14470 matches found
[SECURITY] [DLA 1090-1] tcpdump security update
Package : tcpdump Version : 4.9.0-1deb7u2 CVE ID : CVE-2017-11108 CVE-2017-11541 CVE-2017-11542 CVE-2017-11543 Several vulnerabilities have been discovered in tcpdump, a command-line network traffic analyzer. These vulnerabilities might result in denial of service application crash. For Debian 7...
[SECURITY] [DSA 3966-1] ruby2.3 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3966-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 05, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3965-1] file security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3965-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 05, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3965-1] file security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3965-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 05, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1087-1] icedove/thunderbird security update
Package : icedove Version : 1:52.3.0-4deb7u1 CVE ID : CVE-2017-7753 CVE-2017-7779 CVE-2017-7784 CVE-2017-7785 CVE-2017-7786 CVE-2017-7787 CVE-2017-7791 CVE-2017-7792 CVE-2017-7800 CVE-2017-7801 CVE-2017-7802 CVE-2017-7803 CVE-2017-7804 CVE-2017-7807 CVE-2017-7809 Multiple security issues have bee...
[SECURITY] [DLA 1089-1] irssi security update
Package : irssi Version : 0.8.15-5+deb7u3 CVE ID : CVE-2017-10965 CVE-2017-10966 Debian Bug : 867598 Some Irssi issues were found: CVE-2017-10965 An issue was discovered in Irssi before 1.0.4. When receiving messages with invalid time stamps, Irssi would try to dereference a NULL pointer...
[SECURITY] [DSA 3964-1] asterisk security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3964-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 04, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1088-1] irssi security update
Package : irssi Version : 0.8.15-5+deb7u2 CVE ID : CVE-2017-9468 CVE-2017-9469 Debian Bug : 864400 Irssi has some issues where remote attackers might be able to cause a crash. CVE-2017-9468 In irssi, when receiving a DCC message without source nick/host, it attempts to dereference a NULL pointer...
[SECURITY] [DSA 3963-1] mercurial security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3963-1 [email protected] https://www.debian.org/security/ Sebastien Delafond September 04, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3963-1] mercurial security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3963-1 [email protected] https://www.debian.org/security/ Sebastien Delafond September 04, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1086-1] enigmail security update
Package : enigmail Version : 2:1.9.8.1-1deb7u1 In DLA 1007-1 Thunderbird was upgraded to the latest ESR series. This update upgrades Enigmail, the OpenPGP extention for Thunderbird, to version 1.9.8.1 to restore full compatibility. For Debian 7 "Wheezy", these problems have been fixed in version...
[SECURITY] [DSA 3962-1] strongswan security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3962-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez September 03, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1085-1] libidn2-0 security update
Package : libidn2-0 Version : 0.8-2+deb7u1 CVE ID : CVE-2017-14062 Debian Bug : 873902 It was discovered that there was an integer overflow vulnerability in libidn2-0s Punycode handling an encoding used to convert Unicode characters to ASCII which would have allowed attackers to cause a remote...
[SECURITY] [DSA 3961-1] libgd2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3961-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 03, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3961-1] libgd2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3961-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 03, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1084-1] libidn security update
Package : libidn Version : 1.25-2+deb7u3 CVE ID : CVE-2017-14062 Debian Bug : 873903 It was discovered that there was an integer overflow vulnerability in libidns Punycode handling an encoding used to convert Unicode characters to ASCII which would have allowed remote attackers to cause a denial ...
[SECURITY] [DSA 3960-1] gnupg security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3960-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 01, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3960-1] gnupg security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3960-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 01, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1083-1] openexr security update
Package : openexr Version : 1.6.1-6+deb7u1 CVE ID : CVE-2017-9110 CVE-2017-9112 CVE-2017-9116 Debian Bug : 864078 Brandon Perry discovered that openexr, a high dynamic-range HDR image library, was affected by an integer overflow vulnerability and missing boundary checks that would allow a remote...
[SECURITY] [DLA 1082-1] graphicsmagick security update
Package : graphicsmagick Version : 1.3.16-1.1+deb7u9 CVE ID : CVE-2017-12935 CVE-2017-12936 CVE-2017-12937 CVE-2017-13063 CVE-2017-13064 CVE-2017-13065 CVE-2017-13776 CVE-2017-13777 CVE-2017-13776 CVE-2017-13777 denial of service issue in ReadXBMImage CVE-2017-12935 The ReadMNGImage function in...
