14471 matches found
[SECURITY] [DSA 3698-1] php5 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3698-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 24, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DLA 673-1] kdepimlibs security update
Package : kdepimlibs Version : 4:4.8.4-2+deb7u1 CVE ID : CVE-2016-7966 Debian Bug : 840546 Roland Tapken discovered that insufficient input sanitizing in KMails plain text viewer allowed attackers the injection of HTML code. This might open the way to the exploitation of other vulnerabilities in...
[SECURITY] [DSA 3697-1] kdepimlibs security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3697-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 21, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DLA 672-1] bind9 security update
Package : bind9 Version : 1:9.8.4.dfsg.P1-6+nmu2+deb7u12 CVE ID : CVE-2016-2848 CVE-2016-2848 A server vulnerable to this defect can be forced to exit with an assertion failure if it receives a malformed packet. Authoritative and recursive servers are both vulnerable. For Debian 7 "Wheezy", these...
[SECURITY] [DLA 670-1] linux security update
Package : linux Version : 3.2.82-1 CVE ID : CVE-2015-8956 CVE-2016-5195 CVE-2016-7042 CVE-2016-7425 Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. CVE-2015-8956 It was discovered that missing input...
[SECURITY] [DLA 671-1] libxvmc security update
Package : libxvmc Version : 2:1.0.7-1+deb7u3 CVE ID : CVE-2016-7953 CVE-2016-7953 If an empty string is received from an x-server, do not underrun the buffer by accessing "rep.nameLen - 1" unconditionally, which could end up being -1. For Debian 7 "Wheezy", these problems have been fixed in versi...
[SECURITY] [DSA 3696-1] linux security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3696-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 19, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3696-1] linux security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3696-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 19, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DLA 669-1] dwarfutils security update
Package : dwarfutils Version : 20120410-2+deb7u2 CVE ID : CVE-2015-8538 CVE-2015-8750 CVE-2016-2050 CVE-2016-2091 CVE-2016-5034 CVE-2016-5036 CVE-2016-5038 CVE-2016-5039 CVE-2016-5042 Several vulnerabilities were discovered in dwarfutils, a tool and library for reading/consuming and...
[SECURITY] [DLA 668-1] libass security update
Package : libass Version : 0.10.0-3+deb7u1 CVE ID : CVE-2016-7969 CVE-2016-7972 Several vulnerabilities were discovered in libass, a library for manipulating the SubStation Alpha SSA subtitle file format. The Common Vulnerabilities and Exposures project identifies the following issues...
[SECURITY] [DLA 667-1] libxv security update
Package : libxv Version : 2:1.0.7-1+deb7u2 CVE ID : CVE-2016-5407 Debian Bug : 840438 Tobias Stoeckmann from the OpenBSD project has discovered a number of issues in the way various X client libraries handle the responses they receive from servers. Insufficient validation of data from the X serve...
[SECURITY] [DLA 666-1] guile-2.0 security update
Package : guile-2.0 Version : 2.0.5+1-3+deb7u1 CVE ID : CVE-2016-8605 CVE-2016-8606 Debian Bug : 840555 840556 Several vulnerabilities were discovered in GNU Guile, an implementation of the Scheme programming language. The Common Vulnerabilities and Exposures project identifies the following...
[SECURITY] [DLA 665-1] libgd2 security update
Package : libgd2 Version : 2.0.36rc1dfsg-6.1+deb7u6 CVE ID : CVE-2016-6911 CVE-2016-8670 CVE-2016-6911 invalid read in gdImageCreateFromTiffPtr most of the code is not present in the Wheezy version CVE-2016-8670: Stack Buffer Overflow in GD dynamicGetbuf For Debian 7 "Wheezy", these problems have...
[SECURITY] [DSA 3695-1] quagga security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3695-1 [email protected] https://www.debian.org/security/ Florian Weimer October 18, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DLA 663-1] tor security update
Package : tor Version : 0.2.4.27-2 It has been discovered that Tor treats the contents of some buffer chunks as if they were a NUL-terminated string. This issue could enable a remote attacker to crash a Tor client, hidden service, relay, or authority. This update aims to defend against this gener...
[SECURITY] [DSA 3694-1] tor security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3694-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 18, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DLA 664-1] libxrender security update
Package : libxrender Version : 1:0.9.7-1+deb7u3 CVE ID : CVE-2016-7949 CVE-2016-7950 Debian Bug : 840443 Tobias Stoeckmann from the OpenBSD project has discovered a number of issues in the way various X client libraries handle the responses they receive from servers. Insufficient validation of da...
