Last Monday, I prepared everything just pefect. I had showered, layed out my cloths for the the next day (it was a school night), done my homework. I cleared up my night's schedule to ensure that I could enjoy my high, buzz-or whatever would come from my experience with the Xanax pills that I had been given earlier that day.
I had tirelessly researched, and learned of Xanax's soothing effects, so it was with much anticipation that I anticipated the events of that evening. 1.5 mg seemed like a pretty low dosage, but that is all I had been given.
I had been told that it would hit me harder if I ground the pills into a powder, then put the powder in a gelcap, but there were none to be found-so I split the pills in half, thinking that this might speed up the absorption just slightly (can't hurt, right)?
I down the pills with a smirk on my face, and a glass of water in hand. 30 Minutes later, I feel something coming on, I can't tell exactly what it is. About an hour lately -- something is definitely up. I am buzzed, but not completely wasted. I feel tired, and a 'melting sensation' ensues. I feel like just sitting down and enjoying myself (luckily, as I said before, all work had been tended to and I had nothing else to do for the night). I sit back in my chair, and mellow out. The mellowing effects last for about 45 minutes, at which point I wanted to enjoy my buzz, but I also had the intense urge to get some rest.
The night before I had gone to bed around 2 AM, and without the xanax I probably would have done the same. Instead, I laid down to rest at 9:15, I do not think I've ever gone to bed this early.
I work up the next morning, happy, rested and a slight buzz. It wore off quickly though.
Xanax is something I'd like to try again, possibly at a higher dosage. I wouldn't kill a man to obtain a couple of the pills but I do understand how a significant portion of the drug-using community appreciates it's effects.
Experience Reports are the writings and opinions of the individual authors who submit them.
Some of the activities described are dangerous and/or illegal and none are recommended by Erowid.


Light plane crashes into DR Congo city
GOMA: A small plane carrying 19 passengers and crew crashed on takeoff Sunday (Nov 24) into a densely populated area of Goma in the Democratic Republic of Congo, the airline and witnesses said.
The Dornier-228 aircraft had been headed for Beni, 350km north of Goma when it went down. It crashed into a residential area near Goma airport.
"There were 17 passengers on board and two crew members. It took off around 9am to 9.10 am," Busy Bee airline staff member Heritier Said Mamadou said.
Busy Bee, a recent company, has three planes serving routes in North Kivu province.


WITNESS LIST Natural Resources Committee February 26, 2003-3:00P HB 535 For: Kohlleppel Jr., William P. (Self and Fayette County Underground Water Conservation District) HB 839 For: McLemore, John C. (Self) Registering, but not testifying: For: Halbert, Wayne (Self and Texas Irrigation Council) HB 917 For: McClendon, Sidney S. (West Galveston Island Property Owners Assn Galveston County Beach Erosion Task Force) Patterson, Jerry (Texas General Land Office) Water Rights Amendment Process On: Hess, Myron J. (National Wildlife Federation) Rochelle, Martin (Self)


|
BitShares-Core
6.1.0
BitShares blockchain implementation and command-line interface software
|
#include <datastream.hpp>
Public Member Functions | |
| datastream (size_t init_size=0) | |
| bool | skip (size_t s) |
| bool | write (const char *, size_t s) |
| bool | put (char) |
| bool | valid () const |
| bool | seekp (size_t p) |
| size_t | tellp () const |
| size_t | remaining () const |
Definition at line 77 of file datastream.hpp.
|
inline |
Definition at line 79 of file datastream.hpp.
|
inline |
Definition at line 82 of file datastream.hpp.
|
inline |
Definition at line 86 of file datastream.hpp.
|
inline |
Definition at line 84 of file datastream.hpp.
|
inline |
Definition at line 80 of file datastream.hpp.
|
inline |
Definition at line 85 of file datastream.hpp.
|
inline |
Definition at line 83 of file datastream.hpp.
|
inline |
Definition at line 81 of file datastream.hpp.


tregr (expr1, expr2, tdim1, tdim2)
This function calculates the least-squares regression between two time-dependent variables.
expr1
-
a valid GrADS expression that varies in timeexpr2
-
a valid GrADS expression that varies in time and may also vary in X and Ytdim1
-
starting time dimension expression tdim2
-
ending time dimension expression
The result is a grid that matches the X and Y dimensions of
expr2
where each grid point is the temporal
regression of expr2
(the dependent variable) onto
expr1
(the independent variable).
tregr
gives the expected value of
the expr2
departure given a 1 unit departure in
expr1
.
expr1
and expr2
vary only in time, the output is a single value.
Y = slope * X + intercept
where X is the independent variable, Y is the dependent variable, and the slope and intercept are calculated using complicated algebraic formulas. The calculation is simplified if the time means are removed. If we define x and y to be the departures from the time averages of X and Y:
x = X - Xave
y = Y - Yave
then the regression equation becomes:
y = coefficient * x
Where
coefficient = (sum of x*y over time)/(sum of x*x over time)
This coefficient
is the output from the tregr
function.
The second example below shows how to construct the regression estimate of Y based on X.
sregr
function to do regression over the spatial domain.
set y 1 set z 1 set t 1 100 define elnino = aave(ts, lon=-160, lon=-80, lat=-20, lat=10) set lon 0 360 set lat -90 90 set z 1 set t 1 d tregr(elnino, slp, t=1, t=100)
define coeff = tregr(elnino, slp, t=1, t=100) define slpave = ave(slp, t=1, t=100) define ninoave = ave(elnino, t=1, t=100) d coeff * (elnino - ninoave) + slpave


1990
1995
2000
Safe Spaces seeks to assist transgender, intersex, and gender nonconforming individuals in locating safe
restroom access by compiling information on gender neutral restroom facilities from sources
worldwide.
The globe below is a visual representation of all recorded gender neutral restrooms worldwide.


Create lasting memories with personalized gifts for all occasions. Express your feeling with an amazing gifts. Every GIFT from your friend is a wish for your Happiness.....!


Emails of peers, separated by commas:
Start a new Event...
Enter your group code:
Join an existing Event...


But lazy loading can collide with validations.
In our model, a Product must have a Category.
public class Product { [Key] public int ProductId { get; set; } [Required] [StringLength(40)] public string ProductName { get; set; } [Required] public virtual Category Category { get; set; } }
Let's try this...
using (var context = new NorthwindContext()) { //find a specific product var product = context.Products.Find(147); //set a new name product.ProductName = Guid.NewGuid().ToString(); //ERROR! context.SaveChanges(); }
Oh no, System.Data.Entity.Validation.DbEntityValidationException. "Validation failed for one or more entities." How can that be? We just loaded it from the database, it must be correct?
The exception says that Category is null. But it exists in the database.
If you inspect it in the debugger, you can see the category ... and if you continue the SaveChanges succeeds.  Which is good, because you don't want unnecessary database access. But when the reference is required, the validation doesn't recognise this is a proxy which has a categoryId but hasn't loaded it.
Solution 1- no auto validation
One solution is to turn off validation. When you are setting individual properties with values you've already validated, you do not need it here.
context.Configuration.ValidateOnSaveEnabled = false;
context.SaveChanges();
The SQL, by the way, is update [dbo].[Products] set [ProductName] = @0 where ([ProductID] = @1).
(Check it by hooking up a SQL logger, as described here)
An alternative is to cheat the model- ensure references are not Required.
But if you have a product coming back from a UI for insert or update, you need to manually validate that it always has a category.
Solution 2- ensure required references are loaded
This triggers extra database access, but you can keep the automatic validation.
//find a specific product var product = context.Products.Find(147); //make sure it's loaded context.Entry(product).Reference(p => p.Category).Load();
If you load from a query, you can use an .Include(p => p.Category) which will load the product with a join to the category table, so there is only one sql statement. This will bypass the internal cache so if it was loaded the same product earlier, you can't save any data access.
var product = context.Products
.Include(p => p.Category)
.First(p => p.ProductId == 147);
Solution 3- Add a foreign key Id property
You can specify foreign key Id properties in addition to the instance property.
//it's not nullable so it's implicitly required public int CategoryId { get; set; } public virtual Category Category { get; set; }
Note the CategoryId is now required. The Category instance isn't. Validation can check the CategoryId, and we can set it directly without having to load the instance.
You have to map this arrangement (unless you like to see an EntityCommandCompilationException with the inner exception message being "More than one item in the metadata collection match the identity 'CategoryId'." - I didn't).
In the EntityTypeConfiguration<Product> the mapping must point to the foreign key id property.
HasRequired(x => x.Category) .WithMany() .HasForeignKey(p => p.CategoryId);
We've "denormalized" our entity model here, but it makes dealing with detached objects and viewmodels a little easier.
But won't the CategoryId and Category properties get out of step? If you set one, which gets persisted?
Let's set the foreign key id property.
//find a specific product var product = context.Products.Find(146); //it's category 4 in both Console.WriteLine(product.Category.CategoryId); Console.WriteLine(product.CategoryId); //set the categoryId property product.CategoryId = 1; //we've just set it, so it's 1 Console.WriteLine(product.CategoryId); //oh no, still says 4! Console.WriteLine(product.Category.CategoryId);
context.SaveChanges() does the right thing- it saves the new value, 1, assigned to the id property.
Let's set the instance.
//find a specific product var product = context.Products.Find(146); //it's category 1 in both Console.WriteLine(product.Category.CategoryId); Console.WriteLine(product.CategoryId); //set the category instance product.Category = context.Categories.Find(2); //we've just set it, so it's 2 Console.WriteLine(product.Category.CategoryId); //oh no, still says 1! Console.WriteLine(product.CategoryId);
But again, context.SaveChanges() does the right thing- it saves the new value, 2, assigned to the instance.
So it looks like persistence always works as you'd expect, but the properties get out of step. You must be careful in your workflow. This won't work...
product.CategoryId = 1; var returnMessage = "Category updated to " + product.Category.CategoryName;
Conclusion
In most cases I'd prefer to remove validation on save with context.Configuration.ValidateOnSaveEnabled = false - as long as the values were validated downstream (perhaps in the UI validation framework).But exposing the foreign key property is undoubtably convenient when the UI just sends you categoryId= 1 and you don't want to load that category from the database just so you can persist product.


