14675 matches found
[SECURITY] [DLA 528-1] libcommons-fileupload-java security update
Package : libcommons-fileupload-java Version : 1.2.2-1+deb7u3 CVE ID : CVE-2016-3092 A denial of service vulnerability was identified in Commons FileUpload that occurred when the length of the multipart boundary was just below the size of the buffer 4096 bytes used to read the uploaded file. This...
[SECURITY] [DLA 527-1] nss security update
Package : nss Version : 2:3.14.5-1+deb7u8 CVE ID : CVE-2016-2834 Four moderate rated networking security issues were found in NSS. For Debian 7 "Wheezy", these problems have been fixed in version 2:3.14.5-1+deb7u8. We recommend that you upgrade your nss packages and restart any applications that...
[SECURITY] [DLA 526-1] mysql-connector-java security update
Package : mysql-connector-java Version : 5.1.39-1deb7u1 CVE ID : CVE-2015-2575 A vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/J has been discovered that may result in unauthorized update, insert or delete access to some MySQL Connectors accessible data a...
[SECURITY] [DLA 525-1] gimp security update
Package : gimp Version : 2.8.2-2+deb7u2 CVE ID : CVE-2016-4994 It was discovered that there was a use-after-free vulnerability in the channel and layer properties parsing process in Gimp, the GNU Image Manipulation Program. For Debian 7 "Wheezy", this issue has been fixed in gimp version...
[SECURITY] [DSA 3606-1] libpdfbox security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3606-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 24, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DLA 523-1] enigmail security update
Package : enigmail Version : 1.8.2-4deb7u2 This uploads corrects the dependencies of the enigmail extension so it becomes installable again together with Icedove 45. For Debian 7 "Wheezy", these problems have been fixed in version 1.8.2-4deb7u2. We recommend that you upgrade your enigmail package...
[SECURITY] [DLA 524-1] squidguard security update
Package : squidguard Version : 1.5-1+deb7u1 CVE ID : CVE-2015-8936 It was discovered that there was a reflected cross-site scripting vulnerability in squidguard, a filter and redirector plugin for Squid. For Debian 7 "Wheezy", this issue has been fixed in squidguard version 1.5-1+deb7u1. We...
[SECURITY] [DLA 519-1] icedove security update
Package : icedove Version : 45.1.0-1deb7u1 CVE ID : CVE-2016-2806 Multiple security issues have been found in Icedove, Debians version of the Mozilla Thunderbird mail client: Multiple memory safety errors may lead to the execution of arbitrary code or denial of service. Debian follows the extende...
[SECURITY] [DLA 522-1] python2.7 security update
Package : python2.7 Version : 2.7.3-6+deb7u3 CVE ID : CVE-2016-0772 CVE-2016-5636 CVE-2016-5699 CVE-2016-0772 A vulnerability in smtplib allowing MITM attacker to perform a startTLS stripping attack. smtplib does not seem to raise an exception when the remote end smtp server is capable of...
[SECURITY] [DLA 521-1] firefox-esr security update
Package : firefox-esr Version : 45.2.0esr-1deb7u1 CVE ID : CVE-2016-2818 CVE-2016-2819 CVE-2016-2821 CVE-2016-2822 CVE-2016-2828 CVE-2016-2831 Multiple security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors, buffer overflows and other implementation erro...
[SECURITY] [DSA 3605-1] libxslt security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3605-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 19, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3605-1] libxslt security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3605-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 19, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DLA 520-1] horizon security update
Package : horizon Version : 2012.1.1-10+deb7u1 CVE ID : CVE-2016-4428 It was discovered that there was an XSS vulnerability in horizon, a Django module providing web interaction with OpenStack. For Debian 7 "Wheezy", this issue has been fixed in horizon version 2012.1.1-10+deb7u1. We recommend th...
