#Fix Kernel Mode Heap Corruption

[superdeliciouspersonstudentfan]

How to Fix Kernel Mode Heap Corruption

You may get the Kernel Mode Heap Corruption error while using your computer. The BSOD error is quite common and easy to fix. In this article, you will get to know the steps to fix Kernel mode heap corruption error.

Here’s How to Fix Kernel Mode Heap Corruption

•    Check for incompatible program

Click on the Windows and R keys together.

Enter “appwiz.cpl” in the prompt box.

Click on the Enter option.

You will get all the installed app on the PC.

You need to right-click on that application, which is creating this issue.

Start the system once you have completed the uninstallation procedure.

You need to check whether the Kernel mode is fixed or not.

•    Check your drivers for errors

Click on the Windows and S keys together.

Enter “command prompt” in the prompt box.

You need to right-click on the app.

Choose the Run as administrator option.

After opening the elevated command pop up box, run the below-mentioned command:

verifier

Choose the “Create standard settings” option.

Click on the Next option.

Choose the Automatically select all drivers installed on this computer option.

Press on the Finish option.

Windows start scanning the errors.

You should backup your data first.

If it asks you to restart the system, then you need to do this.

When you open your Windows PC, you will find that all the drivers are already installed on the system.

•    Update Drivers

Click on the Windows and R keys together.

It will open the Run prompt box.

Enter “devmgmt.msc” in the prompt box.

Press on the Enter button

It will open the device manager on the PC.

Now, you will get the menu list of all the installed devices against the PC.

Go through all the installed devices.

Search for that application, which is causing this issue.

Press on the Display adapters pulldown to get the installed card.

You need to right-click on the installed card.

Choose the “Update driver” option.

You will get the prompt box.

Choose the Search automatically for updated driver software option.

In case you are not able to update the drivers, then go to the online manufacturer website.

Start downloading the drivers.

You need to choose the second option.

Start updating all the drivers before you start the PC again.

Once you have gone through the restarting process, check whether this issue is fixed or not.

•    Perform a System Restore

Click on the Windows and S keys together.

It will open the start menu text field.

Enter “restore” in the prompt box.

Choose the software which is on the top of the screen.

Click on the System Restore option.

It is located in the restore settings tab.

The System Restore option is located at the upper side of the screen below the System Protection option.

In case you wish to choose the custom to restore option, then press on the option.

After that, choose the restore point option by going to the menu list of all the options that are available now.

In case you have multiple systems restore points, then they will be listed in the restore point window.

The Windows will verify the action before starting the restoring process of the computer.

After completing the restore process, sign in to the computer.

Check whether you are getting the blue screen.

Eleanor  is a jack of all trades : an experienced IT technicians, writer, researcher, and a self-professed Software expert. As a single software engineer, she has in-depth knowledge of Webroot Antivirus  and she likes to write tutorials, reviews, news, and reports about the same under webroot support number

Source: Fix Kernel Mode Heap Corruption

[novabach]

How To Fix Kernel Mode Heap Corruption Error In Windows 10

#windows

Kernel Mode Heap Corruption – BSODs should be a common thing to you by now as a Windows user. Kernel Mode Heap Corruption Error could be caused by outdated or malfunctioning drivers, memory leaks, and hardware faults. This article will explain how to fix the Kernel Mode Heap Corruption error. Here are some fixes to help resolve the Kernel Mode Heap Corruption blue screen error on Windows…

[errorgeeksofficial]

Go and check our new article 8 assured and effective methods to fix "kernel mode heap corruption error" [2021] #troubleshooting #troubleshoot #troubleshooter #troubleshootinglife #troubleshooters #pc #pcproblems #pcmc #pcsetup #pcissues #laptop #laptopproblems #laptops #laptopproblem #laptopissues #pctroubleshooting #laptoptroubleshooting #windows10 #windows10home #windows10problems #microsoft #microsoftexcel @hp @hp_india @asus @asusindia @ibm @ibmdata @microsoft @windows @pctroubleshooter_ https://www.instagram.com/p/CPNMO8VMqzH/?utm_medium=tumblr

[itpromate]

How to fix Kernel Mode Heap Corruption Error | (866)558–4555

Sometimes it happens that you are using your Windows system and get a pop-up error message saying kernel mode heap corruption. It is basically shown that your Windows system needs a restart, and the screen turns into blue. Don’t need to worry about this problem, here are many users who face this issue. Read this full article to get the exact causes and solutions of its.