I am a senior at the University of Washington, and a fellow at the International Policy Institute for Cybersecurity. I've had the opportunity to study Mandarin in Beijing as a FLAS Fellow where I made friends with cab drivers. I'm passionate about Jekyll, an open-source static site generator that first got me interested in web development. I'm interested in Go and Rust, but enjoy most of my time working with Ruby. I also like to play with Serpent to explore ethereum.
I'm usually at the Seattle Bouldering Project socializing, or reading . When I'm not doing homework, I enjoy running around Seattle.
Seattle, Washington — International Studies ‘18
My research interests include the economics of information security, peer-to-peer network systems, cryptographic protocols, and digital civil liberties. I also had the experience living in China and am curious about how public policy effect freedom online. I'm also interested in the development of the next generation programming languages, such as Rust, for better security and performance.
I'm also a editor at the Jackson School Journal for International Studies, where I collaborate with a student and faculty team to publish peer-reviewed student work.
I recently attened this conference on cybersecurity policy making in Washington.
Kirkland, Washington
I write in Go, Ruby, HTML, CSS. Check out my project page with git. I'm always learning new languages, like Rust.
I think Jekyll is an execellent tool for building websites. I follow this Ruby Style Guide because style matters, especially when a community builds best practices.
C2FO - Innovation Lab, Seattle, WA
Summer, 2017
Exploring new technologies to make supply-chain financing more efficient, secure, and prosperous. Check out the research I did on the Quorum blockchain and Rust at the Intern Blog I started. You can read about my my morning with Rust and the Quorum blockchain
the Lab's git. →Microsoft and the University of Washington
Spring, 2017
I worked closely with Microsoft Security, researching cyberattack attribution. Our 50 page report proposes an international, private-sector organization tasked with attributing major state-sponsored cyber attacks. We presented our findings Microsft's Redmond campus. In August, we will brief congressional staff on the major themes of the report.
BitTrust
2015 - Current
Part of the three-person team that developed the standard web app for Bitcoin company ratings. Bittrust.org aggregates user reviews of Bitcoin services because we believe using cyptocurrencies should be reliable and easy. We're continually working to improve the website, integrating user authentication and providing better content with filters. Expect a redesign soon. The BitTrust Blog analyzes developments in the cryptocurrency world. BitTrust.org →
King County Bar Association
2016 - 2017
I worked as a liaison for attorneys at KCBA’s 34 Neighborhood Legal Clinics and to help the KCBA deliver inclusive legal services in the greater Seattle region.
King County Bar Association.University of Washington Crags Climbing Gym, Seattle, WA
2015 - Current
As a route setter for the intramurial climbing center at UW, I contribute to a vibrant climbing community by providing challenging, acrobatic climbing routes. My favorite holds are
“A Rebalancing: The Socio-economy of Shandong Province Entering a New Normal” Henry M. Jackson School of International Studies. (2017). Jackson School Journal of International Studies.
“Flooding the Gates: An overview of China’s M&A in Europe” Henry M. Jackson School of International Studies. (2017). Jackson School Journal of International Studies.


A computer geek at heart, my interest in the world of technology began when my parents
introduced me to my first computer, MSDOS. Since then I have been fixing, repairing, dissecting the
technical side of a personal computer. As my 15 year mark working in administration for the Government comes, my wife
sparked an interest in the web development side of technology. Although we are in an environment where we are secluded, I am excited to work with a creative team that will make the world a better place one code, script, or gesture at a time. Today, I am on path to become a Full Stack
Developer in which I will be proficient in Front End:
and Back End:
and many more evolving
languages in this field.
“The mind is like an Umbrella, it only works when it is open”
- Sir James Jeans


| cox.ph {mgcv} | R Documentation |
The cox.ph
family implements the Cox Proportional Hazards model with Peto's
correction for ties, optional stratification, and estimation by penalized partial likelihood maximization, for use with
gam
. In the model formula, event time is the response. Under stratification the response has two columns: time
and a numeric index for stratum. The weights
vector provides
the censoring information (0 for censoring, 1 for event). cox.ph
deals with the case in which each subject has
one event/censoring time and one row of covariate values. When each subject has several time dependent
covariates see cox.pht
.
See example below for conditional logistic regression.
cox.ph(link="identity")
link |
currently (and possibly for ever) only |
Used with gam
to fit Cox Proportional Hazards models to survival data. The model formula will
have event/censoring times on the left hand side and the linear predictor specification on the right hand side. Censoring
information is provided by the weights
argument to gam
, with 1 indicating an event and 0 indicating
censoring.
Stratification is possible, allowing for different baseline hazards in different strata. In that case the response has two columns: the first is event/censoring time and the second is a numeric stratum index. See below for an example.
Prediction from the fitted model object (using the predict
method) with type="response"
will predict on the
survivor function scale. See example code below for extracting the cumulative baseline hazard/survival directly.
Martingale or deviance
residuals can be extracted. The fitted.values
stored in the model object are survival function estimates for each
subject at their event/censoring time.
Estimation of model coefficients is by maximising the log-partial likelihood penalized by the smoothing penalties. See e.g. Hastie and Tibshirani, 1990, section 8.3. for the partial likelihood used (with Peto's approximation for ties), but note that optimization of the partial likelihood does not follow Hastie and Tibshirani. See Klein amd Moeschberger (2003) for estimation of residuals, the cumulative baseline hazard, survival function and associated standard errors (the survival standard error expression has a typo).
The percentage deviance explained reported for Cox PH models is based on the sum of squares of the deviance residuals, as the model deviance, and the sum of squares of the deviance residuals when the covariate effects are set to zero, as the null deviance. The same baseline hazard estimate is used for both.
This family deals efficiently with the case in which each subject has one event/censoring time and one row of covariate values. For studies in which there are multiple time varying covariate measures for each subject then the equivalent Poisson model should be fitted to suitable pseudodata using bam(...,discrete=TRUE)
. See cox.pht
.
An object inheriting from class general.family
.
Hastie and Tibshirani (1990) Generalized Additive Models, Chapman and Hall.
Klein, J.P and Moeschberger, M.L. (2003) Survival Analysis: Techniques for Censored and Truncated Data (2nd ed.) Springer.
Wood, S.N., N. Pya and B. Saefken (2016), Smoothing parameter and model selection for general smooth models. Journal of the American Statistical Association 111, 1548-1575 http://dx.doi.org/10.1080/01621459.2016.1180986
library(mgcv) library(survival) ## for data col1 <- colon[colon$etype==1,] ## concentrate on single event col1$differ <- as.factor(col1$differ) col1$sex <- as.factor(col1$sex) b <- gam(time~s(age,by=sex)+sex+s(nodes)+perfor+rx+obstruct+adhere, family=cox.ph(),data=col1,weights=status) summary(b) plot(b,pages=1,all.terms=TRUE) ## plot effects plot(b$linear.predictors,residuals(b)) ## plot survival function for patient j... np <- 300;j <- 6 newd <- data.frame(time=seq(0,3000,length=np)) dname <- names(col1) for (n in dname) newd[[n]] <- rep(col1[[n]][j],np) newd$time <- seq(0,3000,length=np) fv <- predict(b,newdata=newd,type="response",se=TRUE) plot(newd$time,fv$fit,type="l",ylim=c(0,1),xlab="time",ylab="survival") lines(newd$time,fv$fit+2*fv$se.fit,col=2) lines(newd$time,fv$fit-2*fv$se.fit,col=2) ## crude plot of baseline survival... plot(b$family$data$tr,exp(-b$family$data$h),type="l",ylim=c(0,1), xlab="time",ylab="survival") lines(b$family$data$tr,exp(-b$family$data$h + 2*b$family$data$q^.5),col=2) lines(b$family$data$tr,exp(-b$family$data$h - 2*b$family$data$q^.5),col=2) lines(b$family$data$tr,exp(-b$family$data$km),lty=2) ## Kaplan Meier ## stratification example, with 2 randomly allocated strata ## so that results should be similar to previous.... col1$strata <- sample(1:2,nrow(col1),replace=TRUE) bs <- gam(cbind(time,strata)~s(age,by=sex)+sex+s(nodes)+perfor+rx+obstruct+adhere, family=cox.ph(),data=col1,weights=status) plot(bs,pages=1,all.terms=TRUE) ## plot effects ## baseline survival plots by strata... for (i in 1:2) { ## loop over strata ## create index picking out elements of stored hazard info for this stratum... ind <- which(bs$family$data$tr.strat == i) if (i==1) plot(bs$family$data$tr[ind],exp(-bs$family$data$h[ind]),type="l",ylim=c(0,1), xlab="time",ylab="survival",lwd=2,col=i) else lines(bs$family$data$tr[ind],exp(-bs$family$data$h[ind]),lwd=2,col=i) lines(bs$family$data$tr[ind],exp(-bs$family$data$h[ind] + 2*bs$family$data$q[ind]^.5),lty=2,col=i) ## upper ci lines(bs$family$data$tr[ind],exp(-bs$family$data$h[ind] - 2*bs$family$data$q[ind]^.5),lty=2,col=i) ## lower ci lines(bs$family$data$tr[ind],exp(-bs$family$data$km[ind]),col=i) ## KM } ## Simple simulated known truth example... ph.weibull.sim <- function(eta,gamma=1,h0=.01,t1=100) { lambda <- h0*exp(eta) n <- length(eta) U <- runif(n) t <- (-log(U)/lambda)^(1/gamma) d <- as.numeric(t <= t1) t[!d] <- t1 list(t=t,d=d) } n <- 500;set.seed(2) x0 <- runif(n, 0, 1);x1 <- runif(n, 0, 1) x2 <- runif(n, 0, 1);x3 <- runif(n, 0, 1) f0 <- function(x) 2 * sin(pi * x) f1 <- function(x) exp(2 * x) f2 <- function(x) 0.2*x^11*(10*(1-x))^6+10*(10*x)^3*(1-x)^10 f3 <- function(x) 0*x f <- f0(x0) + f1(x1) + f2(x2) g <- (f-mean(f))/5 surv <- ph.weibull.sim(g) surv$x0 <- x0;surv$x1 <- x1;surv$x2 <- x2;surv$x3 <- x3 b <- gam(t~s(x0)+s(x1)+s(x2,k=15)+s(x3),family=cox.ph,weights=d,data=surv) plot(b,pages=1) ## conditional logistic regression models are often estimated using the ## cox proportional hazards partial likelihood with a strata for each ## case-control group. A dummy vector of times is created (all equal). ## The following compares to 'clogit' for a simple case. Note that ## the gam log likelihood is not exact if there is more than one case ## per stratum, corresponding to clogit's approximate method. library(survival);library(mgcv) infert$dumt <- rep(1,nrow(infert)) mg <- gam(cbind(dumt,stratum) ~ spontaneous + induced, data=infert, family=cox.ph,weights=case) ms <- clogit(case ~ spontaneous + induced + strata(stratum), data=infert, method="approximate") summary(mg)$p.table[1:2,]; ms


