604 matches found
DLA-428-1 websvn - security update
Bulletin has no description...
[SECURITY] [DLA 422-1] python-imaging security update
Package : python-imaging Version : 1.1.7-2+deb6u2 CVE ID : CVE-2016-0775 Debian Bug : 813909 Two buffer overflows were discovered in python-imaging, a Python library for loading and manipulating image files, which may lead to the execution of arbitrary code. CVE-2016-0775 Buffer overflow in...
DLA-422-1 python-imaging - security update
Bulletin has no description...
Debian DLA-420-1 : libmatroska security update
It was discovered that there was a invalid memory address issue in libmatroska, an extensible open standard audio/video container format. When reading a block group or a simple block that uses EBML lacing the frame sizes indicated in the lacing weren't checked against the available number of byte...
Debian DLA-419-1 : gtk+2.0 security update
Gtk+2.0, a graphical user interface library, was susceptible to an integer overflow in its gdkcairosetsourcepixbuf function when allocating a large block of memory. For Debian 6 'Squeeze', this issue has been fixed in gtk+2.0 version 2.20.1-2+deb6u1. We recommend you to upgrade your gtk+2.0...
[SECURITY] [DLA 419-1] gtk+2.0 security update
Package : gtk+2.0 Version : 2.20.1-2+deb6u1 CVE ID : CVE-2013-7447 Debian Bug : 799275 Gtk+2.0, a graphical user interface library, was susceptible to an integer overflow in its gdkcairosetsourcepixbuf function when allocating a large block of memory. For Debian 6 "Squeeze", this issue has been...
DLA-419-1 gtk+2.0 - security update
Bulletin has no description...
Debian DLA-418-1 : wordpress security update
WordPress versions 4.4.1 and earlier are affected by two security issues: a possible Side Request Forgery Vulnerability for certain local URIs, reported by Ronni Skansing; and an open redirection attack, reported by Shailesh Suthar. CVE-2016-2221 Wordpress could be vulnerable for an open...
Debian DLA-417-1 : xdelta3 security update
It was discovered that there was a buffer overflow in in xdelta3, a diff utility which works with binary files. This vulnerability allowed arbitrary code execution from input files. For Debian 6 Squeeze, this issue has been fixed in xdelta3 version 0y.dfsg-1+deb6u1. NOTE: Tenable Network Security...
[SECURITY] [DLA 418-1] wordpress security update
Package : wordpress Version : 3.6.1+dfsg-1deb6u9 CVE ID : CVE-2016-2221 CVE-2016-2222 Debian Bug : 813697 WordPress versions 4.4.1 and earlier are affected by two security issues: a possible Side Request Forgery Vulnerability for certain local URIs, reported by Ronni Skansing; and an open...
[SECURITY] [DLA 416-1] eglibc security update
Package : eglibc Version : 2.11.3-4+deb6u11 CVE ID : CVE-2015-7547 Several vulnerabilities have been fixed in the Debian GNU C Library, eglibc: CVE-2015-7547 The Google Security Team and Red Hat discovered that the glibc host name resolver function, getaddrinfo, when processing AFUNSPEC queries f...
[SECURITY] [DLA 417-1] xdelta3 security update
Package : xdelta3 Version : 0y.dfsg-1+deb6u1 CVE ID : CVE-2014-9765 Debian Bug : 814067 It was discovered that there was a buffer overflow in in xdelta3, a diff utility which works with binary files. This vulnerability allowed arbitrary code execution from input files. For Debian 6 Squeeze, this...
DLA-416-1 eglibc - security update
Bulletin has no description...
DLA-418-1 wordpress - security update
Bulletin has no description...
DLA-417-1 xdelta3 - security update
Bulletin has no description...
[SECURITY] [DLA 415-1] cpio security update
Package : cpio Version : 2.11-4+deb6u2 CVE ID : CVE-2016-2037 Debian Bug : 812401 An out-of-bounds write was discovered in the parsing of cpio files. For Debian 6 "Squeeze", this issue has been fixed in cpio version 2.11-4+deb6u2. We recommend you to upgrade your cpio package. Learn more about th...
DLA-415-1 cpio - security update
Bulletin has no description...
[SECURITY] [DLA 411-1] eglibc security update
Package : eglibc Version : eglibc2.11.3-4+deb6u9 CVE ID : CVE-2014-9761 CVE-2015-8776 CVE-2015-8778 CVE-2015-8779 Several vulnerabilities have been fixed in the Debian GNU C Library, eglibc: CVE-2014-9761 The maths nan function wrongly handled payload strings, yielding to an unbounded stack...
Debian DLA-410-1 : openjdk-6 security update (SLOTH)
Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in breakouts of the Java sandbox, information disclosure, denial of service and insecure cryptography. CVE-2015-7575 A flaw was found in the way TLS 1.2 could use the MD5 hash functio...