Search This Blog

Loading...

Saturday, May 23, 2015

[SECURITY] [DSA 3271-1] nbd security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-3271-1 security@debian.org
http://www.debian.org/security/ Alessandro Ghedini
May 23, 2015 http://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : nbd
CVE ID : CVE-2013-7441 CVE-2015-0847
Debian Bug : 781547 784657

Tuomas Räsänen discovered that unsafe signal handling in nbd-server, the
server for the Network Block Device protocol, could allow remote
attackers to cause a deadlock in the server process and thus a denial of
service.

Tuomas Räsänen also discovered that the modern-style negotiation was
carried out in the main server process before forking the actual client
handler. This could allow a remote attacker to cause a denial of service
(crash) by querying a non-existent export. This issue only affected the
oldstable distribution (wheezy).

For the oldstable distribution (wheezy), these problems have been fixed
in version 1:3.2-4~deb7u5.

For the stable distribution (jessie), these problems have been fixed in
version 1:3.8-4+deb8u1.

For the testing distribution (stretch), these problems have been fixed
in version 1:3.10-1.

For the unstable distribution (sid), these problems have been fixed in
version 1:3.10-1.

We recommend that you upgrade your nbd packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=UsE0
-----END PGP SIGNATURE-----


--
To UNSUBSCRIBE, email to debian-security-announce-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: https://lists.debian.org/20150523104806.2F6444F@bendel.debian.org

VIDEO: 82-Year-Old Black Grandmother Is Fed Up, Rips the Democrat Party to Shreds

The Daily Dispatch For May 23, 2015
View this email in your browser

VIDEO: 82-Year-Old Black Grandmother Is Fed Up, Rips the Democrat Party to Shreds

By K Harris on May 22, 2015 06:41 pm
Joyve, an 82-year-old black grandmother, called into C-SPAN during President Barack Obama‘s 2012 campaign and explained that she had been a Democrat all of her life, but her feelings had recently changed. So much so, that she voted the straight Republican ticket that year. In anger and passion Joyce explained why she chose to leave the party that
share on Twitter Like VIDEO: 82-Year-Old Black Grandmother Is Fed Up, Rips the Democrat Party to Shreds on Facebook Google Plus One Button
Read in browser »


VIDEO: Teacher Decided to Stomp on the American Flag, But the Locals Came Out in Full Force

By Ryan Burnside on May 22, 2015 06:34 pm
An anti-American teacher at an Illinois high school ignited a firestorm of controversy when he decided that during class, he would use an American flag as a pointing tool to teach that day’s lesson. But after one student bravely and correctly pointed out that using Old Glory for a pointing device was disrespectful, the immature
share on Twitter Like VIDEO: Teacher Decided to Stomp on the American Flag, But the Locals Came Out in Full Force on Facebook Google Plus One Button
Read in browser »


VIDEO: Man Arrested Fakes an Injury, But He Didn't Know Cameras Were Rolling

By K Harris on May 22, 2015 06:28 pm
In East Baltimore, the following news story started out just like many that have been circulating in the media regarding riots and police brutality since the death of Freddie Gray. “The neighbors who live right along Madison here that I spoke to said the actual shooting, the initial shooting, in their belief happened a block south
share on Twitter Like VIDEO: Man Arrested Fakes an Injury, But He Didn't Know Cameras Were Rolling on Facebook Google Plus One Button
Read in browser »


URGENT: State Dept. Reveals Sick Plan for US to "Play a Leading Role" in Absorbing More Muslims

By Ryan Burnside on May 22, 2015 06:21 pm
While Christians in the Middle East are beheaded and mercilessly attacked for simply not being Muslims, their attempts to flee to the United States for safety are increasingly being denied by Obama’s State Department. But at the same time, Obama freely allows Muslims refugees — people who aren’t even threatened like Christians are in their
share on Twitter Like URGENT: State Dept. Reveals Sick Plan for US to Google Plus One Button
Read in browser »


