Debian DLA-546-2 : clamav version update

DLA 546-1 was incorrectly released before updated clamav packages were available and there were subsequent issues with the acceptance of the package which have since been corrected. Updates are now available for all supported LTS architectures. We recommend that you upgrade your clamav packages...

Debian DLA-545-1 : icu security update

Several security issues have been identified and corrected in ICU, the International Components for Unicode C and C++ library, in Debian Wheezy. CVE-2015-2632 Buffer overflow vulnerability. CVE-2015-4844 Buffer overflow vulnerability. CVE-2016-0494 Integer signedness/overflow vulnerability. For...

[SECURITY] [DLA 545-1] icu security update

Package : icu Version : 4.8.1.1-12+deb7u4 CVE ID : CVE-2015-2632 CVE-2015-4844 CVE-2016-0494 Several security issues have been identified and corrected in ICU, the International Components for Unicode C and C++ library, in Debian Wheezy. CVE-2015-2632 Buffer overflow vulnerability. CVE-2015-4844...

[SECURITY] [DLA 544-1] tcpreplay security update

Package : tcpreplay Version : 3.4.3-2+wheezy2 CVE ID : CVE-2016-6160 Debian Bug : 829350 The tcprewrite program, part of the tcpreplay suite, does not check the size of the frames it processes. Huge frames may trigger a segmentation fault, and such frames occur when caputuring packets on interfac...

DLA-545-1 icu - security update

Bulletin has no description...

DLA-546-1 clamav - security update

Bulletin has no description...

DLA-544-1 tcpreplay - security update

Bulletin has no description...

[SECURITY] [DLA 543-1] sqlite3 security update

Package : sqlite3 Version : 3.7.13-1+deb7u3 CVE ID : CVE-2016-6153 It was discovered that sqlite3, a C library that implements a SQL database engine, would reject a temporary directory e.g., as specified by the TMPDIR environment variable to which the executing user did not have read permissions...

Debian DLA-543-1 : sqlite3 security update

It was discovered that sqlite3, a C library that implements a SQL database engine, would reject a temporary directory e.g., as specified by the TMPDIR environment variable to which the executing user did not have read permissions. This could result in information leakage as less secure global...

DLA-543-1 sqlite3 - security update

Bulletin has no description...

Debian DLA-540-1 : qemu security update

Several vulnerabilities were discovered in qemu, a fast processor emulator. CVE-2016-3710 Wei Xiao and Qinghao Tang of 360.cn Inc discovered an out-of-bounds read and write flaw in the QEMU VGA module. A privileged guest user could use this flaw to execute arbitrary code on the host with the...

Debian DLA-539-1 : qemu-kvm security update

Several vulnerabilities were discovered in qemu-kvm, a full virtualization solution for Linux hosts on x86 hardware with x86 guests. CVE-2016-3710 Wei Xiao and Qinghao Tang of 360.cn Inc discovered an out-of-bounds read and write flaw in the QEMU VGA module. A privileged guest user could use this...

DLA-542-1 pidgin - security update

Bulletin has no description...

Debian DLA-538-1 : wireshark security update

The following vulnerabilities have been discovered in the Wheezy's Wireshark version : CVE-2016-5350 The SPOOLS dissector could go into an infinite loop CVE-2016-5351 The IEEE 802.11 dissector could crash CVE-2016-5353 The UMTS FP dissector could crash CVE-2016-5354 Some USB dissectors could cras...

DLA-539-1 qemu-kvm - security update

Bulletin has no description...

DLA-540-1 qemu - security update

Bulletin has no description...

Debian DLA-534-1 : libgd2 security update

CVE-2016-5766 Integer Overflow in gd2GetHeader resulting in heap overflow. For Debian 7 'Wheezy', these problems have been fixed in version 2.0.36rc1dfsg-6.1+deb7u4. We recommend that you upgrade your libgd2 packages. NOTE: Tenable Network Security has extracted the preceding description block...

Debian DLA-536-1 : wget security update

On a server redirect from HTTP to a FTP resource, wget would trust the HTTP server and uses the name in the redirected URL as the destination filename. This behaviour was changed and now it works similarly as a redirect from HTTP to another HTTP resource so the original name is used as the...

[SECURITY] [DLA 538-1] wireshark security update

Package : wireshark Version : 1.12.1+g01b65bf-4+deb8u6deb7u2 CVE ID : CVE-2016-5350 CVE-2016-5351 CVE-2016-5353 CVE-2016-5354 CVE-2016-5355 CVE-2016-5356 CVE-2016-5357 CVE-2016-5359 The following vulnerabilities have been discovered in the Wheezys Wireshark version: CVE-2016-5350 The SPOOLS...

[SECURITY] [DLA 536-1] wget security update

Package : wget Version : 1.13.4-3+deb7u3 CVE ID : CVE-2016-4971 Debian Bug : 827003 On a server redirect from HTTP to a FTP resource, wget would trust the HTTP server and uses the name in the redirected URL as the destination filename. This behaviour was changed and now it works similarly as a...