2190 matches found
DLA-577-1 redis - security update
Bulletin has no description...
DLA-573-1 qemu - security update
Bulletin has no description...
[SECURITY] [DLA 569-1] xmlrpc-epi security update
Package : xmlrpc-epi Version : 0.54.2-1+deb7u1 CVE ID : CVE-2016-6296 Integer signedness error in the simplestringaddn function in simplestring.c in xmlrpc-epi through 0.54.2 allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact...
[SECURITY] [DLA 568-1] wordpress security update
Package : wordpress Version : 3.6.1+dfsg-1deb7u11 CVE ID : CVE-2016-5387 CVE-2016-5832 CVE-2016-5834 CVE-2016-5835 CVE-2016-5838 CVE-2016-5839 Debian Bug : 828225 Several vulnerabilities were discovered in wordpress, a web blogging tool. The Common Vulnerabilities and Exposures project identifies...
DLA-568-1 wordpress - security update
Bulletin has no description...
DLA-567-1 mysql-5.5 - security update
Bulletin has no description...
DLA-569-1 xmlrpc-epi - security update
Bulletin has no description...
[SECURITY] [DLA 566-1] cakephp security update
Package : cakephp Version : 1.3.15-1+deb7u1 Debian Bug : 832283 CakePHP, an open-source web application framework for PHP, was vulnerable to SSRF Server Side Request Forgery attacks. Remote attacker can utilize it for at least DoS Denial of Service attacks, if the target application accepts XML a...
[SECURITY] [DLA 565-1] perl security update
Package : perl Version : 5.14.2-21+deb7u4 CVE ID : CVE-2016-1238 CVE-2016-6185 Debian Bug : 829578 Multiple vulnerabilities were discovered in the implementation of the Perl programming language. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2016-1238 Joh...
DLA-564-1 tardiff - security update
Bulletin has no description...
DLA-566-1 cakephp - security update
Bulletin has no description...
[SECURITY] [DLA 564-1] tardiff security update
Package : tardiff Version : 0.1-1+deb7u1 CVE ID : CVE-2015-0857 CVE-2015-0858 Two vulnerabilities were found in tardiff: CVE-2015-0857 Arbitrary command execution was possible via shell metacharacters in the name of a 1 tar file or 2 file within a tar file. CVE-2015-0858 Local users could write t...
Debian DLA-563-1 : libgd2 security update
A global out of bounds read when encoding gif from malformed input was found in this software. When given invalid inputs, we might be fed the EOF marker before it is actually the EOF. The gif logic assumes once it sees the EOF marker, there won't be any more data, so it leaves the curbits index...
[SECURITY] [DLA 563-1] libgd2 security update
Package : libgd2 Version : 2.0.36rc1dfsg-6.1+deb7u5 CVE ID : CVE-2016-6161 A global out of bounds read when encoding gif from malformed input was found in this software. When given invalid inputs, we might be fed the EOF marker before it is actually the EOF. The gif logic assumes once it sees the...
[SECURITY] [DLA 561-1] uclibc security update
Package : uclibc Version : 0.9.32-1+deb7u1 CVE ID : CVE-2016-2224 CVE-2016-2225 CVE-2016-6264 Several vulnerabilities have been discovered in uClibc, an implementation of the standard C library that is much smaller than glibc, which makes it useful for embedded systems. CVE-2016-2224 Fix possible...
DLA-563-1 libgd2 - security update
Bulletin has no description...
DLA-562-1 gosa - security update
Bulletin has no description...
DLA-561-1 uclibc - security update
Bulletin has no description...
Debian DLA-558-1 : squid security update
A security issue has been discovered in the Squid chaching proxy, on its 2.7.STABLE9 version branch. CVE-2016-4554 Jianjun Chen found that Squid was vulnerable to a header smuggling attack that could lead to cache poisoning and to bypass of same-origin security policy in Squid and some client...