[SECURITY] [DLA 784-1] gcc-mozilla new package

Package : gcc-mozilla Version : 4.8.4-0deb7u1 GCC 4.8 has been packaged as gcc-mozilla for Debian 7. This package will be needed for future updates to firefox-esr and icedove, and possibly other packages that require new versions of GCC. Further information about Debian LTS security advisories, h...

[SECURITY] [DLA 684-2] libx11 regression update

Package : libx11 Version : 2:1.5.0-1+deb7u4 A possible invalid free was introduced in libx11 2:1.5.0-1+deb7u3, which could lead to application crashes or other issues. For Debian 7 "Wheezy", these problems have been fixed in version 2:1.5.0-1+deb7u4. We recommend that you upgrade your libx11...

[SECURITY] [DSA 3765-1] icoutils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3765-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 14, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3765-1] icoutils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3765-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 14, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 782-1] icedove security update

Package : icedove Version : 45.6.0-2 CVE ID : CVE-2016-9893 CVE-2016-9895 CVE-2016-9897 CVE-2016-9898 CVE-2016-9899 CVE-2016-9900 CVE-2016-9904 CVE-2016-9905 Multiple security issues have been found in Icedove, Debians version of the Mozilla Thunderbird mail client: Multiple vulnerabilities may...

[SECURITY] [DLA 783-1] xen security update

Package : xen Version : 4.1.6.lts1-5 CVE ID : CVE-2016-10013 CVE-2016-10024 Multiple vulnerabilities have been discovered in the Xen hypervisor. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2016-10013 xsa-204 Xen mishandles SYSCALL singlestep during...

[SECURITY] [DSA 3764-1] pdns security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3764-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 13, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3764-1] pdns security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3764-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 13, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3763-1] pdns-recursor security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3763-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 13, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3763-1] pdns-recursor security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3763-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 13, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3762-1] tiff security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3762-1 [email protected] https://www.debian.org/security/ Laszlo Boszormenyi GCS January 13, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3761-1] rabbitmq-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3761-1 [email protected] https://www.debian.org/security/ Sebastien Delafond January 13, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3761-1] rabbitmq-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3761-1 [email protected] https://www.debian.org/security/ Sebastien Delafond January 13, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 781-1] asterisk security update

Package : asterisk Version : 1:1.8.13.1dfsg1-3+deb7u5 CVE ID : CVE-2014-2287 CVE-2016-7551 Debian Bug : 838832 741313 Two security vulnerabilities were discovered in Asterisk, an Open Source PBX and telephony toolkit. CVE-2014-2287 channels/chansip.c in Asterisk when chansip has a certain...

[SECURITY] [DLA 780-1] libav security update

Package : libav Version : 6:0.8.19-0+deb7u1 CVE ID : CVE-2016-7424 Multiple vulnerabilities have been found in libav: CVE-2016-7424 The putnorndpixels8xy2mmx function in x86/rndtemplate.c in libav 11.7 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and...

[SECURITY] [DSA 3760-1] ikiwiki security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3760-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 12, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3759-1] python-pysaml2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3759-1 [email protected] https://www.debian.org/security/ Sebastien Delafond January 12, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3759-1] python-pysaml2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3759-1 [email protected] https://www.debian.org/security/ Sebastien Delafond January 12, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3758-1] bind9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3758-1 [email protected] https://www.debian.org/security/ Florian Weimer January 11, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3757-1] icedove security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3757-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 11, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 779-1] tomcat7 security update

Package : tomcat7 Version : 7.0.28-4+deb7u9 CVE ID : CVE-2016-8745 Debian Bug : 849949 A bug in the error handling of the send file code for the NIO HTTP connector resulted in the current Processor object being added to the Processor cache multiple times. This in turn meant that the same Processo...

[SECURITY] [DLA 773-4] python-crypto update

Package : python-crypto Version : 2.6-4+deb7u7 The previous security updates for python-crypto DLA-773-1, DLA-773-2 & DLA-773-3 were not available on non-amd64 architectures. This was due to the testsuite failing to exit gracefully when "multiprocessing" based tests were not functioning or...

[SECURITY] [DSA 3756-1] icoutils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3756-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 09, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3755-1] tomcat8 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3755-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 08, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3754-1] tomcat7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3754-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 08, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 778-1] pcsc-lite security update

Package : pcsc-lite Version : 1.8.4-1+deb7u2 CVE ID : CVE-2016-10109 It was discovered that there was a use-after-free and double-free vulnerability in pcsc-lite, a library to access smart cards that use the WindowsR SCard interface "PC/SC". For Debian 7 "Wheezy", this issue has been fixed in...

[SECURITY] [DSA 3753-1] libvncserver security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3753-1 [email protected] https://www.debian.org/security/ Sebastien Delafond January 05, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3753-1] libvncserver security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3753-1 [email protected] https://www.debian.org/security/ Sebastien Delafond January 05, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 773-3] python-crypto regression update

Package : python-crypto Version : 2.6-4+deb7u6 CVE ID : CVE-2013-7459 Debian Bug : 849495, 850025, 850077 It was discovered that the previous attempt to fix the regression in python-crypto, a cryptographic algorithms and protocols for Python, was incorrect. This regression was initially introduce...

[SECURITY] [DSA 3752-1] pcsc-lite security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3752-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 04, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 773-2] python-crypto regression update

Package : python-crypto Version : 2.6-4+deb7u5 CVE ID : CVE-2013-7459 Debian Bug : 849495, 850025, 850077 It was discovered that there was a regression in the recent update to python-crypto, a cryptographic algorithms and protocols for Python. We now raise a warning not an error on invalid input ...

