DLA-747-1 libupnp - security update

Bulletin has no description...

DLA-746-1 tomcat6 - security update

Bulletin has no description...

DLA-745-1 most - security update

Bulletin has no description...

Debian DLA-743-1 : firefox-esr security update

Multiple security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors, buffer overflows and other implementation errors may lead to the execution of arbitrary code or information leaks. For Debian 7 'Wheezy', these problems have been fixed in version...

DLA-743-1 firefox-esr - security update

Bulletin has no description...

Debian DLA-741-1 : unzip security update

'unzip -l' CVE-2014-9913 and 'zipinfo' CVE-2016-9844 were vulnerable to buffer overflows when provided malformed or maliciously-crafted ZIP files. For Debian 7 'Wheezy', these problems have been fixed in version 6.0-8+deb7u6. We recommend that you upgrade your unzip packages. NOTE: Tenable Networ...

[SECURITY] [DLA 741-1] unzip security update

Package : unzip Version : 6.0-8+deb7u6 CVE ID : CVE-2014-9913 CVE-2016-9844 Debian Bug : 847485 847486 "unzip -l" CVE-2014-9913 and "zipinfo" CVE-2016-9844 were vulnerable to buffer overflows when provided malformed or maliciously-crafted ZIP files. For Debian 7 "Wheezy", these problems have been...

DLA-741-1 unzip - security update

Bulletin has no description...

DLA-742-1 chrony - security update

Bulletin has no description...

[SECURITY] [DLA 732-3] monit regression update

Package : monit Version : 1:5.4-2+deb7u3 Debian Bug : 847196 The update for monit issued as DLA-732-1 causes monit to segfault when using the collector function meant to provide data to M/Monit. This update fixes the regression. For reference the original advisory text follows. Adith Sudhakar...

Debian DLA-740-1 : libgsf security update

It was discovered that there was a NULL pointer deference exploit in libgsf, a I/O abstraction library for GNOME. An error within the 'tardirectoryforfile' function could be exploited to trigger a NULL pointer dereference and subsequently cause a crash via a crafted TAR file. For Debian 7 'Wheezy...

Debian DLA-739-1 : jasper security updat

CVE-2016-8691 FPE on unknown address ... jpcdecprocesssiz ... jpcdec.c CVE-2016-8692 FPE on unknown address ... jpcdecprocesssiz ... jpcdec.c CVE-2016-8693 attempting double-free ... memclose ... jasstream.c CVE-2016-8882 segfault / NULL pointer access in jpcpidestroy CVE-2016-9560 stack-based...

DLA-732-3 monit - regression update

Bulletin has no description...

[SECURITY] [DLA 740-1] libgsf security update

Package : libgsf Version : 1.14.21-2.1+deb7u1 CVE ID : CVE-2016-9888 It was discovered that there was a null pointer deference exploit in libgsf, a I/O abstraction library for GNOME. An error within the "tardirectoryforfile" function could be exploited to trigger a null pointer dereference and...

DLA-731-2 imagemagick - regression update

Bulletin has no description...

DLA-740-1 libgsf - security update

Bulletin has no description...

DLA-739-1 jasper - security update

Bulletin has no description...

Debian DLA-737-1 : roundcube security update

It was discovered that there was a vulnerability where a remote user could execute arbitrary commands in Roundcube, a webmail solution for IMAP servers, by sending a specially crafted email. This was due to lack of sanitisation of the arguments to PHP's 'mail' function. For Debian 7 'Wheezy', thi...

[SECURITY] [DLA 737-1] roundcube security update

Package : roundcube Version : 0.7.2-9+deb7u5 Debian Bug : 847287 It was discovered that there was a vulnerability where a remote user could execute arbitrary commands in Roundcube, a webmail solution for IMAP servers, by sending a specially crafted email. This was due to lack of sanitisation of t...

[SECURITY] [DLA 736-1] gst-plugins-bad0.10 security update

Package : gst-plugins-bad0.10 Version : 0.10.23-7.1+deb7u4 CVE ID : CVE-2016-9809 An out of bounds heap bug was found in the H264 parser in gst-plugins-bad0.10. For Debian 7 "Wheezy", these problems have been fixed in version 0.10.23-7.1+deb7u4. We recommend that you upgrade your...