[SECURITY] [DLA 625-1] curl security update

Package : curl Version : 7.26.0-1+wheezy16 CVE ID : CVE-2016-7167 Debian Bug : 837945 It was discovered that the four four libcurl functions curlescape, curleasyescape, curlunescape and curleasyunescape accepted negative sting length inputs. For Debian 7 "Wheezy", these problems have been fixed i...

DLA-625-1 curl - security update

Bulletin has no description...

[SECURITY] [DLA 624-1] mysql-5.5 security update

Package : mysql-5.5 Version : 5.5.52-0+deb7u1 CVE ID : CVE-2016-6662 Dawid Golunski discovered that the mysqldsafe wrapper provided by the MySQL database server insufficiently restricted the load path for custom malloc implementations, which could result in privilege escalation. The vulnerability...

DLA-624-1 mysql-5.5 - security update

Bulletin has no description...

[SECURITY] [DLA 621-1] autotrace security update

Package : autotrace Version : 0.31.1-16+deb7u1 CVE ID : CVE-2016-7392 Autotrace is a program for converting bitmaps to vector graphics. It had a bug that caused an out-of-bounds write. This was caused by not allocating sufficient memory to store the terminating NULL pointer in an array. For Debia...

DLA-622-1 tomcat6 - security update

Bulletin has no description...

DLA-621-1 autotrace - security update

Bulletin has no description...

[SECURITY] [DLA 620-1] libphp-adodb security update

Package : libphp-adodb Version : 5.15-1+deb7u1 Debian Bugs : 837211, 837418 It was discovered that there was a SQL injection vulnerability in libphp-adodb, PHP database abstraction layer library. For Debian 7 "Wheezy", this issue has been fixed in libphp-adodb version 5.15-1+deb7u1. We recommend...

DLA-620-1 libphp-adodb - security update

Bulletin has no description...

Debian DLA-619-1 : qemu-kvm security update

qemu-kvm built with the VirtFS, host directory sharing via Plan 9 File System 9pfs support, is vulnerable to a directory/path traversal issue. It could occur while creating or accessing files on a shared host directory. A privileged user inside guest could use this flaw to access undue files on t...

Debian DLA-614-1 : xen security update

Multiple vulnerabilities have been discovered in the Xen hypervisor. The Common Vulnerabilities and Exposures project identifies the following problems : CVE-2016-7092 XSA-185 Jeremie Boutoille of Quarkslab and Shangcong Luan of Alibaba discovered a flaw in the handling of L3 pagetable entries,...

Debian DLA-618-1 : qemu security update

Quick EmulatorQemu built with the VirtFS, host directory sharing via Plan 9 File System9pfs support, is vulnerable to a directory/path traversal issue. It could occur while creating or accessing files on a shared host directory. A privileged user inside guest could use this flaw to access undue...

Debian DLA-617-1 : libarchive security update

Several security vulnerabilities have been discovered in libarchive, a multi-format archive and compression library. An attacker could take advantage of these flaws to cause an out of bounds read or a denial of service against an application using the libarchive12 library using a carefully crafte...

[SECURITY] [DLA 619-1] qemu-kvm security update

Package : qemu-kvm Version : 1.1.2+dfsg-6+deb7u15 CVE ID : CVE-2016-7116 qemu-kvm built with the VirtFS, host directory sharing via Plan 9 File System 9pfs support, is vulnerable to a directory/path traversal issue. It could occur while creating or accessing files on a shared host directory. A...

DLA-619-1 qemu-kvm - security update

Bulletin has no description...

DLA-618-1 qemu - security update

Bulletin has no description...

DLA-617-1 libarchive - security update

Bulletin has no description...

[SECURITY] [DLA 616-1] curl security update

Package : curl Version : 7.26.0-1+wheezy15 CVE ID : CVE-2016-7141 Debian Bug : 836918 It was discovered that libcurl built on top of NSS Network Security Services incorrectly re-used client certificates if a certificate from file was used for one TLS connection but no certificate set for a...

DLA-616-1 curl - security update

Bulletin has no description...

Debian DLA-613-1 : roundcube security update

Multiple CSRF and XSS issues allow remote attackers to hijack the authentication and execute roundcube operations without the consent of the user. In some cases, this could result in data loss or data theft. CVE-2014-9587 Multiple cross-site request forgery CSRF vulnerabilities in allow remote...