The following updates has been released for Debian GNU/Linux:

Debian GNU/Linux 8 LTS:
DLA 1734-1: libraw security update

Debian GNU/Linux 9:
DSA 4418-1: dovecot security update

DLA 1734-1: libraw security update

Package : libraw
Version : 0.16.0-9+deb8u4
CVE ID : CVE-2018-5800 CVE-2018-5801 CVE-2018-5802 CVE-2018-5808
CVE-2018-5817 CVE-2018-5818 CVE-2018-5819


Secunia Research has discovered multiple vulnerabilities in libraw, a
raw image decoder library, which can be exploited to cause a Denial of
Service.
The issues contain divisions by zero, out-of-bounds read memory access,
heap-based buffer overflows and NULL pointer dereferences.


For Debian 8 "Jessie", these problems have been fixed in version
0.16.0-9+deb8u4.

We recommend that you upgrade your libraw packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

DSA 4418-1: dovecot security update

- -------------------------------------------------------------------------
Debian Security Advisory DSA-4418-1 security@debian.org
https://www.debian.org/security/ Salvatore Bonaccorso
March 28, 2019 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : dovecot
CVE ID : CVE-2019-7524

A vulnerability was discovered in the Dovecot email server. When reading
FTS or POP3-UIDL headers from the Dovecot index, the input buffer size
is not bounds-checked. An attacker with the ability to modify dovecot
indexes, can take advantage of this flaw for privilege escalation or the
execution of arbitrary code with the permissions of the dovecot user.
Only installations using the FTS or pop3 migration plugins are affected.

For the stable distribution (stretch), this problem has been fixed in
version 1:2.2.27-3+deb9u4.

We recommend that you upgrade your dovecot packages.

For the detailed security status of dovecot please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/dovecot

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/