2190 matches found
DLA-656-1 libdbd-mysql-perl - security update
Bulletin has no description...
DLA-655-1 mpg123 - security update
Bulletin has no description...
[SECURITY] [DLA 654-1] libxfixes security update
Package : libxfixes Version : 1:5.0-4+deb7u2 CVE ID : CVE-2016-7944 Debian Bug : 840442 It was discovered that there was a integer overflow in libxfixes, a library providing a client interface to the X11 XFIXES extension. The 32 bit field "rep.length" was not checked for validity, which allowed a...
DLA-654-1 libxfixes - security update
Bulletin has no description...
Debian DLA-652-1 : qemu security update
Multiple vulnerabilities have been found in QEMU : CVE-2016-7161 Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU aka Quick Emulator allows attackers to execute arbitrary code on the QEMU host via a large ethlite packet. CVE-2016-7170 The vmsvgafiforun function...
[SECURITY] [DLA 653-1] qemu-kvm security update
Package : qemu-kvm Version : 1.1.2+dfsg-6+deb7u16 CVE ID : CVE-2016-7161 CVE-2016-7170 CVE-2016-7908 Multiple vulnerabilities have been found in qemu-kvm: CVE-2016-7161 Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in qemu-kvm allows attackers to execute arbitrary...
[SECURITY] [DLA 651-1] graphicsmagick security update
Package : graphicsmagick Version : 1.3.16-1.1+deb7u4 CVE ID : CVE-2016-7446 CVE-2016-7447 CVE-2016-7449 CVE-2016-7800 Debian Bug : Various security issues were found and fixed in graphicsmagick in Debian wheezy LTS. CVE-2016-7446 Heap buffer overflow issue in MVG/SVG rendering. CVE-2016-7447 Heap...
DLA-653-1 qemu-kvm - security update
Bulletin has no description...
DLA-652-1 qemu - security update
Bulletin has no description...
[SECURITY] [DLA 650-1] mat security update
Package : mat Version : 0.3.2-1+deb7u1 Debian Bug : 826101 An implementation flaw was discovered in mat, the metadata anonymisation toolkit. The implementation of PDF support lacks support to anonymize the metadata in embedded images. As there is no easy fix for this flaw, it was decided that PDF...
DLA-650-1 mat - security update
Bulletin has no description...
[SECURITY] [DLA 648-1] c-ares security update
Package : c-ares Version : 1.9.1-3+deb7u1 CVE ID : CVE-2016-5180 Debian Bug : 839151 Gzob Qq discovered that the query-building functions in c-ares, an asynchronous DNS request library would not correctly process crafted query names, resulting in a heap buffer overflow and potentially leading to...
Debian DLA-646-1 : zendframework security update
CVE-2016-4861 The implementation of ORDER BY and GROUP BY in ZendDbSelect remained prone to SQL injection when a combination of SQL expressions and comments were used. This security patch provides a comprehensive solution that identifies and removes comments prior to checking validity of the...
DLA-647-1 freeimage - security update
Bulletin has no description...
DLA-648-1 c-ares - security update
Bulletin has no description...
DLA-649-1 python-django - security update
Bulletin has no description...
[SECURITY] [DLA 646-1] zendframework security update
Package : zendframework Version : 1.11.13-1.1+deb7u5 CVE ID : CVE-2016-4861 CVE-2016-4861 The implementation of ORDER BY and GROUP BY in ZendDbSelect remained prone to SQL injection when a combination of SQL expressions and comments were used. This security patch provides a comprehensive solution...
[SECURITY] [DLA 645-1] bind9 security update
Package : bind9 Version : 1:9.8.4.dfsg.P1-6+nmu2+deb7u11 CVE ID : CVE-2016-2775 CVE-2016-2776 Debian Bug : 831796 839010 CVE-2016-2775 lwresd crash with long query name Backport of upstream commit 38cc2d14e218e536e0102fa70deef99461354232. CVE-2016-2776 assertion failure due to unspecified crafted...