1783 matches found
Debian DLA-479-1 : xen security update
This security update fixes a number of security issues in Xen in wheezy. For Debian 7 'Wheezy', these problems have been fixed in version 4.1.6.1-1+deb7u1. We recommend that you upgrade your libidn packages. CVE-2015-2752 The XENDOMCTLmemorymapping hypercall in Xen 3.2.x through 4.5.x, when using...
[SECURITY] [DLA 477-1] librsvg security update
Package : librsvg Version : 2.36.1-2+deb7u2 CVE ID : CVE-2015-7558 CVE-2016-4347 CVE-2016-4348 Note CVE-2016-4347 is a duplicate of CVE-2015-7558 Two DoS in librsvg 2.40.2 parsing SVGs with circular definitions were found they will produce stack exhaustion by Gustavo Grieco. The version in wheezy...
Debian DLA-473-1 : wpa security update
A vulnerability was found in how hostapd and wpasupplicant writes the configuration file update for the WPA/WPA2 passphrase parameter. If this parameter has been updated to include control characters either through a WPS operation CVE-2016-4476 or through local configuration change over the...
Debian DLA-471-1 : jansson security update
Applications that depend on Jansson, a C library for encoding, decoding and manipulating JSON data, could crash due to stack exhaustion while parsing a JSON file. This was caused due to an unlimited parsing depth when parsing JSON arrays and is now fixed by limiting the depth to 2048. For Debian ...
DLA-476-1 libidn - security update
Bulletin has no description...
[SECURITY] [DLA 475-1] python-tornado security update
Package : python-tornado Version : 2.3-2+deb7u1 CVE ID : CVE-2014-9720 It was discovered that python-tornado, a Python web framework and asynchronous networking library, was susceptible for the BREACH attack. The XSRF token is now encoded with a random mask on each request. This makes it safe to...
DLA-475-1 python-tornado - security update
Bulletin has no description...
[SECURITY] [DLA 473-1] wpa security update
Package : wpa Version : 1.0-3+deb7u4 CVE ID : CVE-2016-4476 CVE-2016-4477 Debian Bug : 823411 A vulnerability was found in how hostapd and wpasupplicant writes the configuration file update for the WPA/WPA2 passphrase parameter. If this parameter has been updated to include control characters...
Debian DLA-469-1 : libgwenhywfar security update
It was discovered that libgwenhywfar an OS abstraction layer that allows porting of software to different operating systems like Linux, BSD, Windows etc. used an outdated CA certificate bundle. For Debian 7 'Wheezy', this issue has been fixed in libgwenhywfar version 4.3.3-1+deb7u1 by utilising t...
DLA-471-1 jansson - security update
Bulletin has no description...
[SECURITY] [DLA 469-1] libgwenhywfar security update
Package : libgwenhywfar Version : 4.3.3-1+deb7u1 CVE ID : CVE-2015-7542 Debian Bug : 748955 It was discovered that libgwenhywfar an OS abstraction layer that allows porting of software to different operating systems like Linux, BSD, Windows etc. used an outdated CA certificate bundle. For Debian ...
DLA-469-1 libgwenhywfar - security update
Bulletin has no description...
DLA-468-1 libuser - security update
Bulletin has no description...
Debian DLA-465-1 : debian-security-support update
It is not feasible to fully support some Debian packages through the releases life cycle. The debian-security-support package provides the check-support-status tool that helps to warn the administrator about installed packages whose security support is limited or has to prematurely end. For Debia...
DLA-467-1 xerces-c - security update
Bulletin has no description...
DLA-466-1 ocaml - security update
Bulletin has no description...
Debian DLA-463-1 : ikiwiki security update
Simon McVittie discovered a cross-site scripting vulnerability in the error reporting of Ikiwiki, a wiki compiler. This update also hardens ikiwiki's use of imagemagick in the img plugin. For Debian 7 'Wheezy', this problem has been fixed in version 3.20120629.2+deb7u1. We recommend that you...
[SECURITY] [DLA 449-2] botan1.10 regression update
Package : botan1.10 Version : 1.10.5-1+deb7u1 Debian Bug : 823297 The security update for botan1.10 caused a regression in monotone due to a ABI change. In order to fix this issue all reverse-dependencies of botan1.10 have been rebuilt. For Debian 7 "Wheezy", these problems have been fixed in...
[SECURITY] [DLA 464-1] libav security update
Package : libav Version : 6:0.8.17-2+deb7u1 CVE ID : CVE-2014-9676 It was discovered that there was a use-after free vulnerability in libav, a multimedia player, server, encoder and transcoder library. The segwritepacket function in libavformat/segment.c in ffmpeg 2.1.4 and earlier does not free...