[SECURITY] [DLA 662-1] quagga security update
Package : quagga Version : 0.99.22.4-1+wheezy3+deb7u1 CVE ID : CVE-2016-1245 Debian Bug : 841162 It was discovered that there was stack overrun in IPv6 RA receive code in quagga, a BGP/OSPF/RIP routing daemon. The buffer size specified when receiving mixed up two constants that have different...
[SECURITY] [DLA 661-1] libarchive security update
Package : libarchive Version : 3.0.4-3+wheezy5 CVE ID : CVE-2016-8687 CVE-2016-8688 CVE-2016-8689 Debian Bug : 840934 840935 840936 Agostino Sarubbo of Gentoo discovered several security vulnerabilities in libarchive, a multi-format archive and compression library. An attacker could take advantag...
[SECURITY] [DLA 660-1] libxrandr security update
Package : libxrandr Version : 2:1.3.2-2+deb7u2 CVE ID : CVE-2016-7947 CVE-2016-7948 Debian Bug : 840441 Insufficient validation of data from the X server in libxrandr before v1.5.0 can cause out of boundary memory writes and integer overflows. For Debian 7 "Wheezy", these problems have been fixed...
[SECURITY] [DLA 658-1] icedove security update
Package : icedove Version : 45.4.0-1deb7u1 CVE ID : CVE-2016-5278, CVE-2016-5270, CVE-2016-5272, CVE-2016-5276, CVE-2016-5277, CVE-2016-5280, CVE-2016-5281, CVE-2016-5284, CVE-2016-5250, CVE-2016-5261, CVE-2016-5257 Multiple security issues have been found in Icedove, Debians version of the Mozil...
[SECURITY] [DLA 657-1] libarchive security update
Package : libarchive Version : 3.0.4-3+wheezy4 CVE ID : CVE-2016-5418 Debian Bug : 837714 It was found that libarchive mishandled hardlink archive entries of non-zero data size, possibly allowing remote attackers to to write to arbitrary files via especially crafted archives. For Debian 7 "Wheezy...
[SECURITY] [DLA 656-1] libdbd-mysql-perl security update
Package : libdbd-mysql-perl Version : 4.021-1+deb7u2 CVE ID : CVE-2016-1246 Paul Rohar discovered that libdbd-mysql-perl, the Perl DBI database driver for MySQL and MariaDB, constructed an error message in a fixed-length buffer, leading to a crash FORTIFYSOURCE failure and, potentially, to denial...
[SECURITY] [DLA 655-1] mpg123 security update
Several security vulnerabilities have been discovered in mpg123, an MPEG layer 1/2/3 audio decoder and player. An attacker could take advantage of these flaws to cause a denial of service against mpg123 or applications using the libmpg123 library with a carefully crafted input file. CVE-2014-9497...
[SECURITY] [DSA 3693-1] libgd2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3693-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 14, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DLA 654-1] libxfixes security update
Package : libxfixes Version : 1:5.0-4+deb7u2 CVE ID : CVE-2016-7944 Debian Bug : 840442 It was discovered that there was a integer overflow in libxfixes, a library providing a client interface to the X11 XFIXES extension. The 32 bit field "rep.length" was not checked for validity, which allowed a...
[SECURITY] [DSA 3692-1] freeimage security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3692-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 13, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3691-1] ghostscript security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3691-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 12, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3691-1] ghostscript security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3691-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 12, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DLA 653-1] qemu-kvm security update
Package : qemu-kvm Version : 1.1.2+dfsg-6+deb7u16 CVE ID : CVE-2016-7161 CVE-2016-7170 CVE-2016-7908 Multiple vulnerabilities have been found in qemu-kvm: CVE-2016-7161 Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in qemu-kvm allows attackers to execute arbitrary...
[SECURITY] [DLA 652-1] qemu security update
Package : qemu Version : 1.1.2+dfsg-6+deb7u16 CVE ID : CVE-2016-7161 CVE-2016-7170 CVE-2016-7908 Multiple vulnerabilities have been found in QEMU: CVE-2016-7161 Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU aka Quick Emulator allows attackers to execute...
