[SECURITY] [DLA 1315-1] libvirt security update

Package : libvirt Version : 0.9.12.3-1+deb7u3 CVE ID : CVE-2018-1064 CVE-2018-5748 Debian Bug : 887700 Daniel P. Berrange and Peter Krempa of Red Hat discovered a flaw in libvirt, a virtualization API. A lack of restriction for the amount of data read by QEMU Monitor socket can lead to a denial o...

[SECURITY] [DSA 4150-1] icu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4150-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 23, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1314-1] simplesamlphp security update

Package : simplesamlphp Version : 1.9.2-1+deb7u4 CVE ID : CVE-2018-7711 Cure53 discovered that in SimpleSAMLphp, in rare circumstances an invalid signature on the SAML 2.0 HTTP Redirect binding could be considered valid. Additionally this update fixes a regression introduced in DLA-1298 by the...

[SECURITY] [DSA 4149-1] plexus-utils2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4149-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 22, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4148-1] kamailio security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4148-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 22, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1313-1] isc-dhcp security update

Package : isc-dhcp Version : 4.2.2.dfsg.1-5+deb70u9 CVE ID : CVE-2018-5732 CVE-2018-5733 Several vulnerabilities have been discovered in the ISC DHCP client, relay and server. The Common Vulnerabilities and Exposures project identifies the following issues: CVE-2018-5732 Felix Wilhelm of the Goog...

[SECURITY] [DLA 1312-1] libvorbisidec security update

Package : libvorbisidec Version : 1.0.2+svn18153-0.2+deb7u1 CVE ID : CVE-2018-5147 Huzaifa Sidhpurwala discovered that an out-of-bounds memory write in the codebook parsing code of the Libtremor multimedia library could result in the execution of arbitrary code if a malformed Vorbis file is opene...

[SECURITY] [DLA 1311-1] adminer security update

Package : adminer Version : 3.3.3-1+deb7u1 CVE ID : CVE-2018-7667 Debian Bug : 893668 It was discovered that there was a server-side request forgery exploit in adminer, a web-based database administration tool. Adminer allowed unauthenticated connections to be initiated to arbitrary systems and...

[SECURITY] [DLA 1310-1] exempi security update

Package : exempi Version : 2.2.0-1+deb7u1 CVE ID : CVE-2017-18233 CVE-2017-18234 CVE-2017-18236 CVE-2017-18238 CVE-2018-7728 CVE-2018-7730 Various issues were discovered in exempi, a library to parse XMP metadata that may cause a denial-of-service or may have other unspecified impact via crafted...

[SECURITY] [DSA 4147-1] polarssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4147-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 21, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4147-1] polarssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4147-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 21, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4146-1] plexus-utils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4146-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 20, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1309-1] curl security update

Package : curl Version : 7.26.0-1+wheezy25 CVE ID : CVE-2018-1000120 CVE-2018-1000121 CVE-2018-1000122 Multiple vulnerabilities were found in cURL, an URL transfer library: CVE-2018-1000120 Duy Phan Thanh reported that curl could be fooled into writing a zero byte out of bounds when curl was told...

[SECURITY] [DSA 4145-1] gitlab security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4145-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 18, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4144-1] openjdk-8 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4144-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 17, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4143-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4143-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 17, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4142-1] uwsgi security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4142-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 17, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4142-1] uwsgi security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4142-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 17, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4141-1] libvorbisidec security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4141-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 16, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4141-1] libvorbisidec security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4141-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 16, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4140-1] libvorbis security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4140-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 16, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4140-1] libvorbis security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4140-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 16, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1307-1] clamav security update

Package : clamav Version : 0.99.4+dfsg-1+deb7u1 CVE ID : CVE-2018-0202 CVE-2018-1000085 Some vulnerabilities have been found in ClamAV, an open source antivirus engine: CVE-2018-0202 It was found that ClamAV didnt process certain PDF files correctly, relating to a heap overflow. Specially crafted...