import numpy as np
import matplotlib.pyplot as plt
plt.style.use('fivethirtyeight')
from IPython.core.display import SVG
Mechanical advantage¶
In the diagram below, there is a 50-N force, \(F\), applied downwards on a constrained linkage system. There is a restoring force, \(R\), that maintains a slow change in the angle of the mechanism, \(\theta\), as it changes from \(89^o\) to \(-89^o\). Your goal is to determine the necessary restoring force \(R\) as a function of angle \(\theta\).
Kinematics - geometry of motion¶
This system has two rigid bodies connected at point \(A\) by a pin and the whole system is pinned to the ground at \(O\). Point \(B\) slides along a horizontal surface. The total degrees of freedom are
3 (link 1) + 3 (link 2) - 2 constraints (\(O\)) - 2 constraints (\(A\)) - 1 constraint (\(B\)) - 1 constraint (\(\theta\)-fixed) = 0 DOF
For a given angle \(\theta\), there can only be one configuration in the system. Create the constraint equations using the relative position of point \(A\) as such
\(\mathbf{r}_A = \mathbf{r}_{A/B} + \mathbf{r}_B\)
where
\(\mathbf{r}_A = L(\cos\theta \hat{i}+ \sin\theta \hat{j})\)
\(\mathbf{r}_B = d\hat{i}\)
\(\mathbf{r}_{A/B} = L(-\cos\theta \hat{i} + \sin\theta \hat{j})\)
solving for the \(\hat{i}-\) and \(\hat{j}-\)components creates two equations that describe the state of the system
\(\theta = \theta\) which states because we have an isosceles triangle, two angles have to be equal
\(d = 2 L \cos\theta\) so \(\mathbf{r}_{B} = 2L \cos\theta \hat{i}\)
theta = np.linspace(89,-89)*np.pi/180
d = 2*1*np.cos(theta)
plt.plot(theta*180/np.pi, d)
plt.xticks(np.arange(-90,91,30))
plt.xlabel(r'$\theta$ (deg)')
plt.xlim(90,-90)
plt.ylabel('d (m)');
Kinetics - applied forces and constraint forces¶
The applied force, \(F=50~N\) is constant, but \(R\) is dependent upon the geometry of the system. You solved for the kinematics in the first part, here you can use the Newton-Euler equations to solve for \(R\) given \(\theta\) and \(F\). Separate the system into the left and right links,
The Newton-Euler equations:
\(\mathbf{F} = m\mathbf{a} = \mathbf{0}\) links moving slowly
\(M_G = I\alpha = 0\) links rotating slowly
Newton-Euler equations for the left bar:
\(\mathbf{F}\cdot \hat{i} = N_{x1}+N_{x2} = 0\)
\(\mathbf{F}\cdot \hat{i} = N_{y1}+N_{y2} - F = 0\)
\(M_O = l\hat{b}_1 \times (-F\hat{j} + N_{x2}\hat{i} + N_{y2}\hat{j}) = 0\)
Newton-Euler equations for the right bar:
\(\mathbf{F}\cdot \hat{i} = -N_{x2}-R = 0\)
\(\mathbf{F}\cdot \hat{i} = -N_{y2}+N_{y3} = 0\)
\(M_A = l\hat{c}_1 \times (-R\hat{i} + N_{y3}\hat{j})= 0\)
Note: Don’t count \(F\) twice! You can use the applied force on the left or right, but not both. Try solving the equations placing it on the right bar.
The four equations for \(\mathbf{F}\) relate the reaction forces \(\mathbf{N}_{1},~\mathbf{N}_{2},~and~\mathbf{N}_{3}\). The two moment equations relate \(R\) to \(F\) and \(\theta\) as such
\(N_{y2}L\cos\theta - RL\sin\theta = 0\)
and
\(-FL\cos\theta +N_{y2}\cos\theta+RL\sin\theta = 0\)
combining there results
\(F\cos\theta = 2R\sin\theta\rightarrow R = \frac{F}{2}\cot\theta\)
R = 50/2*np.tan(theta)**-1
plt.plot(theta*180/np.pi, R)
plt.xticks(np.arange(-90,91,30))
plt.xlabel(r'$\theta$ (deg)')
plt.ylabel('restoring force, R (N)')
plt.xlim(90,-90)
plt.ylim(-200,200);
Wrapping up¶
Take a look at the mechanical advantage and disadvantage this system can create. For angles close to \(\theta\approx 90^o\), the restoring force is close to zero. In this case, the applied force is mostly directed at constraints on the system. When the angles are close to \(\theta \approx 0^o\), the required restoring force can be \(>100\times\) the input force.
Have you seen this type of linkage system in engineering devices?


Continuous-cooling-transformation (CCT) diagram determined for the investigated steel with the nominal chemical bulk composition of 0.10C-1.50Cr-0.31Mn-0.20Si (wt %) ( a); Schematic illustration of the different heat-treatment routes applied to the investigated steel ( b).


--- layout: posts title: HP Scanjet 4470 Teardown with Pictures date: 2009-01-11 00:23:50.000000000 -08:00 type: post parent_id: '0' tags: - Electrical Engineering - scanner - teardown - tech guide ---
I'm in the process of cleaning out my room in preparation for my move to California at the end of this semester, so I decided to dig into my box of old electronic crap that I've been hauling around for a few years. In doing so, I ran across my trusty old Hewlett Packard Scanjet 4470 scanner that I've had since middle school. It hasn't worked for a couple of years due to a bum power supply, but I managed to scrounge up another 12 volt supply and turn it on. It turns out that all these years of hauling it around have caught up with it, and it doesn't scan very well anymore. I tried several scans with it, and they all came out with rainbow lines across them:
After reading a few forum posts, I came to the conclusion that the CFL tube used to front-light the media being scanned is on the fritz. Couple this with the fact that HP doesn't have any drivers that will work with Leopard, and I decided it was time to retire the old scanner to the dumpster. Being a EE, I couldn't resist tearing it apart first to see its guts, so I thought I'd share the results of that with you, and thus begins...
The scanner is opened by removing two screws on the front, and opening the case like a giant clamshell:
On the inside, you can now see the image sensor carriage, the belt drive that moves it, the main PCB, the ribbon cables connecting the carriage and front panel, and at the far right the PCB that holds the switches and LCD for the front panel. I was somewhat surprised to find that the sensor carriage rides on a single rail, with the opposite side of the carriage riding on a wheel which goes down an open track. I guess the bushings that ride on the rail are stiff enough to prevent any torsion of the carriage in the plane of the scanner, and rotation of the carriage out of the plane is prevented just by gravity. I guess HP saved a few bucks by building it with only one rail.
Here is a closeup of the PCB that holds all the user interface switches and the LCD:
The LCD is sitting on a little rubber "table" that cushions it and keeps it pressed against the viewing window. Following is a closeup of the main PCB. There's not really much to it... a stepper motor driver chip, an HP Scanner ASIC, what apears to be a RAM buffer, and a whole mess of discretes. Simple, but then again I guess most of the heavy lifting is done by the PC software.
Removing the sensor carriage was very simple, as it wasn't even bolted in. Removal consisted of slipping the drive belt off the far pulley
... followed by simply lifting out the carriage rail
Inside the sensor carriage, we find all kinds of optical goodies, including front surface mirrors, a lens, and the CCD sensor itself. The mirrors were just held on with little metal clips which could be popped off with a flathead screwdriver:
After popping out the three mirrors, I removed the sensor PCB which carries the image sensor itself, a bunch of discretes, and an photointerrupter (the black tallish doo-dad) to let the carriage know when it has reached its home position:
Inspecting the CCD closely, it appears that it is only three pixels tall or so, with a line of pixels for red, green, and blue. Here is a view of where the sensor PCB mounts, looking down into the lens that focuses the scanned image onto the CCD:
That's about all there was to the image carriage. Next, I removed the drive motor. It was held in with a single screw, as shown below. I must say, HP made it really easy to pull this puppy apart.
Here are all the electronic goodies laid out more or less how they fit into the scanner:
One thing I didn't get a picture of before was the CFL and its inverter, which can be seen wired up to the CCD circuit board. Also shown in this picture are all three of the mirrors that convey the scanned image to the CDD.
This particular scanner model came with an attachment to backlight negatives and slides so they can be scanned. I didn't get any pictures of its teardown, but it was pretty simple on the inside, with just a CFL tube and inverter mounted into a reflector. I decided to see how bright the two CFLs (this one, and the one from the scanner itself) would be when wired up together:
They weren't exactly blindingly bright, but certainly bright enough to do something with. The obvious application was a little CFL desk-lamp, which I hacked together with the 12V wall wart, the two CFL's and inverters, and the reflector. I added a little ribbon cable from the scanner around the edge to pretty it up, taped it under my desk, and called it a desk lamp. It lights up my inbox nicely... dubiously useful, but kind of neat in a geeky sort of way:


New to the area? Feel like a local in no time.
There will be those moments when you finally feel at home in your new house... Unpacking the last box. Tucking the children into bed for the first time in their new bedrooms. Part of the really feeling at home is when the barista knows you by name and when you become part of the community.
Your Five Corners real estate agent is a local in your new neighbourhood. We have the inside scoop on where to find the best cappuccinos and all the other little, but oh so necessary, local insights and tidbits. We want you to count on us for not only finding your new home, but also making you feel at home in the area.
Come spend some time with a New York or Connecticut Five Corners agent. Let us show you around. Let's have a cup of coffee. Let's take a walk around so you get your bearings and a sense of the area's walkability. If you have children, we can arrange tours of the schools you're considering and schedule appointments for you to meet the principals and staff. We love where we live and work, which we consider one of the perks of working in real estate.