[SECURITY] [DLA 651-1] graphicsmagick security update
Package : graphicsmagick Version : 1.3.16-1.1+deb7u4 CVE ID : CVE-2016-7446 CVE-2016-7447 CVE-2016-7449 CVE-2016-7800 Debian Bug : Various security issues were found and fixed in graphicsmagick in Debian wheezy LTS. CVE-2016-7446 Heap buffer overflow issue in MVG/SVG rendering. CVE-2016-7447 Heap...
[SECURITY] [DSA 3690-1] icedove security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3690-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 10, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DLA 650-1] mat security update
Package : mat Version : 0.3.2-1+deb7u1 Debian Bug : 826101 An implementation flaw was discovered in mat, the metadata anonymisation toolkit. The implementation of PDF support lacks support to anonymize the metadata in embedded images. As there is no easy fix for this flaw, it was decided that PDF...
[SECURITY] [DSA 3689-1] php5 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3689-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 08, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3689-1] php5 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3689-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 08, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DLA DLA-649-1] python-django security update
Package : python-django Version : 1.4.22-1+deb7u1 CVE ID : CVE-2016-7401 It was discovered that there was a possible CSRF protection bypass on sites that use Google Analytics in python-django, a High-level Python web development framework. More information can be found in the upstream announcemen...
[SECURITY] [DLA DLA-649-1] python-django security update
Package : python-django Version : 1.4.22-1+deb7u1 CVE ID : CVE-2016-7401 It was discovered that there was a possible CSRF protection bypass on sites that use Google Analytics in python-django, a High-level Python web development framework. More information can be found in the upstream announcemen...
[SECURITY] [DLA 648-1] c-ares security update
Package : c-ares Version : 1.9.1-3+deb7u1 CVE ID : CVE-2016-5180 Debian Bug : 839151 Gzob Qq discovered that the query-building functions in c-ares, an asynchronous DNS request library would not correctly process crafted query names, resulting in a heap buffer overflow and potentially leading to...
[SECURITY] [DLA DLA-647-1] freeimage security update
Package : freeimage Version : 3.15.1-1.1+deb7u1 CVE ID : CVE-2016-5684 Debian Bug : 839827 It was discovered that there was an out-of-bounds write vulnerability in the XMP image handling functionality in freeimage, a support library for various graphics image formats. A specially crafted XMP file...
[SECURITY] [DLA DLA-647-1] freeimage security update
Package : freeimage Version : 3.15.1-1.1+deb7u1 CVE ID : CVE-2016-5684 Debian Bug : 839827 It was discovered that there was an out-of-bounds write vulnerability in the XMP image handling functionality in freeimage, a support library for various graphics image formats. A specially crafted XMP file...
[SECURITY] [DLA 646-1] zendframework security update
Package : zendframework Version : 1.11.13-1.1+deb7u5 CVE ID : CVE-2016-4861 CVE-2016-4861 The implementation of ORDER BY and GROUP BY in ZendDbSelect remained prone to SQL injection when a combination of SQL expressions and comments were used. This security patch provides a comprehensive solution...
[SECURITY] [DSA 3688-1] nss security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3688-1 [email protected] https://www.debian.org/security/ Florian Weimer October 05, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3687-1] nspr security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3687-1 [email protected] https://www.debian.org/security/ Florian Weimer October 05, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DLA 645-1] bind9 security update
Package : bind9 Version : 1:9.8.4.dfsg.P1-6+nmu2+deb7u11 CVE ID : CVE-2016-2775 CVE-2016-2776 Debian Bug : 831796 839010 CVE-2016-2775 lwresd crash with long query name Backport of upstream commit 38cc2d14e218e536e0102fa70deef99461354232. CVE-2016-2776 assertion failure due to unspecified crafted...
[SECURITY] [DLA 644-1] libav security update
Package : libav Version : 6:0.8.18-0+deb7u1 CVE ID : CVE-2015-1872 CVE-2015-5479 CVE-2016-7393 Multiple vulnerabilities have been found in libav: CVE-2015-1872 The ffmjpegdecodesof function in libavcodec/mjpegdec.c in Libav before 0.8.18 does not validate the number of components in a JPEG-LS Sta...
[SECURITY] [DSA 3686-1] icedove security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3686-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 04, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3685-1] libav security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3685-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 04, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3684-1] libdbd-mysql-perl security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3684-1 [email protected] https://www.debian.org/security/ Florian Weimer October 03, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3683-1] chromium-browser security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3683-1 [email protected] https://www.debian.org/security/ Michael Gilbert October 02, 2016 https://www.debian.org/security/faq -...