[SECURITY] [DLA 518-1] mozilla-devscripts security update
Package : mozilla-devscripts Version : 0.32+deb7u1 Debian Bug : 825508 In preparation of the upcoming switch to Icedove 45 the mozilla-devscripts package was updated to generate correct dependencies for rebuilt extensions. For Debian 7 "Wheezy", these problems have been fixed in version...
[SECURITY] [DLA 516-1] linux security update
Package : linux Version : 3.2.81-1 CVE ID : CVE-2016-0821 CVE-2016-1583 CVE-2016-2184 CVE-2016-2185 CVE-2016-2186 CVE-2016-2187 CVE-2016-3134 CVE-2016-3136 CVE-2016-3137 CVE-2016-3138 CVE-2016-3140 CVE-2016-3157 CVE-2016-3672 CVE-2016-3951 CVE-2016-3955 CVE-2016-3961 CVE-2016-4482 CVE-2016-4485...
[SECURITY] [DLA 517-1] imagemagick security update
Package : imagemagick Version : 8:6.7.7.10-5+deb7u7 CVE ID : CVE-2016-4563 The code did not check the integer didnt overflow before trying to resize a buffer. A specially crafted file could result in using memory past the end of the allocated buffer. This security CVEs for this issue CVE-2016-456...
[SECURITY] [DSA 3604-1] drupal7 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3604-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 16, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3603-1] libav security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3603-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 14, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3602-1] php5 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3602-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 14, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3602-1] php5 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3602-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 14, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DLA 515-1] libav security update
Package : libav Version : 6:0.8.17-2+deb7u2 CVE ID : CVE-2016-3062 It was discovered that there was a memory corruption issue in libav a multimedia player, server, encoder and transcoder when parsing .mp4 files which could lead to crash or possibly execute arbitrary code. For Debian 7 "Wheezy",...
[SECURITY] [DSA 3601-1] icedove security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3601-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 13, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DLA 514-1] libxslt security update
Package : libxslt Version : 1.1.26-14.1+deb7u1 CVE ID : CVE-2015-7995 CVE-2016-1683 CVE-2016-1684 Several vulnerabilities were found in libxslt. CVE-2015-7995 A missing type check could cause an application crash via a especially crafted file. CVE-2016-1683 An out of bounds heap access bug was...
[SECURITY] [DLA 513-1] nspr security update
Package : nspr Version : 2:4.9.2-1+deb7u4 CVE ID : CVE-2016-1951 It was discovered that there was a buffer overflow in a sprintf utility within nspr, the NetScape Portable Runtime library. For Debian 7 "Wheezy", this issue has been fixed in nspr version 2:4.9.2-1+deb7u4. We recommend that you...
[SECURITY] [DLA 512-1] mantis security update
Package : mantis Version : 1.2.18-1+deb7u1 CVE ID : CVE-2016-5364 It was discovered that there was an XSS vulnerability in custom field management in mantis, a web-based bug tracking system. For Debian 7 "Wheezy", this issue has been fixed in mantis version 1.2.18-1+deb7u1. We recommend that you...
[SECURITY] [DLA 511-1] libtorrent-rasterbar security update
Package : libtorrent-rasterbar Version : 0.15.10-1+deb7u1 CVE ID : CVE-2016-5301 Debian Bug : 826380 A specially crafted HTTP response from a tracker or potentially a UPnP broadcast can crash libtorrent in the parsechunkheader function. Although this function is not present in this version,...
[SECURITY] [DLA 510-1] p7zip security update
Package : p7zip Version : 9.20.1dfsg.1-4+deb7u2 CVE ID : CVE-2016-2335 Debian Bug : 824160 Marcin Icewall Noga of Cisco Talos discovered an out-of-bound read vulnerability in the CInArchive::ReadFileItem method in p7zip, a 7zr file archiver with high compression ratio. A remote attacker can take...
[SECURITY] [DLA 509-1] samba security update
Package : samba Version : 2:3.6.6-6+deb7u10 Debian Bug : 820982 821811 The Samba 2:3.6.6-6+deb7u9 release, issued by the DSA-3548-1, introduced different regressions causing trust relationship with Win 7 domains to fail. The fix for the CVE-2016-2115 has been reverted, so administrators should se...