Dad Who Died in the Line of Duty Couldn't Be at the Big Game, So Here's Who Showed Up Instead

By Ryan Burnside on May 22, 2015 06:16 pm
A Houston police officer who was protecting innocent citizens was tragically killed in the line of duty Monday, just one day before he would have watched his son pitch in a little league baseball game the following night. The officer, Richard Martin, was a five-year veteran of the Houston police department and was killed as he deployed
share on Twitter Like Dad Who Died in the Line of Duty Couldn't Be at the Big Game, So Here's Who Showed Up Instead on Facebook Google Plus One Button
Read in browser »


VIDEO: Rick Perry Responds to Obama's Attempt to Divide America in 1 EPIC Sentence

By Ryan Burnside on May 22, 2015 06:09 pm
Former Texas Gov. Rick Perry is not wasting time making comparisons between his leadership style and that of President Barack Obama, as was made perfectly clear Thursday at the 2015 Southern Republican Leadership Conference in Oklahoma. As Obama continues to divide this country, especially concerning issues of race and class, conservative Christian leaders like Perry are
share on Twitter Like VIDEO: Rick Perry Responds to Obama's Attempt to Divide America in 1 EPIC Sentence on Facebook Google Plus One Button
Read in browser »


VIDEO: Donald Trump Issues Epic Promise to Christians if Elected President

By Ryan Burnside on May 22, 2015 05:56 pm
Donald Trump is a man some people love to hate, especially anti-capitalism liberals who can’t stand the idea that he conquered this thing we call the “American dream” and became overwhelmingly successful in business. Having announced in March that he had formed a presidential exploratory committee, Trump may be taking his consideration to run for the 2016 presidency
share on Twitter Like VIDEO: Donald Trump Issues Epic Promise to Christians if Elected President on Facebook Google Plus One Button
Read in browser »


VIDEO: Sheriff David Clarke Uses 8 Words to Shut Arrogant Dem Congressman's Mouth

By V Saxena on May 22, 2015 05:46 pm
Democratic Congressman Steve Cohen tried to ridicule Milwaukee County Sheriff David Clarke with a gotcha question during a House committee hearing Tuesday, but he failed miserably. “You said that illegal drug use is the scourge of the black community and it is a problem and leads to a great deal of violent crime,” Cohen said. He
share on Twitter Like VIDEO: Sheriff David Clarke Uses 8 Words to Shut Arrogant Dem Congressman's Mouth on Facebook Google Plus One Button
Read in browser »


Liberals Panic After Kansas Unveils Brilliant New Plan to Smash Welfare Abuse

By Kim Smith on May 22, 2015 05:40 pm
Welfare fraudsters in Kansas might decide a quicker way to get money is to actually get a job and earn it after they hear about new legislation on the horizon. Legislators in Kansas have made getting welfare money decidedly more difficult by placing a cap of $25 on cash withdrawals beginning July 1. The cap
share on Twitter Like Liberals Panic After Kansas Unveils Brilliant New Plan to Smash Welfare Abuse on Facebook Google Plus One Button
Read in browser »


VIDEO: Black Militants Command Whites to "Bow" to Them on the Street… Where's Al Sharpton?

By Timothy Davis on May 22, 2015 05:34 pm
In our supposedly colorblind society, there are a tragic number of people who still continue to see only in black and white. A showdown, filmed in the streets of New York City, showed the simmering hatred that still exists today. The incident started when a member of the Five Percent Nation, a militant offshoot of the
share on Twitter Like VIDEO: Black Militants Command Whites to Google Plus One Button
Read in browser »




Read more on Conservative Tribune
Copyright © 2015 Conservative Tribune/ Liftable Media, Inc., All rights reserved.
You are receiving this email because you opted in at our website.

Our mailing address is:
Conservative Tribune/ Liftable Media, Inc.
42104 N. Venture Drive
Suite B122
Anthem, AZ 85086

Add us to your address book


unsubscribe from this list    update subscription preferences