1783 matches found
DLA-690-1 tar - security update
Bulletin has no description...
DLA-689-1 qemu-kvm - security update
Bulletin has no description...
[SECURITY] [DLA 688-1] cairo security update
Package : cairo Version : 1.12.2-3+deb7u1 CVE ID : CVE-2016-9082 Debian Bug : 842289 It was discovered that there was a possible DoS attack in Cairo, a multi-platform library providing vector-based rendering. An SVG could generate invalid pointers from a cairoimagesurface in writepng. For Debian ...
[SECURITY] [DLA 674-2] ghostscript regression update
Package : ghostscript Version : 9.05dfsg-6.3+deb7u4 Debian Bug : 840691 The update for ghostscript issued as DLA-674-1 caused regressions for certain Postscript document viewers evince, zathura. Updated packages are now available to address this problem. For reference, the original advisory text...
DLA-688-1 cairo - security update
Bulletin has no description...
Debian DLA-687-1 : tre security update
A vulnerability has been found in the tre package that could allow an attacker to perform controlled heap corruption. For Debian 7 'Wheezy', these problems have been fixed in version 0.8.0-3+deb7u1. We recommend that you upgrade your tre packages. NOTE: Tenable Network Security has extracted the...
Debian DLA-685-2 : libxi regression update
A regression was found in the previous libxi update. An uninitialized pointer could be freed, causing crashes. For Debian 7 'Wheezy', these problems have been fixed in version 2:1.6.1-1+deb7u3. We recommend that you upgrade your libxi packages. NOTE: Tenable Network Security has extracted the...
DLA-684-1 libx11 - security update
Bulletin has no description...
DLA-685-1 libxi - security update
Bulletin has no description...
Debian DLA-675-1 : potrace security update
Multiple vulnerabilities have been found in potrace. CVE-2013-7437 Multiple integer overflows in potrace 1.11 allow remote attackers to cause a denial of service crash via large dimensions in a BMP image, which triggers a buffer overflow. This bug was reported by Murray McAllister of the Red Hat...
DLA-687-1 tre - security update
Bulletin has no description...
DLA-686-1 libxtst - security update
Bulletin has no description...
[SECURITY] [DLA 686-1] libxtst security update
Package : libxtst Version : 2:1.2.1-1+deb7u2 CVE ID : CVE-2016-7951 CVE-2016-7952 Debian Bug : 840444 Tobias Stoeckmann from the OpenBSD project discovered the following vulnerability in libXtst, the X Record extension: Insufficient validation of data from the X server can cause out of boundary...
[SECURITY] [DLA 683-1] graphicsmagick security update
Package : graphicsmagick Version : 1.3.16-1.1+deb7u5 CVE ID : CVE-2016-7448 CVE-2016-7996 CVE-2016-7997 CVE-2016-8682 CVE-2016-8683 CVE-2016-8684 Several vulnerabilities have been found in the graphicsmagick package that may lead to denial of service through failed assertions, CPU or memory usage...
[SECURITY] [DLA 682-1] libdatetime-timezone-perl new upstream version
Package : libdatetime-timezone-perl Version : 1:1.58-1+2016h This update includes the changes in tzdata up to 2016h for the Perl bindings. For the list of changes, see DLA-681-1. For Debian 7 "Wheezy", these problems have been fixed in version 1:1.58-1+2016h. We recommend that you upgrade your...
Debian DLA-678-1 : qemu security update
Multiple vulnerabilities have been found in QEMU : CVE-2016-8576 Quick Emulator Qemu built with the USB xHCI controller emulation support is vulnerable to an infinite loop issue. It could occur while processing USB command ring in 'xhciringfetch'. CVE-2016-8577 Quick Emulator Qemu built with the...
DLA-680-1 bash - security update
Bulletin has no description...
Debian DLA-676-1 : nspr security update
The Network Security Service NSS libraries uses environment variables to configure lots of things, some of which refer to file system locations. Others can be degrade the operation of NSS in various ways, forcing compatibility modes and so on. Previously, these environment variables were not...