(Jun 17) Multiple vulnerabilities were discovered in the Lua subsystem of Redis, a persistent key-value database, which could result in denial of service. For the stable distribution (stretch), these problems have been fixed in
Comment
(Jun 17) It was discovered that Libgcrypt is prone to a local side-channel attack allowing recovery of ECDSA private keys. For the stable distribution (stretch), this problem has been fixed in
(Jun 16) Update to latest nodejs-uri-js for CVE fix
(Jun 16) Update to latest nodejs-uri-js for CVE fix
(Jun 15) – Fix CVE-2018-11396/CVE-2018-12016 (#795740) – Allow Ctrl+T in app mode again due to unintended consequences (#796204) – Don’t remember passwords when the setting is disabled (#796219) – Fix password manager crash on chase.com (GitLab #11)