2190 matches found
[SECURITY] [DLA 513-1] nspr security update
Package : nspr Version : 2:4.9.2-1+deb7u4 CVE ID : CVE-2016-1951 It was discovered that there was a buffer overflow in a sprintf utility within nspr, the NetScape Portable Runtime library. For Debian 7 "Wheezy", this issue has been fixed in nspr version 2:4.9.2-1+deb7u4. We recommend that you...
[SECURITY] [DLA 512-1] mantis security update
Package : mantis Version : 1.2.18-1+deb7u1 CVE ID : CVE-2016-5364 It was discovered that there was an XSS vulnerability in custom field management in mantis, a web-based bug tracking system. For Debian 7 "Wheezy", this issue has been fixed in mantis version 1.2.18-1+deb7u1. We recommend that you...
DLA-513-1 nspr - security update
Bulletin has no description...
DLA-512-1 mantis - security update
Bulletin has no description...
DLA-511-1 libtorrent-rasterbar - security update
Bulletin has no description...
[SECURITY] [DLA 510-1] p7zip security update
Package : p7zip Version : 9.20.1dfsg.1-4+deb7u2 CVE ID : CVE-2016-2335 Debian Bug : 824160 Marcin Icewall Noga of Cisco Talos discovered an out-of-bound read vulnerability in the CInArchive::ReadFileItem method in p7zip, a 7zr file archiver with high compression ratio. A remote attacker can take...
Debian DLA-509-1 : samba security update
The Samba 2:3.6.6-6+deb7u9 release, issued by the DSA-3548-1, introduced different regressions causing trust relationship with Win 7 domains to fail. The fix for the CVE-2016-2115 has been reverted, so administrators should set 'client signing = required' instead. For Debian 7 'Wheezy', these...
[SECURITY] [DLA 509-1] samba security update
Package : samba Version : 2:3.6.6-6+deb7u10 Debian Bug : 820982 821811 The Samba 2:3.6.6-6+deb7u9 release, issued by the DSA-3548-1, introduced different regressions causing trust relationship with Win 7 domains to fail. The fix for the CVE-2016-2115 has been reverted, so administrators should se...
Debian DLA-505-1 : libpdfbox-java security update
Apache PDFBox did not properly initialize the XML parsers, which allows context-dependent attackers to conduct XML External Entity XXE attacks via a crafted PDF. This may lead to the disclosure of confidential data, denial of service, server side request forgery, port scanning from the perspectiv...
DLA-509-1 samba - security update
Bulletin has no description...
Debian DLA-504-1 : libxstream-java security update
It was discovered that XStream, a Java library to serialize objects to XML and back again, was susceptible to XML External Entity attacks. For Debian 7 'Wheezy', these problems have been fixed in version 1.4.2-1+deb7u1. We recommend that you upgrade your libxstream-java packages. NOTE: Tenable...
[SECURITY] [DLA 508-1] expat security update
Package : expat Version : 2.1.0-1+deb7u4 CVE ID : CVE-2012-6702 CVE-2016-5300 Two related issues have been discovered in Expat, a C library for parsing XML. CVE-2012-6702 This issue was introduced when CVE-2012-0876 was addressed. Stefan Sørensen discovered that the use of the function XMLParse...
[SECURITY] [DLA 505-1] libpdfbox-java security update
Package : libpdfbox-java Version : 1:1.7.0+dfsg-4+deb7u1 CVE ID : CVE-2016-2175 Apache PDFBox did not properly initialize the XML parsers, which allows context-dependent attackers to conduct XML External Entity XXE attacks via a crafted PDF. This may lead to the disclosure of confidential data,...
[SECURITY] [DLA 504-1] libxstream-java security update
Package : libxstream-java Version : 1.4.2-1+deb7u1 CVE ID : CVE-2016-3674 Debian Bug : 819455 It was discovered that XStream, a Java library to serialize objects to XML and back again, was susceptible to XML External Entity attacks. For Debian 7 "Wheezy", these problems have been fixed in version...
DLA-508-1 expat - security update
Bulletin has no description...
[SECURITY] [DLA 507-1] nss security update
Package : nss Version : 2:3.14.5-1+deb7u7 CVE ID : CVE-2015-4000 Debian Bug : N/A A vulnerability has been found in nss. CVE-2015-4000 With TLS protocol 1.2 and earlier, when a DHEEXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHEEXPORT choice, which...
DLA-507-1 nss - security update
Bulletin has no description...
[SECURITY] [DLA 506-1] dhcpcd5 security update
Package : dhcpcd5 Version : 5.5.6-1+deb7u2 CVE ID : CVE-2014-7912 CVE-2014-7913 Debian Bug : N/A Two vulnerabilities were discovered in dhcpcd5 a DHCP client package. A remote on a local network attacker can possibly execute arbitrary code or cause a denial of service attack by crafted messages...