1783 matches found
DLA-739-1 jasper - security update
Bulletin has no description...
Debian DLA-737-1 : roundcube security update
It was discovered that there was a vulnerability where a remote user could execute arbitrary commands in Roundcube, a webmail solution for IMAP servers, by sending a specially crafted email. This was due to lack of sanitisation of the arguments to PHP's 'mail' function. For Debian 7 'Wheezy', thi...
[SECURITY] [DLA 737-1] roundcube security update
Package : roundcube Version : 0.7.2-9+deb7u5 Debian Bug : 847287 It was discovered that there was a vulnerability where a remote user could execute arbitrary commands in Roundcube, a webmail solution for IMAP servers, by sending a specially crafted email. This was due to lack of sanitisation of t...
DLA-738-1 spip - security update
Bulletin has no description...
DLA-737-1 roundcube - security update
Bulletin has no description...
Debian DLA-736-1 : gst-plugins-bad0.10 security update
An out of bounds heap bug was found in the H264 parser in gst-plugins-bad0.10. For Debian 7 'Wheezy', these problems have been fixed in version 0.10.23-7.1+deb7u4. We recommend that you upgrade your gst-plugins-bad0.10 packages. NOTE: Tenable Network Security has extracted the preceding descripti...
Debian DLA-735-1 : gst-plugins-base0.10 security update
An out of bounds heap read issue was found in gst-plugins-base0.10. For Debian 7 'Wheezy', these problems have been fixed in version 0.10.36-1.1+deb7u1. We recommend that you upgrade your gst-plugins-base0.10 packages. NOTE: Tenable Network Security has extracted the preceding description block...
DLA-736-1 gst-plugins-bad0.10 - security update
Bulletin has no description...
DLA-734-1 mapserver - security update
Bulletin has no description...
Debian DLA-734-1 : mapserver security update
It was discovered that there was an information leakage vulnerability in mapserver, a CGI-based framework for Internet map services. For Debian 7 'Wheezy', this issue has been fixed in mapserver version 6.0.1-3.2+deb7u3. We recommend that you upgrade your mapserver packages. NOTE: Tenable Network...
Debian DLA-733-1 : openafs security update
It was discovered that there was an information leak vulnerability in openafs, a distributed filesystem. Due to incomplete initialization or clearing of reused memory, OpenAFS directory objects are likely to contain 'dead' directory entry information. For Debian 7 'Wheezy', this issue has been...
Debian DLA-731-2 : imagemagick regression update
The update for imagemagick issued as DLA-731-1 caused regressions when decoding properties of certain images. Updated packages are now available to address this problem. For reference, the original advisory text follows. Several issues have been discovered in ImageMagick, a popular set of program...
CVE-2016-9775
The postrm script in the tomcat6 package before 6.0.45+dfsg-1deb7u3 on Debian wheezy, before 6.0.45+dfsg-1deb8u1 on Debian jessie, before 6.0.35-1ubuntu3.9 on Ubuntu 12.04 LTS and on Ubuntu 14.04 LTS; the tomcat7 package before 7.0.28-4+deb7u7 on Debian wheezy, before 7.0.56-3+deb8u6 on Debian...
DLA-732-1 monit - security update
Bulletin has no description...
Debian DLA-730-1 : firefox-esr security update
Multiple security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors, buffer overflows and other implementation errors may lead to the execution of arbitrary code or bypass of the same-origin policy. A man-in-the-middle attack in the addon update mechanism ha...
DLA-728-1 tomcat6 - security update
Bulletin has no description...
Debian DLA-727-1 : gst-plugins-good0.10 security update
Chris Evans discovered that the GStreamer 0.10 plugin used to decode files in the FLIC format allowed execution of arbitrary code. Further details can be found in his advisory at https://scarybeastsecurity.blogspot.de/2016/11/0day-exploit-advancing- exploitati on.html This update removes the...
DLA-730-1 firefox-esr - security update
Bulletin has no description...