14471 matches found
[SECURITY] [DSA 3865-1] mosquitto security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3865-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 29, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DLA 962-1] tnef security update
Package : tnef Version : 1.4.9-1+deb7u3 CVE ID : CVE-2017-8911 CVE-2017-8911 An integer underflow has been identified in the unicodetoutf8 function in tnef 1.4.14. This might lead to invalid write operations, controlled by an attacker. For Debian 7 "Wheezy", these problems have been fixed in...
[SECURITY] [DLA 960-1] imagemagick security update
Package : imagemagick Version : 6.7.7.10-5+deb7u14 CVE ID : CVE-2014-8354 CVE-2014-8355 CVE-2014-8562 CVE-2014-8716 CVE-2014-9841 CVE-2015-8900 CVE-2015-8901 CVE-2015-8902 CVE-2015-8903 CVE-2017-7941 CVE-2017-7943 CVE-2017-8343 CVE-2017-8344 CVE-2017-8345 CVE-2017-8346 CVE-2017-8347 CVE-2017-8348...
[SECURITY] [DLA 959-1] libical security update
Package : libical Version : 0.48-2+deb7u1 CVE ID : CVE-2016-5824 CVE-2016-9584 Debian Bug : 860451, 852034 It was discovered that there was a use-after-free vulnerability in the libical iCalendar library. Remote attackers could cause a denial of service and possibly read heap memory via a special...
[SECURITY] [DLA 958-1] libonig security update
Package : libonig Version : 5.9.1-1+deb7u1 CVE ID : CVE-2017-9224 CVE-2017-9226 CVE-2017-9227 CVE-2017-9228 CVE-2017-9229 Debian Bug : 863312 863314 863315 863316 863318 CVE-2017-9224 An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP...
[SECURITY] [DLA 957-1] bind9 security update
Package : bind9 Version : 1:9.8.4.dfsg.P1-6+nmu2+deb7u16 CVE ID : CVE-2017-3136 CVE-2017-3137 CVE-2017-3138 CVE-2017-3136 Oleg Gorokhov of Yandex discovered that BIND does not properly handle certain queries when using DNS64 with the "break-dnssec yes;" option, allowing a remote attacker to cause...
[SECURITY] [DLA 956-1] libsndfile security update
Package : libsndfile Version : 1.0.25-9.1+deb7u2 CVE ID : CVE-2017-8361 CVE-2017-8362 CVE-2017-8363 CVE-2017-8365 CVE-2017-8361 The flacbuffercopy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have...
[SECURITY] [DSA 3864-1] fop security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3864-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 27, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DLA 955-1] rzip security update
Package : rzip Version : 2.1-1+deb7u1 CVE ID : CVE-2017-8364 Debian Bug : 861614 Agostino Sarubbo of Gentoo discovered a heap buffer overflow write in the rzip program when uncompressing maliciously crafted files. For Debian 7 "Wheezy", these problems have been fixed in version 2.1-1+deb7u1. We...
[SECURITY] [DLA 954-1] openjdk-7 security update
Package : openjdk-7 Version : 7u131-2.6.9-2deb7u1 CVE ID : CVE-2017-3509 CVE-2017-3511 CVE-2017-3526 CVE-2017-3533 CVE-2017-3539 CVE-2017-3544 Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in privilege escalation, denial of...
[SECURITY] [DLA 953-1] graphicsmagick security update
Package : graphicsmagick Version : 1.3.16-1.1+deb7u7 CVE ID : CVE-2017-9098 Debian Bug : 862967 Chris Evans discovered that graphicsmagick used uninitialized memory in the RLE decoder, allowing an remote attacker to leak sensitive information from process memory space. More information are...
[SECURITY] [DSA 3863-1] imagemagick security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3863-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 25, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3862-1] puppet security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3862-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 25, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DLA 952-1] kde4libs security update
Package : kde4libs Version : 4:4.8.4-4+deb7u3 CVE ID : CVE-2013-2074 CVE-2017-6410 CVE-2017-8422 Debian Bug : 856890 Several vulnerabilities were discovered in kde4libs, the core libraries for all KDE 4 applications. The Common Vulnerabilities and Exposures project identifies the following...
[SECURITY] [DSA 3861-1] libtasn1-6 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3861-1 [email protected] https://www.debian.org/security/ Sebastien Delafond May 24, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3861-1] libtasn1-6 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3861-1 [email protected] https://www.debian.org/security/ Sebastien Delafond May 24, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DLA 951-1] samba security update
Package : samba Version : 2:3.6.6-6+deb7u13 CVE ID : CVE-2017-7494 steelo discovered a remote code execution vulnerability in Samba, a SMB/CIFS file, print, and login server for Unix. A malicious client with access to a writable share, can take advantage of this flaw by uploading a shared library...
[SECURITY] [DSA 3860-1] samba security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3860-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 24, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3860-1] samba security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3860-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 24, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DLA 950-1] libtasn1-3 security update
Package : libtasn1-3 Version : 2.13-2+deb7u4 CVE ID : CVE-2017-6891 Secunia Research has discovered multiple vulnerabilities in GnuTLS libtasn1, which can be exploited by malicious people to compromise a vulnerable system. Two errors in the "asn1findnode" function lib/parseraux.c can be exploited...
[SECURITY] [DLA 949-1] miniupnpc security update
Package : miniupnpc Version : 1.5-2+deb7u2 CVE ID : CVE-2017-8798 Debian Bug : 862273 It was discovered that there was a integer signedness error in the miniupnpc UPnP client that could allow remote attackers to cause a denial of service attack. For Debian 7 "Wheezy", this issue has been fixed in...
