DLA-718-1 vim - security update

Bulletin has no description...

DLA-716-1 tiff - security update

Bulletin has no description...

Debian DLA-713-1 : sniffit security update

It was discovered that there was a buffer overflow in the packet sniffer and monitoring tool 'sniffit' which allowed a specially crafted configuration file to provide a root shell. For Debian 7 'Wheezy', this issue has been fixed in sniffit version 0.3.7.beta-16.1+deb7u1. We recommend that you...

Debian DLA-715-1 : drupal7 security update

Multiple vulnerabilities have been found in the Drupal content management framework. For additional information, please refer to the upstream advisory at https://www.drupal.org/SA-CORE-2016-005. For Debian 7 'Wheezy', these problems have been fixed in version 7.14-2+deb7u15. We recommend that you...

DLA-717-1 moin - security update

Bulletin has no description...

[SECURITY] [DLA 715-1] drupal7 security update

Package : drupal7 Version : 7.14-2+deb7u15 CVE ID : CVE-2016-9449 CVE-2016-9451 Multiple vulnerabilities have been found in the Drupal content management framework. For additional information, please refer to the upstream advisory at https://www.drupal.org/SA-CORE-2016-005. For Debian 7 "Wheezy",...

[SECURITY] [DLA 713-1] sniffit security update

Package : sniffit Version : 0.3.7.beta-16.1+deb7u1 CVE ID : CVE-2014-5439 Debian Bug : 845122 It was discovered that there was a buffer overflow in the packet sniffer and monitoring tool "sniffit" which allowed a specially-crafted configuration file to provide a root shell. For Debian 7 "Wheezy",...

DLA-713-1 sniffit - security update

Bulletin has no description...

Debian DLA-712-1 : gst-plugins-bad0.10 security update

CVE-2016-9445 CVE-2016-9446 Chris Evans discovered that the GStreamer plugin to decode VMware screen capture files allowed the execution of arbitrary code. He also found that an initialized buffer may lead into memory disclosure. CVE-2016-9447 Chris Evans discovered that the GStreamer 0.10 plugin...

DLA-715-1 drupal7 - security update

Bulletin has no description...

[SECURITY] [DLA 712-1] gst-plugins-bad0.10 security update

Package : gst-plugins-bad0.10 Version : 0.10.23-7.1+deb7u3 CVE ID : CVE-2016-9445 CVE-2016-9446 CVE-2016-9447 CVE-2016-9445 CVE-2016-9446 Chris Evans discovered that the GStreamer plugin to decode VMware screen capture files allowed the execution of arbitrary code. He also found that an initializ...

DLA-710-1 akonadi - security update

Bulletin has no description...

[SECURITY] [DLA 708-1] mysql-5.5 security update

Package : mysql-5.5 Version : 5.5.53-0+deb7u1 CVE ID : CVE-2016-5584 CVE-2016-7440 Debian Bug : 841050 Several issues have been discovered in the MySQL database server. The vulnerabilities are addressed by upgrading MySQL to the new upstream version 5.5.53, which includes additional changes, such...

DLA-708-1 mysql-5.5 - security update

Bulletin has no description...

[SECURITY] [DLA 707-1] sudo security update

Package : sudo Version : 1.8.5p2-1+nmu3+deb7u2 CVE ID : CVE-2016-7032 CVE-2016-7076 Debian Bug : 842507 It was discovered that the sudo noexec restriction could have been bypassed if application run via sudo executed system, popen or wordexp C library functions with a user supplied argument. A...

DLA-706-1 python-django - security update

Bulletin has no description...

Debian DLA-705-1 : python-imaging security update

It was discovered that there were a number of memory overflow issues in in python-imaging, a Python image manipulation library. For Debian 7 'Wheezy', this issue has been fixed in python-imaging version 1.1.7-4+deb7u3. We recommend that you upgrade your python-imaging packages. NOTE: Tenable...

[SECURITY] [DLA 705-1] python-imaging security update

Package : python-imaging Version : 1.1.7-4+deb7u3 CVE IDs : CVE-2016-9189 CVE-2016-9190 It was discovered that there were a number of memory overflow issues in in python-imaging, a Python image manipulation library. For Debian 7 "Wheezy", this issue has been fixed in python-imaging version...

DLA-705-1 python-imaging - security update

Bulletin has no description...

Debian DLA-702-1 : tzdata new upstream version

This update includes the changes in tzdata 2016i. Notable changes are : - Pacific/Tongatapu DST starting on 2016-11-06 at 02:00. - Northern Cyprus is now +03 year round, the Asia/Famagusta zone has been added. - Antarctica/Casey switched from +08 to +11 on 2016-10-22. For Debian 7 'Wheezy', these...