The following updates has been released for Debian:

[DLA 731-2] imagemagick regression update
[DLA 739-1] jasper security updat
[DLA 740-1] libgsf security update
[DSA 3730-1] icedove security update
[DSA 3731-1] chromium-browser security update

[DLA 731-2] imagemagick regression update

Package : imagemagick
Version : 8:6.7.7.10-5+deb7u9
Debian Bug : 847058


The update for imagemagick issued as DLA-731-1 caused regressions when
decoding properties of certain images. Updated packages are now
available to address this problem. For reference, the original advisory
text follows.

Several issues have been discovered in ImageMagick, a popular set of
programs and libraries for image manipulation. These issues include
several problems in memory handling that can result in a denial of
service attack or in execution of arbitrary code by an attacker with
control on the image input.

For Debian 7 "Wheezy", these problems have been fixed in version
8:6.7.7.10-5+deb7u9.

We recommend that you upgrade your imagemagick packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

[DLA 739-1] jasper security updat

Package : jasper
Version : 1.900.1-13+deb7u5
CVE ID : CVE-2016-8654 CVE-2016-8691 CVE-2016-8692 CVE-2016-8693
CVE-2016-8882 CVE-2016-8883 CVE-2016-8887 CVE-2016-9560
TEMP-CVE


CVE-2016-8691
FPE on unknown address ... jpc_dec_process_siz ... jpc_dec.c

CVE-2016-8692
FPE on unknown address ... jpc_dec_process_siz ... jpc_dec.c

CVE-2016-8693
attempting double-free ... mem_close ... jas_stream.c

CVE-2016-8882
segfault / null pointer access in jpc_pi_destroy

CVE-2016-9560
stack-based buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)

CVE-2016-8887 part 1 + 2
NULL pointer dereference in jp2_colr_destroy (jp2_cod.c)

CVE-2016-8654
Heap-based buffer overflow in QMFB code in JPC codec

CVE-2016-8883
assert in jpc_dec_tiledecode()

TEMP-CVE
heap-based buffer overflow in jpc_dec_tiledecode (jpc_dec.c)


For Debian 7 "Wheezy", these problems have been fixed in version
1.900.1-13+deb7u5.

We recommend that you upgrade your jasper packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

[DLA 740-1] libgsf security update

Package : libgsf
Version : 1.14.21-2.1+deb7u1
CVE ID : CVE-2016-9888

It was discovered that there was a null pointer deference exploit in libgsf, a
I/O abstraction library for GNOME.

An error within the "tar_directory_for_file()" function could be exploited to
trigger a null pointer dereference and subsequently cause a crash via a crafted
TAR file.

For Debian 7 "Wheezy", this issue has been fixed in libgsf version
1.14.21-2.1+deb7u1.

We recommend that you upgrade your libgsf packages.

[DSA 3730-1] icedove security update

- -------------------------------------------------------------------------
Debian Security Advisory DSA-3730-1 security@debian.org
https://www.debian.org/security/ Salvatore Bonaccorso
December 11, 2016 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : icedove
CVE ID : CVE-2016-5290 CVE-2016-5291 CVE-2016-5296 CVE-2016-5297
CVE-2016-9066 CVE-2016-9074 CVE-2016-9079

Multiple security issues have been found in Icedove, Debian's version of
the Mozilla Thunderbird mail client: Multiple memory safety errors,
same-origin policy bypass issues, integer overflows, buffer overflows
and use-after-frees may lead to the execution of arbitrary code or
denial of service.

For the stable distribution (jessie), these problems have been fixed in
version 1:45.5.1-1~deb8u1.

For the unstable distribution (sid), these problems have been fixed in
version 1:45.5.1-1 or earlier.

We recommend that you upgrade your icedove packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

[DSA 3731-1] chromium-browser security update

- -------------------------------------------------------------------------
Debian Security Advisory DSA-3731-1 security@debian.org
https://www.debian.org/security/ Michael Gilbert
December 11, 2016 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : chromium-browser
CVE ID : CVE-2016-5181 CVE-2016-5182 CVE-2016-5183 CVE-2016-5184
CVE-2016-5185 CVE-2016-5186 CVE-2016-5187 CVE-2016-5188
CVE-2016-5189 CVE-2016-5190 CVE-2016-5191 CVE-2016-5192
CVE-2016-5193 CVE-2016-5194 CVE-2016-5198 CVE-2016-5199
CVE-2016-5200 CVE-2016-5201 CVE-2016-5202 CVE-2016-5203
CVE-2016-5204 CVE-2016-5205 CVE-2016-5206 CVE-2016-5207
CVE-2016-5208 CVE-2016-5209 CVE-2016-5210 CVE-2016-5211
CVE-2016-5212 CVE-2016-5213 CVE-2016-5214 CVE-2016-5215
CVE-2016-5216 CVE-2016-5217 CVE-2016-5218 CVE-2016-5219
CVE-2016-5220 CVE-2016-5221 CVE-2016-5222 CVE-2016-5223
CVE-2016-5224 CVE-2016-5225 CVE-2016-5226 CVE-2016-9650
CVE-2016-9651 CVE-2016-9652

Several vulnerabilities have been discovered in the chromium web browser.

