[SECURITY] [DLA 457-1] mplayer security update

2016-05-04 Thread Thorsten Alteholz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Package: mplayer Version: 2:1.0~rc4.dfsg1+svn34540-1+deb7u2 CVE ID : CVE-2016-4352 Mplayer is crashing when playing a fuzzed gif file. The gif demuxes assumes in many places that width*height is <= INT_MAX; this might not

[SECURITY] default-java switch to OpenJDK 7 and java-common update

2016-05-04 Thread Markus Koschany
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Package: java-common Version: 0.47+deb7u1 In preparation for the upcoming default-java switch to OpenJDK 7 on 26 June 2016, the java-common package was updated to inform users about the intended change. The news will be