Steps to fix kernel mode heap corruption error:-

Here are many easy and quick solutions to fix this issue. Follow the below steps carefully:

1) Roll back the graphics card drivers:-

Some users report that after updating their graphics card drivers they get this kernel mode heap corruption error. So, use the old version to secure the stability of your hardware device and fix this issue. Follow the below steps:

· First of all, press Windows key + R simultaneously to open the Run dialogue box.

· Now, you have to type devmgmt.msc into the Run dialogue box and press the Enter key or tap on the Ok option.

· After that, navigate to the Device Manager tab and twice click on the Display adapter option to see its drop-down list.

· Now, you have to right-click on the video card and select the properties option from the available menu.

· Then, you have to navigate in the Driver section and select the Roll Back Driver option.

· Now, you have to select the one reason based on your choice and tap on the Yes option.

· Restart your system and check if the error has been resolved successfully. If not, then move to the next solution.

2) Update your device driver with the latest version:-

If you use an outdated or corrupted device driver, then it also causes the kernel mode heap corruption error. If you don’t have any idea that your device drivers are updated or not then you have to check it to fix this issue. You can easily check it in the Windows Device Manager, but only one device at a time. This process takes a lot of time, so you have patient.

In case, any of your device driver is outdated then you have to need to update them manually, it is risky and difficult also. If you don’t have enough time, technical skills and patient to update your device manually, so you can update it with the help of the Driver Easy application.

Most important thing of the Driver Easy application is that, it will automatically update your Windows system and search out the correct driver for it. Even, you don’t need to know what exactly running in your Windows system, and not about the downloading and installing the wrong driver, and not even about any mistake at the time of installation. Driver easy application will manage everything at their end. So, follow the below steps:

· First of all, you have to download the Driver Easy application from the official website.

· Now, you have to run Driver Easy and tap on the Scan Now option.

· Then, Driver Easy will start to scan your system and detect if any issues found in your driver device.

· Now, you have to tap on the Update option which is next to the flagged driver that automatically downloads the correct version of that device driver and you can manually install it.

· Alternatively, tap on the Update all option to download and install the correct version of all the device drivers that are outtraded or missing on your Windows system.

· Now, restart your Windows system and check if the issue has been resolved successfully.

3) Repair corrupted files of the system:-

Due to corrupted system files, you also get the kernel mode heap corruption error which turns the screen in blue colour. Here are two options to perform this. So, go through the below steps carefully:

Scan with the help of system File Checker:-

System File Checker is one of the Windows functions that is used to identify and repair the corrupted system files. Go with the below description:

· First of all, press Windows key + R simultaneously to open Run Dialogue box.

· Now, you have to type cmd in the Run dialogue box and press Ctrl + Shift + Enter keys to run the Command Prompt as administrator.

· Whenever you see that Widows ask for your permission to make changes on your device then tap on the Yes option.

· Then, go to command prompt and type sfc /scannow and press the Enter key.

· Now, you can see that sfc start to scan all system files and repair the missing and corrupted files.

· Then, wait to complete the verification process.

· Now, restart your Windows system and check if the issue has been resolved successfully.

Scan with the help of dism.exe:-

DISM (deployment image servicing and management) is an in-built Windows tool that is used to identify if your Windows installation is corrupted and also repair it. Follow the below steps carefully:

· At first, you have to press Windows key + R simultaneously to open Run Dialogue box.

· Now, type cmd in the Run dialogue box and press Ctrl + Shift + Enter keys to run the Command Prompt as administrator.

· While you see that Widows ask for your permission to make changes on your device then tap on the Yes option.

· Now, go to command prompt and type dism.exe /online /cleanup-image /restorehealth and press the Enter key.

· Then, DSIM tool starts to scan your entire system and fix the issue if found any.

· Now, you have to wait until the process is complete.

· Restart your Windows system and check if the issue has been resolved successfully.

In this blog, we discussed to fix kernel mode heap corruption error. I hope, it is helpful to you. If you have any doubts regarding this, then call to our expert’s team to resolve them. You can also send a text message or an email regarding your queries to fix them. We are here for 24*7.

