2190 matches found
Debian DLA-538-1 : wireshark security update
The following vulnerabilities have been discovered in the Wheezy's Wireshark version : CVE-2016-5350 The SPOOLS dissector could go into an infinite loop CVE-2016-5351 The IEEE 802.11 dissector could crash CVE-2016-5353 The UMTS FP dissector could crash CVE-2016-5354 Some USB dissectors could cras...
DLA-539-1 qemu-kvm - security update
Bulletin has no description...
DLA-540-1 qemu - security update
Bulletin has no description...
Debian DLA-537-1 : roundcube security update
Roundcube, a webmail solution for IMAP servers, was susceptible to cross-site-scripting XSS vulnerabilities when handling SVG images. When right-clicking on the download link of an attached image, it was possible that embedded JavaScript could be executed in a separate Tab. The update disables...
Debian DLA-534-1 : libgd2 security update
CVE-2016-5766 Integer Overflow in gd2GetHeader resulting in heap overflow. For Debian 7 'Wheezy', these problems have been fixed in version 2.0.36rc1dfsg-6.1+deb7u4. We recommend that you upgrade your libgd2 packages. NOTE: Tenable Network Security has extracted the preceding description block...
[SECURITY] [DLA 538-1] wireshark security update
Package : wireshark Version : 1.12.1+g01b65bf-4+deb8u6deb7u2 CVE ID : CVE-2016-5350 CVE-2016-5351 CVE-2016-5353 CVE-2016-5354 CVE-2016-5355 CVE-2016-5356 CVE-2016-5357 CVE-2016-5359 The following vulnerabilities have been discovered in the Wheezys Wireshark version: CVE-2016-5350 The SPOOLS...
[SECURITY] [DLA 536-1] wget security update
Package : wget Version : 1.13.4-3+deb7u3 CVE ID : CVE-2016-4971 Debian Bug : 827003 On a server redirect from HTTP to a FTP resource, wget would trust the HTTP server and uses the name in the redirected URL as the destination filename. This behaviour was changed and now it works similarly as a...
DLA-538-1 wireshark - security update
Bulletin has no description...
DLA-536-1 wget - security update
Bulletin has no description...
[SECURITY] [DLA 534-1] libgd2 security update
Package : libgd2 Version : 2.0.36rc1dfsg-6.1+deb7u4 CVE ID : CVE-2016-5766 CVE-2016-5766 Integer Overflow in gd2GetHeader resulting in heap overflow. For Debian 7 "Wheezy", these problems have been fixed in version 2.0.36rc1dfsg-6.1+deb7u4. We recommend that you upgrade your libgd2 packages...
[SECURITY] [DLA 533-1] php5 security update
Package : php5 Version : 5.4.45-0+deb7u4 CVE ID : CVE-2016-5093 CVE-2016-5094 CVE-2016-5095 CVE-2016-5096 PHP bugs : 70661 70728 70741 70480 CVE-2016-5093.patch Absence of null character causes unexpected zendstring length and leaks heap memory. The test script uses localegetprimarylanguage to...
DLA-533-1 php5 - security update
Bulletin has no description...
DLA-535-1 xerces-c - security update
Bulletin has no description...
DLA-534-1 libgd2 - security update
Bulletin has no description...
Debian DLA-532-1 : movabletype-opensource security update
It was discovered that there was a SQL injection vulnerability in the XML-RPC interface in MovableType, a blogging engine. For Debian 7 'Wheezy', this issue has been fixed in movabletype-opensource version 5.1.4+dfsg-4+deb7u4. We recommend that you upgrade your movabletype-opensource packages...
[SECURITY] [DLA 531-1] spice security update
Package : spice Version : 0.11.0-1+deb7u3 CVE ID : CVE-2016-2150 Debian Bug : 826584 A vulnerability has been found in the Simple Protocol for Independent Computing Environments, SPICE. Frediano Ziglio from Red Hat discovered that SPICE allowed local guest OS users to read from or write to...
[SECURITY] [DLA 532-1] movabletype-opensource security update
Package : movabletype-opensource Version : 5.1.4+dfsg-4+deb7u4 CVE ID : CVE-2016-5742 It was discovered that there was a SQL injection vulnerability in the XML-RPC interface in MovableType, a blogging engine. For Debian 7 "Wheezy", this issue has been fixed in movabletype-opensource version...
Debian DLA-525-1 : gimp security update
It was discovered that there was a use-after-free vulnerability in the channel and layer properties parsing process in Gimp, the GNU Image Manipulation Program. For Debian 7 'Wheezy', this issue has been fixed in gimp version 2.8.2-2+deb7u2. We recommend that you upgrade your gimp packages. NOTE:...
Debian DLA-529-1 : tomcat7 security update
A denial of service vulnerability was identified in Commons FileUpload that occurred when the length of the multipart boundary was just below the size of the buffer 4096 bytes used to read the uploaded file. This caused the file upload process to take several orders of magnitude longer than if th...