DLA-666-1 guile-2.0 - security update

Bulletin has no description...

Debian DLA-655-1 : mpg123 security update

Several security vulnerabilities have been discovered in mpg123, an MPEG layer 1/2/3 audio decoder and player. An attacker could take advantage of these flaws to cause a denial of service against mpg123 or applications using the libmpg123 library with a carefully crafted input file. CVE-2014-9497...

DLA-662-1 quagga - security update

Bulletin has no description...

Debian DLA-661-1 : libarchive security update

Agostino Sarubbo of Gentoo discovered several security vulnerabilities in libarchive, a multi-format archive and compression library. An attacker could take advantage of these flaws to cause a buffer overflow or an out of bounds read using a carefully crafted input file. CVE-2016-8687 Agostino...

[SECURITY] [DLA 661-1] libarchive security update

Package : libarchive Version : 3.0.4-3+wheezy5 CVE ID : CVE-2016-8687 CVE-2016-8688 CVE-2016-8689 Debian Bug : 840934 840935 840936 Agostino Sarubbo of Gentoo discovered several security vulnerabilities in libarchive, a multi-format archive and compression library. An attacker could take advantag...

[SECURITY] [DLA 660-1] libxrandr security update

Package : libxrandr Version : 2:1.3.2-2+deb7u2 CVE ID : CVE-2016-7947 CVE-2016-7948 Debian Bug : 840441 Insufficient validation of data from the X server in libxrandr before v1.5.0 can cause out of boundary memory writes and integer overflows. For Debian 7 "Wheezy", these problems have been fixed...

DLA-660-1 libxrandr - security update

Bulletin has no description...

DLA-657-1 libarchive - security update

Bulletin has no description...

DLA-658-1 icedove - security update

Bulletin has no description...

DLA-656-1 libdbd-mysql-perl - security update

Bulletin has no description...

DLA-655-1 mpg123 - security update

Bulletin has no description...

DLA-654-1 libxfixes - security update

Bulletin has no description...

Debian DLA-652-1 : qemu security update

Multiple vulnerabilities have been found in QEMU : CVE-2016-7161 Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU aka Quick Emulator allows attackers to execute arbitrary code on the QEMU host via a large ethlite packet. CVE-2016-7170 The vmsvgafiforun function...

[SECURITY] [DLA 651-1] graphicsmagick security update

Package : graphicsmagick Version : 1.3.16-1.1+deb7u4 CVE ID : CVE-2016-7446 CVE-2016-7447 CVE-2016-7449 CVE-2016-7800 Debian Bug : Various security issues were found and fixed in graphicsmagick in Debian wheezy LTS. CVE-2016-7446 Heap buffer overflow issue in MVG/SVG rendering. CVE-2016-7447 Heap...

DLA-653-1 qemu-kvm - security update

Bulletin has no description...

DLA-652-1 qemu - security update

Bulletin has no description...

DLA-651-1 graphicsmagick - security update

Bulletin has no description...

[SECURITY] [DLA 650-1] mat security update

Package : mat Version : 0.3.2-1+deb7u1 Debian Bug : 826101 An implementation flaw was discovered in mat, the metadata anonymisation toolkit. The implementation of PDF support lacks support to anonymize the metadata in embedded images. As there is no easy fix for this flaw, it was decided that PDF...

DLA-650-1 mat - security update

Bulletin has no description...

[SECURITY] [DLA DLA-649-1] python-django security update

Package : python-django Version : 1.4.22-1+deb7u1 CVE ID : CVE-2016-7401 It was discovered that there was a possible CSRF protection bypass on sites that use Google Analytics in python-django, a High-level Python web development framework. More information can be found in the upstream announcemen...