CVE-2016-5181

A cross-site scripting issue was discovered.

CVE-2016-5182

Giwan Go discovered a heap overflow issue.

CVE-2016-5183

A use-after-free issue was discovered in the pdfium library.

CVE-2016-5184

Another use-after-free issue was discovered in the pdfium library.

CVE-2016-5185

cloudfuzzer discovered a use-after-free issue in Blink/Webkit.

CVE-2016-5186

Abdulrahman Alqabandi discovered an out-of-bounds read issue in the
developer tools.

CVE-2016-5187

Luan Herrera discovered a URL spoofing issue.

CVE-2016-5188

Luan Herrera discovered that some drop down menus can be used to
hide parts of the user interface.

CVE-2016-5189

xisigr discovered a URL spoofing issue.

CVE-2016-5190

Atte Kettunen discovered a use-after-free issue.

CVE-2016-5191

Gareth Hughes discovered a cross-site scripting issue.

CVE-2016-5192

haojunhou@gmail.com discovered a same-origin bypass.

CVE-2016-5193

Yuyang Zhou discovered a way to pop open a new window.

CVE-2016-5194

The chrome development team found and fixed various issues during
internal auditing.

CVE-2016-5198

Tencent Keen Security Lab discovered an out-of-bounds memory access
issue in the v8 javascript library.

CVE-2016-5199

A heap corruption issue was discovered in the ffmpeg library.

CVE-2016-5200

Choongwoo Han discovered an out-of-bounds memory access issue in
the v8 javascript library.

CVE-2016-5201

Rob Wu discovered an information leak.

CVE-2016-5202

The chrome development team found and fixed various issues during
internal auditing.

CVE-2016-5203

A use-after-free issue was discovered in the pdfium library.

CVE-2016-5204

Mariusz Mlynski discovered a cross-site scripting issue in SVG
image handling.

CVE-2016-5205

A cross-site scripting issue was discovered.

CVE-2016-5206

Rob Wu discovered a same-origin bypass in the pdfium library.

CVE-2016-5207

Mariusz Mlynski discovered a cross-site scripting issue.

CVE-2016-5208

Mariusz Mlynski discovered another cross-site scripting issue.

CVE-2016-5209

Giwan Go discovered an out-of-bounds write issue in Blink/Webkit.

CVE-2016-5210

Ke Liu discovered an out-of-bounds write in the pdfium library.

CVE-2016-5211

A use-after-free issue was discovered in the pdfium library.

CVE-2016-5212

Khalil Zhani discovered an information disclosure issue in the
developer tools.

CVE-2016-5213

Khalil Zhani discovered a use-after-free issue in the v8 javascript
library.

CVE-2016-5214

Jonathan Birch discovered a file download protection bypass.

CVE-2016-5215

Looben Yang discovered a use-after-free issue.

CVE-2016-5216

A use-after-free issue was discovered in the pdfium library.

CVE-2016-5217

Rob Wu discovered a condition where data was not validated by
the pdfium library.

CVE-2016-5218

Abdulrahman Alqabandi discovered a URL spoofing issue.

CVE-2016-5219

Rob Wu discovered a use-after-free issue in the v8 javascript
library.

CVE-2016-5220

Rob Wu discovered a way to access files on the local system.

CVE-2016-5221

Tim Becker discovered an integer overflow issue in the angle
library.

CVE-2016-5222

xisigr discovered a URL spoofing issue.

CVE-2016-5223

Hwiwon Lee discovered an integer overflow issue in the pdfium
library.

CVE-2016-5224

Roeland Krak discovered a same-origin bypass in SVG image handling.

CVE-2016-5225

Scott Helme discovered a Content Security Protection bypass.

CVE-2016-5226

Jun Kokatsu discovered a cross-scripting issue.

CVE-2016-9650

Jakub Żoczek discovered a Content Security Protection information
disclosure.

CVE-2016-9651

Guang Gong discovered a way to access private data in the v8
javascript library.

CVE-2016-9652

The chrome development team found and fixed various issues during
internal auditing.

For the stable distribution (jessie), these problems have been fixed in
version 55.0.2883.75-1~deb8u1.

For the testing distribution (stretch), these problems will be fixed soon.

For the unstable distribution (sid), these problems have been fixed in
version 55.0.2883.75-1.

We recommend that you upgrade your chromium-browser packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/