14858 matches found
[SECURITY] [DSA 3787-2] tomcat7 regression update
------------------------------------------------------------------------- Debian Security Advisory DSA-3787-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 22, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3787-2] tomcat7 regression update
------------------------------------------------------------------------- Debian Security Advisory DSA-3787-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 22, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DLA 832-1] bitlbee security update
Package : bitlbee Version : 3.0.5-1.2+deb7u1 CVE ID : CVE-2016-10188 CVE-2016-10189 CVE-2017-5668 CVE-2017-5668 Fix for incomplete fix for "Null pointer dereference with file transfer request from unknown contacts". Though this package wasnt in Wheezy with this issue, I mention it here. The fix w...
[SECURITY] [DLA 831-1] gtk-vnc security update
Package : gtk-vnc Version : 0.5.0-3.1+deb7u1 CVE ID : CVE-2017-5884 CVE-2017-5885 Debian Bug : 854450 Josef Gajdusek discovered two vulnerabilities in gtk-vnc, a VNC viewer widget for GTK: CVE-2017-5884 Fix bounds checking for RRE, hextile & copyrec encodings. This bug allowed a remote server to...
[SECURITY] [DLA 830-1] gst-plugins-bad0.10 security update
Package : gst-plugins-bad0.10 Version : 0.10.23-7.1+deb7u5 CVE ID : CVE-2017-5843 CVE-2017-5848 Some memory management issues were found in the GStreamer "bad" plugins: CVE-2017-5843 A use after free issue was found in the mxfdemux element, which can can be triggered via a maliciously crafted fil...
[SECURITY] [DLA 829-1] gst-plugins-ugly0.10 security update
Package : gst-plugins-ugly0.10 Version : 0.10.19-2+deb7u1 CVE ID : CVE-2017-5846 CVE-2017-5847 Two memory management issues were found in the asfdemux element of the GStreamer "ugly" plugin collection, which can be triggered via a maliciously crafted file. For Debian 7 "Wheezy", these problems ha...
[SECURITY] [DLA 828-1] gst-plugins-good0.10 security update
Package : gst-plugins-good0.10 Version : 0.10.31-3+nmu1+deb7u2 CVE ID : CVE-2016-10198 CVE-2017-5840 Two memory handling issues were found in gst-plugins-good0.10: CVE-2016-10198 An invalid read can be triggered in the aacparse element via a maliciously crafted file. CVE-2017-5840 An out of bound...
[SECURITY] [DLA 827-1] gst-plugins-base0.10 security update
Package : gst-plugins-base0.10 Version : 0.10.36-1.1+deb7u2 CVE ID : CVE-2017-5837 CVE-2017-5844 It was discovered that it is possible to trigger a floating point exception in GStreamer via specially crafted files, causing a denial of service. For Debian 7 "Wheezy", these problems have been fixed...
[SECURITY] [DLA 826-1] wireshark security update
Package : wireshark Version : 1.12.1+g01b65bf-4+deb8u6deb7u6 CVE ID : CVE-2017-6014 Debian Bug : 855408 It was discovered that there was denial of service vulnerability in wireshark, a network traffic analyzer. A malformed NATO Ground Moving Target Indicator Format "STANAG 4607" capture file coul...
[SECURITY] [DLA 825-1] spice security update
Package : spice Version : 0.11.0-1+deb7u4 CVE ID : CVE-2016-9577 CVE-2016-9578 Debian Bug : 854336 Several vulnerabilities were discovered in spice, a SPICE protocol client and server library. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2016-9577 Fredia...
[SECURITY] [DSA 3790-1] spice security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3790-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 16, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3790-1] spice security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3790-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 16, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DLA 824-1] libevent security update
Package : libevent Version : 2.0.19-stable-3+deb7u2 CVE ID : CVE-2016-10195 CVE-2016-10196 CVE-2016-10197 Debian Bug : 854092 Several vulnerabilities were discovered in libevent, an asynchronous event notification library. They would lead to Denial Of Service via application crash, or remote code...