Website: www.itpromate.com

Contact: +1(866)558–4555

[terabitweb]

Original Post from Trend Micro Author: Trend Micro

Microsoft’s Patch Tuesday for March addressed 64 vulnerabilities, 17 of which were rated critical, 45 important, one moderate, and another low in severity. Two of these vulnerabilities, CVE-2019-0797 and CVE-2019-0808, were reported to have been actively exploited in the wild. The patches addressed security flaws in a number of Microsoft products and services: .NET Framework, Edge, Exchange, Internet Explorer, Office, Office Services and Web Apps, NuGet, Team Foundation Server, and Windows. Seven of the vulnerabilities were disclosed via Trend Micro’s Zero Day Initiative (ZDI).

Meanwhile, Adobe released updates fixing three security issues in the web application development platform ColdFusion (APSB19-14), Photoshop CC (APSB19-15), and Digital Editions (APSB19-16). The vulnerability in ColdFusion versions 11, 2016, and 2018 — designated as CVE-2019-7816 — is a critical arbitrary code execution flaw that was reportedly being exploited in the wild. If successfully exploited, it could enable hackers to bypass restrictions for uploading files to a vulnerable server. Malicious code can then be uploaded and executed via HTTP request. Adobe’s security bulletin provides additional recommendations that can mitigate attacks that exploit CVE-2019-7816.

The security flaw in Photoshop (CVE-2019-7094), disclosed via ZDI, is a heap corruption vulnerability that can enable hackers to execute arbitrary code by sending users a maliciously crafted file. CVE-2019-7094 affects Photoshop CC 19.1.7, 20.0.2, and earlier versions in both Windows and macOS. The vulnerability in Digital Editions (CVE-2019-7095), a heap overflow issue, works in a similar way to CVE-2019-7094.

Notable vulnerabilities addressed by Microsoft this month include:

CVE-2019-0797, CVE-2019-0808. Privilege escalation vulnerabilities in Windows’ Win32k component that, when successfully exploited, can let hackers run arbitrary code in kernel mode, where the operating system’s core components are run. Reported by Kaspersky and Google Threat Analysis Group, respectively, these flaws were said to have been actively exploited in the wild. An exploit for CVE-2019-0808, in particular, was being chained with another then-zero-day vulnerability in Google Chrome (CVE-2019-5786) in attacks targeting Windows 7 use

CVE-2019-0697, CVE-2019-0698, CVE-2019-0726. Memory corruption vulnerabilities in Windows’ dynamic host configuration protocol (DHCP) client, which is used to obtain configuration information such as IP addresses. While there are no indications that these flaws are actively exploited, what’s significant in these vulnerabilities is that they don’t require user interaction. An attacker can send a malformed DHCP response/network packet to a client/host that exploits the vulnerabilities, leaving the targeted system susceptible to remote code execution (RCE).

The Trend Micro Deep Security  and Vulnerability Protection solutions protect user systems from threats that may target the vulnerabilities addressed in this month’s Patch Tuesday via the following Deep Packet Inspection (DPI) rules:

1009535 — Microsoft SharePoint Remote Code Execution Vulnerability (CVE-2019-0604)

1009475 — Microsoft Windows Data Sharing Service Elevation of Privilege Vulnerability (CVE-2019-0571)

1009563 — Microsoft Internet Explorer VBScript Engine Remote Code Execution Vulnerability (CVE-2019-0665)

1009564 — Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CVE-2019-0769)

1009565 — Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CVE-2019-0770)

1009566 — Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CVE-2019-0771)

1009567 — Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CVE-2019-0773)

1009568 — Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2019-0763)

1009569 — Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (CVE-2019-0680)

1009570 — Microsoft Internet Explorer Security Feature Bypass Vulnerability (CVE-2019-0768)

1009571 — Microsoft Windows Multiple Information Disclosure Vulnerabilities (CVE-2019-0755, CVE-2019-0767, CVE-2019-0775)

1009573 — Microsoft Edge Security Feature Bypass Vulnerability (CVE-2019-0612)

1009574 — Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CVE-2019-0639)

1009575 — Microsoft Internet Explorer and Edge Scripting Engine Memory Corruption Vulnerability (CVE-2019-0609)

1009576 — Microsoft Windows VBScript Engine Remote Code Execution Vulnerability (CVE-2019-0666)

