[SECURITY] [DLA 1296-1] xmltooling security update

Package : xmltooling Version : 1.4.2-5+deb7u3 CVE ID : CVE-2018-0489 Kelby Ludwig and Scott Cantor discovered that the Shibboleth service provider is vulnerable to impersonation attacks and information disclosure due to incorrect XML parsing. For additional details please refer to the upstream...

Debian DLA-1294-1 : golang security update

It was discovered that there was an arbitrary command execution vulnerability in the Go programming language. The 'go get' implementation did not correctly validate 'import path' statements for '://' which allowed remote attackers to execute arbitrary OS commands via a crafted website. For Debian...

Debian DLA-1291-1 : tzdata new upstream version

This update includes the changes in tzdata 2018c. Notable changes are : - So Tom and Prncipe switched from +00 to +01. - Brazil's DST will now start on November's first Sunday. For Debian 7 'Wheezy', these problems have been fixed in version 2018c-0+deb7u1. We recommend that you upgrade your tzda...

[SECURITY] [DLA 1294-1] golang security update

Package : golang Version : 2:1.0.2-1.1+deb7u3 CVE ID : CVE-2018-7187 It was discovered that there was an arbitrary command execution vulnerability in the Go programming language. The "go get" implementation did not correctly validate "import path" statements for "://" which allowed remote attacke...

[SECURITY] [DLA 1293-1] imagemagick security update

Package : imagemagick Version : 8:6.7.7.10-5+deb7u21 CVE ID : CVE-2018-7443 Debian Bug : 891291 It was discovered that there was a remote denial of service vulnerability in the imagemagick graphics library via a specially- crafted TIFF file. For Debian 7 "Wheezy", this issue has been fixed in...

[SECURITY] [DLA 1291-1] tzdata new upstream version

Package : tzdata Version : 2018c-0+deb7u1 This update includes the changes in tzdata 2018c. Notable changes are: - São Tomé and Príncipe switched from +00 to +01. - Brazils DST will now start on Novembers first Sunday. For Debian 7 "Wheezy", these problems have been fixed in version 2018c-0+deb7u...

[SECURITY] [DLA 1290-1] libvpx security update

Package : libvpx Version : 1.1.0-1+deb7u1 CVE ID : CVE-2017-13194 CVE-2017-13194 Fix for a flaw in libvpx related to odd frame width, which may lead to a denial of service. For Debian 7 "Wheezy", these problems have been fixed in version 1.1.0-1+deb7u1. We recommend that you upgrade your libvpx...

Debian DLA-1289-1 : irssi security update

It was discovered that there where a number of vulnerabilities in irssi, the terminal based IRC client : - CVE-2018-7050: NULL pointer dereference for an 'empty' nick. - CVE-2018-7051: Certain nick names could result in out-of-bounds access when printing theme strings. - CVE-2018-7052: When the...

Debian DLA-1288-1 : cups security update

It was discovered that there was an issue in the CUPS printer framework where remote attackers could execute arbitrary commands by sending POST requests to the CUPS daemon in conjunction with DNS rebinding. This was caused by a whitelisted 'localhost.localdomain' entry. For Debian 7 'Wheezy', thi...

[SECURITY] [DLA 1289-1] irssi security update

Package : irssi Version : 0.8.15-5+deb7u5 CVE IDs : CVE-2018-7050 CVE-2018-7051 CVE-2018-7052 Debian Bugs : 890676, 890677, 890678 It was discovered that there where a number of vulnerabilities in irssi, the terminal based IRC client: - CVE-2018-7050: Null pointer dereference for an "empty" nick....

[SECURITY] [DLA 1288-1] cups security update

Package : cups Version : 1.5.3-5+deb7u7 CVE ID : CVE-2017-18190 It was discovered that there was an issue in the CUPS printer framework where remote attackers could execute arbitrary commands by sending POST requests to the CUPS daemon in conjunction with DNS rebinding. This was caused by a...

Debian: Security Advisory (DLA-1268-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-1275-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-1285-1 : bind9 security update

BIND, a DNS server implementation, was found to be vulnerable to a denial of service flaw was found in the handling of DNSSEC validation. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS response. This issue is closely...

Debian DLA-1286-1 : quagga security update

Several vulnerabilities have been discovered in Quagga, a routing daemon. The Common Vulnerabilities and Exposures project identifies the following issues : CVE-2018-5378 It was discovered that the Quagga BGP daemon, bgpd, does not properly bounds check data sent with a NOTIFY to a peer, if an...

Debian: Security Advisory (DLA-1271-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-1266-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-1276-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-1277-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-1286-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...