[SECURITY] [DLA 858-1] wireshark security update

2017-03-16 Thread Balint Reczey
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Package: wireshark
Version: 1.12.1+g01b65bf-4+deb8u6~deb7u7
CVE ID : CVE-2017-5596 CVE-2017-5597 CVE-2017-6467
 CVE-2017-6468 CVE-2017-6469 CVE-2017-6470
 CVE-2017-6471 CVE-2017-6472 CVE-2017-6473
 CVE-2017-6474

It was discovered that Wireshark, a network protocol analyzer,
contained several vulnerabilities in the dissectors for ASTERIX,
DHCPv6, LDSS, IAX2, WSP and RTMPT and the NetScaler and K12 file
parsers, that could lead to various crashes, denial-of-service, or
execution of arbitrary code.

For Debian 7 "Wheezy", these problems have been fixed in version
1.12.1+g01b65bf-4+deb8u6~deb7u7.

We recommend that you upgrade your wireshark packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-BEGIN PGP SIGNATURE-
Version: GnuPG v2
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=JF7t
-END PGP SIGNATURE-



[SECURITY] [DLA 857-1] libdatetime-timezone-perl new upstream version

2017-03-16 Thread Emilio Pozuelo Monfort
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Package: libdatetime-timezone-perl
Version: 1:1.58-1+2017a

This update includes the changes in tzdata 2017a for the
Perl bindings. For the list of changes, see DLA-856-1.

For Debian 7 "Wheezy", these problems have been fixed in version
1:1.58-1+2017a.

We recommend that you upgrade your libdatetime-timezone-perl packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-BEGIN PGP SIGNATURE-
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=22h2
-END PGP SIGNATURE-



[SECURITY] [DLA 856-1] tzdata new upstream version

2017-03-16 Thread Emilio Pozuelo Monfort
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Package: tzdata
Version: 2017a-0+deb7u1

This update includes the changes in tzdata 2017a. Notable
changes are:
 - Mongolia no longer observes DST.
 - Magallanes region diverges from Santiago starting 2017-05-13,
   the America/Punta_Arenas zone has been added.

For Debian 7 "Wheezy", these problems have been fixed in version
2017a-0+deb7u1.

We recommend that you upgrade your tzdata packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-BEGIN PGP SIGNATURE-
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=OQQz
-END PGP SIGNATURE-