[SECURITY] [DLA 1306-1] vips security update

2018-03-11 Thread Chris Lamb
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Package: vips Version: 7.28.5-1+deb7u2 CVE ID : CVE-2018-7998 Debian Bug : #892589 It was discovered that there was NULL function pointer dereference vulnerability in vips, an image processing system for very large

[SECURITY] [DLA 1305-1] ming security update

2018-03-11 Thread Hugo Lefeuvre
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Package: ming Version: 0.4.4-1.1+deb7u7 CVE ID : CVE-2018-5251 CVE-2018-5294 CVE-2018-6315 CVE-2018-6359 Multiple vulnerabilities have been discovered in Ming: CVE-2018-5251 Integer signedness error vulnerability (left