14468 matches found
[SECURITY] [DSA 4128-1] trafficserver security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4128-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 02, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4128-1] trafficserver security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4128-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 02, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1297-1] simplesamlphp security update
Package : simplesamlphp Version : 1.9.2-1+deb7u3 CVE ID : CVE-2016-9814 CVE-2016-9955 Several vulnerabilities have been discovered in SimpleSAMLphp, a framework for authentication, primarily via the SAML protocol. CVE-2016-9814 & CVE-2016-9955 An incorrect check of return values in the signature...
[SECURITY] [DSA 4127-1] simplesamlphp security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4127-1 [email protected] https://www.debian.org/security/ Thijs Kinkhorst March 02, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4127-1] simplesamlphp security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4127-1 [email protected] https://www.debian.org/security/ Thijs Kinkhorst March 02, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1297-1] freexl security update
Package : freexl Version : 1.0.0b-1+deb7u5 CVE ID : CVE-2018-7435 CVE-2018-7436 CVE-2018-7437 CVE-2018-7438 CVE-2018-7439 Leon reported five heap-based buffer-overflow vulnerabilities in FreeXL. CVE-2018-7435 There is a heap-based buffer over-read in the freexl::destroycell function. CVE-2018-743...
[SECURITY] [DLA 1296-1] xmltooling security update
Package : xmltooling Version : 1.4.2-5+deb7u3 CVE ID : CVE-2018-0489 Kelby Ludwig and Scott Cantor discovered that the Shibboleth service provider is vulnerable to impersonation attacks and information disclosure due to incorrect XML parsing. For additional details please refer to the upstream...
[SECURITY] [DLA 1295-1] drupal7 security update
Package : drupal7 Version : 7.14-2+deb7u17 CVE ID : CVE-2017-6927 CVE-2017-6928 CVE-2017-6929 CVE-2017-6932 Debian Bug : 891152 891150 891153 891154 Multiple vulnerabilities have been found in the Drupal content management framework. For additional information, please refer to the upstream adviso...
[SECURITY] [DSA 4126-1] xmltooling security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4126-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 27, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4126-1] xmltooling security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4126-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 27, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4125-1] wavpack security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4125-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 27, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4125-1] wavpack security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4125-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 27, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4124-1] lucene-solr security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4124-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 27, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1294-1] golang security update
Package : golang Version : 2:1.0.2-1.1+deb7u3 CVE ID : CVE-2018-7187 It was discovered that there was an arbitrary command execution vulnerability in the Go programming language. The "go get" implementation did not correctly validate "import path" statements for "://" which allowed remote attacke...
[SECURITY] [DLA 1293-1] imagemagick security update
Package : imagemagick Version : 8:6.7.7.10-5+deb7u21 CVE ID : CVE-2018-7443 Debian Bug : 891291 It was discovered that there was a remote denial of service vulnerability in the imagemagick graphics library via a specially- crafted TIFF file. For Debian 7 "Wheezy", this issue has been fixed in...
[SECURITY] [DLA 1292-1] libdatetime-timezone-perl new upstream version
Package : libdatetime-timezone-perl Version : 1:1.58-1+2018c This update includes the changes in tzdata 2018c for the Perl bindings. For the list of changes, see DLA-1291-1. For Debian 7 "Wheezy", these problems have been fixed in version 1:1.58-1+2018c. We recommend that you upgrade your...
[SECURITY] [DLA 1291-1] tzdata new upstream version
Package : tzdata Version : 2018c-0+deb7u1 This update includes the changes in tzdata 2018c. Notable changes are: - São Tomé and PrÃncipe switched from +00 to +01. - Brazils DST will now start on Novembers first Sunday. For Debian 7 "Wheezy", these problems have been fixed in version 2018c-0+deb7u...
[SECURITY] [DLA 1290-1] libvpx security update
Package : libvpx Version : 1.1.0-1+deb7u1 CVE ID : CVE-2017-13194 CVE-2017-13194 Fix for a flaw in libvpx related to odd frame width, which may lead to a denial of service. For Debian 7 "Wheezy", these problems have been fixed in version 1.1.0-1+deb7u1. We recommend that you upgrade your libvpx...
[SECURITY] [DSA 4123-1] drupal7 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4123-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 24, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4122-1] squid3 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4122-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 23, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4122-1] squid3 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4122-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 23, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1289-1] irssi security update
Package : irssi Version : 0.8.15-5+deb7u5 CVE IDs : CVE-2018-7050 CVE-2018-7051 CVE-2018-7052 Debian Bugs : 890676, 890677, 890678 It was discovered that there where a number of vulnerabilities in irssi, the terminal based IRC client: - CVE-2018-7050: Null pointer dereference for an "empty" nick....
[SECURITY] [DSA 4120-1] linux security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4120-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez February 22, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1288-1] cups security update
Package : cups Version : 1.5.3-5+deb7u7 CVE ID : CVE-2017-18190 It was discovered that there was an issue in the CUPS printer framework where remote attackers could execute arbitrary commands by sending POST requests to the CUPS daemon in conjunction with DNS rebinding. This was caused by a...
