<!doctypehtml PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html lang=en><meta content="text/html; charset=utf-8"http-equiv=Content-Type><title>
   Debian -- Security Information
  </title><link href=mailto:webmaster@debian.org rel=author><meta content="WML 2.12.2"name=Generator><meta content="2021-02-17 03:31:29"name=Modified><meta content=width=device-width name=viewport><meta content=300 name=mobileoptimized><meta content=true name=HandheldFriendly><link title="Debian Security Advisories (titles only)"href=dsa rel=alternate type=application/rss+xml><link title="Debian Security Advisories (summaries)"href=dsa-long rel=alternate type=application/rss+xml><link href=../debian.css rel=stylesheet><link href=../debian-en.css media=all rel=stylesheet><link title="Debian website search"href=../search.en.xml rel=search type=application/opensearchdescription+xml><body><div id=header><div id=upperheader><div id=logo><a title="Debian Home"href=../> <img alt=Debian height=61 src=../Pics/openlogo-50.png width=50> </a></div><div id=searchbox><form action=https://search.debian.org/cgi-bin/omega name=p><p><input name=DB type=hidden value=en> <input name=P size=14> <input type=submit value=Search></form></div></div><div id=navbar><p class=hidecss><a href=#content> Skip Quicknav </a><ul><li><a title="Bits from Debian"href=https://bits.debian.org/> Blog </a><li><a title="Micronews from Debian"href=https://micronews.debian.org> Micronews </a><li><a title="The Planet of Debian"href=https://planet.debian.org/> Planet </a></ul></div><p id=breadcrumbs>Security Information</div><div id=content><h1>Security Information</h1><ul class=toc><li><a href=#keeping-secure> Keeping your Debian system secure </a><li><a href=#DSAS> Recent Advisories </a><li><a href=#contact> Contact Information </a></ul><p>Debian takes security very seriously. We handle all security problems brought to our attention and ensure that they are corrected within a reasonable timeframe. Many advisories are coordinated with other free software vendors and are published the same day a vulnerability is made public and we also have a <a href=audit/> Security Audit </a> team that reviews the archive looking for new or unfixed security bugs.<p>Experience has shown that <q> security through obscurity </q> does not work. Public disclosure allows for more rapid and better solutions to security problems. In that vein, this page addresses Debian's status with respect to various known security holes, which could potentially affect Debian.<p>Debian also participates in security standardization efforts: the <a href=#DSAS> Debian Security Advisories </a> are <a href=cve-compatibility> CVE-Compatible </a> (review the <a href=crossreferences> cross references </a> ) and Debian is represented in the Board of the <a href=https://oval.cisecurity.org/> Open Vulnerability Assessment Language </a> project.<h2><a id=keeping-secure name=keeping-secure> Keeping your Debian system secure </a></h2><p>In order to receive the latest Debian security advisories, subscribe to the <a href=https://lists.debian.org/debian-security-announce/> debian-security-announce </a> mailing list.<p>You can use <a href=https://packages.debian.org/stable/admin/apt> apt </a> to easily get the latest security updates. This requires a line such as<div class=centerblock><p><code>
      deb http://security.debian.org/debian-security buster/updates main contrib non-free
     </code></div><p>in your <code>
     /etc/apt/sources.list
    </code> file. Then execute <kbd> apt-get update && apt-get upgrade </kbd> to download and apply the pending updates. The security archive is signed with the normal Debian archive <a href=https://ftp-master.debian.org/keys.html> signing keys </a> .<p>For more information about security issues in Debian, please refer to the <a href=faq> Security Team FAQ </a> and a manual called <a href=../doc/user-manuals#securing> Securing Debian </a> .</p><a class=rss_logo href=dsa> RSS </a><h2><a id=DSAS name=DSAS> Recent Advisories </a></h2><p>These web pages include a condensed archive of security advisories posted to the <a href=https://lists.debian.org/debian-security-announce/> debian-security-announce </a> list.