Some inference rules
This file
contains an automatic proof of two inference rules. Please replace
auto
with basic tactics :
intros
,
apply
and
assumption
.


CHIKV, chikungunya virus; CLK1, CDC-like kinase 1; FLT4, fms-related tyrosine kinase 4; IC 50, half-maximal inhibitory concentration; KAT5, K (lysine) acetyltransferase 5; NT, non-toxic; TOFA, 5-tetradecyloxy-2-furoic acid; vATPase, vacuolar-type H+ ATPase.
*Treatment induced <50% cell death.
List of selected compounds inhibiting CHIKV replication and their respective molecular targets or pathways. CHIKV infection and cell viability (WST-1) was measured in cells pretreated for 1 h with different dilutions of each drug (see Supplementary Fig. 4 for full data). Therapeutic index was calculated by dividing the WST-1 IC 50 by the CHIKV IC 50 value.


Studio Art
This page contains the names of faculty in the Studio Art department and their picture.
Judith Pointer Jia
Isabella La Rocca
Sheldon Tapley
Home Page


An audio and media contractor based in Portland, Oregon. Clarity Media Group specializes in the design and installation of audio, video, and lighting systems for churches, concert halls, night clubs and corporate offices. We use state of the art performance-predicting software, the industry’s most innovative products, and the finest equipment and services to ensure that our customer’s expectations are met, and the project is completed on time and on budget.
As an authorized dealer for Nexo, Yamaha, Shure, Planar and more, Clarity Media Group's designers are knowledgeable professionals, qualified to assist you in selecting the equipment that is right for you and to instruct you in its proper installation, set-up and care.


WATCH: Trump Impeachment Hearings, William Taylor and George Kent testify before House Intelligence
by Xeni Jardin#ImpeachmentHearings have begun. Let loose the bowels of trumpian treason.
The House Intelligence Committee held its first open hearing of the impeachment inquiry against President Trump today, Wednesday, November 13, 2019.
Democrat and Republican lawmakers in congress heard testimony from William Taylor, Acting U.S. Ambassador to Ukraine, and from Deputy Assistant Secretary of State George Kent.


Overview
Package
Class
Use
Tree
Deprecated
Index
Help
PREV LETTER
NEXT LETTER
FRAMES
NO FRAMES
All Classes
A
B
C
D
E
F
G
H
I
L
M
N
O
P
R
S
T
U
V
W
H
hasExceptions()
- Method in class coffeetable.datastructures.
SchemaSafeDataStructure
If the container has encountered any exceptions, the log stores them for later viewing.
hashCode()
- Method in class coffeetable.datastructures.
DataColumn
hashCode()
- Method in class coffeetable.datastructures.
DataRow
hashCode()
- Method in class coffeetable.datastructures.
DataTable
hashCode()
- Method in class coffeetable.datastructures.
SchemaSafeDataStructure
hashCode()
- Method in class coffeetable.datastructures.
Vector
Generates a hashcode based on the container contents, scaled by the size of the container
hashCode()
- Method in class coffeetable.datatypes.
Factor
hashCode()
- Method in class coffeetable.math.
Infinite
hashCode()
- Method in class coffeetable.math.
MissingValue
hashCode()
- Method in class coffeetable.math.
TheoreticalValue
highestCommonConvertableClass(Schema)
- Static method in class coffeetable.datastructures.
DataRow.HighestConvertableClassHierarchy
highestCommonConvertableClass(Collection<DataColumn>)
- Static method in class coffeetable.datastructures.
DataTable.NumericClassHierarchy
HtmlTableWriter
- Class in
coffeetable.io
A DataTable utility to write a DataTable to a simple HTML table.
HtmlTableWriter(DataTable, File)
- Constructor for class coffeetable.io.
HtmlTableWriter
Overview
Package
Class
Use
Tree
Deprecated
Index
Help
PREV LETTER
NEXT LETTER
FRAMES
NO FRAMES
All Classes
A
B
C
D
E
F
G
H
I
L
M
N
O
P
R
S
T
U
V
W


open import Agda.Primitive using (Level; _⊔_; lsuc; lzero)
open import Types.product
open import Types.relations
open import Types.equality
module HoTT.introduction where
Homotopy type theory is a part of a mathematician’s quest to have a formal language in which to write mathematics such that the correctness of the mathematics written can be automatically verified by a computer program. This mathematician, Vladimir Voevodsky, played a large part in formalizing homotopy type theory and lead the restructuring of mathematics based on this new foundation, called Univalent foundations, so that it is easier to implement and work consistently in these formal languages.
We are working in one such language, Agda, though Voevodsky had used a different one - Coq. There are a few more of such languages called Theorem Provers, notably Isabelle, Idris, Arend and Lean.
Part of the technical problem that was faced, apart from the need for restructuring and refactoring all of mathematics, which needed HoTT as a solution, has to deal with how we define equivalences.
In the current system, if say we were to define two types, both representing natural numbers:
data ℕ₁ : Set where
: ℕ₁
zero₁ : ℕ₁ → ℕ₁
succ₁
data ℕ₂ : Set where
: ℕ₂
zero₂ : ℕ₂ → ℕ₂ succ₂
Now two objects, both representing 3
, will be considered different:
= succ₁ (succ₁ (succ₁ zero₁))
three₁ = succ₂ (succ₂ (succ₂ zero₂)) three₂
: three₁ ≡ three₂
eq = refl eq
and the compiler throws the error:
!=< ℕ₁
ℕ₂ type ℕ₁ when checking that the expression three₂ has
In order to make these types equal, we have to define an equality type where we provide a proof that ℕ₁ and ℕ₂ are equal. This is the consequence of the flavor of type theory that we are using called “Intensional” type theory. In intensional type theory, one has to explicitly define all equivalences for all objects and some machinery for them to really work with these structures.
In the above example, we could capture equivalence of integers without much code, however this problem compounds itself as one builds higher structures, say a group of integers or a real number field. These equivalences can be captured by Setoid
s which are basically objects along with their definition of equivalences “packaged together” so that their implementations can be hidden. However, like many such foundational patches, the final implementations result in a mess where the base definitions need additional machinery and one needs to be aware of these implementations anyway when constructing higher structures. Some areas of mathematics are notably hard, like defining real numbers. However, for all its shortfalls, an intensional system guarantees that the type checking is decidable.
In particular, intensional type theories lack:
The above can be technically handled by modeling Types using Setoid
s instead of Set
. However, if we need further extensionality by adding:
This creates a problem as two sets can be equal in many different ways. To account for this additional structure, we could model Types using Groupoid
s (also known as a Magma
) instead of Setoid
s.
Another flavor of type theory, “extensional” defines equivalences as - things that behave the same way are equal (regardless of their internal implementations). This, in a way, provides a better set of abstractions for working with mathematics as in order to build towers of abstractions, one needs to hide implementation details. Otherwise imagine one needing to know the intel instruction set to build a website. The shortfall in the extensional system is that it is possible to define types that are not decidable. In other words, there is no difference between definitional and propositional equalities allowing cases where type checking will never terminate. Another problem here is that Set extensionality cannot be modeled.
As the extensional version has major drawbacks, there becomes a need for restructuring the modeling of equivalence in intensional type theory to build more extensionality along with cleaner and better abstracted implementations. This is where Homotopy Type Theory comes in.
Roughly speaking, the mathematical theory that models equality and equivalence of types using abstractions from homotopy theory is called Homotopy Type Theory (or HoTT in short). The “Univalence” axiom sits at the core of HoTT and hence, the resulting type theories that build on HoTT are called “univalent type theories” and the math implemented in such type theories “univalent mathematics”.


