1783 matches found
DLA-504-1 libxstream-java - security update
Bulletin has no description...
Debian DLA-501-1 : gdk-pixbuf security update
It was discovered that the original fix for CVE-2015-7552 DLA-450-1 was incomplete. A heap-based buffer overflow in gdk-pixbuf, a library for image loading and saving facilities, fast scaling and compositing of pixbufs, allows remote attackers to cause a denial of service or possibly execute...
Debian DLA-500-1 : imagemagick security update
Bob Friesenhahn from the GraphicsMagick project discovered a command injection vulnerability in ImageMagick, a program suite for image manipulation. An attacker with control on input image or the input filename can execute arbitrary commands with the privileges of the user running the application...
DLA-503-1 libxml2 - security update
Bulletin has no description...
Debian DLA-502-1 : graphicsmagick security update
Bob Friesenhahn discovered a command injection vulnerability in Graphicsmagick, a program suite for image manipulation. An attacker with control on input image or the input filename can execute arbitrary commands with the privileges of the user running the application. This update removes the...
[SECURITY] Debian 7 Wheezy LTS now supporting armel and armhf
Debian Long Term Support LTS is a project created to extend the life of all Debian stable releases to at least 5 years. Thanks to the LTS sponsors, Debians buildd maintainers and the Debian FTP Team are excited to announce that two new architectures, armel and armhf, are going to be supported in...
DLA-501-1 gdk-pixbuf - security update
Bulletin has no description...
DLA-500-1 imagemagick - security update
Bulletin has no description...
[SECURITY] [DLA 498-1] ruby-activemodel-3.2 security update
Package : ruby-activemodel-3.2 Version : 3.23.2.6-3+deb7u1 CVE ID : CVE-2016-0753 Active Model in Ruby on Rails 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 supports the use of instance-level writers for class accessors, which allows remote attackers to bypass intende...
DLA-498-1 ruby-activemodel-3.2 - security update
Bulletin has no description...
Debian DLA-494-1 : eglibc security update
Several vulnerabilities have been fixed in the Debian GNU C Library, eglibc : CVE-2016-1234 Alexander Cherepanov discovered that the glibc's glob implementation suffered from a stack-based buffer overflow when it was called with the GLOBALTDIRFUNC flag and encountered a long file name...
Debian DLA-491-1 : postgresql-9.1 bugfix update
The PostgreSQL project released a new version of the PostgreSQL 9.1 branch : - Clear the OpenSSL error queue before OpenSSL calls, rather than assuming it's clear already; and make sure we leave it clear afterwards Peter Geoghegan, Dave Vitek, Peter Eisentraut This change prevents problems when...
DLA-497-1 wireshark - security update
Bulletin has no description...
Debian DLA-493-1 : openafs security update
CVE-2015-8312: Off-by-one error in afspioctl.c in OpenAFS before 1.6.16 might allow local users to cause a denial of service memory overwrite and system crash via a pioctl with an input buffer size of 4096 bytes. - CVE-2016-2860: The newEntry function in ptserver/ptprocs.c in OpenAFS before...
[SECURITY] [DLA 481-2] phpmyadmin regression update
Package : phpmyadmin Version : 4:3.4.11.1-2+deb7u4 CVE ID : CVE-2016-1927 CVE-2016-2038 CVE-2016-2039 CVE-2016-2040 CVE-2016-2041 CVE-2016-2045 CVE-2016-2560 Debian Bug : 825301 The previous security upload broke the search pages in phpMyAdmin. This was caused by a broken patch applied to fix...
[SECURITY] [DLA 494-1] eglibc security update
Package : eglibc Version : 2.13-38+deb7u11 CVE ID : CVE-2016-1234 CVE-2016-3075 CVE-2016-3706 Several vulnerabilities have been fixed in the Debian GNU C Library, eglibc: CVE-2016-1234 Alexander Cherepanov discovered that the glibcs glob implementation suffered from a stack-based buffer overflow...
DLA-495-1 libtasn1-3 - security update
Bulletin has no description...
DLA-496-1 ruby-activerecord-3.2 - security update
Bulletin has no description...
[SECURITY] [DLA 492-1] pdns security update
Package : pdns Version : 3.1-4.1+deb7u1 CVE ID : CVE-2014-7210 It was discovered that the maintainer scripts of pdns-backend-mysql grant too wide database permissions for the pdns user. Other backends are not affected. For Debian 7 "Wheezy", these problems have been fixed in version 3.1-4.1+deb7u...