[SECURITY] [DSA 3794-2] munin regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3794-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 02, 2017 https://www.debian.org/security/faq -...

DSA-3794-2 munin - regression update

Bulletin has no description...

Debian DLA-841-2 : apache2 regression update

The fix for CVE-2016-8743 introduced a regression which would segfault apache workers under certain conditions 858373, an issue similar to previously fixed CVE-2015-0253. The issue was introduced in DLA-841-1 and the associated 2.2.22-13+deb7u8 package version. For Debian 7 'Wheezy', these proble...

Debian DLA-839-2 : tnef regression update

While fixing the above mentioned CVEs, upstream introduced a regression. The new patches added for this upload take care of that. For Debian 7 'Wheezy', these problems have been fixed in version 1.4.9-1+deb7u2. We recommend that you upgrade your tnef packages. NOTE: Tenable Network Security has...

Debian DSA-3795-1 : bind9 - security update

It was discovered that a maliciously crafted query can cause ISC's BIND DNS server named to crash if both Response Policy Zones RPZ and DNS64 a bridge between IPv4 and IPv6 networks are enabled. It is uncommon for both of these options to be used in combination, so very few systems will be affect...

Debian DLA-836-2 : munin regression update

The update for munin issued as DLA-836-1 caused a regression in the zooming functionality in munin-cgi-graph. Updated packages are now available to correct this issue. For reference, the original advisory text follows. Stevie Trujillo discovered a command injection vulnerability in munin, a...

grpc: Crash in gpr_strdup

Project: https://github.com/grpc/grpc.git Detailed report: https://oss-fuzz.com/testcase?key=5391467415601152 Project: grpc Fuzzer: libFuzzergrpcapifuzzer Fuzz target binary: apifuzzer Job Type: libfuzzerasangrpc Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffffffffffc0 Crash...

Debian Security Advisory DSA 3795-1 (bind9 - security update)

It was discovered that a maliciously crafted query can cause ISC OpenVAS Vulnerability Test $Id: deb3795.nasl 6607 2017-07-07 12:04:25Z cfischer $ Auto-generated from advisory DSA 3795-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright: Copyright c 2017 Greenbone Networks...

Debian: Security Advisory (DSA-3795-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2017:0554-1 Security update for util-linux

This update for util-linux fixes the following issues: This security issue was fixed: - CVE-2017-2616: In su with PAM support it was possible for local users to send SIGKILL to selected other processes with root privileges bsc1023041. This non-security issues were fixed: - lscpu: Implement WSL...

Ubuntu 14.04 LTS / 16.04 LTS : ImageMagick regression (USN-3142-2)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3142-2 advisory. USN-3142-1 fixed vulnerabilities in ImageMagick. The security fixes introduced a regression with text labels and a regression with the text coder. Thi...

Ubuntu: Security Advisory (USN-3142-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3142-2: ImageMagick regression

USN-3142-1 fixed vulnerabilities in ImageMagick. The security fixes introduced a regression with text labels and a regression with the text coder. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that ImageMagick incorrectly handled...

[SECURITY] [DLA 823-2] tomcat7 regression update

Package : tomcat7 Version : 7.0.28-4+deb7u11 CVE ID : CVE-2017-6056 Debian Bug : 854551 The update for tomcat7 issued as DLA-823-1 caused that the server could return HTTP 400 errors under certain circumstances. Updated packages are now available to correct this issue. For reference, the original...

[SECURITY] [DSA 3788-2] tomcat8 regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3788-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 22, 2017 https://www.debian.org/security/faq -...

DLA-823-2 tomcat7 - regression update

Bulletin has no description...

DSA-3787-2 tomcat7 - regression update

Bulletin has no description...

DSA-3788-2 tomcat8 - regression update

Bulletin has no description...

Ubuntu 14.04 LTS / 16.04 LTS : Python Crypto regression (USN-3199-2)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3199-2 advisory. USN-3199-1 fixed a vulnerability in the Python Cryptography Toolkit. Unfortunately, various programs depended on the original behavior of the Python...

USN-3199-2 Python Crypto regression

USN-3199-1 fixed a vulnerability in the Python Cryptography Toolkit. Unfortunately, various programs depended on the original behavior of the Python Cryptography Toolkit which was altered when fixing the vulnerability. This update retains the fix for the vulnerability but issues a warning rather...