The following updates has been released for Debian GNU/Linux 8 LTS:
DLA 1976-1: imapfilter security update
DLA 1977-1: libvncserver security update
DLA 1976-1: imapfilter security update
DLA 1977-1: libvncserver security update
DLA 1976-1: imapfilter security update
Package : imapfilter
Version : 1:2.5.2-2+deb8u1
CVE ID : CVE-2016-10937
Debian Bug : 939702
The imapfilter tool, a utility for scripting IMAP operations in lua,
lacked server name / certificate peer hostname validation support.
For Debian 8 "Jessie", this problem has been fixed in version
1:2.5.2-2+deb8u1.
We recommend that you upgrade your imapfilter packages.
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
DLA 1977-1: libvncserver security update
Package : libvncserver
Version : 0.9.9+dfsg2-6.1+deb8u6
CVE ID : CVE-2019-15681
Debian Bug : 943793
LibVNC contained a memory leak (CWE-655) in VNC server code, which
allowed an attacker to read stack memory and could be abused for
information disclosure.
For Debian 8 "Jessie", this problem has been fixed in version
0.9.9+dfsg2-6.1+deb8u6.
We recommend that you upgrade your libvncserver packages.
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