[SECURITY] [DSA 4139-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4139-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 15, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1308-1] firefox-esr security update

Package : firefox-esr Version : 52.7.1esr-1deb7u1 CVE ID : CVE-2018-5125 CVE-2018-5127 CVE-2018-5129 CVE-2018-5130 CVE-2018-5131 CVE-2018-5144 CVE-2018-5145 Several security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors and other implementation errors ma...

[SECURITY] [DSA 4138-1] mbedtls security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4138-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 15, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4138-1] mbedtls security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4138-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 15, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4137-1] libvirt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4137-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 14, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4136-1] curl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4136-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini March 14, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4135-1] samba security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4135-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 13, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4135-1] samba security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4135-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 13, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1306-1] vips security update

Package : vips Version : 7.28.5-1+deb7u2 CVE ID : CVE-2018-7998 Debian Bug : 892589 It was discovered that there was NULL function pointer dereference vulnerability in vips, an image processing system for very large images. Remote attackers could cause a denial of service via a specially-crafted...

[SECURITY] [DLA 1305-1] ming security update

Package : ming Version : 0.4.4-1.1+deb7u7 CVE ID : CVE-2018-5251 CVE-2018-5294 CVE-2018-6315 CVE-2018-6359 Multiple vulnerabilities have been discovered in Ming: CVE-2018-5251 Integer signedness error vulnerability left shift of a negative value in the readSBits function util/read.c. Remote...

[SECURITY] [DSA 4134-1] util-linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4134-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 10, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4134-1] util-linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4134-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 10, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1304-1] zsh security update

Package : zsh Version : 4.3.17-1+deb7u1 CVE IDs : CVE-2014-10070 CVE-2014-10071 CVE-2014-10072 CVE-2016-10714 CVE-2017-18206 It was discovered that there were multiple vulnerabilities in the "zsh" shell: CVE-2014-10070: Fix a privilege-elevation issue if the environment has not been properly...

[SECURITY] [DLA 1303-1] python-django security update

Package : python-django Version : 1.4.22-1+deb7u4 CVE ID : CVE-2018-7536 CVE-2018-7537 Several functions were extremely slow to evaluate certain inputs due to catastrophic backtracking vulnerabilities in several regular expressions. CVE-2018-7536 The django.utils.html.urlize function was extremel...

[SECURITY] [DSA 4133-1] isc-dhcp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4133-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 07, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4133-1] isc-dhcp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4133-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 07, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1302-1] leptonlib security update

Package : leptonlib Version : 1.69-3.1+deb7u2 CVE ID : CVE-2018-7186 CVE-2018-7440 Debian Bug : 890548 891932 Different flaws have been found in leptonlib, an image processing library. CVE-2018-7186 Leptonica did not limit the number of characters in a %s format argument to fscanf or sscanf, that...

[SECURITY] [DLA 1301-1] tomcat7 security update

Package : tomcat7 Version : 7.0.28-4+deb7u18 CVE ID : CVE-2018-1304 CVE-2018-1305 Two security vulnerabilities have been discovered in the Tomcat servlet and JSP engine. CVE-2018-1304 The URL pattern of "" the empty string which exactly maps to the context root was not correctly handled in Apache...

[SECURITY] [DLA 1300-1] xen security update

Package : xen Version : 4.1.6.lts1-13 CVE ID : CVE-2018-7540 CVE-2018-7541 Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in denial of service, informations leaks or privilege escalation. For Debian 7 "Wheezy", these problems have been fixed in version...

[SECURITY] [DLA 1299-1] libjgraphx-java security update

Package : libjgraphx-java Version : 1.4.1.0-3+deb7u1 CVE ID : CVE-2017-18197 Debian Bug : 891796 It was discovered that there was a potential XML External Entity XXE attack in libjgraphx-java, a diagramming library for Java applications. For Debian 7 "Wheezy", this issue has been fixed in...

[SECURITY] [DSA 4132-1] libvpx security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4132-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 04, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4131-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4131-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 04, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4120-2] linux regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4120-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 03, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4120-2] linux regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-4120-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 03, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4130-1] dovecot security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4130-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 02, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4130-1] dovecot security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4130-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 02, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4129-1] freexl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4129-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 02, 2018 https://www.debian.org/security/faq -...