLA 1428-1] 389-ds-base security update

2018-07-15 Thread Thorsten Alteholz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Package: 389-ds-base Version: 1.3.3.5-4+deb8u1 CVE ID : CVE-2015-1854 CVE-2017-15134 CVE-2018-1054 CVE-2018-1089 CVE-2018-10850 CVE-2015-1854 A flaw was found while doing authorization of modrdn

[SECURITY] [DLA-1427-1] znc security update

2018-07-15 Thread Chris Lamb
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Package: znc Version: 1.4-2+deb8u1 CVE IDs: CVE-2018-14055 CVE-2018-14056 Debian Bugs: #903787 #903788 It was discovered that there were two issues in znc, a modular IRC bouncer: * There was insufficient validation