[SECURITY] [DSA 3789-1] libevent security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3789-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 15, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3789-1] libevent security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3789-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 15, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DLA 823-1] tomcat7 security update
Package : tomcat7 Version : 7.0.28-4+deb7u10 CVE ID : not yet available Debian Bug : 854551 It was discovered that a programming error in the processing of HTTPS requests in the Apache Tomcat servlet and JSP engine may result in denial of service via an infinite loop. For Debian 7 "Wheezy", these...
[SECURITY] [DSA 3788-1] tomcat8 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3788-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 13, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3787-1] tomcat7 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3787-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 13, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3786-1] vim security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3786-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 13, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DLA 822-1] vim security update
Package : vim Version : 2:7.3.547-7+deb7u2 CVE ID : CVE-2017-5953 Debian Bug : 854969 A vulnerability has been discovered in Vim where a malformed spell file could cause an integer overflow which is used as the size for memory allocation, resulting in a subsequent buffer overflow. For Debian 7...
[SECURITY] [DLA 821-1] openjdk-7 security update
Package : openjdk-7 Version : 7u121-2.6.8-2deb7u1 CVE ID : CVE-2016-5546 CVE-2016-5547 CVE-2016-5548 CVE-2016-5552 CVE-2017-3231 CVE-2017-3241 CVE-2017-3252 CVE-2017-3253 CVE-2017-3260 CVE-2017-3261 CVE-2017-3272 CVE-2017-3289 Several vulnerabilities have been discovered in OpenJDK, an...
[SECURITY] [DLA 819-2] mysql-5.5 version number correction
Package : mysql-5.5 Version : 5.5.54-0+deb7u2 CVE ID : not assigned yet Debian Bug : 854713 This is a correction of DLA 819-1 that mentioned that mysql-5.5 5.5.47-0+deb7u2 was corrected. The corrected package version was 5.5.54-0+deb7u2. For completeness the text from DLA 819-1 is available below...
[SECURITY] [DLA 820-1] viewvc security update
Package : viewvc Version : 1.1.5-1.4+deb7u1 CVE ID : CVE-2017-5938 Debian Bug : 854681 Thomas Gerbet discovered that viewvc, a web interface for CVS and Subversion repositories, did not properly sanitize user input. This issue resulted in a potential Cross-Site Scripting vulnerability. For Debian...
[SECURITY] [DSA 3785-1] jasper security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3785-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 09, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DLA 819-1] mysql-5.5 security update
Package : mysql-5.5 Version : 5.5.47-0+deb7u2 CVE ID : not assigned yet Debian Bug : 854713 It has been found that the C client library for MySQL libmysqlclient.so has use-after-free vulnerability which can cause crash of applications using that MySQL client. For Debian 7 "Wheezy", these problems...
[SECURITY] [DSA 3784-1] viewvc security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3784-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 09, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3784-1] viewvc security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3784-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 09, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3783-1] php5 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3783-1 [email protected] https://www.debian.org/security/ Luciano Bello February 08, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3783-1] php5 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3783-1 [email protected] https://www.debian.org/security/ Luciano Bello February 08, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3782-1] openjdk-7 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3782-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 08, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DLA 818-1] php5 security update
Package : php5 Version : 5.4.45-0+deb7u7 CVE ID : CVE-2016-2554 CVE-2016-3141 CVE-2016-3142 CVE-2016-4342 CVE-2016-9934 CVE-2016-9935 CVE-2016-10158 CVE-2016-10159 CVE-2016-10160 CVE-2016-10161 PHP-Bugs : 71323 70979 71039 71459 71391 71335 Several issues have been discovered in PHP recursive...
[SECURITY] [DLA 693-2] tiff regression update
Package : tiff Version : 4.0.2-6+deb7u10 Debian Bug : 852610 Version 4.0.2-6+deb7u7 introduced changes that resulted in libtiff being unable to write out tiff files when the compression scheme in use relies on codec-specific TIFF tags embedded in the image. This problem manifested itself with...