[SECURITY] [DLA 1079-1] libdbd-mysql-perl security update
Package : libdbd-mysql-perl Version : 4.021-1+deb7u3 CVE ID : CVE-2017-10788 CVE-2017-10789 Debian Bug : 866818 866821 The Perl library for communicating with MySQL database, used in the "mysql" commandline client is vulnerable to a man in the middle attack in SSL configurations and remote crash...
[SECURITY] [DLA 1072-1] mercurial security update
Package : mercurial Version : 2.2.2-4+deb7u5 CVE ID : CVE-2017-1000115 CVE-2017-1000116 Debian Bug : 871709 871710 Two significant vulnerabilities were found in the Mercurial version control system which could lead to shell injection attacks and out-of-tree file overwrite. CVE-2017-1000115...
[SECURITY] [DLA 1081-1] imagemagick security update
Package : imagemagick Version : 6.7.7.10-5+deb7u16 CVE ID : CVE-2017-8352 CVE-2017-9144 CVE-2017-9501 CVE-2017-10928 CVE-2017-10995 CVE-2017-11141 CVE-2017-11170 CVE-2017-11188 CVE-2017-11352 CVE-2017-11360 CVE-2017-11446 CVE-2017-11448 CVE-2017-11449 CVE-2017-11450 CVE-2017-11478 CVE-2017-11505...
[SECURITY] [DLA 1080-1] gnupg security update
Package : gnupg Version : 1.4.12-7+deb7u9 CVE ID : CVE-2017-7526 Daniel J. Bernstein, Joachim Breitner, Daniel Genkin, Leon Groot Bruinderink, Nadia Heninger, Tanja Lange, Christine van Vredendaal and Yuval Yarom discovered that gnupg is prone to a local side-channel attack allowing full key...
[SECURITY] [DLA 1077-1] faad2 security update
Package : faad2 Version : 2.7-8+deb7u1 CVE ID : CVE-2017-9218 CVE-2017-9219 CVE-2017-9220 CVE-2017-9221 CVE-2017-9222 CVE-2017-9223 CVE-2017-9253 CVE-2017-9254 CVE-2017-9255 CVE-2017-9256 CVE-2017-9257 Debian Bug : 867724 Various security issues were discovered in faad2, a fast audio decoder, tha...
[SECURITY] [DLA 1078-1] connman security update
Package : connman Version : 1.0-1.1+wheezy2 CVE ID : CVE-2017-12865 Debian Bug : 872844 In connman, stack-based buffer overflow in "dnsproxy.c" allows remote attackers to cause a denial of service crash or execute arbitrary code via a crafted response query string passed to the "name" variable. F...
[SECURITY] [DLA 1076-1] php5 security update
Package : php5 Version : 5.4.45-0+deb7u11 CVE ID : CVE-2017-12933 The finishnesteddata function in ext/standard/varunserializer.re in PHP is prone to a buffer over-read while unserializing untrusted data. Exploitation of this issue can have an unspecified impact on the integrity of PHP. For Debia...
[SECURITY] [DSA 3959-1] libgcrypt20 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3959-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 29, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3959-1] libgcrypt20 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3959-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 29, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1075-1] wordpress security update
Package : wordpress Version : 3.6.1+dfsg-1deb7u16 CVE ID : CVE-2017-9066 Debian Bug : 862816 In WordPress, there is insufficient redirect validation in the HTTP class, leading to SSRF. For Debian 7 "Wheezy", these problems have been fixed in version 3.6.1+dfsg-1deb7u16. We recommend that you...
[SECURITY] [DLA 1074-1] poppler security update
Package : poppler Version : 0.18.4-6+deb7u2 CVE ID : CVE-2013-4473 CVE-2013-4474 CVE-2017-9775 CVE-2017-9776 CVE-2017-9865 Several buffer and integer overflow issues were discovered in Poppler, a PDF library, that could lead to application crash or possibly other unspecified impact via maliciousl...
