DLA-765-1 qemu-kvm - security update

Bulletin has no description...

[SECURITY] [DLA 762-1] exim4 security update

Package : exim4 Version : 4.80-7+deb7u4 CVE ID : CVE-2016-9963 Bjoern Jacke discovered that Exim, Debians default mail transfer agent, may leak the private DKIM signing key to the log files if specific configuration options are met. For Debian 7 "Wheezy", these problems have been fixed in version...

DLA-762-1 exim4 - security update

Bulletin has no description...

DLA-763-1 squid3 - security update

Bulletin has no description...

DLA-764-1 qemu - security update

Bulletin has no description...

[SECURITY] [DLA 757-1] phpmyadmin security update

Package : phpmyadmin Version : 4:3.4.11.1-2+deb7u7 CVE ID : CVE-2016-4412 CVE-2016-6626 CVE-2016-9849 CVE-2016-9850 CVE-2016-9861 CVE-2016-9864 CVE-2016-9865 Various security issues where found and fixed in phpmyadmin in wheezy. CVE-2016-4412 / PMASA-2016-57 A user can be tricked in following a...

DLA-760-1 spip - security update

Bulletin has no description...

DLA-761-1 python-bottle - security update

Bulletin has no description...

DLA-759-1 nss - security update

Bulletin has no description...

[SECURITY] [DLA 758-1] libgd2 security update

Package : libgd2 Version : 2.0.36rc1dfsg-6.1+deb7u7 CVE ID : CVE-2016-9933 Debian Bug : 849038 It was discovered that invalid color causes stack exhaustion by recursive call to function gdImageFillToBorder when the image used is truecolor. The vulnerability can be exploited through php5 which use...

[SECURITY] [DLA 756-1] imagemagick security update

Package : imagemagick Version : 8:6.7.7.10-5+deb7u10 CVE ID : CVE-2016-7799 CVE-2016-8707 CVE-2016-8862 CVE-2016-8866 CVE-2016-9556 Debian Bug : 840437 845206 848139 845634 845242 845243 845195 845196 845198 845202 845212 845213 845241 845244 845246 Numerous vulnerabilities were discovered in...

Debian DLA-756-1 : imagemagick security update

Numerous vulnerabilities were discovered in ImageMagick, an image manipulation program. Issues include memory exception, heap, buffer and stack overflows, out of bound reads and missing checks. For Debian 7 'Wheezy', these problems have been fixed in version 8:6.7.7.10-5+deb7u10. The exact impact...

DLA-758-1 libgd2 - security update

Bulletin has no description...

DLA-757-1 phpmyadmin - security update

Bulletin has no description...

Debian DLA-754-1 : tor security update

It was discovered that Tor, a connection-based low-latency anonymous communication system, may read one byte past a buffer when parsing hidden service descriptors. This issue may enable a hostile hidden service to crash Tor clients depending on hardening options and malloc implementation. For...

Debian DLA-755-1 : dcmtk security update

At several places in the code a wrong length of ACSE data structures received over the network can cause overflows or underflows when processing those data structures. Related checks have been added at various places in order to prevent such possible attacks. Thanks to Kevin Basista for the repor...

DLA-755-1 dcmtk - security update

Bulletin has no description...

DLA-756-1 imagemagick - security update

Bulletin has no description...

[SECURITY] [DLA 755-1] dcmtk security update

Package : dcmtk Version : 3.6.0-12+deb7u1 CVE ID : CVE-2015-8979 Debian Bug : 848830 At several places in the code a wrong length of ACSE data structures received over the network can cause overflows or underflows when processing those data structures. Related checks have been added at various...

[SECURITY] [DLA 754-1] tor security update

Package : tor Version : 0.2.4.27-3 CVE ID : CVE-2016-1254 Debian Bug : 848847 It was discovered that Tor, a connection-based low-latency anonymous communication system, may read one byte past a buffer when parsing hidden service descriptors. This issue may enable a hostile hidden service to crash...