1009577 — Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CVE-2019-0592)

1009578 — Microsoft Internet Explorer VBScript Engine Remote Code Execution Vulnerability (CVE-2019-0667)

1009579 — Microsoft Windows SMB Information Disclosure Vulnerability (CVE-2019-0703)

1009582 — Microsoft Windows Win32k Elevation Of Privilege Vulnerability (CVE-2019-0808)

1009583 — Microsoft Windows Win32k Elevation Of Privilege Vulnerability (CVE-2019-0797)

The Trend Micro TippingPoint® solution protects customers from threats that may exploit the aforementioned vulnerabilities via these MainlineDV filters:

34687: HTTP: Microsoft Edge DataView Out-of-Bounds Write Vulnerability

34688: HTTP: Microsoft Edge Use-After-Free Vulnerability

34689: HTTP: Microsoft Edge adoptNode Security Feature Bypass Vulnerability

34690: HTTP: Microsoft Edge prototype Type Confusion Vulnerability

34691: HTTP: Microsoft Internet Explorer Use-After-Free Vulnerability

34692: HTTP: Microsoft Internet Explorer RegExp Buffer Overflow Vulnerability

34693: HTTP: Microsoft Internet Explorer Use-After-Free Vulnerability

34694: HTTP: Microsoft Internet Explorer Worker Use-After-Free Vulnerability

34695: SMB: Microsoft Windows Information Disclosure Vulnerability

34696: HTTP: Microsoft Windows Kernel Information Disclosure Vulnerability

34697: HTTP: Microsoft Internet Explorer execCommand Use-After-Free Vulnerability

34698: HTTP: Microsoft Windows Information Disclosure Vulnerability

34699: HTTP: Microsoft Internet Explorer MSHTML Security Bypass Vulnerability

34700: HTTP: Microsoft Edge Type Confusion Vulnerability

34701: HTTP: Microsoft Edge Memory Corruption Vulnerability

34702: HTTP: Microsoft Edge Chakra initProto Memory Corruption Vulnerability

34703: HTTP: Microsoft Edge JIT Type Confusion Vulnerability

34704: HTTP: Microsoft Windows Information Disclosure Vulnerability

34776: HTTP: Adobe ColdFusion Suspicious Multipart File Upload

34777: HTTP: Microsoft Windows Win32k Privilege Escalation Vulnerability

34779: HTTP: Adobe ColdFusion Suspicious File Upload

The post March’s Patch Tuesday Fixes Privilege Escalation Vulnerabilities Exploited in the Wild appeared first on .

#gallery-0-5 { margin: auto; } #gallery-0-5 .gallery-item { float: left; margin-top: 10px; text-align: center; width: 33%; } #gallery-0-5 img { border: 2px solid #cfcfcf; } #gallery-0-5 .gallery-caption { margin-left: 0; } /* see gallery_shortcode() in wp-includes/media.php */

Go to Source Author: Trend Micro March’s Patch Tuesday Fixes Privilege Escalation Vulnerabilities Exploited in the Wild Original Post from Trend Micro Author: Trend Micro Microsoft’s Patch Tuesday for March addressed 64 vulnerabilities, 17 of which were rated critical, 45 important, one moderate, and another low in severity. 892 more words

[insiderlinuxtk-blog]

Debian 8.6 update release

The Debian project is pleased to announce the sixth update of its stable distribution Debian 8 (codename jessie). This update mainly adds corrections for security problems to the stable release, along with a few adjustments for serious problems. Security advisories were already published separately and are referenced where available.

Please note that this update does not constitute a new version of Debian 8 but only updates some of the packages included. There is no need to throw away old jessie CDs or DVDs but only to update via an up-to-date Debian mirror after an installation, to cause any out of date packages to be updated.

Those who frequently install updates from security.debian.org won't have to update many packages and most updates from security.debian.org are included in this update.

New installation media and CD and DVD images containing updated packages will be available soon at the regular locations.

