14656 matches found
[SECURITY] [DSA 4161-1] python-django security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4161-1 [email protected] https://www.debian.org/security/ Luciano Bello April 01, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4161-1] python-django security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4161-1 [email protected] https://www.debian.org/security/ Luciano Bello April 01, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4160-1] libevt security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4160-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 01, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4159-1] remctl security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4159-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 01, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1335-1] zsh security update
Package : zsh Version : 4.3.17-1+deb7u2 CVE ID : CVE-2018-1071 CVE-2018-1083 Debian Bug : 894044 894043 Two security vulnerabilities were discovered in the Z shell. CVE-2018-1071 Stack-based buffer overflow in the exec.c:hashcmd function. A local attacker could exploit this to cause a denial of...
[SECURITY] [DLA 1334-1] mosquitto security update
Package : mosquitto Version : 0.15-2+deb7u3 CVE ID : CVE-2017-7651 CVE-2017-7652 CVE-2017-7651 A crafted CONNECT packet from an unauthenticated client could result in extraordinary memory consumption. CVE-2017-7652 In case all sockets/file descriptors are exhausted, a SIGHUP signal to reload the...
[SECURITY] [DLA 1333-1] dovecot security update
Package : dovecot Version : 1:2.1.7-7+deb7u2 CVE ID : CVE-2017-14461 CVE-2017-15130 CVE-2017-15132 Several vulnerabilities have been discovered in the Dovecot email server. The Common Vulnerabilities and Exposures project identifies the following issues: CVE-2017-14461 Aleksandar Nikolic of Cisco...
[SECURITY] [DLA 1332-1] libvncserver security update
Package : libvncserver Version : 0.9.9+dfsg-1+deb7u3 CVE ID : CVE-2018-7225 Debian Bug : 894045 libvncserver version through 0.9.11. does not sanitize msg.cct.length which may result in access to uninitialized and potentially sensitive data or possibly unspecified other impact e.g., an integer...
[SECURITY] [DLA 1331-1] mercurial security update
Package : mercurial Version : 2.2.2-4+deb7u7 CVE ID : CVE-2018-1000132 Debian Bug : 892964 Mercurial version 4.5 and earlier contains a Incorrect Access Control CWE-285 vulnerability in Protocol server that can result in Unauthorized data access. This attack appear to be exploitable via network...
[SECURITY] [DLA 1330-1] openssl security update
Package : openssl Version : 1.0.1t-1+deb7u4 CVE ID : CVE-2018-0739 It was discovered that constructed ASN.1 types with a recursive definition could exceed the stack, potentially leading to a denial of service. Details can be found in the upstream advisory:...
[SECURITY] [DLA 1328-1] xerces-c security update
Package : xerces-c Version : 3.1.1-3+deb7u5 CVE ID : CVE-2017-12627 Debian Bug : 894050 Alberto Garcia, Francisco Oca and Suleman Ali of Offensive Research discovered that the Xerces-C XML parser mishandles certain kinds of external DTD references, resulting in dereference of a NULL pointer while...
[SECURITY] [DLA 1329-1] memcached security update
Package : memcached Version : 1.4.13-0.2+deb7u4 CVE ID : CVE-2018-1000127 Debian Bug : 894404 memcached version prior to 1.4.37 contains an Integer Overflow vulnerability that can result in data corruption and deadlocks. This attack is exploitable via network connectivity to the memcached service...
[SECURITY] [DSA 4158-1] openssl1.0 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4158-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 29, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4158-1] openssl1.0 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4158-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 29, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4157-1] openssl security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4157-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 29, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4157-1] openssl security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4157-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 29, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1326-1] php5 security update
Package : php5 Version : 5.4.45-0+deb7u13 CVE ID : CVE-2018-7584 Wei Lei and Liu Yang of Nanyang Technological University discovered a stack-based buffer overflow in PHP5 when parsing a malformed HTTP response which can be exploited to cause a denial-of-service. For Debian 7 "Wheezy", these...
[SECURITY] [DLA 1327-1] thunderbird security update
Package : thunderbird Version : 1:52.7.0-1deb7u1 CVE ID : CVE-2018-5125 CVE-2018-5127 CVE-2018-5129 CVE-2018-5144 CVE-2018-5145 CVE-2018-5146 Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code, denial of service or information disclosure. Fo...
[SECURITY] [DLA 1325-1] drupal7 security update
Package : drupal7 Version : 7.14-2+deb7u18 CVE ID : CVE-2018-7600 Jasper Mattsson found a remote code execution vulnerability in the Drupal content management system. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being...
[SECURITY] [DSA 4156-1] drupal7 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4156-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 29, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4156-1] drupal7 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4156-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 29, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4155-1] thunderbird security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4155-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 28, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1324-1] libdatetime-timezone-perl security update
Package : libdatetime-timezone-perl Version : 1:1.58-1+2018d This update includes the changes in tzdata 2018d for the Perl bindings. For the list of changes, see DLA-1323-1. For Debian 7 "Wheezy", these problems have been fixed in version 1:1.58-1+2018d. We recommend that you upgrade your...
[SECURITY] [DLA 1323-1] tzdata security update
Package : tzdata Version : 2018d-0+deb7u1 This update includes the changes in tzdata 2018d. Notable changes are: - Palestine started Daylight Saving Time DST on March 24, rather than on March 31st. For Debian 7 "Wheezy", these problems have been fixed in version 2018d-0+deb7u1. We recommend that...
[SECURITY] [DLA 1322-1] graphicsmagick security update
Package : graphicsmagick Version : 1.3.16-1.1+deb7u19 CVE ID : CVE-2017-18219 CVE-2017-18220 CVE-2017-18229 CVE-2017-18230 CVE-2017-18231 CVE-2018-9018 Various security issues were discovered in Graphicsmagick, a collection of image processing tools. CVE-2017-18219 An allocation failure...
