[SECURITY] [DLA 606-1] tiff security update

Package : tiff Version : 4.0.2-6+deb7u6 CVE ID : CVE-2016-3991 CVE-2016-5314 CVE-2016-5315 CVE-2016-5316 CVE-2016-5317 CVE-2016-5320 CVE-2016-5321 CVE-2016-5322 CVE-2016-5323 CVE-2016-5875 Several vulnerabilities were found in the tiff library, potentially causing denial of services to applicatio...

DLA-606-1 tiff - security update

Bulletin has no description...

Debian DLA-603-1 : ruby-activesupport-3.2 security update

The support and utility classes used by the Rails 3.2 framework allow remote attackers to cause a denial of service SystemStackError via a large XML document depth. For Debian 7 'Wheezy', these problems have been fixed in version 3.2.6-6+deb7u2. Additionally this upload adds...

[SECURITY] [DLA 605-1] eog security update

Package : eog Version : 3.4.2-1+build1+deb7u1 CVE ID : CVE-2016-6855 It was discovered that Eye of GNOME incorrectly handled certain invalid UTF-8 strings. If a user were tricked into opening a specially-crafted image, a remote attacker could use this issue to cause Eye of GNOME to crash, resulti...

DLA-603-1 ruby-activesupport-3.2 - security update

Bulletin has no description...

DLA-602-1 gnupg - security update

Bulletin has no description...

DLA-601-1 quagga - security update

Bulletin has no description...

Debian DLA-600-1 : libgcrypt11 security update

The crypto library libgcrypt11 has a weakness in the random number generator. CVE-2016-6313 Felix Drre and Vladimir Klebanov from the Karlsruhe Institute of Technology found a bug in the mixing functions of Libgcrypt's random number generator. An attacker who obtains 4640 bits from the RNG can...

DLA-600-1 libgcrypt11 - security update

Bulletin has no description...

Debian DLA-598-1 : suckless-tools security update

It was discovered that the slock screen locking tool would segfault when the user's account had been disabled. slock called crypt3 and used the return value for strcmp3 without checking to see if the return value of crypt3 was a NULL pointer. If the hash returned by getspnam-sppwdp was invalid,...

[SECURITY] [DLA 599-1] cracklib2 security update

Package : cracklib2 Version : 2.8.19-3+deb7u1 CVE ID : CVE-2016-6318 Debian Bug : 834502 It was discovered that there was a stack-based buffer overflow when parsing large GECOS fields in cracklib2, a pro-active password checker library. For Debian 7 "Wheezy", this issue has been fixed in cracklib...

DLA-598-1 suckless-tools - security update

Bulletin has no description...

DLA-599-1 cracklib2 - security update

Bulletin has no description...

Debian DLA-597-1 : libupnp security update

It has been discovered that libupnp's default behaviour allows anyone to write to the filesystem of the system running a libupnp-based server application. For Debian 7 'Wheezy', these problems have been fixed in version 1.6.17-1.2+deb7u1. We recommend that you upgrade your libupnp packages. NOTE:...

DLA-597-1 libupnp - security update

Bulletin has no description...

Debian DLA-596-1 : extplorer security update

It was discovered that there was an archive traversal exploit in eXtplorer, a web-based file manager. The unzip/extract feature allowed for path traversal as decompressed files can be placed outside of the intended target directory if the archive content contained '../' characters. For Debian 7...

DLA-595-1 wireshark - security update

Bulletin has no description...

DLA-596-1 extplorer - security update

Bulletin has no description...

DLA-594-1 openssh - security update

Bulletin has no description...

[SECURITY] [DLA 593-1] nettle security update

Package : nettle Version : 2.4-3+deb7u1 CVE ID : CVE-2016-6489 Debian Bug : 832983 The cryptographic library nettle had a potential information leak problem reported. CVE-2016-6489 RSA code is vulnerable to cache sharing related attacks. For Debian 7 "Wheezy", this problems has been fixed in...