[SECURITY] [DLA 1470-1] confuse security update

2018-08-18 Thread Holger Levsen
Package: confuse Version: 2.7-5+deb8u1 CVE ID : CVE-2018-14447 Debian Bug : 904159 An out of bound read was discoverd in libConfuse, a configuration file parser library. CVE-2018-14447 An out of bound read in trim_whitespace, fixed thanks to Sebastian

[SECURITY] [DLA-1469-1] libxcursor security update

2018-08-18 Thread Chris Lamb
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Package: libxcursor Version: 1:1.1.14-1+deb8u2 CVE ID : CVE-2015-9262 Debian Bug : #906012 It was discovered that there was a denial of service or (potentially code execution) vulnerability in libxcursor, a library