1048 matches found
Debian DLA-402-1 : tiff security update
Two security flaws have been found and solved in libtiff, library that provides support for handling Tag Image File Format TIFF. These flaws concern out of bounds reads in the TIFFRGBAImage interface, when parsing unsupported values related to LogLUV and CIELab. CVE-2015-8665 was reported by...
DLA-404-1 nginx - security update
Bulletin has no description...
[SECURITY] [DLA 403-1] radicale security update
Package : radicale Version : 0.3-2+deb6u1 CVE ID : CVE-2015-8747 CVE-2015-8748 Debian Bug : 809920 Several issues have been discovered by Unrud in Radicale, a calendar and addressbook server. A remote attacker could exploit these vulnerabilities and call arbitrary functions by sending crafted HTT...
DLA-403-1 radicale - security update
Bulletin has no description...
DLA-402-1 tiff - security update
Bulletin has no description...
Debian DLA-400-1 : pound security update (BEAST) (POODLE)
This update fixes certain known vulnerabilities in pound in squeeze-lts by backporting the version in wheezy. CVE-2009-3555 The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services IIS 7.0, modssl in the Apache HTTP Server 2.2.14 and...
[SECURITY] [DLA 400-1] pound security update
Package : pound Version : 2.6-1+deb6u1 CVE ID : CVE-2009-3555 CVE-2011-3389 CVE-2012-4929 CVE-2014-3566 This update fixes certain known vulnerabilities in pound in squeeze-lts by backporting the version in wheezy. CVE-2009-3555 The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as...
[SECURITY] [DLA 385-2] isc-dhcp regression update
Package : isc-dhcp Version : 4.1.1-P1-15+squeeze10 CVE ID : CVE-2015-8605 Debian Bug : 810875 With the previous upload of the isc-dhcp package to Debian Squeeze LTS two issues got introduced into LTS that are resolved by this upload. 1 CVE-2015-8605 had only been resolved for the LDAP variant of...
DLA-395-1 librsvg - security update
Bulletin has no description...
Debian DLA-389-1 : giflib security update
It was discovered that a maliciously crafted GIF can crash the giffix utility which is part of giflib-tools. We recommend that you upgrade your giflib-tools package to version 4.1.6-9+deb6u1 Debian squeeze LTS. NOTE: Tenable Network Security has extracted the preceding description block directly...
DLA-393-1 srtp - security update
Bulletin has no description...
[SECURITY] [DLA 391-1] prosody security update
Package : prosody Version : 0.7.0-1squeeze1+deb6u1 CVE ID : CVE-2016-1232 It was discovered that in prosody, a Lightweight Jabber/XMPP server, used a weak PRNG in the moddialback module. For Debian 6 Squeeze, this issue has been fixed in prosody version 0.7.0-1squeeze1+deb6u1. Regards, - -- ,. : ...
[SECURITY] [DLA 389-1] giflib security update
Package : giflib Version : 4.1.6-9+deb6u1 CVE ID : CVE-2015-7555 Debian Bug : 808704 It was discovered that a maliciously crafted GIF can crash the giffix utility which is part of giflib-tools. We recommend that you upgrade your giflib-tools package to version 4.1.6-9+deb6u1 Debian squeeze LTS...
[SECURITY] [DLA 388-1] dwarfutils security update
Package : dwarfutils Version : 20100214-1+deb6u1 CVE ID : CVE-2015-8750 It was discovered that there was a NULL deference in dwarfutils, a tool to dump DWARF debug information from ELF objects. For Debian 6 Squeeze, this issue has been fixed in dwarfutils version 20100214-1+deb6u1. Regards, - -- ...
DLA-389-1 giflib - security update
Bulletin has no description...
DLA-388-1 dwarfutils - security update
Bulletin has no description...
Debian DLA-385-2 : isc-dhcp regression update
With the previous upload of the isc-dhcp package to Debian Squeeze LTS two issues got introduced into LTS that are resolved by this upload. 1 CVE-2015-8605 had only been resolved for the LDAP variant of the DHCP server package built from the isc-dhcp source package. With upload of version...
[SECURITY] [DLA 386-1] cacti security update
Package : cacti Version : 0.8.7g-1+squeeze9+deb6u14 CVE ID : CVE-2015-8604 It was discovered that there was another SQL injection vulnerability in cacti, a web interface for graphing monitoring systems. For Debian 6 Squeeze, this issue has been fixed in cacti version 0.8.7g-1+squeeze9+deb6u14...