| High | Medium | Low | Negligible |
|---|---|---|---|
| ID | Description | Package | Link |
|---|---|---|---|
| CVE-2016-7950 | The XRenderQueryFilters function in X.org libXrender before 0.9.10 allows remote X servers to trigger out-of-bounds write operations via vectors involving filter name lengths. | libxrender @ 1:0.9.8-1 | https://security-tracker.debian.org/tracker/CVE-2016-7950 |
| CVE-2015-5600 | The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list. | openssh @ 1:6.7p1-5+deb8u3 | https://security-tracker.debian.org/tracker/CVE-2015-5600 |
| CVE-2015-8947 | hb-ot-layout-gpos-table.hh in HarfBuzz before 1.0.5 allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via crafted data, a different vulnerability than CVE-2016-2052. | harfbuzz @ 0.9.35-2 | https://security-tracker.debian.org/tracker/CVE-2015-8947 |
| CVE-2016-7951 | Multiple integer overflows in X.org libXtst before 1.2.3 allow remote X servers to trigger out-of-bounds memory access operations by leveraging the lack of range checks. | libxtst @ 2:1.2.2-1 | https://security-tracker.debian.org/tracker/CVE-2016-7951 |
| CVE-2016-1908 | The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows remote X11 clients to trigger a fallback and obtain trusted X11 forwarding privileges by leveraging configuration issues on this X11 server, as demonstrated by lack of the SECURITY extension on this X11 server. | openssh @ 1:6.7p1-5+deb8u3 | https://security-tracker.debian.org/tracker/CVE-2016-1908 |
| CVE-2016-4448 | Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors. | libxml2 @ 2.9.1+dfsg1-5+deb8u4 | https://security-tracker.debian.org/tracker/CVE-2016-4448 |
| CVE-2016-2779 | runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer. | util-linux @ 2.25.2-6 | https://security-tracker.debian.org/tracker/CVE-2016-2779 |
| CVE-2016-7947 | Multiple integer overflows in X.org libXrandr before 1.5.1 allow remote X servers to trigger out-of-bounds write operations via a crafted response. | libxrandr @ 2:1.4.2-1 | https://security-tracker.debian.org/tracker/CVE-2016-7947 |
| CVE-2016-7948 | X.org libXrandr before 1.5.1 allows remote X servers to trigger out-of-bounds write operations by leveraging mishandling of reply data. | libxrandr @ 2:1.4.2-1 | https://security-tracker.debian.org/tracker/CVE-2016-7948 |
| CVE-2017-5337 | Multiple heap-based buffer overflows in the read_attribute function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to have unspecified impact via a crafted OpenPGP certificate. | gnutls28 @ 3.3.8-6+deb8u4 | https://security-tracker.debian.org/tracker/CVE-2017-5337 |
| CVE-2017-5336 | Stack-based buffer overflow in the cdk_pk_get_keyid function in lib/opencdk/pubkey.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via a crafted OpenPGP certificate. | gnutls28 @ 3.3.8-6+deb8u4 | https://security-tracker.debian.org/tracker/CVE-2017-5336 |
| CVE-2017-5334 | Double free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via crafted policy language information in an X.509 certificate with a Proxy Certificate Information extension. | gnutls28 @ 3.3.8-6+deb8u4 | https://security-tracker.debian.org/tracker/CVE-2017-5334 |
| CVE-2016-7943 | The XListFonts function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving length fields, which trigger out-of-bounds write operations. | libx11 @ 2:1.6.2-3 | https://security-tracker.debian.org/tracker/CVE-2016-7943 |
| CVE-2016-2090 | Off-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have unspecified impact via unknown vectors, which trigger a heap-based buffer overflow. | libbsd @ 0.7.0-2 | https://security-tracker.debian.org/tracker/CVE-2016-2090 |
| CVE-2016-7944 | Integer overflow in X.org libXfixes before 5.0.3 on 32-bit platforms might allow remote X servers to gain privileges via a length value of INT_MAX, which triggers the client to stop reading data and get out of sync. | libxfixes @ 1:5.0.1-2 | https://security-tracker.debian.org/tracker/CVE-2016-7944 |
| CVE-2017-5225 | LibTIFF version 4.0.7 is vulnerable to a heap buffer overflow in the tools/tiffcp resulting in DoS or code execution via a crafted BitsPerSample value. | tiff @ 4.0.3-12.3+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2017-5225 |
| CVE-2016-9535 | tif_predict.h and tif_predict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual tile size like YCbCr with subsampling. Reported as MSVR 35105, aka "Predictor heap-buffer-overflow." | tiff @ 4.0.3-12.3+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2016-9535 |
| CVE-2016-7942 | The XGetImage function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving image type and geometry, which triggers out-of-bounds read operations. | libx11 @ 2:1.6.2-3 | https://security-tracker.debian.org/tracker/CVE-2016-7942 |
| CVE-2016-6515 | The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password authentication, which allows remote attackers to cause a denial of service (crypt CPU consumption) via a long string. | openssh @ 1:6.7p1-5+deb8u3 | https://security-tracker.debian.org/tracker/CVE-2016-6515 |
| CVE-2014-9761 | Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long argument to the (1) nan, (2) nanf, or (3) nanl function. | glibc @ 2.19-18+deb8u7 | https://security-tracker.debian.org/tracker/CVE-2014-9761 |
| CVE-2016-8858 | ** DISPUTED ** The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate KEXINIT requests. NOTE: a third party reports that "OpenSSH upstream does not consider this as a security issue." | openssh @ 1:6.7p1-5+deb8u3 | https://security-tracker.debian.org/tracker/CVE-2016-8858 |
| CVE-2015-7554 | The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via crafted field data in an extension tag in a TIFF image. | tiff @ 4.0.3-12.3+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2015-7554 |
| CVE-2015-8271 | The AMF3CD_AddProp function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to execute arbitrary code. | rtmpdump @ 2.4+20150115.gita107cef-1 | https://security-tracker.debian.org/tracker/CVE-2015-8271 |
| CVE-2016-7167 | Multiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and (4) curl_easy_unescape functions in libcurl before 7.50.3 allow attackers to have unspecified impact via a string of length 0xffffffff, which triggers a heap-based buffer overflow. | curl @ 7.38.0-4+deb8u5 | https://security-tracker.debian.org/tracker/CVE-2016-7167 |
| CVE-2016-7949 | Multiple buffer overflows in the (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXrender before 0.9.10 allow remote X servers to trigger out-of-bounds write operations via vectors involving length fields. | libxrender @ 1:0.9.8-1 | https://security-tracker.debian.org/tracker/CVE-2016-7949 |
| ID | Description | Package | Link |
|---|---|---|---|
| CVE-2016-7945 | Multiple integer overflows in X.org libXi before 1.7.7 allow remote X servers to cause a denial of service (out-of-bounds memory access or infinite loop) via vectors involving length fields. | libxi @ 2:1.7.4-1 | https://security-tracker.debian.org/tracker/CVE-2016-7945 |
| CVE-2015-5276 | The std::random_device class in libstdc++ in the GNU Compiler Collection (aka GCC) before 4.9.4 does not properly handle short reads from blocking sources, which makes it easier for context-dependent attackers to predict the random values via unspecified vectors. | gcc-4.9 @ 4.9.2-10 | https://security-tracker.debian.org/tracker/CVE-2015-5276 |
| CVE-2016-7952 | X.org libXtst before 1.2.3 allows remote X servers to cause a denial of service (infinite loop) via a reply in the (1) XRecordStartOfData, (2) XRecordEndOfData, or (3) XRecordClientDied category without a client sequence and with attached data. | libxtst @ 2:1.2.2-1 | https://security-tracker.debian.org/tracker/CVE-2016-7952 |
| CVE-2016-7946 | X.org libXi before 1.7.7 allows remote X servers to cause a denial of service (infinite loop) via vectors involving length fields. | libxi @ 2:1.7.4-1 | https://security-tracker.debian.org/tracker/CVE-2016-7946 |
| CVE-2017-7867 | International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utext_setNativeIndex* function. | icu @ 52.1-8+deb8u4 | https://security-tracker.debian.org/tracker/CVE-2017-7867 |
| CVE-2017-7868 | Fixed version: 52.1-8+deb8u5 International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utext_moveIndex32* function. | icu @ 52.1-8+deb8u4 | https://security-tracker.debian.org/tracker/CVE-2017-7868 |
| CVE-2016-1024 | Fixed version: 52.1-8+deb8u5 Integer overflow in the jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.12 allows remote attackers to have unspecified impact via a crafted image file, which triggers a heap-based buffer overflow. | jasper @ 1.900.1-debian1-2.4+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2016-10249 |
| CVE-2017-5503 | Fixed version: 1.900.1-debian1-2.4+deb8u3 The dec_clnpass function in libjasper/jpc/jpc_t1dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via a crafted image. | jasper @ 1.900.1-debian1-2.4+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2017-5503 |
| CVE-2017-7613 | elflint.c in elfutils 0.168 does not validate the number of sections and the number of segments, which allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file. | elfutils @ 0.159-4.2 | https://security-tracker.debian.org/tracker/CVE-2017-7613 |
| CVE-2017-6852 | Heap-based buffer overflow in the jpc_dec_decodepkt function in jpc_t2dec.c in JasPer 2.0.10 allows remote attackers to have unspecified impact via a crafted image. | jasper @ 1.900.1-debian1-2.4+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2017-6852 |
| CVE-2017-7244 | The _pcre32_xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (invalid memory read) via a crafted file. | pcre3 @ 2:8.35-3.3+deb8u4 | https://security-tracker.debian.org/tracker/CVE-2017-7244 |
| CVE-2016-1022 | The iconv program in the GNU C Library (aka glibc or libc6) 2.25 and earlier, when invoked with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, leading to a denial of service. | glibc @ 2.19-18+deb8u7 | https://security-tracker.debian.org/tracker/CVE-2016-10228 |
| CVE-2016-1024 | The parse_charstrings function in type1/t1load.c in FreeType 2 before 2.7 does not ensure that a font contains a glyph name, which allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted file. | freetype @ 2.5.2-3+deb8u1 | https://security-tracker.debian.org/tracker/CVE-2016-10244 |
| CVE-2017-6312 | Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (segmentation fault and application crash) via a crafted image entry offset in an ICO file, which triggers an out-of-bounds read, related to compiler optimizations. | gdk-pixbuf @ 2.31.1-2+deb8u5 | https://security-tracker.debian.org/tracker/CVE-2017-6312 |
| CVE-2016-8883 | The jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service (assertion failure) via a crafted file. | jasper @ 1.900.1-debian1-2.4+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2016-8883 |
| CVE-2015-3217 | PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle group empty matches, which might allow remote attackers to cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by /^(?:(?(1)\\.|([^\\\\W_])?)+)+$/. | pcre3 @ 2:8.35-3.3+deb8u4 | https://security-tracker.debian.org/tracker/CVE-2015-3217 |
| CVE-2017-7599 | LibTIFF 4.0.7 has an "outside the range of representable values of type short" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image. | tiff @ 4.0.3-12.3+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2017-7599 |
| CVE-2017-6313 | Integer underflow in the load_resources function in io-icns.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (out-of-bounds read and program crash) via a crafted image entry size in an ICO file. | gdk-pixbuf @ 2.31.1-2+deb8u5 | https://security-tracker.debian.org/tracker/CVE-2017-6313 |
