CVE-2016-6293: A buffer overflow might allow an attacker to perform a denial of service or disclosure of portion of application memory.CVE-2016-0494: Integer signedness issues were introduced as part of the CVE-2015-4844 fix.CVE-2015-4844: Buffer overflow vulnerabilities might allow an attacker with control on the font file to perform a denial of service or, possibly, execute arbitrary code.CVE-2015-2632: An integer overflow vulnerability might lead into a denial of service or disclosure of portion of application memory if an attacker has control on the input file.CVE-2014-9911: Michele Spagnuolo discovered a buffer overflow vulnerability which might allow remote attackers to cause a denial of service or possibly execute arbitrary code via crafted text.

Several vulnerabilities were discovered in the International Components for Unicode (ICU) library. Further details can be found in his advisory at It was discovered that wireshark, a network protocol analyzer, contained several vulnerabilities in the dissectors for DCERPC, AllJoyn, DTN, and OpenFlow, that could lead to various crashes, denial-of-service, or execution of arbitrary code.ĭSA-3723-1 gst-plugins-good1.0 - Security UpdatesĬhris Evans discovered that the GStreamer 1.0 plugin used to decode files in the FLIC format allowed execution of arbitrary code. For additional information, please refer to the upstream advisory at Multiple vulnerabilities has been found in the Drupal content management framework. Vulnerability InformationĭSA-3717-1 gst-plugins-bad1.0, gst-plugins-bad0.10 -Security UpdatesĬhris Evans discovered that the GStreamer plugin to decode VMware screen capture files allowed the execution of arbitrary code. The security updates of gst-plugins-bad1.0, drupal7, wireshark, gst-plugins-good1.0, icu, hdf5, chromium-browser, apt, game-music-emu, libupnp, tor, flightgear, python-bottle, squid3, graphicsmagick, libcrypto++, dcmtk, libphp-phpmailer, libgd2, pcsc-lite, libvncserver and tomcat8.

Free download wireshark 1.10.0