[SECURITY] [DLA 735-1] gst-plugins-base0.10 security update

Package : gst-plugins-base0.10 Version : 0.10.36-1.1+deb7u1 CVE ID : CVE-2016-9811 An out of bounds heap read issue was found in gst-plugins-base0.10. For Debian 7 "Wheezy", these problems have been fixed in version 0.10.36-1.1+deb7u1. We recommend that you upgrade your gst-plugins-base0.10...

DLA-738-1 spip - security update

Bulletin has no description...

Debian DLA-736-1 : gst-plugins-bad0.10 security update

An out of bounds heap bug was found in the H264 parser in gst-plugins-bad0.10. For Debian 7 'Wheezy', these problems have been fixed in version 0.10.23-7.1+deb7u4. We recommend that you upgrade your gst-plugins-bad0.10 packages. NOTE: Tenable Network Security has extracted the preceding descripti...

DLA-737-1 roundcube - security update

Bulletin has no description...

Debian DLA-735-1 : gst-plugins-base0.10 security update

An out of bounds heap read issue was found in gst-plugins-base0.10. For Debian 7 'Wheezy', these problems have been fixed in version 0.10.36-1.1+deb7u1. We recommend that you upgrade your gst-plugins-base0.10 packages. NOTE: Tenable Network Security has extracted the preceding description block...

DLA-734-1 mapserver - security update

Bulletin has no description...

DLA-736-1 gst-plugins-bad0.10 - security update

Bulletin has no description...

Debian DLA-734-1 : mapserver security update

It was discovered that there was an information leakage vulnerability in mapserver, a CGI-based framework for Internet map services. For Debian 7 'Wheezy', this issue has been fixed in mapserver version 6.0.1-3.2+deb7u3. We recommend that you upgrade your mapserver packages. NOTE: Tenable Network...

[SECURITY] [DLA 732-2] monit regression update

Package : monit Version : 1:5.4-2+deb7u2 CVE ID : CVE-2016-7067 Debian Bug : 847196 The update for monit issued as DLA-732-1 causes monit to segfault at actions such as start/stop/restart. This update fixes the regression. For reference the original advisory text follows. Adith Sudhakar discovere...

Debian DLA-732-3 : monit regression update

The update for monit issued as DLA-732-1 causes monit to segfault when using the collector function meant to provide data to M/Monit. This update fixes the regression. For reference the original advisory text follows. Adith Sudhakar discovered a cross-site request forgery CSRF issue in monit, a...

Debian DLA-733-1 : openafs security update

It was discovered that there was an information leak vulnerability in openafs, a distributed filesystem. Due to incomplete initialization or clearing of reused memory, OpenAFS directory objects are likely to contain 'dead' directory entry information. For Debian 7 'Wheezy', this issue has been...

[SECURITY] [DLA 733-1] openafs security update

Package : openafs Version : 1.6.1-3+deb7u7 CVE ID : CVE-2016-9772 It was discovered that there was an information leak vulnerability in openafs, a distributed filesystem. Due to incomplete initialization or clearing of reused memory, OpenAFS directory objects are likely to contain dead directory...

[SECURITY] [DLA 732-1] monit security update

Package : monit Version : 5.4-2+deb7u1 CVE ID : CVE-2016-7067 Adith Sudhakar discovered a cross-site request forgery CSRF issue in monit, a utility for monitoring hosts and services. An attacker could cause an authenticated admin to change monitoring for hosts/services through a forged link. This...

[SECURITY] [DLA 731-1] imagemagick security update

Package : imagemagick Version : 8:6.7.7.10-5+deb7u8 CVE ID : CVE-2014-9805 CVE-2014-9806 CVE-2014-9807 CVE-2014-9808 CVE-2014-9809 CVE-2014-9810 CVE-2014-9811 CVE-2014-9812 CVE-2014-9813 CVE-2014-9814 CVE-2014-9815 CVE-2014-9816 CVE-2014-9817 CVE-2014-9818 CVE-2014-9819 CVE-2014-9821 CVE-2014-982...

Debian DLA-731-2 : imagemagick regression update

The update for imagemagick issued as DLA-731-1 caused regressions when decoding properties of certain images. Updated packages are now available to address this problem. For reference, the original advisory text follows. Several issues have been discovered in ImageMagick, a popular set of program...

DLA-732-1 monit - security update

Bulletin has no description...

Debian DLA-730-1 : firefox-esr security update

Multiple security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors, buffer overflows and other implementation errors may lead to the execution of arbitrary code or bypass of the same-origin policy. A man-in-the-middle attack in the addon update mechanism ha...

[SECURITY] [DLA 728-1] tomcat6 security update

Package : tomcat6 Version : 6.0.45+dfsg-1deb7u3 CVE ID : CVE-2016-0762 CVE-2016-5018 CVE-2016-6794 CVE-2016-6796 CVE-2016-6797 CVE-2016-6816 CVE-2016-8735 Debian Bug : 841655 842662 842663 842664 842665 842666 845385 Multiple security vulnerabilities have been discovered in the Tomcat servlet and...

DLA-728-1 tomcat6 - security update

Bulletin has no description...

Debian DLA-727-1 : gst-plugins-good0.10 security update

Chris Evans discovered that the GStreamer 0.10 plugin used to decode files in the FLIC format allowed execution of arbitrary code. Further details can be found in his advisory at https://scarybeastsecurity.blogspot.de/2016/11/0day-exploit-advancing- exploitati on.html This update removes the...