[SECURITY] [DSA 2822-1] xorg-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2822-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 18, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2814-1 (varnish - denial of service)

A denial of service vulnerability was reported in varnish, a state of the art, high-performance web accelerator. With some configurations of varnish a remote attacker could mount a denial of service child-process crash and temporary caching outage via a GET request with trailing whitespace...

Debian: Security Advisory (DSA-2813-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2810-1 (ruby1.9.1 - heap overflow)

Charlie Somerville discovered that Ruby incorrectly handled floating point number conversion. If an application using Ruby accepted untrusted input strings and converted them to floating point numbers, an attacker able to provide such input could cause the application to crash or, possibly, execu...

[SECURITY] [DSA 2795-1] lighttpd security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2795-1 [email protected] http://www.debian.org/security/ Michael Gilbert November 13, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2796-1] torque security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2796-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 13, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2795-1] lighttpd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2795-1 [email protected] http://www.debian.org/security/ Michael Gilbert November 13, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2790-1 (nss - uninitialized memory read)

A flaw was found in the way the Mozilla Network Security Service library nss read uninitialized data when there was a decryption failure. A remote attacker could use this flaw to cause a denial of service application crash for applications linked with the nss library. The oldstable distribution...

Debian: Security Advisory (DSA-2788-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 2783-1] librack-ruby security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2783-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst October 21, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2776-1] drupal6 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2776-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 11, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2771-1] nas security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2771-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 09, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2458-2 (iceape - several vulnerabilities)

Several vulnerabilities have been found in the Iceape internet suite, an unbranded version of Seamonkey: CVE-2012-0455Soroush Dalili discovered that a cross-site scripting countermeasure related to JavaScript URLs could be bypassed. CVE-2012-0456Atte Kettunen discovered an out of bounds read in t...

Debian Security Advisory DSA 2469-1 (linux-2.6 - privilege escalation/denial of service)

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2011-4086Eric Sandeen reported an issue in the journaling layer for ext4 filesyste...

Debian Security Advisory DSA 2590-1 (wireshark - several vulnerabilities)

Bjorn Mork and Laurent Butti discovered crashes in the PPP and RTPS2 dissectors, which could potentially result in the execution of arbitrary code. OpenVAS Vulnerability Test $Id: deb25901.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2590-1 using nvtgen 1.0 Script...

Debian Security Advisory DSA 2462-2 (imagemagick - several vulnerabilities)

Several integer overflows and missing input validations were discovered in the ImageMagick image manipulation suite, resulting in the execution of arbitrary code or denial of service. OpenVAS Vulnerability Test $Id: deb24622.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory D...

Debian Security Advisory DSA 2389-1 (linux-2.6 - privilege escalation/denial of service/information leak)

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2011-2183Andrea Righi reported an issue in KSM, a memory-saving de-duplication...

Debian Security Advisory DSA 2755-1 (python-django - directory traversal)

Rainer Koirikivi discovered a directory traversal vulnerability with ssi template tags in python-django, a high-level Python web development framework. It was shown that the handling of the ALLOWEDINCLUDEROOTS setting, used to represent allowed prefixes for the % ssi % template tag, is vulnerable...

Debian Security Advisory DSA 2748-1 (exactimage - denial of service)

Several denial-of-service vulnerabilities were discovered in the dcraw code base, a program for procesing raw format images from digital cameras. This update corrects them in the copy that is embedded in the exactimage package. OpenVAS Vulnerability Test $Id: deb2748.nasl 6611 2017-07-07 12:07:20...

Debian Security Advisory DSA 2736-1 (putty - several vulnerabilities)

Several vulnerabilities where discovered in PuTTY, a Telnet/SSH client for X. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2013-4206 Mark Wooding discovered a heap-corrupting buffer underrun bug in the modmul function which performs modular multiplicatio...