Upgrading to this revision online is usually done by pointing the aptitude (or apt) package tool (see the sources.list(5) manual page) to one of Debian's many FTP or HTTP mirrors. A comprehensive list of mirrors is available at:

https://www.debian.org/mirror/list

Miscellaneous Bug Fixes

This stable update adds a few important corrections to the following packages:

Package

Reason

adblock-plus

New upstream release, compatible with firefox-esr

apache2

Fix race condition and logical error in init script; remove  links to manpages.debian.org in default index.html; mod_socache_memcache:  Increase idle timeout to 15s to allow keep-alive connections; mod_proxy_fcgi:  Fix wrong behaviour with 304 responses; correct systemd-sysv-generator  behaviour; mod_proxy_html: Add missing config file  mods-available/proxy_html.conf

audiofile

Fix buffer overflow when changing both sample format and  number of channels [CVE-2015-7747]

automake-1.14

Avoid insecure use of /tmp/ in install-sh

backintime

Add missing dependency on python-dbus

backuppc

Fix regressions from samba update to 4.2

base-files

Update for the point release

biber

Fix breakage triggered by point release update of perl

cacti

Fix sql injection in tree.php [CVE-2016-3172] and  graph_view.php [CVE-2016-3659]; fix authentication bypass [CVE-2016-2313]

ccache

Upstream bug-fix release

clamav

Don't fail if AllowSupplementaryGroups is still set in the  configuration file

cmake

Fix FindOpenSSL module to detect OpenSSL 1.0.1t

conkeror

Support Firefox 44 and later

debian-edu-config

Move from Iceweasel to Firefox ESR; adjust  ldap-tools/ldap-debian-edu-install to be compliant with systemd now that unit  samba.service is masked; dhclient-exit-hooks.d/hostname: adjust for the case  of a dedicated LTSP server; adjust cf.krb5client to ensure that cfengine runs  are idempotent; move code to cleanup /usr/share/pam-configs/krb5 diversion  from postinst to preinst to ease upgrades from old wheezy installations;  don't purge libnss-mdns as cups now needs mdns for automatic printer  detection

debian-edu-doc

Update Debian Edu jessie and wheezy manuals from the wiki

debian-installer

Rebuild against proposed-updates

debian-installer-netboot-images

Rebuild for the point release

debian-security-support

Update included support data; add support for marking packages  as losing support at a future date

dietlibc

Fix insecure default PATH

dwarfutils

Security fixes [CVE-2015-8538 CVE-2015-8750 CVE-2016-2050  CVE-2016-2091 CVE-2016-5034 CVE-2016-5036 CVE-2016-5038 CVE-2016-5039  CVE-2016-5042]

e2fsprogs

Disable prompts for time skew which is fudged in e2fsck; fix  potential corruption of Hurd file systems by e2fsck, pointer bugs that could  cause crashes in e2fsck and resize2fs

exim4

Fix cutthrough bug with body lines having a single dot; fix  crash on exim -be '${if crypteq{xxx}{\$aaa}{yes}{no}}'; improve NEWS  file; backport missing upstream patch to actually make $initial_cwd expansion  work

file

Fix buffer over-write in finfo_open with malformed magic file  [CVE-2015-8865]

firegestures

New upstream release, compatible with firefox-esr

flashplugin-nonfree

Update-flashplugin-nonfree: Delete old get-upstream-version.pl  from cache

fusionforge

Remove dependency on Mediawiki plugin from fusionforge-full  metapackage

gdcm

Fix integer overflow [CVE-2015-8396] and denial of service  [CVE-2015-8397]

glibc

Fix assertion failure with unconnectable name server addresses  (regression introduced by CVE-2015-7547 fix); fix *context functions on  s390x; fix a buffer overflow in the glob function [CVE-2016-1234], a stack  overflow in nss_dns_getnetbyname_r [CVE-2016-3075], a stack overflow in  getaddrinfo function [CVE-2016-3706], a stack overflow in Sun RPC  clntudp_call() [CVE-2016-4429]; update from upstream stable branch; fix open  and openat functions with O_TMPFILE; fix backtrace hang on armel/armhf,  possibly causing a minor denial of service vulnerability [CVE-2016-6323]; fix  mtr on systems using only IPv6 nameservers

gnome-maps

New upstream release; use the Mapbox tile server, instead of  the no longer supported MapQuest server

gnome-sudoku

Don't generate the same puzzle sequence every time

gnupg

gpgv: Tweak default options for extra security; g10: Fix  checking key for signature validation

gnupg2

gpgv: Tweak default options for extra security; g10: Fix  checking key for signature validation