[SECURITY] [DSA 3750-2] libphp-phpmailer regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3750-2 [email protected] https://www.debian.org/security/ Thijs Kinkhorst January 3, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 770-2] libphp-phpmailer regression update

Package : libphp-phpmailer Version : 5.1-1.2 CVE ID : CVE-2016-10033 Debian Bug : 849365 Dawid Golunski discovered that PHPMailer, a popular library to send email from PHP applications, allowed a remote attacker to execute code if they were able to provide a crafted Sender address. Note that for...

[SECURITY] [DLA 777-1] libvncserver security update

Package : libvncserver Version : 0.9.9+dfsg-1+deb7u2 CVE IDs : CVE-2016-9941, CVE-2016-9942 Debian Bugs : 850007, 850008 It was discovered that there were two vulnerabilities in libvncserver, a library to create/embed a VNC server: CVE-2016-9941: Fix a heap-based buffer overflow that allows remot...

[SECURITY] [DLA 776-1] samba security update

Package : samba Version : 2:3.6.6-6+deb7u11 CVE ID : CVE-2016-2125 Simo Sorce of Red Hat discovered that the Samba client code always requests a forwardable ticket when using Kerberos authentication. A target server, which must be in the current or trusted domain/realm, is given a valid general...

[SECURITY] [DLA 775-1] hplip security update

Package : hplip Version : 3.12.6-3.1+deb7u2 CVE ID : CVE-2015-0839 Debian Bug : 787353 CVE-2015-0839 The hplip plugin download function verifies the driver using a short-key. This is not secure because it is trivial to generate keys with arbitrary key IDs. For Debian 7 "Wheezy", these problems ha...

[SECURITY] [DLA-774-1] postgresql-common security update

Package : postgresql-common Version : 134wheezy5 A security vulnerability and a data loss bug have been found in postgresql-common, Debians PostgreSQL database cluster management tools. CVE-2016-1255 Dawid Golunski discovered that a symlink in /var/log/postgresql/ could be used by the "postgres"...

[SECURITY] [DLA 772-1] linux security update

Package : linux Version : 3.2.84-1 CVE ID : CVE-2012-6704 CVE-2015-1350 CVE-2015-8962 CVE-2015-8963 CVE-2015-8964 CVE-2016-7097 CVE-2016-7910 CVE-2016-7911 CVE-2016-7915 CVE-2016-8399 CVE-2016-8633 CVE-2016-8645 CVE-2016-8655 CVE-2016-9178 CVE-2016-9555 CVE-2016-9576 CVE-2016-9756 CVE-2016-9793...

[SECURITY] [DSA 3751-1] libgd2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3751-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 01, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3751-1] libgd2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3751-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 01, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 773-1] python-crypto security update

Package : python-crypto Version : 2.6-4+deb7u4 CVE ID : CVE-2013-7459 Debian Bug : 849495 It was discovered that there was a vulnerability in python-crypto, a library of cryptographic algorithms and protocols for Python. Calling AES.new with an invalid parameter could crash the Python interpreter...

[SECURITY] [DLA 771-1] hdf5 security update

Package : hdf5 Version : 1.8.8-9+deb7u1 CVE ID : CVE-2016-4330 CVE-2016-4331 CVE-2016-4332 CVE-2016-4333 Debian Bug : 845301 Cisco Talos discovered that hdf5, a file format and library for storing scientific data, contained several vulnerabilities that could lead to arbitrary code execution when...

[SECURITY] [DLA 770-1] libphp-phpmailer security update

Package : libphp-phpmailer Version : 5.1-1.2 CVE ID : CVE-2016-10033 Debian Bug : 849365 Dawid Golunski discovered that PHPMailer, a popular library to send email from PHP applications, allowed a remote attacker to execute code if they were able to provide a crafted Sender address. Note that for...

[SECURITY] [DSA 3750-1] libphp-phpmailer security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3750-1 [email protected] https://www.debian.org/security/ Thijs Kinkhorst December 31, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 769-1] shutter security update

Package : shutter Version : 0.88.3-1+deb7u1 CVE ID : CVE-2015-0854 Debian Bug : 798862 The feature-rich screenshot program shutter uses the system call in an unsafe way. This allows an attacker to execute arbitrary programs via crafted directory names. For Debian 7 "Wheezy", this problem has been...

[SECURITY] [DLA 768-1] pgpdump security update

Package : pgpdump Version : 0.27-1+deb7u1 CVE ID : CVE-2016-4021 Debian Bug : 773747 The readbinary function in buffer.c in pgpdump, a PGP packet visualizer, allows context-dependent attackers to cause a denial of service infinite loop and CPU consumption via crafted input. This was assigned...

[SECURITY] [DLA 767-1] curl security update

Package : curl Version : 7.26.0-1+wheezy18 CVE ID : CVE-2016-9586 Debian Bug : 848958 It was discovered that libcurls implementation of the printf functions triggers a buffer overflow when doing a large floating point output. The bug occurs when the conversion outputs more than 255 bytes. The fla...

[SECURITY] [DLA 685-2] libxi regression update

Package : libxi Version : 2:1.6.1-1+deb7u3 Debian Bug : 849026 A regression was found in the previous libxi update. An uninitialized pointer could be freed, causing crashes. For Debian 7 "Wheezy", these problems have been fixed in version 2:1.6.1-1+deb7u3. We recommend that you upgrade your libxi...

[SECURITY] [DSA 3749-1] dcmtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3749-1 [email protected] https://www.debian.org/security/ Sebastien Delafond December 29, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3749-1] dcmtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3749-1 [email protected] https://www.debian.org/security/ Sebastien Delafond December 29, 2016 https://www.debian.org/security/faq -...