Debian DLA-1375-1 : wget security update

Harry Sintonen have discovered a cookie injection vulnerability in wget caused by insufficient input validation, enabling an external attacker to inject arbitrary cookie values cookie jar file, adding new or replacing existing cookie values. For Debian 7 'Wheezy', these problems have been fixed i...

Debian DLA-1378-1 : tiff3 security update

A heap-based buffer overflow was discovered in the LZWDecodeCompat function in tiflzw.c LibTIFF 4.0.9 and earlier. This vulnerability might be leveraged by remote attackers to crash the client via a crafted TIFF LZW file. For Debian 7 'Wheezy', these problems have been fixed in version...

Debian DLA-1374-1 : firebird2.5 security update

An authenticated remote attacker can execute arbitrary code in Firebird SQL Server versions 2.5.7 and 3.0.2 by executing a malformed SQL statement. The only known solution is to disable external UDF libraries from being loaded. In order to achieve this, the default configuration has changed to...

Debian: Security Advisory (DLA-1378-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-1377-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-1376-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 1376-1] firefox-esr security update

Package : firefox-esr Version : 52.8.0esr-1deb7u1 CVE ID : CVE-2018-5150 CVE-2018-5154 CVE-2018-5155 CVE-2018-5157 CVE-2018-5158 CVE-2018-5159 CVE-2018-5168 CVE-2018-5178 CVE-2018-5183 Several security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors and...

[SECURITY] [DLA 1375-1] wget security update

Package : wget Version : 1.13.4-3+deb7u6 CVE ID : CVE-2018-0494 Debian Bug : 898076 Harry Sintonen have discovered a cookie injection vulnerability in wget caused by insufficient input validation, enabling an external attacker to inject arbitrary cookie values cookie jar file, adding new or...

[SECURITY] [DLA 1374-1] firebird2.5 security update

Package : firebird2.5 Version : 2.5.2.26540.ds4-1deb7u4 CVE ID : CVE-2017-11509 An authenticated remote attacker can execute arbitrary code in Firebird SQL Server versions 2.5.7 and 3.0.2 by executing a malformed SQL statement. The only known solution is to disable external UDF libraries from bei...

Debian DLA-1373-1 : php5 security update

Several issues have been discovered in PHP recursive acronym for PHP: Hypertext Preprocessor, a widely-used open source general-purpose scripting language that is especially suited for web development and can be embedded into HTML. CVE-2018-10545 Dumpable FPM child processes allow bypassing opcac...

[SECURITY] [DLA 1373-1] php5 security update

Package : php5 Version : 5.4.45-0+deb7u14 CVE ID : CVE-2018-10545 CVE-2018-10547 CVE-2018-10548 Several issues have been discovered in PHP recursive acronym for PHP: Hypertext Preprocessor, a widely-used open source general-purpose scripting language that is especially suited for web development...

Debian DLA-1370-1 : quassel security update

It was found that the Quassel IRC client was vulnerable to a remote code execution vulnerability due to insufficient checks in the deserializer code. For Debian 7 'Wheezy', these problems have been fixed in version 0.8.0-1+deb7u4. We recommend that you upgrade your quassel packages. NOTE: Tenable...

Debian: Security Advisory (DLA-1370-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 1372-1] libdatetime-timezone-perl new upstream release

Package : libdatetime-timezone-perl Version : 1:1.58-1+2018e This update includes the changes in tzdata 2018e for the Perl bindings. For the list of changes, see DLA-1371-1. For Debian 7 "Wheezy", these problems have been fixed in version 1:1.58-1+2018e. We recommend that you upgrade your...

[SECURITY] [DLA 1371-1] tzdata new upstream release

Package : tzdata Version : 2018e-0+deb7u1 This update includes the changes in tzdata 2018e. Notable changes are: - North Korea switches back to +09 on 2018-05-05. For Debian 7 "Wheezy", these problems have been fixed in version 2018e-0+deb7u1. We recommend that you upgrade your tzdata packages...

[SECURITY] [DLA 1370-1] quassel security update

Package : quassel Version : 0.8.0-1+deb7u4 CVE ID : CVE-2018-1000178 It was found that the Quassel IRC client was vulnerable to a remote code execution vulnerability due to insufficient checks in the deserializer code. For Debian 7 "Wheezy", these problems have been fixed in version 0.8.0-1+deb7u...

[SECURITY] [DLA 1367-1] slurm-llnl security update

Package : slurm-llnl Version : 2.3.4-2+deb7u2 CVE ID : CVE-2018-7033 CVE-2018-7033 An issue that could be used for SQL Injection attacks against SlurmDBD has been fixed. For Debian 7 "Wheezy", these problems have been fixed in version 2.3.4-2+deb7u2. We recommend that you upgrade your slurm-llnl...

Debian: Security Advisory (DLA-1366-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 1366-1] wordpress security update

Package : wordpress Version : 3.6.1+dfsg-1deb7u21 CVE ID : CVE-2018-10100 CVE-2018-10102 Debian Bug : 895034 Two vulnerabilities were discovered in wordpress, a web blogging tool. The Common Vulnerabilities and Exposures project identifies the following issues. CVE-2018-10100 The redirection URL...

Debian DLA-1365-1 : drupal7 security update (Drupalgeddon 2)

A remote code execution vulnerability has been found within multiple subsystems of Drupal. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. For Debian 7 'Wheezy', these problems have been fixed in version...