Drips.sol: drips can be squeezed from before drips.updateTime which allows to drain ALL funds from the protocol

Lines of code Vulnerability details Impact The Drips.squeezeDrips function allows to receive drips from the currently running cycle from a single lender. Drips are configured via the Drips.setDrips function . A Drip can be configured to start at any time. The protocol caps the start time at the...

Debian unstable and Debian squeeze Xpdf arbitrary file deletion vulnerability

Debian unstable and Debian squeeze are both free operating systems created by the Debian Project Collaboration with Linux or FreeBSD as the kernel. foo2zjs is one of the printer drivers. xpdf is an open-source PDF reader integrated into it. zxpdf is one of the command script. A security...

foo2zjs Arbitrary File Overwrite Vulnerability

Ubuntu is a GNU/Linux operating system for desktop applications developed by Canonical and the Ubuntu Foundation. Debian unstable and Debian squeeze are both free operating systems created by the Debian Project Collaboration with Linux or FreeBSD as the kernel. foo2zjs is one of the printer...

DLA-445-2 squid3 - regression update

Bulletin has no description...

[SECURITY] Debian 6 Squeeze has reached end-of-life

The Debian Long Term Support LTS Team hereby announces that Debian 6 "Squeeze" support has reached its end-of-life on February 29, 2016, five years after its initial release on February 6, 2011. There will be no further security support for Debian 6.0. The LTS Team will prepare the transition to...

[SECURITY] Debian 6 Squeeze has reached end-of-life

The Debian Long Term Support LTS Team hereby announces that Debian 6 "Squeeze" support has reached its end-of-life on February 29, 2016, five years after its initial release on February 6, 2011. There will be no further security support for Debian 6.0. The LTS Team will prepare the transition to...

Debian DLA-443-1 : bsh security update

A remote code execution vulnerability was found in BeanShell, an embeddable Java source interpreter with object scripting language features. CVE-2016-2510: An application that includes BeanShell on the classpath may be vulnerable if another part of the application uses Java serialization or XStre...

Debian DLA-441-1 : pcre3 security update

HP's Zero Day Initiative has identified a vulnerability affecting the pcre3 package. It was assigned ZDI id ZDI-CAN-3542. A CVE identifier has not been assigned yet. PCRE Regular Expression Compilation Stack Buffer Overflow Remote Code Execution Vulnerability. PCRE did not validate that handling...

Debian DLA-445-2 : squid3 regression update

The backported patch to solve CVE-2016-2569 yielded to failed assertions that made squid3 to crash when closing connections. The fix for this CVE strongly relies on exception handling present in more recent versions of squid3, that I failed to identify in the previous update. I have reverted the...

[SECURITY] [DLA 443-1] bsh security update

Package : bsh Version : 2.0b4-12+deb6u1 CVE ID : CVE-2016-2510 A remote code execution vulnerability was found in BeanShell, an embeddable Java source interpreter with object scripting language features. CVE-2016-2510: An application that includes BeanShell on the classpath may be vulnerable if...

DLA-445-1 squid3 - security update

Bulletin has no description...

DLA-441-1 pcre3 - security update

Bulletin has no description...

[SECURITY] [DLA 438-1] libebml security update

Package : libebml Version : 0.7.7-3.1 CVE ID : CVE-2015-8790 CVE-2015-8791 Two security-related issues were fixed in libebml, a library for accessing the EBML format: CVE-2015-8790 The EbmlUnicodeString::UpdateFromUTF8 function in libEBML before 1.3.3 allows context-dependent attackers to obtain...

[SECURITY] [DLA 436-1] ia32-libs security update

Package : ia32-libs, ia32-libs-gtk Version : 20160228 The ia32-libs and ia32-libs-gtk packages contain 32 bit versions of various libraries for use on 64 bit systems. This update rolls in all security fixes made to these libraries since the start of Squeeze LTS...

DLA-438-1 libebml - security update

Bulletin has no description...

DLA-436-1 ia32-libs - security update

Bulletin has no description...

DLA-437-1 clamav - security update

Bulletin has no description...

DLA-434-1 gtk+2.0 - security update

Bulletin has no description...

Debian DLA-432-1 : postgresql-8.4 update

Several bugs were discovered in PostgreSQL, a relational database server system. The 8.4 branch is EOLed upstream, but still present in Debian squeeze. This new LTS minor version contains fixes that were applied upstream to the 9.1.20 version, backported to 8.4.22 which was the last version...

[SECURITY] [DLA-432-1] postgresql-8.4 update

Package : postgresql-8.4 Version : 8.4.22lts6-0+deb6u1 Several bugs were discovered in PostgreSQL, a relational database server system. The 8.4 branch is EOLed upstream, but still present in Debian squeeze. This new LTS minor version contains fixes that were applied upstream to the 9.1.20 version...