1163 matches found
[SECURITY] [DLA 714-1] wireshark security update
Package : wireshark Version : 1.12.1+g01b65bf-4+deb8u6deb7u5 CVE ID : CVE-2016-9373 CVE-2016-9374 CVE-2016-9375 CVE-2016-9376 The following vulnerabilities have been discovered in the Debian Wheezys Wireshark version: CVE-2016-9373 The DCERPC dissector could crash CVE-2016-9374 The AllJoyn...
DLA-712-1 gst-plugins-bad0.10 - security update
Bulletin has no description...
[SECURITY] [DLA 710-1] akonadi update
Package : akonadi Version : 1.7.2-3+deb7u1 Debian Bug : 843534 In some configurations the MySQL storage backend for Akonadi, an extensible cross-desktop Personal Information Management PIM storage service failed to start after applying the MySQL 5.5.53 security upgrade. This update extends the...
DLA-692-1 tiff3 - security update
Bulletin has no description...
[SECURITY] [DLA 686-1] libxtst security update
Package : libxtst Version : 2:1.2.1-1+deb7u2 CVE ID : CVE-2016-7951 CVE-2016-7952 Debian Bug : 840444 Tobias Stoeckmann from the OpenBSD project discovered the following vulnerability in libXtst, the X Record extension: Insufficient validation of data from the X server can cause out of boundary...
[SECURITY] [DLA 683-1] graphicsmagick security update
Package : graphicsmagick Version : 1.3.16-1.1+deb7u5 CVE ID : CVE-2016-7448 CVE-2016-7996 CVE-2016-7997 CVE-2016-8682 CVE-2016-8683 CVE-2016-8684 Several vulnerabilities have been found in the graphicsmagick package that may lead to denial of service through failed assertions, CPU or memory usage...
[SECURITY] [DLA 679-1] qemu-kvm security update
Package : qemu-kvm Version : 1.1.2+dfsg-6+deb7u17 CVE ID : CVE-2016-8576 CVE-2016-8577 CVE-2016-8578 CVE-2016-8669 Multiple vulnerabilities have been found in qemu-kvm: CVE-2016-8576 qemu-kvm built with the USB xHCI controller emulation support is vulnerable to an infinite loop issue. It could...
[SECURITY] [DLA 674-1] ghostscript security update
Package : ghostscript Version : 9.05dfsg-6.3+deb7u3 CVE ID : CVE-2013-5653 CVE-2016-7976 CVE-2016-7977 CVE-2016-7978 CVE-2016-7979 CVE-2016-8602 Debian Bug : 839118 839260 839841 839845 839846 840451 Several vulnerabilities were discovered in Ghostscript, the GPL PostScript/PDF interpreter, which...
DLA-675-1 potrace - security update
Bulletin has no description...
DLA-674-1 ghostscript - security update
Bulletin has no description...
DLA-664-1 libxrender - security update
Bulletin has no description...
DLA-666-1 guile-2.0 - security update
Bulletin has no description...
DLA-658-1 icedove - security update
Bulletin has no description...
[SECURITY] [DLA 655-1] mpg123 security update
Several security vulnerabilities have been discovered in mpg123, an MPEG layer 1/2/3 audio decoder and player. An attacker could take advantage of these flaws to cause a denial of service against mpg123 or applications using the libmpg123 library with a carefully crafted input file. CVE-2014-9497...
DLA-653-1 qemu-kvm - security update
Bulletin has no description...
DLA-641-1 ruby-activesupport-3.2 - security update
Bulletin has no description...
DLA-636-1 firefox-esr - security update
Bulletin has no description...
DLA-637-1 openssl - security update
Bulletin has no description...
[SECURITY] [DLA 625-1] curl security update
Package : curl Version : 7.26.0-1+wheezy16 CVE ID : CVE-2016-7167 Debian Bug : 837945 It was discovered that the four four libcurl functions curlescape, curleasyescape, curlunescape and curleasyunescape accepted negative sting length inputs. For Debian 7 "Wheezy", these problems have been fixed i...