1783 matches found
[SECURITY] [DLA 572-1] icedove security update
Package : icedove Version : 1:45.2.0-2deb7u1 CVE ID : CVE-2016-2818 Multiple security issues have been found in Icedove, Debians version of the Mozilla Thunderbird mail client: Multiple memory safety errors may lead to the execution of arbitrary code or denial of service. For Debian 7 "Wheezy",...
[SECURITY] [DLA 570-1] kde4libs security update
Package : kde4libs Version : 4:4.8.4-4+deb7u2 CVE ID : CVE-2016-6232 Debian Bug : 832620 It was possible to trick kde4libss KArchiveDirectory::copyTo function to extract files to arbitrary system locations from a specially prepared tar file outside of the extraction folder. For Debian 7 "Wheezy",...
DLA-571-1 xen - security update
Bulletin has no description...
DLA-578-1 openssh - security update
Bulletin has no description...
DLA-575-1 collectd - security update
Bulletin has no description...
DLA-570-1 kde4libs - security update
Bulletin has no description...
DLA-572-1 icedove - security update
Bulletin has no description...
DLA-577-1 redis - security update
Bulletin has no description...
DLA-573-1 qemu - security update
Bulletin has no description...
[SECURITY] [DLA 569-1] xmlrpc-epi security update
Package : xmlrpc-epi Version : 0.54.2-1+deb7u1 CVE ID : CVE-2016-6296 Integer signedness error in the simplestringaddn function in simplestring.c in xmlrpc-epi through 0.54.2 allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact...
DLA-568-1 wordpress - security update
Bulletin has no description...
DLA-567-1 mysql-5.5 - security update
Bulletin has no description...
DLA-569-1 xmlrpc-epi - security update
Bulletin has no description...
[SECURITY] [DLA 566-1] cakephp security update
Package : cakephp Version : 1.3.15-1+deb7u1 Debian Bug : 832283 CakePHP, an open-source web application framework for PHP, was vulnerable to SSRF Server Side Request Forgery attacks. Remote attacker can utilize it for at least DoS Denial of Service attacks, if the target application accepts XML a...
DLA-564-1 tardiff - security update
Bulletin has no description...
DLA-566-1 cakephp - security update
Bulletin has no description...
Debian DLA-563-1 : libgd2 security update
A global out of bounds read when encoding gif from malformed input was found in this software. When given invalid inputs, we might be fed the EOF marker before it is actually the EOF. The gif logic assumes once it sees the EOF marker, there won't be any more data, so it leaves the curbits index...
[SECURITY] [DLA 563-1] libgd2 security update
Package : libgd2 Version : 2.0.36rc1dfsg-6.1+deb7u5 CVE ID : CVE-2016-6161 A global out of bounds read when encoding gif from malformed input was found in this software. When given invalid inputs, we might be fed the EOF marker before it is actually the EOF. The gif logic assumes once it sees the...
[SECURITY] [DLA 561-1] uclibc security update
Package : uclibc Version : 0.9.32-1+deb7u1 CVE ID : CVE-2016-2224 CVE-2016-2225 CVE-2016-6264 Several vulnerabilities have been discovered in uClibc, an implementation of the standard C library that is much smaller than glibc, which makes it useful for embedded systems. CVE-2016-2224 Fix possible...