DLA-550-1 drupal7 - security update

Bulletin has no description...

DLA-549-1 ruby-eventmachine - security update

Bulletin has no description...

Debian DLA-548-1 : drupal7 security update

It was discovered that there was an open redirect vulnerability in drupal7, a content management framework. The 'Overlay' module in Drupal core displays administrative pages as a layer over the current page using JavaScript rather than replacing the page in the browser window. The module did not...

Debian DLA-574-1 : qemu-kvm security update

Multiple vulnerabilities have been discovered in qemu-kvm, a full virtualization solution on x86 hardware. The Common Vulnerabilities and Exposures project identifies the following problems : CVE-2015-5239 Lian Yihan discovered that QEMU incorrectly handled certain payload messages in the VNC...

[SECURITY] [DLA 548-1] drupal7 security update

Package : drupal7 Version : 7.14-2+deb7u13 CVE ID : CVE-2015-7943 It was discovered that there was an open redirect vulnerability in drupal7, a content management framework. The "Overlay" module in Drupal core displays administrative pages as a layer over the current page using JavaScript rather...

[SECURITY] [DLA 574-1] graphicsmagick security update

Package : graphicsmagick Version : 1.3.16-1.1+deb7u3 CVE IDs : 2016-5240 2016-5241 It was discovered that there were two denial of service vulnerabilities in graphicsmagick, a collection of image processing tools: CVE-2016-5240: Prevent denial-of-service by detecting and rejecting negative...

DLA-548-1 drupal7 - security update

Bulletin has no description...

[SECURITY] [DLA 546-1] clamav version update

Package : clamav Version : 0.99.2+dfsg-0+deb7u1 We recommend that you upgrade your clamav packages. Upstream published version 0.99.2. This update updates wheezy-lts to the latest upstream release in line with the approach used for other Debian releases. The changes are not strictly required for...

Debian DLA-546-2 : clamav version update

DLA 546-1 was incorrectly released before updated clamav packages were available and there were subsequent issues with the acceptance of the package which have since been corrected. Updates are now available for all supported LTS architectures. We recommend that you upgrade your clamav packages...

DLA-546-1 clamav - security update

Bulletin has no description...

DLA-544-1 tcpreplay - security update

Bulletin has no description...

[SECURITY] [DLA 543-1] sqlite3 security update

Package : sqlite3 Version : 3.7.13-1+deb7u3 CVE ID : CVE-2016-6153 It was discovered that sqlite3, a C library that implements a SQL database engine, would reject a temporary directory e.g., as specified by the TMPDIR environment variable to which the executing user did not have read permissions...

Debian DLA-543-1 : sqlite3 security update

It was discovered that sqlite3, a C library that implements a SQL database engine, would reject a temporary directory e.g., as specified by the TMPDIR environment variable to which the executing user did not have read permissions. This could result in information leakage as less secure global...

Debian DLA-540-1 : qemu security update

Several vulnerabilities were discovered in qemu, a fast processor emulator. CVE-2016-3710 Wei Xiao and Qinghao Tang of 360.cn Inc discovered an out-of-bounds read and write flaw in the QEMU VGA module. A privileged guest user could use this flaw to execute arbitrary code on the host with the...

DLA-543-1 sqlite3 - security update

Bulletin has no description...

Debian DLA-541-1 : libvirt security update

It was discovered that there was a password policy issue in libvirt, a library for interfacing with different virtualization systems. Setting an empty graphics password is documented as a way to disable VNC/SPICE access, but QEMU does not always behave like that. VNC would happily accept the empt...

Debian DLA-539-1 : qemu-kvm security update

Several vulnerabilities were discovered in qemu-kvm, a full virtualization solution for Linux hosts on x86 hardware with x86 guests. CVE-2016-3710 Wei Xiao and Qinghao Tang of 360.cn Inc discovered an out-of-bounds read and write flaw in the QEMU VGA module. A privileged guest user could use this...

[SECURITY] [DLA 540-1] qemu security update

Package : qemu Version : 1.1.2+dfsg-6a+deb7u13 CVE ID : CVE-2016-3710 CVE-2016-3712 Debian Bug : 823830 Several vulnerabilities were discovered in qemu, a fast processor emulator. CVE-2016-3710 Wei Xiao and Qinghao Tang of 360.cn Inc discovered an out-of-bounds read and write flaw in the QEMU VGA...

[SECURITY] [DLA 541-1] libvirt security update

Package : libvirt Version : 0.9.12.3-1+deb7u2 CVE ID : CVE-2016-5008 It was discovered that there was a password policy issue in libvirt, a library for interfacing with different virtualization systems. Setting an empty graphics password is documented as a way to disable VNC/SPICE access, but QEM...

[SECURITY] [DLA 539-1] qemu-kvm security update

Package : qemu-kvm Version : 1.1.2+dfsg-6+deb7u13 CVE ID : CVE-2016-3710 CVE-2016-3712 Several vulnerabilities were discovered in qemu-kvm, a full virtualization solution for Linux hosts on x86 hardware with x86 guests. CVE-2016-3710 Wei Xiao and Qinghao Tang of 360.cn Inc discovered an...