[SECURITY] [DSA 3958-1] fontforge security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3958-1 [email protected] https://www.debian.org/security/ Sebastien Delafond August 29, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3958-1] fontforge security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3958-1 [email protected] https://www.debian.org/security/ Sebastien Delafond August 29, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1073-1] openjdk-7 security update
Package : openjdk-7 Version : 7u151-2.6.11-1+deb7u1 CVE ID : CVE-2017-10053 CVE-2017-10067 CVE-2017-10074 CVE-2017-10081 CVE-2017-10087 CVE-2017-10089 CVE-2017-10090 CVE-2017-10096 CVE-2017-10101 CVE-2017-10102 CVE-2017-10107 CVE-2017-10108 CVE-2017-10109 CVE-2017-10110 CVE-2017-10115...
[SECURITY] [DSA 3957-1] ffmpeg security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3957-1 [email protected] https://www.debian.org/security/ Luciano Bello August 28, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3957-1] ffmpeg security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3957-1 [email protected] https://www.debian.org/security/ Luciano Bello August 28, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1070-1] qemu security update
Package : qemu Version : 1.1.2+dfsg-6+deb7u23 CVE ID : CVE-2017-6505 CVE-2017-8309 CVE-2017-10664 CVE-2017-11434 Multiple vulnerabilities were discovered in qemu, a fast processor emulator. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2017-6505 Denial of...
[SECURITY] [DLA 1071-1] qemu-kvm security update
Package : qemu-kvm Version : 1.1.2+dfsg-6+deb7u23 CVE ID : CVE-2017-6505 CVE-2017-8309 CVE-2017-10664 CVE-2017-11434 Multiple vulnerabilities were discovered in qemu-kvm, a full virtualization solution for Linux hosts on x86 hardware with x86 guests based on the Quick EmulatorQemu. CVE-2017-6505...
[SECURITY] [DSA 3956-1] connman security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3956-1 [email protected] https://www.debian.org/security/ Luciano Bello August 27, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3956-1] connman security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3956-1 [email protected] https://www.debian.org/security/ Luciano Bello August 27, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1069-1] tenshi security update
Package : tenshi Version : 0.13-2+deb7u1 CVE ID : CVE-2017-11746 Debian Bug : 871321 Tenshi creates a tenshi.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for tenshi.pid modificatio...
[SECURITY] [DLA 1068-1] git security update
Package : git Version : 1:1.7.10.4-1+wheezy5 CVE ID : CVE-2017-1000117 Joern Schneeweisz discovered that git, a distributed revision control system, did not correctly handle maliciously constructed ssh:// URLs. This allowed an attacker to run an arbitrary shell command, for instance via git...
[SECURITY] [DLA 1067-1] augeas security update
Package : augeas Version : 0.10.0-1+deb7u1 CVE ID : CVE-2017-7555 Debian Bug : 872400 Augeas is vulnerable to heap-based buffer overflow due to improper handling of escaped strings. Attacker could send crafted strings that would cause the application using augeas to copy past the end of a buffer,...
[SECURITY] [DLA 1066-1] php5 security update
Package : php5 Version : 5.4.45-0+deb7u10 CVE ID : CVE-2017-11628 A stack-based buffer overflow in the zendinidoop function in Zend/zendiniparser.c could cause a denial of service or potentially allow executing code. NOTE: this is only relevant for PHP applications that accept untrusted input...
[SECURITY] [DLA 1065-1] fontforge security update
Package : fontforge Version : 0.0.20120101+git-2+deb7u1 CVE ID : CVE-2017-11568 CVE-2017-11569 CVE-2017-11571 CVE-2017-11572 CVE-2017-11574 CVE-2017-11575 CVE-2017-11576 CVE-2017-11577 FontForge is vulnerable to heap-based buffer over-read in several functions, resulting in DoS or code execution...
[SECURITY] [DSA 3955-1] mariadb-10.1 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3955-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 26, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3955-1] mariadb-10.1 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3955-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 26, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3954-1] openjdk-7 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3954-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 25, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1064-1] freeradius security update
Package : freeradius Version : 2.1.12+dfsg-1.2+deb7u2 CVE ID : CVE-2017-10978 CVE-2017-10979 CVE-2017-10980 CVE-2017-10981 CVE-2017-10982 CVE-2017-10983 Debian Bug : 868765 Guido Vranken discovered that FreeRADIUS, an open source implementation of RADIUS, the IETF protocol for AAA Authorisation,...
[SECURITY] [DSA 3953-1] aodh security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3953-1 [email protected] https://www.debian.org/security/ Luciano Bello August 23, 2017 https://www.debian.org/security/faq -...