255 matches found
KB4073065: Surface guidance to protect against silicon-based microarchitectural and speculative execution side-channel vulnerabilities
None None...
[SECURITY] [DLA 1375-1] wget security update
Package : wget Version : 1.13.4-3+deb7u6 CVE ID : CVE-2018-0494 Debian Bug : 898076 Harry Sintonen have discovered a cookie injection vulnerability in wget caused by insufficient input validation, enabling an external attacker to inject arbitrary cookie values cookie jar file, adding new or...
[SECURITY] [DLA 1372-1] libdatetime-timezone-perl new upstream release
Package : libdatetime-timezone-perl Version : 1:1.58-1+2018e This update includes the changes in tzdata 2018e for the Perl bindings. For the list of changes, see DLA-1371-1. For Debian 7 "Wheezy", these problems have been fixed in version 1:1.58-1+2018e. We recommend that you upgrade your...
[SECURITY] [DLA 1219-1] enigmail security update
Package : enigmail Version : 2:1.9.9-1deb7u1 CVE ID : CVE-2017-17843 CVE-2017-17844 CVE-2017-17845 CVE-2017-17846 CVE-2017-17847 CVE-2017-17848 Multiple vulnerabilities were discovered in Enigmail, an OpenPGP extension for Thunderbird, which could result in a loss of confidentiality, faked...
[SECURITY] [DSA 4022-1] libreoffice security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4022-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 07, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1164-1] mupdf security update
Package : mupdf Version : 0.9-2+deb7u4 CVE ID : CVE-2017-14687 CVE-2017-15587 Debian Bug : 877379 879055 Two security issues were discovered in mupdf, a lightweight PDF viewer. CVE-2017-14687 MuPDF allows attackers to cause a denial of service or possibly have unspecified other impact via a craft...
[SECURITY] [DLA 1153-1] icedove/thunderbird security update
Package : thunderbird Version : 1:52.4.0-1deb7u1 CVE ID : CVE-2017-7793 CVE-2017-7805 CVE-2017-7810 CVE-2017-7814 CVE-2017-7818 CVE-2017-7819 CVE-2017-7823 CVE-2017-7824 CVE-2017-7825 Multiple security issues have been found in the Mozilla Thunderbird mail client: Multiple memory safety errors,...
Microsoft Windows Graphics Component CVE-2017-11762 Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of an affected system. Failed exploit attempts may result in a denial of service condition. Technologies Affected Microsoft Windows 10 Versi...
[SECURITY] [DLA 1125-1] botan1.10 security update
Package : botan1.10 Version : 1.10.5-1+deb7u4 CVE ID : CVE-2017-14737 CVE-2017-14737 Fix of cache-based side channel attack, which could recover information about RSA secret keys. For Debian 7 "Wheezy", these problems have been fixed in version 1.10.5-1+deb7u4. We recommend that you upgrade your...
[SECURITY] [DLA 942-1] jbig2dec security update
Package : jbig2dec Version : 0.13-4deb7u2 CVE ID : CVE-2017-7885 CVE-2017-7975 CVE-2017-7976 CVE-2017-7885 Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to denial of service application crash or disclosure of sensitive information from process memory, because of an integer...
[SECURITY] [DLA 938-1] git security update
Package : git Version : 1:1.7.10.4-1+wheezy4 CVE ID : CVE-2017-8386 Timo Schmid of ERNW GmbH discovered that the Git git-shell, a restricted login shell for Git-only SSH access, allows a user to run an interactive pager by causing it to spawn "git upload-pack --help". For Debian 7 "Wheezy", these...
Microsoft Windows COM CVE-2017-0214 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can leverage this issue to execute arbitrary code with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for...
[SECURITY] [DLA 920-1] jasper security update
Package : jasper Version : 1.900.1-13+deb7u6 CVE ID : CVE-2016-9591 CVE-2016-10251 CVE-2016-9591 Use-after-free on heap in jasmatrixdestroy The vulnerability exists in code responsible for re-encoding the decoded input image file to a JP2 image. The vulnerability is caused by not setting related...
DLA-759-1 nss - security update
Bulletin has no description...
DLA-735-1 gst-plugins-base0.10 - security update
Bulletin has no description...
DLA-706-1 python-django - security update
Bulletin has no description...
DLA-670-1 linux - security update
Bulletin has no description...
DLA-660-1 libxrandr - security update
Bulletin has no description...