DLA-687-1 tre - security update

Bulletin has no description...

Debian DLA-675-1 : potrace security update

Multiple vulnerabilities have been found in potrace. CVE-2013-7437 Multiple integer overflows in potrace 1.11 allow remote attackers to cause a denial of service crash via large dimensions in a BMP image, which triggers a buffer overflow. This bug was reported by Murray McAllister of the Red Hat...

DLA-686-1 libxtst - security update

Bulletin has no description...

[SECURITY] [DLA 686-1] libxtst security update

Package : libxtst Version : 2:1.2.1-1+deb7u2 CVE ID : CVE-2016-7951 CVE-2016-7952 Debian Bug : 840444 Tobias Stoeckmann from the OpenBSD project discovered the following vulnerability in libXtst, the X Record extension: Insufficient validation of data from the X server can cause out of boundary...

[SECURITY] [DLA 685-1] libxi security update

Package : libxi Version : 2:1.6.1-1+deb7u2 CVE ID : CVE-2016-7945 CVE-2016-7946 Debian Bug : 840440 Tobias Stoeckmann from the OpenBSD project discovered the following vulnerability in libXi, the X11 input extension library: Insufficient validation of data from the X server can cause out of...

[SECURITY] [DLA 683-1] graphicsmagick security update

Package : graphicsmagick Version : 1.3.16-1.1+deb7u5 CVE ID : CVE-2016-7448 CVE-2016-7996 CVE-2016-7997 CVE-2016-8682 CVE-2016-8683 CVE-2016-8684 Several vulnerabilities have been found in the graphicsmagick package that may lead to denial of service through failed assertions, CPU or memory usage...

[SECURITY] [DLA 682-1] libdatetime-timezone-perl new upstream version

Package : libdatetime-timezone-perl Version : 1:1.58-1+2016h This update includes the changes in tzdata up to 2016h for the Perl bindings. For the list of changes, see DLA-681-1. For Debian 7 "Wheezy", these problems have been fixed in version 1:1.58-1+2016h. We recommend that you upgrade your...

[SECURITY] [DLA 681-1] tzdata new upstream version

Package : tzdata Version : 2016h-0+deb7u1 This update includes the changes in tzdata up to 2016h. Notable changes are: - Asia/Gaza and Asia/Hebron DST ending on 2016-10-29 at 01:00, not 2016-10-21 at 00:00. - Europe/Istanbul switch from EET/EEST +02/+03 to permanent +03 on 2016-09-07. While the...

[SECURITY] [DLA 675-1] potrace security update

Package : potrace Version : 1.10-1+deb7u1 CVE ID : CVE-2013-7437 CVE-2016-8694 CVE-2016-8695 CVE-2016-8696 CVE-2016-8697 CVE-2016-8698 CVE-2016-8699 CVE-2016-8700 CVE-2016-8701 CVE-2016-8702 CVE-2016-8703 Debian Bug : 778646 Multiple vulnerabilities have been found in potrace. CVE-2013-7437...

DLA-680-1 bash - security update

Bulletin has no description...

Debian DLA-678-1 : qemu security update

Multiple vulnerabilities have been found in QEMU : CVE-2016-8576 Quick Emulator Qemu built with the USB xHCI controller emulation support is vulnerable to an infinite loop issue. It could occur while processing USB command ring in 'xhciringfetch'. CVE-2016-8577 Quick Emulator Qemu built with the...

Debian DLA-676-1 : nspr security update

The Network Security Service NSS libraries uses environment variables to configure lots of things, some of which refer to file system locations. Others can be degrade the operation of NSS in various ways, forcing compatibility modes and so on. Previously, these environment variables were not...

DLA-682-1 libdatetime-timezone-perl - new upstream version

Bulletin has no description...

DLA-681-1 tzdata - new upstream version

Bulletin has no description...

DLA-683-1 graphicsmagick - security update

Bulletin has no description...

[SECURITY] [DLA 679-1] qemu-kvm security update

Package : qemu-kvm Version : 1.1.2+dfsg-6+deb7u17 CVE ID : CVE-2016-8576 CVE-2016-8577 CVE-2016-8578 CVE-2016-8669 Multiple vulnerabilities have been found in qemu-kvm: CVE-2016-8576 qemu-kvm built with the USB xHCI controller emulation support is vulnerable to an infinite loop issue. It could...

[SECURITY] [DLA 678-1] qemu security update

Package : qemu Version : 1.1.2+dfsg-6+deb7u17 CVE ID : CVE-2016-8576 CVE-2016-8577 CVE-2016-8578 CVE-2016-8669 Multiple vulnerabilities have been found in QEMU: CVE-2016-8576 Quick Emulator Qemu built with the USB xHCI controller emulation support is vulnerable to an infinite loop issue. It could...

[SECURITY] [DLA 677-1] nss security update

Package : nss Version : 3.26-1+debu7u1 The Network Security Service NSS libraries uses environment variables to configure lots of things, some of which refer to file system locations. Others can be degrade the operation of NSS in various ways, forcing compatibility modes and so on. Previously,...

[SECURITY] [DLA 674-1] ghostscript security update

Package : ghostscript Version : 9.05dfsg-6.3+deb7u3 CVE ID : CVE-2013-5653 CVE-2016-7976 CVE-2016-7977 CVE-2016-7978 CVE-2016-7979 CVE-2016-8602 Debian Bug : 839118 839260 839841 839845 839846 840451 Several vulnerabilities were discovered in Ghostscript, the GPL PostScript/PDF interpreter, which...

Debian DLA-674-2 : ghostscript regression update

The update for ghostscript issued as DLA-674-1 caused regressions for certain Postscript document viewers evince, zathura. Updated packages are now available to address this problem. For reference, the original advisory text follows. Several vulnerabilities were discovered in Ghostscript, the GPL...