[SECURITY] [DLA 1210-1] kildclient security update

Package : kildclient Version : 2.11.1-1+deb7u1 CVE ID : CVE-2017-17511 It was discovered that there was a command-injection vulnerability in kildclient, a "MUD" multiplayer real-time virtual world game. For Debian 7 "Wheezy", this issue has been fixed in kildclient version 2.11.1-1+deb7u1. Thanks...

[SECURITY] [DSA 4022-1] libreoffice security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4022-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 07, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1165-1] libpam4j security update

Package : libpam4j Version : 1.4-2+deb7u1 CVE ID : CVE-2017-12197 Debian Bug : 879001 It was discovered that libpam4j, a Java binding for libpam.so, does not call pamacctmgmt. As a consequence, the PAM account is not properly verified. Any user with a valid password but with deactivated or disabl...

[SECURITY] [DSA 3978-1] gdk-pixbuf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3978-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 18, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3947-1] newsbeuter security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3947-1 [email protected] https://www.debian.org/security/ Sebastien Delafond August 18, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3912-1] heimdal security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3912-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 16, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3895-1] flatpak security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3895-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 22, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 949-1] miniupnpc security update

Package : miniupnpc Version : 1.5-2+deb7u2 CVE ID : CVE-2017-8798 Debian Bug : 862273 It was discovered that there was a integer signedness error in the miniupnpc UPnP client that could allow remote attackers to cause a denial of service attack. For Debian 7 "Wheezy", this issue has been fixed in...

[SECURITY] [DSA 3843-1] tomcat8 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3843-1 [email protected] https://www.debian.org/security/ Sebastien Delafond May 03, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 924-1] tomcat7 security update

Package : tomcat7 Version : 7.0.28-4+deb7u12 CVE ID : CVE-2017-5647 CVE-2017-5648 Debian Bug : 860068 Two security vulnerabilities have been discovered in the Tomcat servlet and JSP engine. CVE-2017-5647 A bug in the handling of the pipelined requests when send file was used resulted in the...

[SECURITY] [DSA 3834-1] mysql-5.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3834-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 25, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3794-3] munin regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3794-3 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 03, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3742-1] flightgear security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3742-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 20, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 739-1] jasper security updat

Package : jasper Version : 1.900.1-13+deb7u5 CVE ID : CVE-2016-8654 CVE-2016-8691 CVE-2016-8692 CVE-2016-8693 CVE-2016-8882 CVE-2016-8883 CVE-2016-8887 CVE-2016-9560 TEMP-CVE CVE-2016-8691 FPE on unknown address ... jpcdecprocesssiz ... jpcdec.c CVE-2016-8692 FPE on unknown address...

[SECURITY] [DSA 3725-1] icu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3725-1 [email protected] https://www.debian.org/security/ Luciano Bello November 27, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 627-1] pdns security update

Package : pdns Version : 3.1-4.1+deb7u2 CVE ID : CVE-2016-5426 CVE-2016-5427 CVE-2016-6172 Debian Bug : 830808 Multiple vulnerabilities have been discovered in pdns, an authoritative DNS server. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2016-5426 /...

[SECURITY] [DLA 451-1] openjdk-7 security update

Package : openjdk-7 Version : 7u101-2.6.6-2deb7u1 CVE ID : CVE-2016-0636 CVE-2016-0686 CVE-2016-0687 CVE-2016-0695 CVE-2016-3425 CVE-2016-3426 CVE-2016-3427 Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in breakouts of the Java...

[SECURITY] [DSA 3535-1] kamailio security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3535-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 29, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3438-1] xscreensaver security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3438-1 [email protected] https://www.debian.org/security/ Michael Gilbert January 09, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3425-1] tryton-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3425-1 [email protected] https://www.debian.org/security/ Luciano Bello December 17, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DLA 355-1] libxml2 security update

Package : libxml2 Version : 2.7.8.dfsg-2+squeeze15 CVE ID : CVE-2015-8241 CVE-2015-8317 Debian Bug : 806384 CVE-2015-8241 Buffer overread with XML parser in xmlNextChar CVE-2015-8317 - issues in the xmlParseXMLDecl function: If we fail conversing the current input stream while processing the...

