DLA-525-1 gimp - security update

Bulletin has no description...

[SECURITY] [DLA 523-1] enigmail security update

Package : enigmail Version : 1.8.2-4deb7u2 This uploads corrects the dependencies of the enigmail extension so it becomes installable again together with Icedove 45. For Debian 7 "Wheezy", these problems have been fixed in version 1.8.2-4deb7u2. We recommend that you upgrade your enigmail package...

FinderView - Multiple Vulnerabilities

Exploit Title: FinderView - Multiple VulnerabilityPath Traversal/Reflected XSS Date: 2016-06-23 Exploit Author: HaHwul Exploit Author Blog: www.hahwul.com Vendor Homepage: https://github.com/proin/ Software Link: https://github.com/proin/FinderView/archive/master.zip Version: Latest commit Tested...

Debian DLA-519-1 : icedove security update

Multiple security issues have been found in Icedove, Debian's version of the Mozilla Thunderbird mail client: Multiple memory safety errors may lead to the execution of arbitrary code or denial of service. Debian follows the extended support releases ESR of Thunderbird. Support for the 38.x serie...

[SECURITY] [DLA 519-1] icedove security update

Package : icedove Version : 45.1.0-1deb7u1 CVE ID : CVE-2016-2806 Multiple security issues have been found in Icedove, Debians version of the Mozilla Thunderbird mail client: Multiple memory safety errors may lead to the execution of arbitrary code or denial of service. Debian follows the extende...

DLA-524-1 squidguard - security update

Bulletin has no description...

DLA-523-1 enigmail - security update

Bulletin has no description...

DLA-522-1 python2.7 - security update

Bulletin has no description...

Debian DLA-516-1 : linux security update

This update fixes the CVEs described below. CVE-2016-0821 Solar Designer noted that the list 'poisoning' feature, intended to mitigate the effects of bugs in list manipulation in the kernel, used poison values within the range of virtual addresses that can be allocated by user processes...

Debian DLA-517-1 : imagemagick security update

The code did not check the integer didn't overflow before trying to resize a buffer. A specially crafted file could result in using memory past the end of the allocated buffer. This security CVEs for this issue CVE-2016-4563 along with CVE-2016-4562 and CVE-2016-4564 were based on a security...

[SECURITY] [DLA 521-1] firefox-esr security update

Package : firefox-esr Version : 45.2.0esr-1deb7u1 CVE ID : CVE-2016-2818 CVE-2016-2819 CVE-2016-2821 CVE-2016-2822 CVE-2016-2828 CVE-2016-2831 Multiple security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors, buffer overflows and other implementation erro...

DLA-521-1 firefox-esr - security update

Bulletin has no description...

[SECURITY] [DLA 520-1] horizon security update

Package : horizon Version : 2012.1.1-10+deb7u1 CVE ID : CVE-2016-4428 It was discovered that there was an XSS vulnerability in horizon, a Django module providing web interaction with OpenStack. For Debian 7 "Wheezy", this issue has been fixed in horizon version 2012.1.1-10+deb7u1. We recommend th...

DLA-519-1 icedove - security update

Bulletin has no description...

DLA-520-1 horizon - security update

Bulletin has no description...

[SECURITY] [DLA 518-1] mozilla-devscripts security update

Package : mozilla-devscripts Version : 0.32+deb7u1 Debian Bug : 825508 In preparation of the upcoming switch to Icedove 45 the mozilla-devscripts package was updated to generate correct dependencies for rebuilt extensions. For Debian 7 "Wheezy", these problems have been fixed in version...

DLA-518-1 mozilla-devscripts - security update

Bulletin has no description...

DLA-517-1 imagemagick - security update

Bulletin has no description...

Debian DLA-515-1 : libav security update

It was discovered that there was a memory corruption issue in libav a multimedia player, server, encoder and transcoder when parsing .mp4 files which could lead to crash or possibly execute arbitrary code. For Debian 7 'Wheezy', this issue has been fixed in libav version 6:0.8.17-2+deb7u2. We...

Ultrabenosaurus ChatBoard - Persistent Cross-Site Scripting

Exploit Title: Ultrabenosaurus ChatBoard - Stored XSS Date: 2016-06-14 Exploit Author: HaHwul Exploit Author Blog: www.hahwul.com Vendor Homepage: http://ultrabenosaurus.ninja/ Software Link: https://github.com/Ultrabenosaurus/ChatBoard/archive/master.zip Tested on: Debian wheezy Vulnerability...