[SECURITY] [DSA 3600-1] iceweasel/firefox-esr security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3600-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 09, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3599-1] p7zip security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3599-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 09, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3599-1] p7zip security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3599-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 09, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DLA 508-1] expat security update
Package : expat Version : 2.1.0-1+deb7u4 CVE ID : CVE-2012-6702 CVE-2016-5300 Two related issues have been discovered in Expat, a C library for parsing XML. CVE-2012-6702 This issue was introduced when CVE-2012-0876 was addressed. Stefan Sørensen discovered that the use of the function XMLParse...
[SECURITY] [DLA 505-1] libpdfbox-java security update
Package : libpdfbox-java Version : 1:1.7.0+dfsg-4+deb7u1 CVE ID : CVE-2016-2175 Apache PDFBox did not properly initialize the XML parsers, which allows context-dependent attackers to conduct XML External Entity XXE attacks via a crafted PDF. This may lead to the disclosure of confidential data,...
[SECURITY] [DLA 504-1] libxstream-java security update
Package : libxstream-java Version : 1.4.2-1+deb7u1 CVE ID : CVE-2016-3674 Debian Bug : 819455 It was discovered that XStream, a Java library to serialize objects to XML and back again, was susceptible to XML External Entity attacks. For Debian 7 "Wheezy", these problems have been fixed in version...
[SECURITY] [DSA 3598-1] vlc security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3598-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 07, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3597-1] expat security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3597-1 [email protected] https://www.debian.org/security/ Luciano Bello June 07, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3597-1] expat security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3597-1 [email protected] https://www.debian.org/security/ Luciano Bello June 07, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DLA 507-1] nss security update
Package : nss Version : 2:3.14.5-1+deb7u7 CVE ID : CVE-2015-4000 Debian Bug : N/A A vulnerability has been found in nss. CVE-2015-4000 With TLS protocol 1.2 and earlier, when a DHEEXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHEEXPORT choice, which...
[SECURITY] [DLA 506-1] dhcpcd5 security update
Package : dhcpcd5 Version : 5.5.6-1+deb7u2 CVE ID : CVE-2014-7912 CVE-2014-7913 Debian Bug : N/A Two vulnerabilities were discovered in dhcpcd5 a DHCP client package. A remote on a local network attacker can possibly execute arbitrary code or cause a denial of service attack by crafted messages...
[SECURITY] [DSA 3596-1] spice security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3596-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 06, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3596-1] spice security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3596-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 06, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3595-1] mariadb-10.0 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3595-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 05, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3595-1] mariadb-10.0 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3595-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 05, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3548-3] samba regression update
------------------------------------------------------------------------- Debian Security Advisory DSA-3548-3 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 05, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3548-3] samba regression update
------------------------------------------------------------------------- Debian Security Advisory DSA-3548-3 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 05, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3594-1] chromium-browser security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3594-1 [email protected] https://www.debian.org/security/ Michael Gilbert June 04, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3594-1] chromium-browser security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3594-1 [email protected] https://www.debian.org/security/ Michael Gilbert June 04, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DLA 503-1] libxml2 security update
Package : libxml2 Version : 2.8.0+dfsg1-7+wheezy6 CVE ID : CVE-2015-8806 CVE-2016-1762 CVE-2016-1833 CVE-2016-1834 CVE-2016-1835 CVE-2016-1837 CVE-2016-1838 CVE-2016-1839 CVE-2016-1840 CVE-2016-2073 CVE-2016-3627 CVE-2016-3705 CVE-2016-4447 CVE-2016-4449 CVE-2016-4483 Debian Bug : 812807 813613...
[SECURITY] [DSA 3593-1] libxml2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3593-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 02, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3593-1] libxml2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3593-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 02, 2016 https://www.debian.org/security/faq -...