<p><tt> [16 Feb 2021] </tt> <strong> <a href=2021/dsa-4853> DSA-4853-1 spip </a> </strong> security update <br> <tt> [15 Feb 2021] </tt> <strong> <a href=2021/dsa-4852> DSA-4852-1 openvswitch </a> </strong> security update <br> <tt> [13 Feb 2021] </tt> <strong> <a href=2021/dsa-4851> DSA-4851-1 subversion </a> </strong> security update <br> <tt> [10 Feb 2021] </tt> <strong> <a href=2021/dsa-4850> DSA-4850-1 libzstd </a> </strong> security update <br> <tt> [09 Feb 2021] </tt> <strong> <a href=2021/dsa-4849> DSA-4849-1 firejail </a> </strong> security update <br> <tt> [08 Feb 2021] </tt> <strong> <a href=2021/dsa-4848> DSA-4848-1 golang-1.11 </a> </strong> security update <br> <tt> [08 Feb 2021] </tt> <strong> <a href=2021/dsa-4847> DSA-4847-1 connman </a> </strong> security update <br> <tt> [07 Feb 2021] </tt> <strong> <a href=2021/dsa-4846> DSA-4846-1 chromium </a> </strong> security update <br> <tt> [03 Feb 2021] </tt> <strong> <a href=2021/dsa-4845> DSA-4845-1 openldap </a> </strong> security update <br> <tt> [02 Feb 2021] </tt> <strong> <a href=2021/dsa-4844> DSA-4844-1 dnsmasq </a> </strong> security update <br> <tt> [01 Feb 2021] </tt> <strong> <a href=2021/dsa-4843> DSA-4843-1 linux </a> </strong> security update <br> <tt> [31 Jan 2021] </tt> <strong> <a href=2021/dsa-4842> DSA-4842-1 thunderbird </a> </strong> security update <br> <tt> [27 Jan 2021] </tt> <strong> <a href=2021/dsa-4841> DSA-4841-1 slurm-llnl </a> </strong> security update <br> <tt> [27 Jan 2021] </tt> <strong> <a href=2021/dsa-4840> DSA-4840-1 firefox-esr </a> </strong> security update <br> <tt> [26 Jan 2021] </tt> <strong> <a href=2021/dsa-4839> DSA-4839-1 sudo </a> </strong> security update <br> <tt> [25 Jan 2021] </tt> <strong> <a href=2021/dsa-4838> DSA-4838-1 mutt </a> </strong> security update <br> <tt> [24 Jan 2021] </tt> <strong> <a href=2021/dsa-4837> DSA-4837-1 salt </a> </strong> security update <br> <tt> [22 Jan 2021] </tt> <strong> <a href=2021/dsa-4836> DSA-4836-1 openvswitch </a> </strong> security update <br> <tt> [22 Jan 2021] </tt> <strong> <a href=2021/dsa-4835> DSA-4835-1 tomcat9 </a> </strong> security update <br> <tt> [22 Jan 2021] </tt> <strong> <a href=2021/dsa-4834> DSA-4834-1 vlc </a> </strong> security update <br> <tt> [18 Jan 2021] </tt> <strong> <a href=2021/dsa-4833> DSA-4833-1 gst-plugins-bad1.0 </a> </strong> security update <br><p>The latest Debian security advisories are also available in <a href=dsa> RDF format </a> . We also offer a <a href=dsa-long> second file </a> that includes the first paragraph of the corresponding advisory so you can see in it what the advisory is about.<p>Older security advisories are also available: <a href=2021/> 2021 </a> , <a href=2020/> 2020 </a> , <a href=2019/> 2019 </a> , <a href=2018/> 2018 </a> , <a href=2017/> 2017 </a> , <a href=2016/> 2016 </a> , <a href=2015/> 2015 </a> , <a href=2014/> 2014 </a> , <a href=2013/> 2013 </a> , <a href=2012/> 2012 </a> , <a href=2011/> 2011 </a> , <a href=2010/> 2010 </a> , <a href=2009/> 2009 </a> , <a href=2008/> 2008 </a> , <a href=2007/> 2007 </a> , <a href=2006/> 2006 </a> , <a href=2005/> 2005 </a> , <a href=2004/> 2004 </a> , <a href=2003/> 2003 </a> , <a href=2002/> 2002 </a> , <a href=2001/> 2001 </a> , <a href=2000/> 2000 </a> , <a href=1999/> 1999 </a> , <a href=1998/> 1998 </a> , <a href=1997/> 1997 </a> and <a href=undated/> undated </a> security advisories, included for posterity.<p>Debian distributions are not vulnerable to all security problems. The <a href=https://security-tracker.debian.org/> Debian Security Tracker </a> collects all information about the vulnerability status of Debian packages, and can be searched by CVE name or by package.<h2><a id=contact name=contact> Contact Information </a></h2><p>Please read the <a href=faq> Security Team FAQ </a> before contacting us, your question may well be answered there already!<p>The <a href=faq#contact> contact information is in the FAQ </a> as well.<div class=clr></div></div><div id=footer><hr class=hidecss><p>Back to the <a href=../> Debian Project homepage </a> .<hr><div id=pageLang><div id=langSelector>This page is also available in the following languages: <div id=langContainer><a href=index.bg.html hreflang=bg lang=bg rel=alternate title=Bulgarian> Български (Bəlgarski) </a><a href=index.da.html hreflang=da lang=da rel=alternate title=Danish> dansk </a><a href=index.de.html hreflang=de lang=de rel=alternate title=German> Deutsch </a><a href=index.el.html hreflang=el lang=el rel=alternate title=Greek> Ελληνικά (Ellinika) </a><a href=index.es.html hreflang=es lang=es rel=alternate title=Spanish> español </a><a href=index.fr.html hreflang=fr lang=fr rel=alternate title=French> français </a><a href=index.gl.html hreflang=gl lang=gl rel=alternate title=Galician> Galego </a><a href=index.hr.html