1783 matches found
Debian DLA-646-1 : zendframework security update
CVE-2016-4861 The implementation of ORDER BY and GROUP BY in ZendDbSelect remained prone to SQL injection when a combination of SQL expressions and comments were used. This security patch provides a comprehensive solution that identifies and removes comments prior to checking validity of the...
DLA-647-1 freeimage - security update
Bulletin has no description...
DLA-648-1 c-ares - security update
Bulletin has no description...
DLA-649-1 python-django - security update
Bulletin has no description...
DLA-646-1 zendframework - security update
Bulletin has no description...
DLA-645-1 bind9 - security update
Bulletin has no description...
Debian DLA-641-1 : ruby-activesupport-3.2 security update
Active Support in Ruby on Rails 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 supports the use of instance-level writers for class accessors, which allows remote attackers to bypass intended validation steps via crafted parameters. For Debian 7 'Wheezy', these problems...
Debian DLA-642-1 : ruby-activerecord-3.2 security update
Active Record in Ruby on Rails 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 supports the use of instance-level writers for class accessors, which allows remote attackers to bypass intended validation steps via crafted parameters. For Debian 7 'Wheezy', these problems...
DLA-644-1 libav - security update
Bulletin has no description...
[SECURITY] [DLA 636-2] firefox-esr regression update
Package : firefox-esr Version : 45.4.0esr-1deb7u2 The update of firefox-esr to 45.4.0esr-1deb7u1 caused build failure on armel and armhf architectures. For Debian 7 "Wheezy", these problems have been fixed in version 45.4.0esr-1deb7u2. We recommend that you upgrade your firefox-esr packages...
DLA-643-1 chicken - security update
Bulletin has no description...
DLA-641-1 ruby-activesupport-3.2 - security update
Bulletin has no description...
DLA-642-1 ruby-activerecord-3.2 - security update
Bulletin has no description...
Debian DLA-636-2 : firefox-esr regression update
The update of firefox-esr to 45.4.0esr-1deb7u1 caused build failure on armel and armhf architectures. For Debian 7 'Wheezy', these problems have been fixed in version 45.4.0esr-1deb7u2. We recommend that you upgrade your firefox-esr packages. NOTE: Tenable Network Security has extracted the...
DLA-636-2 firefox-esr - regression update
Bulletin has no description...
Debian DLA-638-1 : policycoreutils security update
It was discovered that there was a sandbox escape via the 'TIOCSTI' ioctl in policycoreutils, a set of programs required for the basic operation of an SELinux-based system. For Debian 7 'Wheezy', this issue has been fixed in policycoreutils version 2.1.10-9+deb7u1. We recommend that you upgrade...
Debian DLA-634-1 : dropbear security update
It was discovered that there were two issues in dropbear, a lightweight SSH2 server and client : - CVE-2016-7406: Potential issues in exit message formatting. - CVE-2016-7407: Overflows when parsing OpenSSH's ASN.1 key format. For Debian 7 'Wheezy', this issue has been fixed in dropbear version...
DLA-637-1 openssl - security update
Bulletin has no description...