[SECURITY] [DLA 1436-1] gosa security update

2018-07-20 Thread Mike Gabriel
Package: gosa Version: 2.7.4+reloaded2-1+deb8u3 CVE ID : CVE-2018-1000528 Debian Bug : 902723 Fabian Henneke discovered a cross-site scripting vulnerability in the password change form of GOsa, a web-based LDAP administration program. For Debian 8 "Jessie", this probl

[SECURITY] [DLA 1435-1] dnsmasq regression update

2018-07-20 Thread Emilio Pozuelo Monfort
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Package: dnsmasq Version: 2.72-3+deb8u3 Debian Bug : 860064 The dns-root-data update to 2017072601~deb8u2 broke dnsmasq's init script, making dnsmasq no longer start when dns-root-data was installed. This update fixes dnsmasq's