Debian DLA-418-1 : wordpress security update

WordPress versions 4.4.1 and earlier are affected by two security issues: a possible Side Request Forgery Vulnerability for certain local URIs, reported by Ronni Skansing; and an open redirection attack, reported by Shailesh Suthar. CVE-2016-2221 Wordpress could be vulnerable for an open...

[SECURITY] [DLA 416-1] eglibc security update

Package : eglibc Version : 2.11.3-4+deb6u11 CVE ID : CVE-2015-7547 Several vulnerabilities have been fixed in the Debian GNU C Library, eglibc: CVE-2015-7547 The Google Security Team and Red Hat discovered that the glibc host name resolver function, getaddrinfo, when processing AFUNSPEC queries f...

[SECURITY] [DLA 417-1] xdelta3 security update

Package : xdelta3 Version : 0y.dfsg-1+deb6u1 CVE ID : CVE-2014-9765 Debian Bug : 814067 It was discovered that there was a buffer overflow in in xdelta3, a diff utility which works with binary files. This vulnerability allowed arbitrary code execution from input files. For Debian 6 Squeeze, this...

DLA-416-1 eglibc - security update

Bulletin has no description...

DLA-418-1 wordpress - security update

Bulletin has no description...

DLA-417-1 xdelta3 - security update

Bulletin has no description...

[SECURITY] [DLA 415-1] cpio security update

Package : cpio Version : 2.11-4+deb6u2 CVE ID : CVE-2016-2037 Debian Bug : 812401 An out-of-bounds write was discovered in the parsing of cpio files. For Debian 6 "Squeeze", this issue has been fixed in cpio version 2.11-4+deb6u2. We recommend you to upgrade your cpio package. Learn more about th...

DLA-415-1 cpio - security update

Bulletin has no description...

[SECURITY] [DLA 411-1] eglibc security update

Package : eglibc Version : eglibc2.11.3-4+deb6u9 CVE ID : CVE-2014-9761 CVE-2015-8776 CVE-2015-8778 CVE-2015-8779 Several vulnerabilities have been fixed in the Debian GNU C Library, eglibc: CVE-2014-9761 The maths nan function wrongly handled payload strings, yielding to an unbounded stack...

DLA-411-1 eglibc - security update

Bulletin has no description...

[SECURITY] [DLA 410-1] openjdk-6 security update

Package : openjdk-6 Version : 6b38-1.13.10-1deb6u1 CVE ID : CVE-2015-7575 CVE-2015-8126 CVE-2015-8472 CVE-2016-0402 CVE-2016-0448 CVE-2016-0466 CVE-2016-0483 CVE-2016-0494 Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in breakout...

Debian DLA-409-1 : mysql-5.5 security update

Several issues have been found in the MySQL database server. These issues have been addressed by upgrading to the most recent upstream release of MySQL, 5.5.47. Please, look at the MySQL 5.5 Release Notes and Oracle's Critical Patch Update advisory for further details :...

Debian DLA-405-1 : tiff security update

Several security flaws have been found and solved in libtiff, a library that provides support for handling Tag Image File Format TIFF. These flaws concern out of bounds reads and writes in the LogL16Decode, LogLuvDecode24, LogLuvDecode32, LogLuvDecodeTile, LogL16Encode, LogLuvEncode24,...

[SECURITY] [DLA 408-1] gosa security update

Package : gosa Version : 2.6.11-3+squeeze5 CVE ID : CVE-2015-8771 GOsa is a combination of system-administrator and end-user web interface, designed to handle LDAP based setups. GOsa upstream reported a code injection vulnerability in the Samba plugin code of GOsa. During Samba password changes i...

DLA-409-1 mysql-5.5 - security update

Bulletin has no description...

DLA-408-1 gosa - security update

Bulletin has no description...

[SECURITY] [DLA 405-1] tiff security update

Package : tiff Version : 3.9.4-5+squeeze14 CVE ID : CVE-2015-8781 CVE-2015-8782 CVE-2015-8783 CVE-2015-8784 Debian Bug : Several security flaws have been found and solved in libtiff, a library that provides support for handling Tag Image File Format TIFF. These flaws concern out of bounds reads a...

DLA-405-1 tiff - security update

Bulletin has no description...

Debian DLA-404-1 : nginx security update

It was discovered that there was a invalid pointer deference in nginx, a small, powerful, scalable web/proxy server. An invalid pointer dereference might occur during DNS server response processing, allowing an attacker who is able to forge UDP packets from the DNS server to cause worker process...

[SECURITY] [DLA 404-1] nginx security update

Package : nginx Version : 0.7.67-3+squeeze4+deb6u1 CVE ID : CVE-2016-0742 Debian Bug : 812806 It was discovered that there was a invalid pointer deference in nginx, a small, powerful, scalable web/proxy server. An invalid pointer dereference might occur during DNS server response processing,...