[SECURITY] [DSA 4154-1] net-snmp security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4154-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 28, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4154-1] net-snmp security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4154-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 28, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1320-1] samba security update
Package : samba Version : 3.6.6-6+deb7u16 CVE ID : CVE-2018-1050 Several vulnerabilities have been discovered in Samba, a SMB/CIFS file, print, and login server for Unix. The Common Vulnerabilities and Exposures project identifies the following issues: CVE-2018-1050 It was discovered that Samba i...
[SECURITY] [DLA 1321-1] firefox-esr security update
Package : firefox-esr Version : 52.7.3esr-1deb7u1 CVE ID : CVE-2018-5148 Jesse Schwartzentruber discovered a use-after-free vulnerability in Firefox, which could be exploited to trigger an application crash or arbitrary code execution. For Debian 7 "Wheezy", these problems have been fixed in...
[SECURITY] [DSA 4153-1] firefox-esr security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4153-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 27, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4152-1] mupdf security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4152-1 [email protected] https://www.debian.org/security/ Luciano Bello March 27, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4152-1] mupdf security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4152-1 [email protected] https://www.debian.org/security/ Luciano Bello March 27, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1319-1] firefox-esr security update
Package : firefox-esr Version : 52.7.2esr-1deb7u1 CVE ID : CVE-2018-5146 CVE-2018-5147 Richard Zhu and Huzaifa Sidhpurwala discovered that an out-of-bounds memory write when playing Vorbis media files could result in the execution of arbitrary code. For Debian 7 "Wheezy", these problems have been...
[SECURITY] [DSA 4151-1] librelp security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4151-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 26, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4151-1] librelp security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4151-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 26, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1318-1] irssi security update
Package : irssi Version : 0.8.15-5+deb7u6 CVE ID : CVE-2018-7051 Debian Bug : 890677 It was discovered that there was an issue in the irssi IRC client where certain nick names could result in out-of-bounds access when printing theme strings. For Debian 7 "Wheezy", this issue has been fixed in irs...
[SECURITY] [DLA 1317-1] net-snmp security update
Package : net-snmp Version : 5.7.2.1+dfsg-1+deb8u1 CVE ID : CVE-2018-1000116 Debian Bug : 894110 It was discovered that there was a heap corruption vulnerability in the net-snmp framework which exchanges server management information in a network. For Debian 7 "Wheezy", this issue has been fixed ...
[SECURITY] [DLA 1316-1] freeplane security update
Package : freeplane Version : 1.1.3-2+deb7u1 CVE ID : CVE-2018-1000069 Debian Bug : 893663 Wojciech Reguła discovered that Freeplane, a program for working with mind maps, was affected by a XML External Entity XXE vulnerability in its mindmap loader that could compromise a users machine by openin...
[SECURITY] [DLA 1315-1] libvirt security update
Package : libvirt Version : 0.9.12.3-1+deb7u3 CVE ID : CVE-2018-1064 CVE-2018-5748 Debian Bug : 887700 Daniel P. Berrange and Peter Krempa of Red Hat discovered a flaw in libvirt, a virtualization API. A lack of restriction for the amount of data read by QEMU Monitor socket can lead to a denial o...
[SECURITY] [DSA 4150-1] icu security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4150-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 23, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1314-1] simplesamlphp security update
Package : simplesamlphp Version : 1.9.2-1+deb7u4 CVE ID : CVE-2018-7711 Cure53 discovered that in SimpleSAMLphp, in rare circumstances an invalid signature on the SAML 2.0 HTTP Redirect binding could be considered valid. Additionally this update fixes a regression introduced in DLA-1298 by the...
[SECURITY] [DSA 4149-1] plexus-utils2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4149-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 22, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4148-1] kamailio security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4148-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 22, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1313-1] isc-dhcp security update
Package : isc-dhcp Version : 4.2.2.dfsg.1-5+deb70u9 CVE ID : CVE-2018-5732 CVE-2018-5733 Several vulnerabilities have been discovered in the ISC DHCP client, relay and server. The Common Vulnerabilities and Exposures project identifies the following issues: CVE-2018-5732 Felix Wilhelm of the Goog...
[SECURITY] [DLA 1312-1] libvorbisidec security update
Package : libvorbisidec Version : 1.0.2+svn18153-0.2+deb7u1 CVE ID : CVE-2018-5147 Huzaifa Sidhpurwala discovered that an out-of-bounds memory write in the codebook parsing code of the Libtremor multimedia library could result in the execution of arbitrary code if a malformed Vorbis file is opene...
[SECURITY] [DLA 1311-1] adminer security update
Package : adminer Version : 3.3.3-1+deb7u1 CVE ID : CVE-2018-7667 Debian Bug : 893668 It was discovered that there was a server-side request forgery exploit in adminer, a web-based database administration tool. Adminer allowed unauthenticated connections to be initiated to arbitrary systems and...
[SECURITY] [DLA 1310-1] exempi security update
Package : exempi Version : 2.2.0-1+deb7u1 CVE ID : CVE-2017-18233 CVE-2017-18234 CVE-2017-18236 CVE-2017-18238 CVE-2018-7728 CVE-2018-7730 Various issues were discovered in exempi, a library to parse XMP metadata that may cause a denial-of-service or may have other unspecified impact via crafted...
[SECURITY] [DSA 4147-1] polarssl security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4147-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 21, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4147-1] polarssl security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4147-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 21, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4146-1] plexus-utils security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4146-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 20, 2018 https://www.debian.org/security/faq -...