[SECURITY] [DLA 695-1] spip security update

2016-11-02 Thread Jonas Meurer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Package: spip Version: 2.1.17-1+deb7u6 CVE ID : CVE-2016-7980 CVE-2016-7981 CVE-2016-7982 CVE-2016-7998 CVE-2016-7999 Multiple vulnerabilities have been discovered in SPIP, a website engine for publishing

[SECURITY] [DLA 694-1] libwmf security update

2016-11-02 Thread Balint Reczey
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Package: libwmf Version: 0.2.8.4-10.3+deb7u2 CVE ID : CVE-2016-9011 Debian Bug : 842090 Agostino Sarubbo from Gentoo discovered a flaw in libwmf's Windows Metafile Format (WMF) parser which caused allocation of excessive

[SECURITY] [DLA 693-1] tiff security update

2016-11-02 Thread Raphael Hertzog
Package: tiff Version: 4.0.2-6+deb7u7 CVE ID : CVE-2014-8128 CVE-2015-7554 CVE-2015-8668 CVE-2016-3186 CVE-2016-3619 CVE-2016-3620 CVE-2016-3621 CVE-2016-3631 CVE-2016-3632 CVE-2016-3633 CVE-2016-3634 CVE-2016-5102