[SECURITY] [DSA 3869-1] tnef security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3869-1 [email protected] https://www.debian.org/security/ Sebastien Delafond June 01, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3866-1] strongswan security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3866-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez May 30, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3861-1] libtasn1-6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3861-1 [email protected] https://www.debian.org/security/ Sebastien Delafond May 24, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3793-2] shadow regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3793-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 17, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3854-1] bind9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3854-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 14, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3852-1] squirrelmail security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3852-1 [email protected] https://www.debian.org/security/ Sebastien Delafond May 13, 2017 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3849-1 (kde4libs - security update)

Several vulnerabilities were discovered in kde4libs, the core libraries for all KDE 4 applications. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2017-6410 Itzik Kotler, Yonatan Fridburg and Amit Klein of Safebreach Labs reported that URLs are not sanitiz...

Debian Security Advisory DSA 3848-1 (git - security update)

Timo Schmid of ERNW GmbH discovered that the Git git-shell, a restricted login shell for Git-only SSH access, allows a user to run an interactive pager by causing it to spawn OpenVAS Vulnerability Test $Id: deb3848.nasl 6607 2017-07-07 12:04:25Z cfischer $ Auto-generated from advisory DSA 3848-1...

Debian Security Advisory DSA 3842-1 (tomcat7 - security update)

Two vulnerabilities were discovered in tomcat7, a servlet and JSP engine. CVE-2017-5647 Pipelined requests were processed incorrectly, which could result in some responses appearing to be sent for the wrong request. CVE-2017-5648 Some application listeners calls were issued against the wrong...

[SECURITY] [DSA 3841-1] libxstream-java

------------------------------------------------------------------------- Debian Security Advisory DSA-3841-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 02, 2017 https://www.debian.org/security/faq -...

DEBIAN-CVE-2017-8353

In ImageMagick 7.0.5-5, the ReadPICTImage function in pict.c allows attackers to cause a denial of service memory leak via a crafted file...

[SECURITY] [DSA 3836-1] weechat security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3836-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 27, 2017 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3837-1 (libreoffice - security update)

It was discovered that a buffer overflow in processing Windows Metafiles may result in denial of service or the execution of arbitrary code if a malformed document is opened. OpenVAS Vulnerability Test $Id: deb3837.nasl 6607 2017-07-07 12:04:25Z cfischer $ Auto-generated from advisory DSA 3837-1...

FreeBSD : libevent -- multiple vulnerabilities (b8ee7a81-a879-4358-9b30-7dd1bd4c14b1)

Debian Security reports : CVE-2016-10195: The nameparse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the labellen variable, which triggers an out-of-bounds stack read. CVE-2016-10196: Stack-based buffer overflow in the...

[SECURITY] [DSA 3831-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3831-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 20, 2017 https://www.debian.org/security/faq -...

DEBIAN-CVE-2014-9804

vision.c in ImageMagick allows remote attackers to cause a denial of service infinite loop via vectors related to "too many object."...

[SECURITY] [DSA 3820-1] gst-plugins-good1.0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3820-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 27, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3819-1] gst-plugins-base1.0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3819-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 27, 2017 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3816-1 (samba - security update)

Jann Horn of Google discovered a time-of-check, time-of-use race condition in Samba, a SMB/CIFS file, print, and login server for Unix. A malicious client can take advantage of this flaw by exploting a symlink race to access areas of the server file system not exported under a share definition...

[SECURITY] [DSA 3796-2] sitesummary regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3796-2 [email protected] https://www.debian.org/security/ Sebastien Delafond March 20, 2017 https://www.debian.org/security/faq -...