[SECURITY] [DLA 2030-1] jackson-databind security update

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Package: jackson-databind Version: 2.4.2-2+deb8u10 CVE ID : CVE-2019-17267 CVE-2019-17531 More deserialization flaws were discovered in jackson-databind which could allow an unauthenticated user to perform remote code

[SECURITY] [DLA 2031-1] freeimage security update

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Package: freeimage Version: 3.15.4-4.2+deb8u2 CVE ID : CVE-2019-12211 CVE-2019-12213 Debian Bug : 929597 It was found that freeimage, a graphics library, was affected by the following two security issues: CVE-2019-12211

[SECURITY] [DLA 2028-1] squid3 security update

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Package: squid3 Version: 3.4.8-6+deb8u9 CVE ID : CVE-2019-12526 CVE-2019-18677 CVE-2019-18678 CVE-2019-18679 It was found that Squid, a high-performance proxy caching server for web clients, has been

[SECURITY] [DLA 2029-1] firefox-esr security update

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Package: firefox-esr Version: 68.3.0esr-1~deb8u1 CVE ID : CVE-2019-17005 CVE-2019-17008 CVE-2019-17010 CVE-2019-17011 CVE-2019-17012 Multiple security issues have been found in the Mozilla Firefox web

[SECURITY] [DLA 2027-1] jruby security update

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Package: jruby Version: 1.5.6-9+deb8u2 CVE ID : CVE-2017-17742 CVE-2019-16201 CVE-2019-16254 CVE-2019-16255 Several security vulnerabilities were found in Ruby that also affected Debian's JRuby package, a