greasemonkey

New upstream release, compatible with firefox-esr

intel-microcode

New upstream release

jakarta-jmeter

Really install the templates; fix an error with  libxstream-java >= 1.4.9 when loading the templates

javatools

Return correct architecture string for ppc64el in java-arch.sh

kamailio

Fix libssl version check

libbusiness-creditcard-perl

Adjust to changes in credit card ranges and processing of  various companies

libcss-dom-perl

Work around Encode changes included in perl and libencode-perl  stable updates

libdatetime-timezone-perl

Update included data to 2016e; new upstream release

libdevel-declare-perl

Fix breakage caused by change in perl stable update

libnet-ssleay-perl

Fix build failure with openssl 1.0.1t-1+deb8u1

libquota-perl

Adapt platform detection to work with Linux 4.x

libtool

Fix multi-arch co-installability [amd64 i386]

libxml2

Fix a problem unparsing URIs without a host part like  qemu:///system; this unbreaks libvirt, libsys-virt-perl and others

linux

New upstream stable release

lxc

Make sure stretch/sid containers have an init system, after  init 1.34 dropped the 'Essential: yes' header

mariadb-10.0

New upstream release, including security fix [CVE-2016-6662]

mozilla-noscript

New upstream release, compatible with firefox-esr

nullmailer

Do not keep relayhost data in debconf database longer than  strictly needed

open-iscsi

Init script: wait a bit after iSCSI devices have appeared,  working around a race condition in which dependent devices can appear only  after the initial udev settle has returned; open-iscsi-udeb: update initramfs  after copying configuration to target system

openssl

Fix length check for CRLs; enable asm optimisation for s390x

ovirt-guest-agent

Install ovirt-guest-agent.py executable; change owner of log  directory to ovirtagent in postinst

piuparts

Fix build failure (don't test the current Debian release  status, tracking that is distro-info-data's problem)

policykit-1

Several bug-fixes: fix heap corruption [CVE-2015-3255], local  authenticated denial of service [CVE-2015-4625] and issue with invalid object  paths in RegisterAuthenticationAgent [CVE-2015-3218]

publicsuffix

New upstream release

pypdf2

Fix infinite loop in readObject() function

python-django

Bug-fix update to 1.7.11

python2.7

Address StartTLS stripping attack in smtplib [CVE-2016-0772],  integer overflow in zipimporter [CVE-2016-5636], HTTP header injection  [CVE-2016-5699]

quassel

Fix remote DoS in quassel core with invalid handshake data  [CVE-2016-4414]

ruby-eventmachine

Fix remotely triggerable crash due to FD handling

ruby2.1

dl::dlopen should not open a library with tainted library name  in safe mode [CVE-2009-5147]; Fiddle handles should not call functions with  tainted function names [CVE-2015-7551]

sendmail

Do not abort with an assertion if the connection to an LDAP  server is lost; ensure sendmail {client_port} is set correctly on little  endian machines

sqlite3

Fix tempdir selection vulnerability [CVE-2016-6153], segfault  following heavy SAVEPOINT usage

systemd

Use the right timeout for stop processes we fork; don't reset  log level to NOTICE if we get quiet on the kernel cmdline; fix prepare  priority queue comparison function in sd-event; update links to kernel.org  cgroup documentation; don't start console-getty.service when /dev/console is  missing; order systemd-user-sessions.service after nss-user-lookup.target and  network.target

tabmixplus

New upstream release, compatible with firefox-esr

tcpreplay

Handle frames of 65535 octets size, add a size check  [CVE-2016-6160]

tor

Update the set of authority directory servers

tzdata

New upstream release; update to 2016e

unbound

Init script fixes: add pidfile magic comment; call  start-stop-daemon with --retry for 'stop' action

util-vserver

Rebuild against dietlibc 0.33~cvs20120325-6+deb8u1, fixing  insecure default PATH

vorbis-tools

Fix large alloca on bad AIFF input to oggenc [CVE-2015-6749],  Validate count of channels in the header [CVE-2014-9638 CVE-2014-9639], fix  segmentation fault in vcut

vtk

Rebuild to fix Java paths [ppc64el]

wget

By default, on server redirects to a FTP resource, use the  original URL to get the local file name [CVE-2016-4971]

wpa

Security updates relating to invalid characters  [CVE-2016-4476, CVE-2016-4477]

yaws

Fix HTTP_PROXY cgi env injection [CVE-2016-1000108]

zabbix

Fix mysql.size shell command injection in zabbix-agent  [CVE-2016-4338]

The mariadb-10.0 package failed to build on the powerpc architecture, but has been included in the point release to allow quicker release of the fix for CVE-2016-6662, which had not been disclosed at the time of the upload. If a fix for the build failure becomes available before the next mariadb-10.0 DSA, an updated package may be released via jessie-updates.