| CVE-2015-8272 | RTMPDump 2.4 allows remote attackers to trigger a denial of service (NULL pointer dereference and process crash). | rtmpdump @ 2.4+20150115.gita107cef-1 | https://security-tracker.debian.org/tracker/CVE-2015-8272 |
| CVE-2016-1009 | Stack-based buffer overflow in the _TIFFVGetField function in tif_dir.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (crash) via a crafted TIFF file. | tiff @ 4.0.3-12.3+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2016-10095 |
| CVE-2016-1026 | tools/tiffcp.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (integer underflow and heap-based buffer under-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 78490" and libtiff/tif_unix.c:115:23. | tiff @ 4.0.3-12.3+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2016-10268 |
| CVE-2017-7598 | tif_dirread.c in LibTIFF 4.0.7 might allow remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image. | tiff @ 4.0.3-12.3+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2017-7598 |
| CVE-2017-7186 | libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service (segmentation violation for read access, and application crash) by triggering an invalid Unicode property lookup. | pcre3 @ 2:8.35-3.3+deb8u4 | https://security-tracker.debian.org/tracker/CVE-2017-7186 |
| CVE-2017-7601 | LibTIFF 4.0.7 has a "shift exponent too large for 64-bit type long" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image. | tiff @ 4.0.3-12.3+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2017-7601 |
| CVE-2016-3115 | Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data, related to the (1) do_authenticated1 and (2) session_x11_req functions. | openssh @ 1:6.7p1-5+deb8u3 | https://security-tracker.debian.org/tracker/CVE-2016-3115 |
| CVE-2016-9318 | libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earlier and other products, does not offer a flag directly indicating that the current document may be read but other files may not be opened, which makes it easier for remote attackers to conduct XML External Entity (XXE) attacks via a crafted document. | libxml2 @ 2.9.1+dfsg1-5+deb8u4 | https://security-tracker.debian.org/tracker/CVE-2016-9318 |
| CVE-2017-5335 | The stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to cause a denial of service (out-of-memory error and crash) via a crafted OpenPGP certificate. | gnutls28 @ 3.3.8-6+deb8u4 | https://security-tracker.debian.org/tracker/CVE-2017-5335 |
| CVE-2017-7585 | In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a stack-based buffer overflow via a specially crafted FLAC file. | libsndfile @ 1.0.25-9.1+deb8u1 | https://security-tracker.debian.org/tracker/CVE-2017-7585 |
| CVE-2016-1025 | Integer overflow in the jpc_pi_nextcprl function in jpc_t2cod.c in JasPer before 1.900.20 allows remote attackers to have unspecified impact via a crafted file, which triggers use of an uninitialized value. | jasper @ 1.900.1-debian1-2.4+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2016-10251 |
| CVE-2017-7602 | Fixed version: 1.900.1-debian1-2.4+deb8u3 LibTIFF 4.0.7 has a signed integer overflow, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image. | tiff @ 4.0.3-12.3+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2017-7602 |
| CVE-2015-5352 | The x11_open_helper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted mode is not used, lacks a check of the refusal deadline for X connections, which makes it easier for remote attackers to bypass intended access restrictions via a connection outside of the permitted time window. | openssh @ 1:6.7p1-5+deb8u3 | https://security-tracker.debian.org/tracker/CVE-2015-5352 |
| CVE-2016-8887 | The jp2_colr_destroy function in libjasper/jp2/jp2_cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (NULL pointer dereference). | jasper @ 1.900.1-debian1-2.4+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2016-8887 |
| CVE-2017-5501 | Integer overflow in libjasper/jpc/jpc_tsfb.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted file. | jasper @ 1.900.1-debian1-2.4+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2017-5501 |
| CVE-2017-7869 | GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based buffer overflow related to the cdk_pkt_read function in opencdk/read-packet.c. This issue (which is a subset of the vendor's GNUTLS-SA-2017-3 report) is fixed in 3.5.10. | gnutls28 @ 3.3.8-6+deb8u4 | https://security-tracker.debian.org/tracker/CVE-2017-7869 |
| CVE-2010-2596 | The OJPEGPostDecode function in tif_ojpeg.c in LibTIFF 3.9.0 and 3.9.2, as used in tiff2ps, allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted TIFF image, related to "downsampled OJPEG input." | tiff @ 4.0.3-12.3+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2010-2596 |
| CVE-2016-6352 | The OneLine32 function in io-ico.c in gdk-pixbuf before 2.35.3 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via crafted dimensions in an ICO file. | gdk-pixbuf @ 2.31.1-2+deb8u5 | https://security-tracker.debian.org/tracker/CVE-2016-6352 |
| CVE-2016-3616 | The cjpeg utility in libjpeg allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or execute arbitrary code via a crafted file. | libjpeg-turbo @ 1:1.3.1-12 | https://security-tracker.debian.org/tracker/CVE-2016-3616 |
| CVE-2016-9557 | Integer overflow in jas_image.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service (application crash) via a crafted file. | jasper @ 1.900.1-debian1-2.4+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2016-9557 |
| CVE-2015-2305 | Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka rxspencer) alpha3.8.g5 on 32-bit platforms, as used in NetBSD through 6.1.5 and other products, might allow context-dependent attackers to execute arbitrary code via a large regular expression that leads to a heap-based buffer overflow. | llvm-toolchain-3.5 @ 1:3.5-10 | https://security-tracker.debian.org/tracker/CVE-2015-2305 |
| CVE-2015-8270 | The AMF3ReadString function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to cause a denial of service (invalid pointer dereference and process crash). | rtmpdump @ 2.4+20150115.gita107cef-1 | https://security-tracker.debian.org/tracker/CVE-2015-8270 |
| CVE-2011-3389 | The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a "BEAST" attack. | gnutls28 @ 3.3.8-6+deb8u4 | https://security-tracker.debian.org/tracker/CVE-2011-3389 |
| CVE-2015-6564 | Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in OpenSSH before 7.0 on non-OpenBSD platforms might allow local users to gain privileges by leveraging control of the sshd uid to send an unexpectedly early MONITOR_REQ_PAM_FREE_CTX request. | openssh @ 1:6.7p1-5+deb8u3 | https://security-tracker.debian.org/tracker/CVE-2015-6564 |
| CVE-2017-6314 | The make_available_at_least function in io-tiff.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (infinite loop) via a large TIFF file. | gdk-pixbuf @ 2.31.1-2+deb8u5 | https://security-tracker.debian.org/tracker/CVE-2017-6314 |
| CVE-2016-3977 | Heap-based buffer overflow in util/gif2rgb.c in gif2rgb in giflib 5.1.2 allows remote attackers to cause a denial of service (application crash) via the background color index in a GIF file. | giflib @ 4.1.6-11+deb8u1 | https://security-tracker.debian.org/tracker/CVE-2016-3977 |
| CVE-2017-7741 | In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmentation violation (with write memory access) via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585. | libsndfile @ 1.0.25-9.1+deb8u1 | https://security-tracker.debian.org/tracker/CVE-2017-7741 |
| CVE-2016-5318 | Stack-based buffer overflow in the _TIFFVGetField function in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted tiff. | tiff @ 4.0.3-12.3+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2016-5318 |
| CVE-2017-7610 | The check_group function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file. | elfutils @ 0.159-4.2 | https://security-tracker.debian.org/tracker/CVE-2017-7610 |
| CVE-2015-2694 | The kdcpreauth modules in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.2 do not properly track whether a client's request has been validated, which allows remote attackers to bypass an intended preauthentication requirement by providing (1) zero bytes of data or (2) an arbitrary realm name, related to plugins/preauth/otp/main.c and plugins/preauth/pkinit/pkinit_srv.c. | krb5 @ 1.12.1+dfsg-19+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2015-2694 |
| CVE-2017-7596 | LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image. | tiff @ 4.0.3-12.3+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2017-7596 |
| CVE-2016-3120 | The validate_as_request function in kdc_util.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.13.6 and 1.4.x before 1.14.3, when restrict_anonymous_to_tgt is enabled, uses an incorrect client data structure, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via an S4U2Self request. | krb5 @ 1.12.1+dfsg-19+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2016-3120 |
| CVE-2017-7593 | tif_read.c in LibTIFF 4.0.7 does not ensure that tif_rawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a crafted image. | tiff @ 4.0.3-12.3+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2017-7593 |
| CVE-2017-7742 | In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmentation violation (with read memory access) via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585. | libsndfile @ 1.0.25-9.1+deb8u1 | https://security-tracker.debian.org/tracker/CVE-2017-7742 |
| CVE-2017-7592 | The putagreytile function in tif_getimage.c in LibTIFF 4.0.7 has a left-shift undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image. | tiff @ 4.0.3-12.3+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2017-7592 |
| CVE-2016-7141 | curl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at runtime, allow remote attackers to hijack the authentication of a TLS connection by leveraging reuse of a previously loaded client certificate from file for a connection for which no certificate has been set, a different vulnerability than CVE-2016-5420. | curl @ 7.38.0-4+deb8u5 | https://security-tracker.debian.org/tracker/CVE-2016-7141 |
| CVE-2017-7595 | The JPEGSetupEncode function in tiff_jpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image. | tiff @ 4.0.3-12.3+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2017-7595 |
| CVE-2017-7586 | In libsndfile before 1.0.28, an error in the "header_read()" function (common.c) when handling ID3 tags can be exploited to cause a stack-based buffer overflow via a specially crafted FLAC file. | libsndfile @ 1.0.25-9.1+deb8u1 | https://security-tracker.debian.org/tracker/CVE-2017-7586 |
| CVE-2017-7597 | tif_dirread.c in LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image. | tiff @ 4.0.3-12.3+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2017-7597 |
| CVE-2017-7607 | The handle_gnu_hash function in readelf.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file. | elfutils @ 0.159-4.2 | https://security-tracker.debian.org/tracker/CVE-2017-7607 |
| CVE-2017-7594 | The OJPEGReadHeaderInfoSecTablesDcTable function in tif_ojpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (memory leak) via a crafted image. | tiff @ 4.0.3-12.3+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2017-7594 |
| CVE-2017-7608 | The ebl_object_note_type_name function in eblobjnotetypename.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file. | elfutils @ 0.159-4.2 | https://security-tracker.debian.org/tracker/CVE-2017-7608 |
| CVE-2017-7600 | LibTIFF 4.0.7 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image. | tiff @ 4.0.3-12.3+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2017-7600 |
| CVE-2017-7611 | The check_symtab_shndx function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file. | elfutils @ 0.159-4.2 | https://security-tracker.debian.org/tracker/CVE-2017-7611 |
