[SECURITY] [DLA 560-1] cacti security update

Package : cacti Version : 0.8.8a+dfsg-5+deb7u9 CVE ID : CVE-2016-2313 CVE-2016-3172 CVE-2016-3659 Three security issues have been found in cacti: CVE-2016-2313 authlogin.php allows remote authenticated users who use web authentication to bypass intended access restrictions by logging in as a user...

[SECURITY] [DLA 559-1] ntp security update

Package : ntp Version : 1:4.2.6.p5+dfsg-2+deb7u7 CVE ID : CVE-2015-7974 CVE-2015-7977 CVE-2015-7978 CVE-2015-7979 CVE-2015-8138 CVE-2015-8158 CVE-2016-1547 CVE-2016-1548 CVE-2016-1550 CVE-2016-2516 CVE-2016-2518 Several vulnerabilities were discovered in the Network Time Protocol daemon and utili...

[SECURITY] [DLA 558-1] squid security update

Package : squid Version : 2.7.STABLE9-4.1+deb7u2 CVE ID : CVE-2016-4554 A security issue has been discovered in the Squid chaching proxy, on its 2.7.STABLE9 version branch. CVE-2016-4554 Jianjun Chen found that Squid was vulnerable to a header smuggling attack that could lead to cache poisoning a...

Debian DLA-556-1 : squid3 security update

A buffer overflow in the Squid 3's cache manager, identified by the CVE-2016-4051, was addressed by the DLA-478-1 and the Debian package version 3.1.20-2.2+deb7u6. However, the fix was incomplete and thus a new upload has been needed. For Debian 7 'Wheezy', this problem has been fixed in version...

DLA-559-1 ntp - security update

Bulletin has no description...

DLA-558-1 squid - security update

Bulletin has no description...

[SECURITY] [DLA 556-1] squid3 security update

Package : squid3 Version : 3.1.20-2.2+deb7u6 CVE ID : CVE-2016-4051 A buffer overflow in the Squid 3s cache manager, identified by the CVE-2016-4051, was addressed by the DLA-478-1 and the Debian package version 3.1.20-2.2+deb7u6. However, the fix was incomplete and thus a new upload has been...

DLA-557-1 dietlibc - security update

Bulletin has no description...

DLA-556-1 squid3 - security update

Bulletin has no description...

Debian DLA-555-1 : python-django security update

It was discovered that Django, a high-level Python web development framework, is prone to a cross-site scripting vulnerability in the admin's add/change related popup and debug view. For Debian 7 'Wheezy', these problems have been fixed in version 1.4.5-1+deb7u17. We recommend that you upgrade yo...

[SECURITY] [DLA 554-1] libarchive security update

Package : libarchive Version : 3.0.4-3+wheezy2 CVE ID : CVE-2015-8917 CVE-2015-8919 CVE-2015-8920 CVE-2015-8921 CVE-2015-8922 CVE-2015-8923 CVE-2015-8924 CVE-2015-8925 CVE-2015-8926 CVE-2015-8930 CVE-2015-8931 CVE-2015-8932 CVE-2015-8933 CVE-2015-8934 CVE-2016-4300 CVE-2016-4302 CVE-2016-4809...

DLA-554-1 libarchive - security update

Bulletin has no description...

DLA-555-1 python-django - security update

Bulletin has no description...

[SECURITY] [DLA 553-1] apache2 security update

Package : apache2 Version : 2.2.22-13+deb7u7 CVE ID : CVE-2016-5387 Scott Geary of VendHQ discovered that the Apache HTTPD server used the value of the Proxy header from HTTP requests to initialize the HTTPPROXY environment variable for CGI scripts, which in turn was incorrectly used by certain...

DLA-553-1 apache2 - security update

Bulletin has no description...

Debian DLA-552-1 : binutils security update

Some minor security issues have been identified and fixed in binutils in Debian LTS. These are : CVE-2016-2226 Exploitable buffer overflow. CVE-2016-4487 Invalid write due to a use-after-free to array btypevec. CVE-2016-4488 Invalid write due to a use-after-free to array ktypevec. CVE-2016-4489...

[SECURITY] [DLA 552-1] binutils security update

Package : binutils Version : 2.22-8+deb7u3 CVE ID : CVE-2016-2226 CVE-2016-4487 CVE-2016-4488 CVE-2016-4489 CVE-2016-4490 CVE-2016-4492 CVE-2016-4493 CVE-2016-6131 Some minor security issues have been identified and fixed in binutils in Debian LTS. These are: CVE-2016-2226 Exploitable buffer...

Debian DLA-550-1 : drupal7 security update

It was discovered that there was a vulnerability existed in the user module in drupal7, a content management framework. If some specific contributed or custom code triggers a rebuild of the user profile form, a registered user can be granted all user roles on the site. This would typically result...

[SECURITY] [DLA 551-1] phpmyadmin security update

Package : phpmyadmin Version : 4:3.4.11.1-2+deb7u5 CVE ID : CVE-2016-5731 CVE-2016-5733 CVE-2016-5739 Phpmyadmin, a web administration tool for MySQL, had several Cross Site Scripting XSS vulnerabilities were reported. CVE-2016-5731 With a specially crafted request, it is possible to trigger an X...

[SECURITY] [DLA 550-1] drupal7 security update

Package : drupal7 Version : 7.14-2+deb7u14 CVE ID : CVE-2016-6211 It was discovered that there was a vulnerability existed in the user module in drupal7, a content management framework. If some specific contributed or custom code triggers a rebuild of the user profile form, a registered user can ...