[inlinuxonusetk]

Linux Debian

Support Firefox 44 and later

debian-edu-config

Move from Iceweasel to Firefox ESR; adjust  ldap-tools/ldap-debian-edu-install to be compliant with systemd now that unit  samba.service is masked; dhclient-exit-hooks.d/hostname: adjust for the case  of a dedicated LTSP server; adjust cf.krb5client to ensure that cfengine runs  are idempotent; move code to cleanup /usr/share/pam-configs/krb5 diversion  from postinst to preinst to ease upgrades from old wheezy installations;  don't purge libnss-mdns as cups now needs mdns for automatic printer  detection

debian-edu-doc

Update Debian Edu jessie and wheezy manuals from the wiki

debian-installer

Rebuild against proposed-updates

debian-installer-netboot-images

Rebuild for the point release

debian-security-support

Update included support data; add support for marking packages  as losing support at a future date

dietlibc

Fix insecure default PATH

dwarfutils

Security fixes [CVE-2015-8538 CVE-2015-8750 CVE-2016-2050  CVE-2016-2091 CVE-2016-5034 CVE-2016-5036 CVE-2016-5038 CVE-2016-5039  CVE-2016-5042]

e2fsprogs

Disable prompts for time skew which is fudged in e2fsck; fix  potential corruption of Hurd file systems by e2fsck, pointer bugs that could  cause crashes in e2fsck and resize2fs

exim4

Fix cutthrough bug with body lines having a single dot; fix  crash on exim -be '${if crypteq{xxx}{\$aaa}{yes}{no}}'; improve NEWS  file; backport missing upstream patch to actually make $initial_cwd expansion  work

file

Fix buffer over-write in finfo_open with malformed magic file  [CVE-2015-8865]

firegestures

New upstream release, compatible with firefox-esr

flashplugin-nonfree

Update-flashplugin-nonfree: Delete old get-upstream-version.pl  from cache

fusionforge

Remove dependency on Mediawiki plugin from fusionforge-full  metapackage

gdcm

Fix integer overflow [CVE-2015-8396] and denial of service  [CVE-2015-8397]

glibc

Fix assertion failure with unconnectable name server addresses  (regression introduced by CVE-2015-7547 fix); fix *context functions on  s390x; fix a buffer overflow in the glob function [CVE-2016-1234], a stack  overflow in nss_dns_getnetbyname_r [CVE-2016-3075], a stack overflow in  getaddrinfo function [CVE-2016-3706], a stack overflow in Sun RPC  clntudp_call() [CVE-2016-4429]; update from upstream stable branch; fix open  and openat functions with O_TMPFILE; fix backtrace hang on armel/armhf,  possibly causing a minor denial of service vulnerability [CVE-2016-6323]; fix  mtr on systems using only IPv6 nameservers

gnome-maps

New upstream release; use the Mapbox tile server, instead of  the no longer supported MapQuest server

gnome-sudoku

Don't generate the same puzzle sequence every time

gnupg

gpgv: Tweak default options for extra security; g10: Fix  checking key for signature validation

gnupg2

gpgv: Tweak default options for extra security; g10: Fix  checking key for signature validation

greasemonkey

New upstream release, compatible with firefox-esr

intel-microcode

New upstream release

jakarta-jmeter

Really install the templates; fix an error with  libxstream-java >= 1.4.9 when loading the templates

javatools

Return correct architecture string for ppc64el in java-arch.sh

kamailio

Fix libssl version check

libbusiness-creditcard-perl

Adjust to changes in credit card ranges and processing of  various companies

libcss-dom-perl

Work around Encode changes included in perl and libencode-perl  stable updates

libdatetime-timezone-perl

Update included data to 2016e; new upstream release

libdevel-declare-perl

Fix breakage caused by change in perl stable update

libnet-ssleay-perl

Fix build failure with openssl 1.0.1t-1+deb8u1

libquota-perl

Adapt platform detection to work with Linux 4.x

libtool

Fix multi-arch co-installability [amd64 i386]

