1783 matches found
DLA-538-1 wireshark - security update
Bulletin has no description...
DLA-536-1 wget - security update
Bulletin has no description...
[SECURITY] [DLA 534-1] libgd2 security update
Package : libgd2 Version : 2.0.36rc1dfsg-6.1+deb7u4 CVE ID : CVE-2016-5766 CVE-2016-5766 Integer Overflow in gd2GetHeader resulting in heap overflow. For Debian 7 "Wheezy", these problems have been fixed in version 2.0.36rc1dfsg-6.1+deb7u4. We recommend that you upgrade your libgd2 packages...
[SECURITY] [DLA 533-1] php5 security update
Package : php5 Version : 5.4.45-0+deb7u4 CVE ID : CVE-2016-5093 CVE-2016-5094 CVE-2016-5095 CVE-2016-5096 PHP bugs : 70661 70728 70741 70480 CVE-2016-5093.patch Absence of null character causes unexpected zendstring length and leaks heap memory. The test script uses localegetprimarylanguage to...
DLA-533-1 php5 - security update
Bulletin has no description...
DLA-535-1 xerces-c - security update
Bulletin has no description...
DLA-534-1 libgd2 - security update
Bulletin has no description...
[SECURITY] [DLA 532-1] movabletype-opensource security update
Package : movabletype-opensource Version : 5.1.4+dfsg-4+deb7u4 CVE ID : CVE-2016-5742 It was discovered that there was a SQL injection vulnerability in the XML-RPC interface in MovableType, a blogging engine. For Debian 7 "Wheezy", this issue has been fixed in movabletype-opensource version...
Debian DLA-527-1 : nss security update
Four moderate rated networking security issues were found in NSS. For Debian 7 'Wheezy', these problems have been fixed in version 2:3.14.5-1+deb7u8. We recommend that you upgrade your nss packages and restart any applications that use them. NOTE: Tenable Network Security has extracted the...
Debian DLA-525-1 : gimp security update
It was discovered that there was a use-after-free vulnerability in the channel and layer properties parsing process in Gimp, the GNU Image Manipulation Program. For Debian 7 'Wheezy', this issue has been fixed in gimp version 2.8.2-2+deb7u2. We recommend that you upgrade your gimp packages. NOTE:...
DLA-531-1 spice - security update
Bulletin has no description...
Debian DLA-530-1 : java-common security update
As previously announced 12, the default Java implementation has been switched from OpenJDK 6 to OpenJDK 7. We strongly recommend to remove the unsupported OpenJDK 6 packages which will receive no further security updates. 1 https://lists.debian.org/debian-lts-announce/2016/05/msg00007.html 2...
Debian DLA-528-1 : libcommons-fileupload-java security update
A denial of service vulnerability was identified in Commons FileUpload that occurred when the length of the multipart boundary was just below the size of the buffer 4096 bytes used to read the uploaded file. This caused the file upload process to take several orders of magnitude longer than if th...
[SECURITY] [DLA 530-1] java-common security update
Package : java-common Version : 0.47+deb7u2 As previously announced 12, the default Java implementation has been switched from OpenJDK 6 to OpenJDK 7. We strongly recommend to remove the unsupported OpenJDK 6 packages which will receive no further security updates. 1...
[SECURITY] [DLA 528-1] libcommons-fileupload-java security update
Package : libcommons-fileupload-java Version : 1.2.2-1+deb7u3 CVE ID : CVE-2016-3092 A denial of service vulnerability was identified in Commons FileUpload that occurred when the length of the multipart boundary was just below the size of the buffer 4096 bytes used to read the uploaded file. This...
DLA-528-1 libcommons-fileupload-java - security update
Bulletin has no description...
DLA-530-1 java-common - security update
Bulletin has no description...
DLA-529-1 tomcat7 - security update
Bulletin has no description...