| CVE-2017-6508 | CRLF injection vulnerability in the url_parse function in url.c in Wget through 1.19.1 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the host subcomponent of a URL. | wget @ 1.16-1+deb8u1 | https://security-tracker.debian.org/tracker/CVE-2017-6508 |
| CVE-2016-5011 | The parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows physically proximate attackers to cause a denial of service (memory consumption) via a crafted MSDOS partition table with an extended partition boot record at zero offset. | util-linux @ 2.25.2-6 | https://security-tracker.debian.org/tracker/CVE-2016-5011 |
| CVE-2015-7313 | LibTIFF allows remote attackers to cause a denial of service (memory consumption and crash) via a crafted tiff file. | tiff @ 4.0.3-12.3+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2015-7313 |
| CVE-2017-7612 | The check_sysv_hash function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file. | elfutils @ 0.159-4.2 | https://security-tracker.debian.org/tracker/CVE-2017-7612 |
| CVE-2016-1027 | LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 8" and libtiff/tif_read.c:523:22. | tiff @ 4.0.3-12.3+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2016-10270 |
| CVE-2016-1026 | LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_read.c:351:22. | tiff @ 4.0.3-12.3+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2016-10266 |
| CVE-2016-1026 | LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_ojpeg.c:816:8. | tiff @ 4.0.3-12.3+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2016-10267 |
| CVE-2016-1026 | LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 512" and libtiff/tif_unix.c:340:2. | tiff @ 4.0.3-12.3+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2016-10269 |
| ID | Description | Package | Link |
|---|---|---|---|
| CVE-2016-2781 | chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer. | coreutils @ 8.23-4 | https://security-tracker.debian.org/tracker/CVE-2016-2781 |
| CVE-2016-7098 | Race condition in wget 1.17 and earlier, when used in recursive or mirroring mode to download a single file, might allow remote servers to bypass intended access list restrictions by keeping an HTTP connection open. | wget @ 1.16-1+deb8u1 | https://security-tracker.debian.org/tracker/CVE-2016-7098 |
| CVE-2016-8886 | The jas_malloc function in libjasper/base/jas_malloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted file, which triggers a memory allocation failure. | jasper @ 1.900.1-debian1-2.4+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2016-8886 |
| CVE-2016-1001 | The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensure that a bounds check is enforced by all compilers, which might allows local users to gain privileges by leveraging access to a sandboxed privilege-separation process, related to the m_zback and m_zlib data structures. | openssh @ 1:6.7p1-5+deb8u3 | https://security-tracker.debian.org/tracker/CVE-2016-10012 |
| CVE-2015-6563 | The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c. | openssh @ 1:6.7p1-5+deb8u3 | https://security-tracker.debian.org/tracker/CVE-2015-6563 |
| CVE-2016-9401 | popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address. | bash @ 4.3-11+deb8u1 | https://security-tracker.debian.org/tracker/CVE-2016-9401 |
| CVE-2016-1025 | The allocate_elf function in common.h in elfutils before 0.168 allows remote attackers to cause a denial of service (crash) via a crafted ELF file, which triggers a memory allocation failure. | elfutils @ 0.159-4.2 | https://security-tracker.debian.org/tracker/CVE-2016-10254 |
| CVE-2017-7407 | The ourWriteOut function in tool_writeout.c in curl 7.53.1 might allow physically proximate attackers to obtain sensitive information from process memory in opportunistic circumstances by reading a workstation screen during use of a --write-out argument ending in a '%' character, which leads to a heap-based buffer over-read. | curl @ 7.38.0-4+deb8u5 | https://security-tracker.debian.org/tracker/CVE-2017-7407 |
| CVE-2016-9844 | Buffer overflow in the zi_short function in zipinfo.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service (crash) via a large compression method value in the central directory file header. | unzip @ 6.0-16+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2016-9844 |
| CVE-2016-1000 | Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modules by leveraging control over a forwarded agent-socket. | openssh @ 1:6.7p1-5+deb8u3 | https://security-tracker.debian.org/tracker/CVE-2016-10009 |
| CVE-2016-3119 | The process_db_args function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 (aka krb5) through 1.13.4 and 1.14.x through 1.14.1 mishandles the DB argument, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request to modify a principal. | krb5 @ 1.12.1+dfsg-19+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2016-3119 |
| CVE-2016-3658 | The TIFFWriteDirectoryTagLongLong8Array function in tif_dirwrite.c in the tiffset tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via vectors involving the ma variable. | tiff @ 4.0.3-12.3+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2016-3658 |
| CVE-2016-8734 | subversion @ 1.8.10-6+deb8u4 | https://security-tracker.debian.org/tracker/CVE-2016-8734 | |
| CVE-2017-5969 | ** DISPUTED ** libxml2 2.9.4, when used in recover mode, allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted XML document. NOTE: The maintainer states "I would disagree of a CVE with the Recover parsing option which should only be used for manual recovery at least for XML parser." | libxml2 @ 2.9.1+dfsg1-5+deb8u4 | https://security-tracker.debian.org/tracker/CVE-2017-5969 |
| CVE-2014-9913 | Buffer overflow in the list_files function in list.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service (crash) via vectors related to the compression method. | unzip @ 6.0-16+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2014-9913 |
| CVE-2016-8690 | The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted BMP image in an imginfo command. | jasper @ 1.900.1-debian1-2.4+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2016-8690 |
| CVE-2016-1001 | authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtain sensitive private-key information by leveraging access to a privilege-separated child process. | openssh @ 1:6.7p1-5+deb8u3 | https://security-tracker.debian.org/tracker/CVE-2016-10011 |
| CVE-2016-1025 | The __libelf_set_rawdata_wrlock function in elf_getdata.c in elfutils before 0.168 allows remote attackers to cause a denial of service (crash) via a crafted (1) sh_off or (2) sh_size ELF header value, which triggers a memory allocation failure. | elfutils @ 0.159-4.2 | https://security-tracker.debian.org/tracker/CVE-2016-10255 |
| CVE-2015-5180 | glibc @ 2.19-18+deb8u7 | https://security-tracker.debian.org/tracker/CVE-2015-5180 | |
| CVE-2016-3189 | Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block. | bzip2 @ 1.0.6-7 | https://security-tracker.debian.org/tracker/CVE-2016-3189 |
| ID | Description | Package | Link |
|---|---|---|---|
| CVE-2013-4392 | systemd, when updating file permissions, allows local users to change the permissions and SELinux security contexts for arbitrary files via a symlink attack on unspecified files. | systemd @ 215-17+deb8u6 | https://security-tracker.debian.org/tracker/CVE-2013-4392 |
| CVE-2010-4052 | Stack consumption vulnerability in the regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service (resource exhaustion) via a regular expression containing adjacent repetition operators, as demonstrated by a {10,}{10,}{10,}{10,} sequence in the proftpd.gnu.c exploit for ProFTPD. | glibc @ 2.19-18+deb8u7 | https://security-tracker.debian.org/tracker/CVE-2010-4052 |
| CVE-2017-5500 | libjasper/jpc/jpc_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value. | jasper @ 1.900.1-debian1-2.4+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2017-5500 |
| CVE-2013-4235 | shadow @ 1:4.2-3+deb8u3 | https://security-tracker.debian.org/tracker/CVE-2013-4235 | |
| CVE-2017-6851 | The jas_matrix_bindsub function in jas_seq.c in JasPer 2.0.10 allows remote attackers to cause a denial of service (invalid read) via a crafted image. | jasper @ 1.900.1-debian1-2.4+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2017-6851 |
| CVE-2016-1024 | The jpc_tsfb_synthesize function in jpc_tsfb.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer dereference) via vectors involving an empty sequence. | jasper @ 1.900.1-debian1-2.4+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2016-10248 |
| CVE-2007-6755 | The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit Generation (Dual_EC_DRBG) algorithm contains point Q constants with a possible relationship to certain "skeleton key" values, which might allow context-dependent attackers to defeat cryptographic protection mechanisms by leveraging knowledge of those values. NOTE: this is a preliminary CVE for Dual_EC_DRBG; future research may provide additional details about point Q and associated attacks, and could potentially lead to a RECAST or REJECT of this CVE. | openssl @ 1.0.1t-1+deb8u6 | https://security-tracker.debian.org/tracker/CVE-2007-6755 |
| CVE-2016-9398 | The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors. | jasper @ 1.900.1-debian1-2.4+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2016-9398 |
| CVE-2016-1000 | python2.7 @ 2.7.9-2+deb8u1 | https://security-tracker.debian.org/tracker/CVE-2016-1000110 | |
| CVE-2012-3878 | perl @ 5.20.2-3+deb8u6 | https://security-tracker.debian.org/tracker/CVE-2012-3878 | |
| CVE-2004-0971 | The krb5-send-pr script in the kerberos5 (krb5) package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files. | krb5 @ 1.12.1+dfsg-19+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2004-0971 |
| CVE-2016-9388 | The ras_getcmap function in ras_dec.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file. | jasper @ 1.900.1-debian1-2.4+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2016-9388 |
| CVE-2015-5218 | Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of service (crash) via a crafted file, related to the page global variable. | util-linux @ 2.25.2-6 | https://security-tracker.debian.org/tracker/CVE-2015-5218 |
| CVE-2017-5502 | libjasper/jp2/jp2_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value. | jasper @ 1.900.1-debian1-2.4+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2017-5502 |
| CVE-2017-5504 | The jpc_undo_roi function in libjasper/jpc/jpc_dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted image. | jasper @ 1.900.1-debian1-2.4+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2017-5504 |
| CVE-2010-4756 | The glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in STAT commands to an FTP daemon, a different vulnerability than CVE-2010-2632. | glibc @ 2.19-18+deb8u7 | https://security-tracker.debian.org/tracker/CVE-2010-4756 |
| CVE-2014-8127 | tiff @ 4.0.3-12.3+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2014-8127 | |
| CVE-2007-5686 | initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging failed authentication attempts by remote attackers. | shadow @ 1:4.2-3+deb8u3 | https://security-tracker.debian.org/tracker/CVE-2007-5686 |
| CVE-2016-9390 | The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.14 allows remote attackers to cause a denial of service (assertion failure) via a crafted image file. | jasper @ 1.900.1-debian1-2.4+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2016-9390 |
| CVE-2008-4108 | Tools/faqwiz/move-faqwiz.sh (aka the generic FAQ wizard moving tool) in Python 2.4.5 might allow local users to overwrite arbitrary files via a symlink attack on a tmp$RANDOM.tmp temporary file. NOTE: there may not be common usage scenarios in which tmp$RANDOM.tmp is located in an untrusted directory. | python-defaults @ 2.7.9-1 | https://security-tracker.debian.org/tracker/CVE-2008-4108 |