libxml2

Fix a problem unparsing URIs without a host part like  qemu:///system; this unbreaks libvirt, libsys-virt-perl and others

linux

New upstream stable release

lxc

Make sure stretch/sid containers have an init system, after  init 1.34 dropped the 'Essential: yes' header

mariadb-10.0

New upstream release, including security fix [CVE-2016-6662]

mozilla-noscript

New upstream release, compatible with firefox-esr

nullmailer

Do not keep relayhost data in debconf database longer than  strictly needed

open-iscsi

Init script: wait a bit after iSCSI devices have appeared,  working around a race condition in which dependent devices can appear only  after the initial udev settle has returned; open-iscsi-udeb: update initramfs  after copying configuration to target system

openssl

Fix length check for CRLs; enable asm optimisation for s390x

ovirt-guest-agent

Install ovirt-guest-agent.py executable; change owner of log  directory to ovirtagent in postinst

piuparts

Fix build failure (don't test the current Debian release  status, tracking that is distro-info-data's problem)

policykit-1

Several bug-fixes: fix heap corruption [CVE-2015-3255], local  authenticated denial of service [CVE-2015-4625] and issue with invalid object  paths in RegisterAuthenticationAgent [CVE-2015-3218]

publicsuffix

New upstream release

pypdf2

Fix infinite loop in readObject() function

python-django

Bug-fix update to 1.7.11

python2.7

Address StartTLS stripping attack in smtplib [CVE-2016-0772],  integer overflow in zipimporter [CVE-2016-5636], HTTP header injection  [CVE-2016-5699]

quassel

Fix remote DoS in quassel core with invalid handshake data  [CVE-2016-4414]

ruby-eventmachine

Fix remotely triggerable crash due to FD handling

ruby2.1

dl::dlopen should not open a library with tainted library name  in safe mode [CVE-2009-5147]; Fiddle handles should not call functions with  tainted function names [CVE-2015-7551]

sendmail

Do not abort with an assertion if the connection to an LDAP  server is lost; ensure sendmail {client_port} is set correctly on little  endian machines

sqlite3

Fix tempdir selection vulnerability [CVE-2016-6153], segfault  following heavy SAVEPOINT usage

systemd

Use the right timeout for stop processes we fork; don't reset  log level to NOTICE if we get quiet on the kernel cmdline; fix prepare  priority queue comparison function in sd-event; update links to kernel.org  cgroup documentation; don't start console-getty.service when /dev/console is  missing; order systemd-user-sessions.service after nss-user-lookup.target and  network.target

tabmixplus

New upstream release, compatible with firefox-esr

tcpreplay

Handle frames of 65535 octets size, add a size check  [CVE-2016-6160]

tor

Update the set of authority directory servers

tzdata

New upstream release; update to 2016e

unbound

Init script fixes: add pidfile magic comment; call  start-stop-daemon with --retry for 'stop' action

util-vserver

Rebuild against dietlibc 0.33~cvs20120325-6+deb8u1, fixing  insecure default PATH

vorbis-tools

Fix large alloca on bad AIFF input to oggenc [CVE-2015-6749],  Validate count of channels in the header [CVE-2014-9638 CVE-2014-9639], fix  segmentation fault in vcut

vtk

Rebuild to fix Java paths [ppc64el]

wget

By default, on server redirects to a FTP resource, use the  original URL to get the local file name [CVE-2016-4971]

wpa

Security updates relating to invalid characters  [CVE-2016-4476, CVE-2016-4477]

yaws

Fix HTTP_PROXY cgi env injection [CVE-2016-1000108]

zabbix

Fix mysql.size shell command injection in zabbix-agent  [CVE-2016-4338]

The mariadb-10.0 package failed to build on the powerpc architecture, but has been included in the point release to allow quicker release of the fix for CVE-2016-6662, which had not been disclosed at the time of the upload. If a fix for the build failure becomes available before the next mariadb-10.0 DSA, an updated package may be released via jessie-updates.