2190 matches found
[SECURITY] [REGRESSION] [DLA -] graphite2 regression update
Package : graphite2 Version : 1.3.6-1deb7u2 The previous upload of graphite2 on 2016-04-26 included a .shlib file which did not match the shipped shared libraries preventing packages build-depending on graphite2 libraries to build. For Debian 7 "Wheezy", these problems have been fixed in version...
Debian DLA-570-1 : kde4libs security update
It was possible to trick kde4libs's KArchiveDirectory::copyTo function to extract files to arbitrary system locations from a specially prepared tar file outside of the extraction folder. For Debian 7 'Wheezy', these problems have been fixed in version 4:4.8.4-4+deb7u2. We recommend that you upgra...
Debian DLA-566-1 : cakephp security update
CakePHP, an open source web application framework for PHP, was vulnerable to SSRF Server Side Request Forgery attacks. Remote attacker can utilize it for at least DoS Denial of Service attacks, if the target application accepts XML as an input. It is caused by insecure design of Cake's Xml class...
Debian DLA-569-1 : xmlrpc-epi security update
Integer signedness error in the simplestringaddn function in simplestring.c in xmlrpc-epi through 0.54.2 allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via a long first argument to the PHP xmlrpcencoderequest function. For...
Debian DLA-575-2 : collectd regression update
The previous upload of collectd surfaced a problem in the way the network plugin initializes gcrypt preventing the plugin from being loaded when packet signing or encryption is enabled. Previously, this may have led to program crashes. For Debian 7 'Wheezy', these problems have been fixed in...
Debian DLA-571-1 : xen security update (Bunker Buster)
Multiple vulnerabilities have been discovered in the Xen hypervisor. The Common Vulnerabilities and Exposures project identifies the following problems : CVE-2014-3672 XSA-180 Andrew Sorensen discovered that a HVM domain can exhaust the hosts disk space by filling up the log file. CVE-2016-3158,...
Debian DLA-568-1 : wordpress security update (httpoxy)
Several vulnerabilities were discovered in wordpress, a web blogging tool. The Common Vulnerabilities and Exposures project identifies the following issues. CVE-2016-5387 WordPress allows remote attackers to bypass intended access restrictions and remove a category attribute from a post via...
Debian DLA-578-1 : openssh security update
OpenSSH secure shell client and server had a user enumeration problem reported. CVE-2016-6210 User enumeration via covert timing channel For Debian 7 'Wheezy', this problem has been fixed in version 6.0p1-4+deb7u5. We recommend that you upgrade your openssh packages. NOTE: Tenable Network Securit...
DLA-580-1 graphite2 - regression update
Bulletin has no description...
DLA-579-1 openjdk-7 - security update
Bulletin has no description...
[SECURITY] [DLA 578-1] openssh security update
Package : openssh Version : 6.0p1-4+deb7u5 CVE ID : CVE-2016-6210 OpenSSH secure shell client and server had a user enumeration problem reported. CVE-2016-6210 User enumeration via covert timing channel For Debian 7 "Wheezy", this problem has been fixed in version 6.0p1-4+deb7u5. We recommend tha...
[SECURITY] [DLA 577-1] redis security update
Package : redis Version : 2:2.4.14-1+deb7u1 CVE ID : CVE-2013-7458 Debian Bug : 832460 It was discovered that the redis-cli tool in redis an in-memory key-value database created world-readable history files. For Debian 7 "Wheezy", this issue has been fixed in redis version 2:2.4.14-1+deb7u1. We...
[SECURITY] [DLA 576-1] libdbd-mysql-perl security update
Package : libdbd-mysql-perl Version : 4.021-1+deb7u1 CVE ID : CVE-2014-9906 CVE-2015-8949 Two use-after-free vulnerabilities were discovered in DBD::mysql, a Perl DBI driver for the MySQL database server. A remote attacker can take advantage of these flaws to cause a denial-of-service against an...
[SECURITY] [DLA 573-1] qemu security update
Package : qemu Version : 1.1.2+dfsg-6+deb7u14 CVE ID : CVE-2015-5239 CVE-2016-2857 CVE-2016-4020 CVE-2016-4439 CVE-2016-5403 CVE-2016-6351 Multiple vulnerabilities have been discovered in QEMU, a fast processor emulator. The Common Vulnerabilities and Exposures project identifies the following...
[SECURITY] [DLA 570-1] kde4libs security update
Package : kde4libs Version : 4:4.8.4-4+deb7u2 CVE ID : CVE-2016-6232 Debian Bug : 832620 It was possible to trick kde4libss KArchiveDirectory::copyTo function to extract files to arbitrary system locations from a specially prepared tar file outside of the extraction folder. For Debian 7 "Wheezy",...
DLA-575-1 collectd - security update
Bulletin has no description...
DLA-571-1 xen - security update
Bulletin has no description...
DLA-570-1 kde4libs - security update
Bulletin has no description...