1162 matches found
[SECURITY] [DLA 612-1] libtomcrypt security update
Package : libtomcrypt Version : 1.17-3.2+deb7u1 CVE ID : CVE-2016-6129 It was discovered that the implementation of RSA signature verification in libtomcrypt is vulnerable to the Bleichenbacher signature attack. If an RSA key with exponent 3 is used it may be possible to forge a PKCS1 v1.5...
DLA-607-1 tryton-server - security update
Bulletin has no description...
[SECURITY] [DLA 606-1] tiff security update
Package : tiff Version : 4.0.2-6+deb7u6 CVE ID : CVE-2016-3991 CVE-2016-5314 CVE-2016-5315 CVE-2016-5316 CVE-2016-5317 CVE-2016-5320 CVE-2016-5321 CVE-2016-5322 CVE-2016-5323 CVE-2016-5875 Several vulnerabilities were found in the tiff library, potentially causing denial of services to applicatio...
DLA-594-1 openssh - security update
Bulletin has no description...
[SECURITY] [DLA 591-1] libreoffice security update
Package : libreoffice Version : 3.5.4+dfsg2-0+deb7u8 CVE ID : CVE-2016-1513 An OpenDocument Presentation .ODP or Presentation Template .OTP file can contain invalid presentation elements that lead to memory corruption when the document is loaded in LibreOffice Impress. The defect may cause the...
DLA-589-1 mupdf - security update
Bulletin has no description...
[SECURITY] default-java switch to OpenJDK 7 - Icedtea plugin
Package : icedtea-web Version : 1.4-3deb7u3 As it was announced earlier, the default Java version in Wheezy has been bumped to Java 7, as Java 6 could no longer be supported. To follow this change, the icedtea-plugin package has been updated to depend on icedtea-7-plugin rather than...
[SECURITY] default-java switch to OpenJDK 7 - Icedtea plugin
Package : icedtea-web Version : 1.4-3deb7u3 As it was announced earlier, the default Java version in Wheezy has been bumped to Java 7, as Java 6 could no longer be supported. To follow this change, the icedtea-plugin package has been updated to depend on icedtea-7-plugin rather than...
[SECURITY] [DLA 567-2] mysql-5.5 security and regression update
Package : mysql-5.5 Version : 5.5.50-0+deb7u2 CVE ID : CVE-2016-3477 CVE-2016-3521 CVE-2016-3615 CVE-2016-5440 Several vulnerabilities have been found in the MySQL Database Server. These vulnerabilities are addressed by upgrading MySQL to the recent upstream 5.5.50 version. Please refer to the...
[SECURITY] [DLA 566-1] cakephp security update
Package : cakephp Version : 1.3.15-1+deb7u1 Debian Bug : 832283 CakePHP, an open-source web application framework for PHP, was vulnerable to SSRF Server Side Request Forgery attacks. Remote attacker can utilize it for at least DoS Denial of Service attacks, if the target application accepts XML a...
DLA-565-1 perl - security update
Bulletin has no description...
[SECURITY] [DLA 563-1] libgd2 security update
Package : libgd2 Version : 2.0.36rc1dfsg-6.1+deb7u5 CVE ID : CVE-2016-6161 A global out of bounds read when encoding gif from malformed input was found in this software. When given invalid inputs, we might be fed the EOF marker before it is actually the EOF. The gif logic assumes once it sees the...
DLA-562-1 gosa - security update
Bulletin has no description...
DLA-561-1 uclibc - security update
Bulletin has no description...
[SECURITY] [DLA 560-1] cacti security update
Package : cacti Version : 0.8.8a+dfsg-5+deb7u9 CVE ID : CVE-2016-2313 CVE-2016-3172 CVE-2016-3659 Three security issues have been found in cacti: CVE-2016-2313 authlogin.php allows remote authenticated users who use web authentication to bypass intended access restrictions by logging in as a user...
DLA-558-1 squid - security update
Bulletin has no description...
[SECURITY] [DLA 549-1] ruby-eventmachine security update
Package : ruby-eventmachine Version : 0.12.10-3+deb7u1 Debian Bug : 678512 696015 EventMachine, a Ruby network engine could be crashed by opening a high number of parallel connections = 1024 towards a server using the EventMachine engine. The crash happens due to the file descriptors overwriting...
[SECURITY] [DLA 545-1] icu security update
Package : icu Version : 4.8.1.1-12+deb7u4 CVE ID : CVE-2015-2632 CVE-2015-4844 CVE-2016-0494 Several security issues have been identified and corrected in ICU, the International Components for Unicode C and C++ library, in Debian Wheezy. CVE-2015-2632 Buffer overflow vulnerability. CVE-2015-4844...
[SECURITY] [DLA 544-1] tcpreplay security update
Package : tcpreplay Version : 3.4.3-2+wheezy2 CVE ID : CVE-2016-6160 Debian Bug : 829350 The tcprewrite program, part of the tcpreplay suite, does not check the size of the frames it processes. Huge frames may trigger a segmentation fault, and such frames occur when caputuring packets on interfac...