[SECURITY] [DSA 4121-1] gcc-6 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4121-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 22, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4121-1] gcc-6 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4121-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 22, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1287-1] zziplib security update
Package : zziplib Version : 0.13.56-1.1+deb7u2 CVE ID : CVE-2018-6869 It was discovered that there was a uncontrolled memory allocation issue in zziplib, a ZIP archive library. Remote attackers could leverage this vulnerability to cause a denial of service via a specially-crafted file. For Debian...
[SECURITY] [DSA 4119-1] libav security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4119-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 19, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4118-1] tomcat-native security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4118-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 17, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4118-1] tomcat-native security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4118-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 17, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4117-1] gcc-4.9 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4117-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 17, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1286-1] quagga security update
Package : quagga Version : 0.99.22.4-1+wheezy3+deb7u3 CVE ID : CVE-2018-5379 CVE-2018-5380 CVE-2018-5381 Several vulnerabilities have been discovered in Quagga, a routing daemon. The Common Vulnerabilities and Exposures project identifies the following issues: CVE-2018-5378 It was discovered that...
[SECURITY] [DLA 1285-1] bind9 security update
Package : bind9 Version : 9.8.4.dfsg.P1-6+nmu2+deb7u20 CVE ID : CVE-2018-5735 Debian Bug : 889285 BIND, a DNS server implementation, was found to be vulnerable to a denial of service flaw was found in the handling of DNSSEC validation. A remote attacker could use this flaw to make named exit...
[SECURITY] [DSA 4116-1] plasma-workspace security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4116-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 16, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4115-1] quagga security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4115-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 15, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4115-1] quagga security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4115-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 15, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1284-1] leptonlib security update
Package : leptonlib Version : 1.69-3.1+deb7u1 CVE ID : CVE-2018-3836 Debian Bug : 889759 Talosintelligence discovered a command injection vulnerability in the gplotMakeOutput function of leptonlib. A specially crafted gplot rootname argument can cause a command injection resulting in arbitrary co...
[SECURITY] [DLA 1283-1] python-crypto security update
Package : python-crypto Version : 2.6-4+deb7u8 CVE ID : CVE-2018-6594 Debian Bug : 889999 python-crypto generated weak ElGamal key parameters, which allowed attackers to obtain sensitive information by reading ciphertext data i.e., it did not have semantic security in face of a ciphertext-only...
[SECURITY] [DSA 4114-1] jackson-databind security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4114-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 15, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4114-1] jackson-databind security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4114-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 15, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4113-1] libvorbis security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4113-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 14, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4112-1] xen security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4112-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 14, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1282-1] graphicsmagick security update
Package : graphicsmagick Version : 1.3.16-1.1+deb7u18 CVE ID : CVE-2018-6799 A denial of service vulnerability has been discovered in graphicsmagick, a collection of image processing tools and associated libraries. A specially crafted file can be used to produce a denial of service heap overwrite...
[SECURITY] [DLA 1281-1] advancecomp security update
Package : advancecomp Version : 1.15-1+deb7u1 CVE ID : CVE-2018-1056 Debian Bug : 889270 Joonun Jang discovered that the advzip tool in advancecomp, a collection of recompression utilities, was prone to a heap-based buffer overflow. This might allow an attacker to cause a denial-of-service...
[SECURITY] [DLA 1280-1] pound security update
Package : pound Version : 2.6-2+deb7u2 CVE ID : CVE-2016-10711 Debian Bug : 888786 A request smuggling vulnerability was discovered in pound that may allow attackers to send a specially crafted http request to a web server or reverse proxy while pound may see a different set of requests. This...
[SECURITY] [DLA 1279-1] clamav security update
Package : clamav Version : 0.99.2+dfsg-0+deb7u5 CVE ID : CVE-2017-6419 CVE-2017-11423 CVE-2017-6419 CVE-2017-11423 Two vulnerabilities have been fixed that can be used for denial of service or maybe unspecified impact via drafted files heap-based buffer overflow and stack-based buffer over-read...
[SECURITY] [DSA 4111-2] libreoffice security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4111-2 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 12, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1278-1] librsvg security update
Package : librsvg Version : 2.36.1-2+deb7u3 CVE ID : CVE-2018-1000041 It was discovered that there was an input validation vulnerability in the librsvg renderer library that could result in data being leaked to remote attackers via a specially-crafted file. For Debian 7 "Wheezy", this issue has...
[SECURITY] [DLA 1277-1] audacity security update
Package : audacity Version : 2.0.1-1+deb7u1 CVE ID : CVE-2016-2540 Chris Navarrete from Fortinets FortiGuard Labs discovered that Audacity, a multi-track audio editor, contains a vulnerability such that a .wav file with a crafted FORMATCHUNK structure many channels can result in a denial of servi...
[SECURITY] [DLA 1276-1] tomcat-native security update
Package : tomcat-native Version : 1.1.24-1+deb7u1 CVE ID : CVE-2017-15698 Jonas Klempel discovered that, when parsing the AIA-Extension field of a client certificate, Apache Tomcat Native did not correctly handle fields longer than 127 bytes. The result of the parsing error was to skip the OCSP...