[SECURITY] [DLA 817-1] libphp-phpmailer security update
Package : libphp-phpmailer Version : 5.1-1.3+deb7u1 CVE ID : CVE-2017-5223 Debian Bug : 853232 It was discovered that there was a local file disclosure vulnerability in libphp-phpmailer, a email transfer class for PHP, where insufficient parsing of HTML messages could potentially be used by...
[SECURITY] [DSA 3781-1] svgsalamander security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3781-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 05, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DLA 816-1] svgsalamander security update
Package : svgsalamander Version : 0svn95-1+deb7u1 CVE ID : CVE-2017-5617 Debian Bug : 853134 Luc Lynx discovered a Server-Side Request Forgery in svgSalamander allowing access to the trusted network with specially crafted SVG files. For Debian 7 "Wheezy", these problems have been fixed in version...
[SECURITY] [DLA 815-1] ntfs-3g security update
Package : ntfs-3g Version : 1:2012.1.15AR.5-2.1+deb7u3 CVE ID : CVE-2017-0358 Jann Horn of Google Project Zero discovered that NTFS-3G, a read-write NTFS driver for FUSE, does not scrub the environment before executing modprobe with elevated privileges. A local user can take advantage of this fla...
[SECURITY] [DLA 814-1] openssl security update
Package : openssl Version : 1.0.1t-1+deb7u2 CVE ID : CVE-2016-7056 CVE-2016-8610 CVE-2017-3731 Several vulnerabilities were discovered in OpenSSL: CVE-2016-7056 A local timing attack was discovered against ECDSA P-256. CVE-2016-8610 It was discovered that no limit was imposed on alert packets...
[SECURITY] [DSA 3780-1] ntfs-3g security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3780-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 01, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3779-1] wordpress security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3779-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 01, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3779-1] wordpress security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3779-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 01, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DLA 813-1] wordpress security update
Package : wordpress Version : 3.6.1+dfsg-1deb7u13 CVE ID : CVE-2017-5488 CVE-2017-5489 CVE-2017-5490 CVE-2017-5491 CVE-2017-5492 CVE-2017-5493 CVE-2017-5610 CVE-2017-5611 CVE-2017-5612 Debian Bug : 851310 852767 Several vulnerabilities were discovered in wordpress, a web blogging tool. The Common...
[SECURITY] [DLA 812-1] ikiwiki security update
Package : ikiwiki Version : 3.20120629.2+deb7u2 CVE ID : CVE-2016-9646 CVE-2016-10026 CVE-2017-0356 Several vulnerabilities have been found in ikiwiki, a wiki compiler: CVE-2016-9646 Commit metadata forgery CVE-2016-10026 Authorization bypass when reverting changes CVE-2017-0356 Authentication...
[SECURITY] [DSA 3778-1] ruby-archive-tar-minitar security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3778-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 31, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3778-1] ruby-archive-tar-minitar security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3778-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 31, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DLA 811-1] libplist security update
Package : libplist Version : 1.8-1+deb7u1 CVE ID : CVE-2017-5209 CVE-2017-5545 Debian Bug : 851196 852385 The following vulnerabilities have been fixed in libplist: CVE-2017-5209 Out of bounds read when parsing specially crafted Apple plist file CVE-2017-5545 Heap buffer overflow via crafted Appl...
[SECURITY] [DSA 3777-1] libgd2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3777-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 31, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3777-1] libgd2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3777-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 31, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DLA 810-1] libarchive security update
Package : libarchive Version : 3.0.4-3+wheezy5+deb7u1 CVE ID : CVE-2017-5601 Debian Bug : 853278 It was discovered that there was a heap buffer overflow in libarchive, a multi-format archive and compression library. For Debian 7 "Wheezy", this issue has been fixed in libarchive version...
[SECURITY] [DSA 3776-1] chromium-browser security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3776-1 [email protected] https://www.debian.org/security/ Michael Gilbert January 31, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3776-1] chromium-browser security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3776-1 [email protected] https://www.debian.org/security/ Michael Gilbert January 31, 2017 https://www.debian.org/security/faq -...