[SECURITY] [DLA 948-1] dropbear security update
Package : dropbear Version : 2012.55-1.3+deb7u2 CVE ID : CVE-2017-9079 A vulnerability was found in Dropbear, a lightweight SSH2 server and client. CVE-2017-9079 Jann Horn discovered a local information leak in parsing the .authorizedkeys file. For Debian 7 "Wheezy", this problem has been fixed i...
[SECURITY] [DLA 947-1] icu security update
Package : icu Version : 4.8.1.1-12+deb7u7 CVE ID : CVE-2017-7867 CVE-2017-7868 It was discovered that icu, the International Components for Unicode library, did not correctly validate its input. An attacker could use this problem to trigger an out-of-bound write through a heap-based buffer...
[SECURITY] [DSA 3859-1] dropbear security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3859-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 19, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3858-1] openjdk-7 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3858-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 19, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DLA 946-1] nss security update
Package : nss Version : 2:3.26-1+debu7u3 CVE ID : CVE-2017-5461 CVE-2017-5462 Debian Bug : 862958 The NSS library is vulnerable to two security issues: CVE-2017-5461 Out-of-bounds write in Base64 encoding. This can trigger a crash denial of service and might be exploitable for code execution...
[SECURITY] [DSA 3857-1] mysql-connector-java security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3857-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 18, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3856-1] deluge security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3856-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 18, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3855-1] jbig2dec security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3855-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 18, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3855-1] jbig2dec security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3855-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 18, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3793-2] shadow regression update
------------------------------------------------------------------------- Debian Security Advisory DSA-3793-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 17, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3793-2] shadow regression update
------------------------------------------------------------------------- Debian Security Advisory DSA-3793-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 17, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DLA 945-1] mysql-connector-java security update
Package : mysql-connector-java Version : 5.1.42-1deb7u1 CVE ID : CVE-2017-3523 CVE-2017-3586 CVE-2017-3589 Several issues were discovered in mysql-connector-java that allow attackers to execute arbitrary code, insert or delete access to some of MySQL Connectors accessible data as well as...
[SECURITY] [DLA 944-1] openvpn security update
Package : openvpn Version : 2.2.1-8+deb7u4 CVE ID : CVE-2017-7479 Denial of Service due to Exhaustion of Packet-ID counter An authenticated client can cause the servers the packet-id counter to roll over, which would lead the server process to hit an ASSERT and stop running. To make the server hi...
[SECURITY] [DLA 943-1] deluge security update
Package : deluge Version : 1.3.3-2+nmu1+deb7u2 Debian Bug : 862611 It was discovered that there was a directory traversal attack vulnerability in the web user interface web in the deluge bittorrent client. For Debian 7 "Wheezy", this issue has been fixed in deluge version 1.3.3-2+nmu1+deb7u2. We...
[SECURITY] [DLA 942-1] jbig2dec security update
Package : jbig2dec Version : 0.13-4deb7u2 CVE ID : CVE-2017-7885 CVE-2017-7975 CVE-2017-7976 CVE-2017-7885 Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to denial of service application crash or disclosure of sensitive information from process memory, because of an integer...
[SECURITY] [DSA 3853-1] bitlbee security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3853-1 [email protected] https://www.debian.org/security/ Sebastien Delafond May 15, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3853-1] bitlbee security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3853-1 [email protected] https://www.debian.org/security/ Sebastien Delafond May 15, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DLA 941-1] squirrelmail security update
Package : squirrelmail Version : 2:1.4.23svn20120406-2+deb7u1 CVE ID : CVE-2017-7692 Dawid Golunski and Filippo Cavallarin discovered that squirrelmail, a webmail application, incorrectly handled a user-supplied value. This would allow a logged-in user to run arbitrary commands on the server. For...
[SECURITY] [DSA 3854-1] bind9 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3854-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 14, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3854-1] bind9 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3854-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 14, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3852-1] squirrelmail security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3852-1 [email protected] https://www.debian.org/security/ Sebastien Delafond May 13, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3852-1] squirrelmail security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3852-1 [email protected] https://www.debian.org/security/ Sebastien Delafond May 13, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DLA 940-1] sane-backends security update
Package : sane-backends Version : 1.0.22-7.4+deb7u1 CVE ID : CVE-2017-6318 Debian Bug : 854804 It was discovered that there was an issue in sane-backends, an API library for scanners. It allowed remote attackers to obtain sensitive memory information via a crafted SANENETCONTROLOPTION packet. For...
[SECURITY] [DSA 3851-1] postgresql-9.4 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3851-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 12, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3850-1] rtmpdump security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3850-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 12, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3849-1] kde4libs security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3849-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 12, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3849-1] kde4libs security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3849-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 12, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DLA 939-1] qemu-kvm security update
Package : qemu-kvm Version : 1.1.2+dfsg-6+deb7u21 CVE ID : CVE-2016-9603 CVE-2017-7718 CVE-2017-7980 Multiple vulnerabilities have been discovered in qemu-kvm, a full virtualization solution on x86 hardware based on Quick EmulatorQemu. The Common Vulnerabilities and Exposures project identifies t...
[SECURITY] [DLA 924-2] tomcat7 regression update
Package : tomcat7 Version : 7.0.28-4+deb7u13 Debian Bug : 861872 The security update announced as DLA-924-1 introduced a regression in Tomcats APR protocol due to the fix for CVE-2017-5647 and prevented a successful sendfile request. For Debian 7 "Wheezy", these problems have been fixed in versio...