[SECURITY] [DSA 3358-1] php5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3358-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 13, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DLA 262-1] libcrypto++ security update

Package : libcrypto++ Version : 5.6.0-6+deb6u1 CVE ID : CVE-2015-2141 Evgeny Sidorov discovered that libcrypto++, a general purpose C++ cryptographic library, did not properly implement blinding to mask private key operations for the Rabin-Williams digital signature algorithm. This could allow...

[SECURITY] [DSA 3151-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3151-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 03, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 130-1] firebird2.1 security update

Package : firebird2.1 Version : 2.1.3.18185-0.ds1-11+squeeze2 CVE ID : CVE-2014-9323 Segfault in server caused by malformed network packet. See: http://tracker.firebirdsql.org/browse/CORE-4630...

[SECURITY] [DLA 97-1] eglibc security update

Package : eglibc Version : 2.11.3-4+deb6u2 CVE ID : CVE-2012-6656 CVE-2014-6040 CVE-2014-7817 CVE-2012-6656 Fix validation check when converting from ibm930 to utf. When converting IBM930 code with iconv, if IBM930 code which includes invalid multibyte character "0xffff" is specified, then iconv...

[SECURITY] [DSA 3078-1] libksba security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3078-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 27, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 44-1] libwpd security update

Package : libwpd Version : 0.8.14-1+deb6u1 CVE ID : CVE-2012-2149 Fix arbitrary code execution by remote attackers via crafted Wordperfect .WPD documents...

[SECURITY] [DSA 2997-1] reportbug security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2997-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 05, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2826-2] denyhosts regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-2826-2 [email protected] http://www.debian.org/security/ Yves-Alexis Perez January 23, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2826-1] denyhosts security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2826-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez December 22, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2756-1] wireshark security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2756-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 13, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2645-1] inetutils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2645-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez March 14, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2611-1] movabletype-opensource security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2611-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez January 22, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2442-1] openarena security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2442-1 [email protected] http://www.debian.org/security/ Florian Weimer March 26, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2285-1] mapserver security update

-------------------------------------------------------------------------- Debian Security Advisory DSA-2285-1 [email protected] http://www.debian.org/security/ Nico Golde July 26, 2011 http://www.debian.org/security/faq -...

[BSA-039] Security Update for qemu-kvm

Michael Tokarev uploaded new packages for qemu-kvm which fixed the following security issues: CVE-2011-0011 Setting the VNC password to an empty string silently disabled all authentication. CVE-2011-1750 The virtio-blk driver performed insufficient validation of read/write I/O from the guest...

[SECURITY] [DSA 2265-1] perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2265-1 [email protected] http://www.debian.org/security/ Florian Weimer June 20, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2176-1] cups security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2176-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 02, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2166-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2166-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano February 16, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2150-1] request-tracker3.6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2150-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 22, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2093-1] New ghostscript packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2093-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano August 19, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA-2001-1] New php5 packages fix multiple vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2001-1 [email protected] http://www.debian.org/security/ Raphael Geissert February 19, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA-1996-1] New Linux 2.6.26 packages fix several vulnerabilities

---------------------------------------------------------------------- Debian Security Advisory DSA-1996-1 [email protected] http://www.debian.org/security/ dann frazier February 12, 2010 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

[SECURITY] [DSA 1925-1] New proftpd-dfsg packages fix SSL certificate verification weakness

------------------------------------------------------------------------ Debian Security Advisory DSA-1925-1 [email protected] http://www.debian.org/security/ Steffen Joeris October 31, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1907-1] New kvm packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1907-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano October 13, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1717-1] New devil packages fix buffer overflow

------------------------------------------------------------------------ Debian Security Advisory DSA-1717 [email protected] http://www.debian.org/security/ Steffen Joeris February 05, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1630-1] New Linux 2.6.18 packages fix several vulnerabilities

---------------------------------------------------------------------- Debian Security Advisory DSA-1630-1 [email protected] http://www.debian.org/security/ dann frazier Aug 21, 2008 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

[SECURITY] [DSA 1554-2] New roundup packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1554-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 06, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1569-1] New cacti packages fix multiple vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1569-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 05, 2008 http://www.debian.org/security/faq -...