| CVE-2011-4116 | perl @ 5.20.2-3+deb8u6 | https://security-tracker.debian.org/tracker/CVE-2011-4116 | |
| CVE-2013-7040 | Python 2.7 before 3.4 only uses the last eight bits of the prefix to randomize hash values, which causes it to compute hash values without restricting the ability to trigger hash collisions predictably and makes it easier for context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1150. | python2.7 @ 2.7.9-2+deb8u1 | https://security-tracker.debian.org/tracker/CVE-2013-7040 |
| CVE-2013-0340 | expat 2.1.0 and earlier does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote attackers to cause a denial of service (resource consumption), send HTTP requests to intranet servers, or read arbitrary files via a crafted XML document, aka an XML External Entity (XXE) issue. NOTE: it could be argued that because expat already provides the ability to disable external entity expansion, the responsibility for resolving this issue lies with application developers; according to this argument, this entry should be REJECTed, and each affected application would need its own CVE. | expat @ 2.1.0-6+deb8u3 | https://security-tracker.debian.org/tracker/CVE-2013-0340 |
| CVE-2016-9397 | The jpc_dequantize function in jpc_dec.c in JasPer 1.900.13 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors. | jasper @ 1.900.1-debian1-2.4+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2016-9397 |
| CVE-2017-2616 | util-linux @ 2.25.2-6 | https://security-tracker.debian.org/tracker/CVE-2017-2616 | |
| CVE-2017-5505 | The jas_matrix_asl function in jas_seq.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted image. | jasper @ 1.900.1-debian1-2.4+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2017-5505 |
| CVE-2015-3276 | The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors. | openldap @ 2.4.40+dfsg-1+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2015-3276 |
| CVE-2016-9395 | The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service (assertion failure) via a crafted file. | jasper @ 1.900.1-debian1-2.4+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2016-9395 |
| CVE-2016-9387 | Integer overflow in the jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.13 allows remote attackers to have unspecified impact via a crafted file, which triggers an assertion failure. | jasper @ 1.900.1-debian1-2.4+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2016-9387 |
| CVE-2011-3374 | apt @ <IP_ADDRESS>.4 | https://security-tracker.debian.org/tracker/CVE-2011-3374 | |
| CVE-2016-9399 | The calcstepsizes function in jpc_dec.c in JasPer 1.900.22 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors. | jasper @ 1.900.1-debian1-2.4+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2016-9399 |
| CVE-2015-5186 | audit @ 1:2.4-1 | https://security-tracker.debian.org/tracker/CVE-2015-5186 | |
| CVE-2016-9391 | The jpc_bitstream_getbits function in jpc_bs.c in JasPer before 2.0.10 allows remote attackers to cause a denial of service (assertion failure) via a very large integer. | jasper @ 1.900.1-debian1-2.4+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2016-9391 |
| CVE-2016-3739 | The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) polarssl_connect_step1 function in lib/vtls/polarssl.c in cURL and libcurl before 7.49.0, when using SSLv3 or making a TLS connection to a URL that uses a numerical IP address, allow remote attackers to spoof servers via an arbitrary valid certificate. | curl @ 7.38.0-4+deb8u5 | https://security-tracker.debian.org/tracker/CVE-2016-3739 |
| CVE-2016-9063 | expat @ 2.1.0-6+deb8u3 | https://security-tracker.debian.org/tracker/CVE-2016-9063 | |
| CVE-2015-5224 | util-linux @ 2.25.2-6 | https://security-tracker.debian.org/tracker/CVE-2015-5224 | |
| CVE-2016-1001 | sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which might allow local users to gain privileges via unspecified vectors, related to serverloop.c. | openssh @ 1:6.7p1-5+deb8u3 | https://security-tracker.debian.org/tracker/CVE-2016-10010 |
| CVE-2014-8130 | tiff @ 4.0.3-12.3+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2014-8130 | |
| CVE-2017-5563 | LibTIFF version 4.0.7 is vulnerable to a heap-based buffer over-read in tif_lzw.c resulting in DoS or code execution via a crafted bmp image to tools/bmp2tiff. | tiff @ 4.0.3-12.3+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2017-5563 |
| CVE-2008-3234 | sshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapshot, allows remote authenticated users to obtain access to arbitrary SELinux roles by appending a :/ (colon slash) sequence, followed by the role name, to the username. | openssh @ 1:6.7p1-5+deb8u3 | https://security-tracker.debian.org/tracker/CVE-2008-3234 |
| CVE-2016-4484 | The Debian initrd script for the cryptsetup package 2:1.7.3-2 and earlier allows physically proximate attackers to gain shell access via many log in attempts with an invalid password. | cryptsetup @ 2:1.6.6-5 | https://security-tracker.debian.org/tracker/CVE-2016-4484 |
| CVE-2016-9600 | jasper @ 1.900.1-debian1-2.4+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2016-9600 | |
| CVE-2007-2243 | OpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabled, allows remote attackers to determine the existence of user accounts by attempting to authenticate via S/KEY, which displays a different response if the user account exists, a similar issue to CVE-2001-1483. | openssh @ 1:6.7p1-5+deb8u3 | https://security-tracker.debian.org/tracker/CVE-2007-2243 |
| CVE-2017-8283 | dpkg-source in dpkg through 1.8.23 is able to use a non-GNU patch program and does not offer a protection mechanism for blank-indented diff hunks, which allows remote attackers to conduct directory traversal attacks via a crafted Debian source package, as demonstrated by use of dpkg-source on NetBSD. | dpkg @ 1.17.27 | https://security-tracker.debian.org/tracker/CVE-2017-8283 |
| CVE-2017-6850 | The jp2_cdef_destroy function in jp2_cod.c in JasPer before 2.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image. | jasper @ 1.900.1-debian1-2.4+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2017-6850 |
| CVE-2005-2541 | Tar 1.15.1 does not properly warn the user when extracting setuid or setgid files, which may allow local users or remote attackers to gain privileges. | tar @ 1.27.1-2+deb8u1 | https://security-tracker.debian.org/tracker/CVE-2005-2541 |
| CVE-2016-9394 | The jas_seq2d_create function in jas_seq.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file. | jasper @ 1.900.1-debian1-2.4+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2016-9394 |
| CVE-2010-4051 | The regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service (application crash) via a regular expression containing adjacent bounded repetitions that bypass the intended RE_DUP_MAX limitation, as demonstrated by a {10,}{10,}{10,}{10,}{10,} sequence in the proftpd.gnu.c exploit for ProFTPD, related to a "RE_DUP_MAX overflow." | glibc @ 2.19-18+deb8u7 | https://security-tracker.debian.org/tracker/CVE-2010-4051 |
| CVE-2016-9392 | The calcstepsizes function in jpc_dec.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file. | jasper @ 1.900.1-debian1-2.4+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2016-9392 |
| CVE-2017-7245 | Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 4) or possibly have unspecified other impact via a crafted file. | pcre3 @ 2:8.35-3.3+deb8u4 | https://security-tracker.debian.org/tracker/CVE-2017-7245 |
| CVE-2016-9389 | The jpc_irct and jpc_iict functions in jpc_mct.c in JasPer before 1.900.14 allow remote attackers to cause a denial of service (assertion failure). | jasper @ 1.900.1-debian1-2.4+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2016-9389 |
| CVE-2017-5499 | Integer overflow in libjasper/jpc/jpc_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted file. | jasper @ 1.900.1-debian1-2.4+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2017-5499 |
| CVE-2017-7246 | Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 268) or possibly have unspecified other impact via a crafted file. | pcre3 @ 2:8.35-3.3+deb8u4 | https://security-tracker.debian.org/tracker/CVE-2017-7246 |
| CVE-2016-9396 | The JPC_NOMINALGAIN function in jpc_t1cod.c in JasPer before 1.900.12 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors. | jasper @ 1.900.1-debian1-2.4+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2016-9396 |
| CVE-2010-0928 | OpenSSL 0.9.8i on the Gaisler Research LEON3 SoC on the Xilinx Virtex-II Pro FPGA uses a Fixed Width Exponentiation (FWE) algorithm for certain signature calculations, and does not verify the signature before providing it to a caller, which makes it easier for physically proximate attackers to determine the private key via a modified supply voltage for the microprocessor, related to a "fault-based attack." | openssl @ 1.0.1t-1+deb8u6 | https://security-tracker.debian.org/tracker/CVE-2010-0928 |
| CVE-2007-2768 | OpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, allows remote attackers to determine the existence of certain user accounts, which displays a different response if the user account exists and is configured to use one-time passwords (OTP), a similar issue to CVE-2007-2243. | openssh @ 1:6.7p1-5+deb8u3 | https://security-tracker.debian.org/tracker/CVE-2007-2768 |
| CVE-2017-5498 | libjasper/include/jasper/jas_math.h in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value. | jasper @ 1.900.1-debian1-2.4+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2017-5498 |
| CVE-2012-0039 | ** DISPUTED ** GLib 2.31.8 and earlier, when the g_str_hash function is used, computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table. NOTE: this issue may be disputed by the vendor; the existence of the g_str_hash function is not a vulnerability in the library, because callers of g_hash_table_new and g_hash_table_new_full can specify an arbitrary hash function that is appropriate for the application. | glib2.0 @ 2.42.1-1 | https://security-tracker.debian.org/tracker/CVE-2012-0039 |
| CVE-2016-9583 | jasper @ 1.900.1-debian1-2.4+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2016-9583 | |
| CVE-2016-9393 | The jpc_pi_nextrpcl function in jpc_t2cod.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via a crafted file. | jasper @ 1.900.1-debian1-2.4+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2016-9393 |
| CVE-2016-9539 | tools/tiffcrop.c in libtiff 4.0.6 has an out-of-bounds read in readContigTilesIntoBuffer(). Reported as MSVR 35092. | tiff @ 4.0.3-12.3+deb8u2 | https://security-tracker.debian.org/tracker/CVE-2016-9539 |
| CVE-2014-8166 | cups @ 1.7.5-11+deb8u1 | https://security-tracker.debian.org/tracker/CVE-2014-8166 | |
| CVE-2015-8985 | The pop_fail_stack function in the GNU C Library (aka glibc or libc6) allows context-dependent attackers to cause a denial of service (assertion failure and application crash) via vectors related to extended regular expression processing. | glibc @ 2.19-18+deb8u7 | https://security-tracker.debian.org/tracker/CVE-2015-8985 |
| CVE-2016-3177 | Multiple use-after-free and double-free vulnerabilities in gifcolor.c in GIFLIB 5.1.2 have unspecified impact and attack vectors. | giflib @ 4.1.6-11+deb8u1 | https://security-tracker.debian.org/tracker/CVE-2016-3177 |


Replace anything within <placeholder>
accordingly
$ psql #logs in to default database & default user
$ sudo -u <rolename:postgres> psql #logs in with a particular user
\du
\dt
\l
\c <database>
\d

or \d+

\q
$ createdb databasename


Form
different form elements
*
*
*
You did not yet define any services that could be provided via the new gateway.
Submit
Cancel
Reset
Javascript Libraries
Javascript Libraries