2190 matches found
Debian DLA-753-1 : tomcat7 security update
Paul Szabo discovered a potential privilege escalation that could be exploited in the situation envisaged in DLA-622-1. This update also addresses several regressions stemming from incomplete fixes for CVE-2015-5345, CVE-2016-5018 and CVE-2016-6797. For Debian 7 'Wheezy', these problems have been...
Debian DLA-748-1 : libupnp4 security update
Scott Tenaglia discovered a heap-based buffer overflow in libupnp4, a portable SDK for UPnP Devices. That can lead to denial of service or remote code execution. For Debian 7 'Wheezy', these problems have been fixed in version 1.8.0svn20100507-1.2+deb7u1. We recommend that you upgrade your libupn...
Debian DLA-746-2 : tomcat6 regression update
The last security update introduced a regression due to the use of StringManager in the ResourceLinkFactory class. The code was removed again since it is not strictly required to resolve CVE-2016-6797. For Debian 7 'Wheezy', these problems have been fixed in version 6.0.45+dfsg-1deb7u5. We...
Debian DLA-751-1 : nagios3 security update
Nagios was found to be vulnerable to two security issues that, when combined, lead to a remote root code execution vulnerability. Fortunately, the hardened permissions of the Debian package limit the effect of those to information disclosure, but privilege escalation to root is still possible...
Debian DLA-745-1 : most security update
The most pager can automatically open files compressed with gzip, bzip2 and in Debian LZMA. Alberto Garcia discovered that Debian's version of most was susceptible for a shell injection attack that could be exploited to run arbitrary commands on the user's computer. For Debian 7 'Wheezy', these...
Debian DLA-750-1 : game-music-emu security update
Chris Evans found several issues in the emulation code in game-music-emu that could lead to arbitrary code execution. For Debian 7 'Wheezy', these problems have been fixed in version 0.5.5-2+deb7u1. We recommend that you upgrade your game-music-emu packages. NOTE: Tenable Network Security has...
Debian DLA-744-1 : icu security update
Brief introduction CVE-2014-9911 Michele Spagnuolo discovered a buffer overflow vulnerability which might allow remote attackers to cause a denial of service or possibly execute arbitrary code via crafted text. CVE-2016-7415 A stack-based buffer overflow might allow an attacker with control of th...
Debian DLA-747-1 : libupnp security update
Scott Tenaglia discovered a heap-based buffer overflow in libupnp, a portable SDK for UPnP Devices. That can lead to denial of service or remote code execution. For Debian 7 'Wheezy', these problems have been fixed in version 1:1.6.17-1.2+deb7u2. We recommend that you upgrade your libupnp package...
[SECURITY] [DLA 753-1] tomcat7 security update
Package : tomcat7 Version : 7.0.28-4+deb7u8 CVE ID : CVE-2016-9774 Debian Bug : 845393 845425 846298 Paul Szabo discovered a potential privilege escalation that could be exploited in the situation envisaged in DLA-622-1. This update also addresses several regressions stemming from incomplete fixe...
DLA-753-1 tomcat7 - security update
Bulletin has no description...
[SECURITY] [DLA 746-2] tomcat6 regression update
Package : tomcat6 Version : 6.0.45+dfsg-1deb7u5 Debian Bug : 848492 The last security update introduced a regression due to the use of StringManager in the ResourceLinkFactory class. The code was removed again since it is not strictly required to resolve CVE-2016-6797. For Debian 7 "Wheezy", thes...
[SECURITY] [DLA 752-1] icedove security update
Package : icedove Version : 45.5.1-1deb7u1 CVE ID : CVE-2016-5290 CVE-2016-5291 CVE-2016-5296 CVE-2016-5297 CVE-2016-9066 CVE-2016-9074 CVE-2016-9079 Multiple security issues have been found in Icedove, Debians version of the Mozilla Thunderbird mail client: Multiple memory safety errors,...
[SECURITY] [DLA 751-1] nagios3 security update
Package : nagios3 Version : 3.4.1-3+deb7u3 CVE ID : CVE-2016-9565 CVE-2016-9566 Nagios was found to be vulnerable to two security issues that, when combined, lead to a remote root code execution vulnerability. Fortunately, the hardened permissions of the Debian package limit the effect of those t...
DLA-752-1 icedove - security update
Bulletin has no description...
[SECURITY] [DLA 750-1] game-music-emu security update
Package : game-music-emu Version : 0.5.5-2+deb7u1 CVE ID : CVE-2016-9957 CVE-2016-9958 CVE-2016-9959 CVE-2016-9960 CVE-2016-9961 Chris Evans found several issues in the emulation code in game-music-emu that could lead to arbitrary code execution. For Debian 7 "Wheezy", these problems have been...
[SECURITY] [DLA 748-1] libupnp4 security update
Package : libupnp4 Version : 1.8.0svn20100507-1.2+deb7u1 CVE ID : CVE-2016-8863 Scott Tenaglia discovered a heap-based buffer overflow in libupnp4, a portable SDK for UPnP Devices. That can lead to denial of service or remote code execution. For Debian 7 "Wheezy", these problems have been fixed i...
[SECURITY] [DLA 745-1] most security update
Package : most Version : 5.0.0a-2.2 CVE ID : CVE-2016-1253 Debian Bug : 848132 The most pager can automatically open files compressed with gzip, bzip2 and in Debian LZMA. Alberto Garcia discovered that Debians version of most was susceptible for a shell injection attack that could be exploited to...
[SECURITY] [DLA 744-1] icu security update
Package : icu Version : 4.8.1.1-12+deb7u6 CVE ID : CVE-2014-9911 CVE-2016-7415 Debian Bug : 838694 Brief introduction CVE-2014-9911 Michele Spagnuolo discovered a buffer overflow vulnerability which might allow remote attackers to cause a denial of service or possibly execute arbitrary code via...