Debian DSA-2880-1 : python2.7 - security update

Multiple security issues were discovered in Python : - CVE-2013-4238 Ryan Sleevi discovered that NULL characters in the subject alternate names of SSL cerficates were parsed incorrectly. - CVE-2014-1912 Ryan Smith-Roberts discovered a buffer overflow in the socket.recvfrominto function...

DSA-2880-1 python2.7 - security update

Bulletin has no description...

Debian: Security Advisory (DSA-2880-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DSA-2875-1 cups-filters - security update

Bulletin has no description...

DSA-2877-1 lighttpd - security update

Bulletin has no description...

DSA-2876-1 cups - security update

Bulletin has no description...

[SECURITY] [DSA 2871-1] wireshark security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2871-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 10, 2014 http://www.debian.org/security/faq -...

DSA-2870-1 libyaml-libyaml-perl - heap-based buffer overflow

Bulletin has no description...

DSA-2868-1 php5 - denial of service

Bulletin has no description...

CVE-2013-6950

The Belkin WeMo Home Automation firmware before 3949 does not use SSL for the distribution feed, which allows man-in-the-middle attackers to install arbitrary firmware by spoofing a distribution server...

Design/Logic Flaw

The Belkin WeMo Home Automation firmware before 3949 does not use SSL for the distribution feed, which allows man-in-the-middle attackers to install arbitrary firmware by spoofing a distribution server...

CVE-2013-6950

The Belkin WeMo Home Automation firmware before 3949 does not use SSL for the distribution feed, which allows man-in-the-middle attackers to install arbitrary firmware by spoofing a distribution server...

CVE-2013-6950

CVE-2013-6950 affects Belkin Wemo Home Automation firmware prior to 3949, where the distribution feed did not use SSL, enabling MITM-style firmware spoofing. The issue is mitigated by Belkin’s updates (firmware 3949 and SSL-enabled distribution feed) released in 2014, plus app updates, which add ...

[BSA-093] Security Update for gnutls28

Andreas Metzler uploaded new packages for gnutls28 which fixed the following security problems: CVE-2014-1959 / DSA 2866-1 / GNUTLS-SA-2014-1 Suman Jana reported that GnuTLS, deviating from the documented behavior considers a version 1 intermediate certificate as a CA certificate by default. For...

Debian Security Advisory DSA 2866-1 (gnutls26 - certificate verification flaw)

Suman Jana reported that GnuTLS, deviating from the documented behavior, considers a version 1 intermediate certificate as a CA certificate by default. The oldstable distribution squeeze is not affected by this problem as X.509 version 1 trusted CA certificates are not allowed by default. OpenVAS...

Belkin Wemo Home Automation中间人信息泄露漏洞

BUGTRAQ ID: 65631 CVECAN ID: CVE-2013-6950 Belkin Wemo Home Automation devices 是家电远程控制系列产品。 Belkin Wemo Home Automation固件的分发过程没有使用SSL加密，用明文传输敏感信息，在实现上存在信息泄露漏洞，攻击者可利用此漏洞获取敏感信息。 0 Belkin Wemo Home Automation 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

[SECURITY] [DSA 2850-2] libyaml regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-2850-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 12, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2860-1] parcimonie security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2860-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 11, 2014 http://www.debian.org/security/faq -...

DSA-2860-1 parcimonie - information disclosure

Bulletin has no description...

Debian Security Advisory DSA 2855-1 (libav - several vulnerabilities)

Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. The IDs mentioned above are just a portion of the security issues fixed in this update. A full list of the changes is available at...