hreflang=hr lang=hr rel=alternate title=Croatian> hrvatski </a><a href=index.it.html hreflang=it lang=it rel=alternate title=Italian> Italiano </a><a href=index.ko.html hreflang=ko lang=ko rel=alternate title=Korean> 한국어 (Korean) </a><a href=index.hu.html hreflang=hu lang=hu rel=alternate title=Hungarian> magyar </a><a href=index.nl.html hreflang=nl lang=nl rel=alternate title=Dutch> Nederlands </a><a href=index.ja.html hreflang=ja lang=ja rel=alternate title=Japanese> 日本語 (Nihongo) </a><a href=index.nb.html hreflang=nb lang=nb rel=alternate title=Norwegian> norsk (bokmål) </a><a href=index.pl.html hreflang=pl lang=pl rel=alternate title=Polish> polski </a><a href=index.pt.html hreflang=pt lang=pt rel=alternate title=Portuguese> Português </a><a href=index.ro.html hreflang=ro lang=ro rel=alternate title=Romanian> română </a><a href=index.ru.html hreflang=ru lang=ru rel=alternate title=Russian> Русский (Russkij) </a><a href=index.sk.html hreflang=sk lang=sk rel=alternate title=Slovak> slovenčina </a><a href=index.fi.html hreflang=fi lang=fi rel=alternate title=Finnish> suomi </a><a href=index.sv.html hreflang=sv lang=sv rel=alternate title=Swedish> svenska </a><a href=index.vi.html hreflang=vi lang=vi rel=alternate title=Vietnamese> Tiếng Việt </a><a href=index.uk.html hreflang=uk lang=uk rel=alternate title=Ukrainian> українська (ukrajins'ka) </a><a title="Chinese (China)"href=index.zh-cn.html hreflang=zh-CN lang=zh-CN rel=alternate> 中文(简) </a><a title="Chinese (Hong Kong)"href=index.zh-hk.html hreflang=zh-HK lang=zh-HK rel=alternate> 中文(HK) </a><a title="Chinese (Taiwan)"href=index.zh-tw.html hreflang=zh-TW lang=zh-TW rel=alternate> 中文(繁) </a></div> How to set <a href=../intro/cn> the default document language </a></div></div><hr><div id=footermap><p><strong> <a href=/> Home </a> </strong><ul id=footermap-cola><li><a href=../intro/about> About </a> <ul><li><a href=../social_contract> Social Contract </a><li><a href=../code_of_conduct> Code of Conduct </a><li><a href=../intro/free> Free Software </a><li><a href=../partners/> Partners </a><li><a href=../donations> Donations </a><li><a href=../legal> Legal Info </a><li><a href=../legal/privacy> Data Privacy </a><li><a href=../contact> Contact Us </a></ul><li><a href=../intro/help> Help Debian </a></ul><ul id=footermap-colb><li><a href=../distrib/> Getting Debian </a> <ul><li><a href=../distrib/netinst> Network install </a><li><a href=../CD/> CD/USB ISO images </a><li><a href=../CD/vendors/> CD vendors </a><li><a href=../distrib/pre-installed> Pre-installed </a></ul><li><a href=../blends/> Pure Blends </a><li><a href=../distrib/packages> Debian Packages </a><li><a href=../devel/> Developers' Corner </a></ul><ul id=footermap-colc><li><a href=../News/> News </a> <ul><li><a href=../News/weekly/> Project News </a><li><a href=../events/> Events </a></ul><li><a href=../doc/> Documentation </a> <ul><li><a href=../releases/> Release Info </a><li><a href=../releases/stable/installmanual> Installation manual </a><li><a href=../doc/books> Debian Books </a><li><a href=https://wiki.debian.org/> Debian Wiki </a></ul></ul><ul id=footermap-cold><li><a href=../support> Support </a> <ul><li><a href=../international/> Debian International </a><li><a href=../security/> Security Information </a><li><a href=../Bugs/> Bug reports </a><li><a href=../MailingLists/> Mailing Lists </a><li><a href=https://lists.debian.org/> Mailing List Archives </a><li><a href=../ports/> Ports/Architectures </a></ul></ul><ul id=footermap-cole><li><a href=../sitemap> Site map </a><li><a href=https://search.debian.org/> Search </a><li><a href=https://bits.debian.org> The Debian Blog </a><li><a href=https://micronews.debian.org> Debian Micronews </a><li><a href=https://planet.debian.org> Debian Planet </a></ul></div><div id=fineprint><p>To report a problem with the web site, please e-mail our publicly archived mailing list <a href=mailto:debian-www@lists.debian.org> debian-www@lists.debian.org </a> in English. For other contact information, see the Debian <a href=../contact> contact page </a> . Web site source code is <a href=https://salsa.debian.org/webmaster-team/webwml> available </a> .<p>Last Modified: Mon, Apr 13 07:24:52 UTC 2020   Last Built: Wed, Feb 17 03:31:30 UTC 2021 <br> Copyright © 1997-2021 <a href=https://www.spi-inc.org/> SPI </a> and others; See <a href=../license rel=copyright> license terms </a> <br> Debian is a registered <a href=../trademark> trademark </a> of Software in the Public Interest, Inc.</div></div>