[SECURITY] [DLA 563-1] libgd2 security update

Package : libgd2 Version : 2.0.36rc1dfsg-6.1+deb7u5 CVE ID : CVE-2016-6161 A global out of bounds read when encoding gif from malformed input was found in this software. When given invalid inputs, we might be fed the EOF marker before it is actually the EOF. The gif logic assumes once it sees the...

[SECURITY] [DLA 557-1] dietlibc security update

Package : dietlibc Version : 0.33cvs20120325-4+deb7u1 Debian Bug : 832169 It was discovered that there was an insecure default PATH in dietlibc, a libc optimized for small size. Thorsten Glaser discovered that the default PATH in dietlibc if the environment variable is unset contained the current...

Debian DLA-545-1 : icu security update

Several security issues have been identified and corrected in ICU, the International Components for Unicode C and C++ library, in Debian Wheezy. CVE-2015-2632 Buffer overflow vulnerability. CVE-2015-4844 Buffer overflow vulnerability. CVE-2016-0494 Integer signedness/overflow vulnerability. For...

[SECURITY] [DLA 545-1] icu security update

Package : icu Version : 4.8.1.1-12+deb7u4 CVE ID : CVE-2015-2632 CVE-2015-4844 CVE-2016-0494 Several security issues have been identified and corrected in ICU, the International Components for Unicode C and C++ library, in Debian Wheezy. CVE-2015-2632 Buffer overflow vulnerability. CVE-2015-4844...

[SECURITY] [DLA 544-1] tcpreplay security update

Package : tcpreplay Version : 3.4.3-2+wheezy2 CVE ID : CVE-2016-6160 Debian Bug : 829350 The tcprewrite program, part of the tcpreplay suite, does not check the size of the frames it processes. Huge frames may trigger a segmentation fault, and such frames occur when caputuring packets on interfac...

DLA-545-1 icu - security update

Bulletin has no description...

DLA-542-1 pidgin - security update

Bulletin has no description...

FinderView - Multiple Vulnerabilities

Exploit Title: FinderView - Multiple VulnerabilityPath Traversal/Reflected XSS Date: 2016-06-23 Exploit Author: HaHwul Exploit Author Blog: www.hahwul.com Vendor Homepage: https://github.com/proin/ Software Link: https://github.com/proin/FinderView/archive/master.zip Version: Latest commit Tested...

DLA-517-1 imagemagick - security update

Bulletin has no description...

Ultrabenosaurus ChatBoard - Persistent Cross-Site Scripting

Exploit Title: Ultrabenosaurus ChatBoard - Stored XSS Date: 2016-06-14 Exploit Author: HaHwul Exploit Author Blog: www.hahwul.com Vendor Homepage: http://ultrabenosaurus.ninja/ Software Link: https://github.com/Ultrabenosaurus/ChatBoard/archive/master.zip Tested on: Debian wheezy Vulnerability...

Drale DBTableViewer 100123 - Blind SQL Injection

Drale DBTableViewer v100123 - Blind SQL Injection Exploit Title: drale DBTableViewer - SQL InjectionBlind/Error Base Date: 2016-06-08 Exploit Author: HaHwul Exploit Author Blog: www.hahwul.com Vendor Homepage: http://drale.com/ Software Link:...

[SECURITY] [DLA 494-1] eglibc security update

Package : eglibc Version : 2.13-38+deb7u11 CVE ID : CVE-2016-1234 CVE-2016-3075 CVE-2016-3706 Several vulnerabilities have been fixed in the Debian GNU C Library, eglibc: CVE-2016-1234 Alexander Cherepanov discovered that the glibcs glob implementation suffered from a stack-based buffer overflow...

[SECURITY] [DLA 484-1] graphicsmagick security update

Version : 1.3.16-1.1+deb7u1 CVE ID : CVE-2015-8808 CVE-2016-2317 CVE-2016-2318 CVE-2016-3714 CVE-2016-3715 CVE-2016-3716 CVE-2016-3717 CVE-2016-3718 Debian Bug : 814732 Several security vulnerabilities were discovered in graphicsmagick a tool to manipulate image files. GraphicsMagick is a fork of...

CVE-2016-0774

The 1 piperead and 2 pipewrite implementations in fs/pipe.c in a certain Linux kernel backport in the linux package before 3.2.73-2+deb7u3 on Debian wheezy and the kernel package before 3.10.0-229.26.2 on Red Hat Enterprise Linux RHEL 7.1 do not properly consider the side effects of failed...

Design/Logic Flaw

The 1 piperead and 2 pipewrite implementations in fs/pipe.c in a certain Linux kernel backport in the linux package before 3.2.73-2+deb7u3 on Debian wheezy and the kernel package before 3.10.0-229.26.2 on Red Hat Enterprise Linux RHEL 7.1 do not properly consider the side effects of failed...

CVE-2016-0774

The 1 piperead and 2 pipewrite implementations in fs/pipe.c in a certain Linux kernel backport in the linux package before 3.2.73-2+deb7u3 on Debian wheezy and the kernel package before 3.10.0-229.26.2 on Red Hat Enterprise Linux RHEL 7.1 do not properly consider the side effects of failed...

CVE-2016-0774

The 1 piperead and 2 pipewrite implementations in fs/pipe.c in a certain Linux kernel backport in the linux package before 3.2.73-2+deb7u3 on Debian wheezy and the kernel package before 3.10.0-229.26.2 on Red Hat Enterprise Linux RHEL 7.1 do not properly consider the side effects of failed...

UBUNTU-CVE-2016-0774

The 1 piperead and 2 pipewrite implementations in fs/pipe.c in a certain Linux kernel backport in the linux package before 3.2.73-2+deb7u3 on Debian wheezy and the kernel package before 3.10.0-229.26.2 on Red Hat Enterprise Linux RHEL 7.1 do not properly consider the side effects of failed...

CVE-2016-0774

The 1 piperead and 2 pipewrite implementations in fs/pipe.c in a certain Linux kernel backport in the linux package before 3.2.73-2+deb7u3 on Debian wheezy and the kernel package before 3.10.0-229.26.2 on Red Hat Enterprise Linux RHEL 7.1 do not properly consider the side effects of failed...

[SECURITY] [DSA 3492-2] gajim regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3492-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 28, 2016 https://www.debian.org/security/faq -...