The following updates has been released for Debian GNU/Linux:

Debian GNU/Linux 8 LTS:
DLA 1827-1: gvfs security update

Debian GNU/Linux 9:
DSA 4447-2: intel-microcode security update

DLA 1827-1: gvfs security update

Package : gvfs
Version : 1.22.2-1+deb8u1
CVE ID : CVE-2019-12795
Debian Bug : 930376

Simon McVittie discovered a flaw in gvfs, the Gnome Virtual File
System. The gvfsd daemon opened a private D-Bus server socket without
configuring an authorization rule. A local attacker could connect to
this server socket and issue D-Bus method calls.

(Note that the server socket only accepts a single connection, so the
attacker would have to discover the server and connect to the socket
before its owner does.)

For Debian 8 "Jessie", this problem has been fixed in version
1.22.2-1+deb8u1.

We recommend that you upgrade your gvfs packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

DSA 4447-2: intel-microcode security update

- -------------------------------------------------------------------------
Debian Security Advisory DSA-4447-2 security@debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
Jun 20, 2019 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : intel-microcode
CVE ID : CVE-2018-12126 CVE-2018-12127 CVE-2018-12130
CVE-2019-11091

DSA 4447-1 shipped updated CPU microcode for most types of Intel CPUs as
mitigations for the MSBDS, MFBDS, MLPDS and MDSUM hardware vulnerabilities.

This update provides additional support for some Sandybridge server
and Core-X CPUs which were not covered in the original May microcode
release. For a list of specific CPU models now supported please refer
to the entries listed under CPUID 206D6 and 206D7 at
https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf

For the stable distribution (stretch), these problems have been fixed in
version 3.20190618.1~deb9u1.

We recommend that you upgrade your intel-microcode packages.

For the detailed security status of intel-microcode please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/intel-microcode

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/