1048 matches found
Debian DLA-152-1 : postgresql-8.4 update
Several vulnerabilities were discovered in PostgreSQL, a relational database server system. The 8.4 branch is EOLed upstream, but still present in Debian squeeze. This new LTS minor version contains the fixes that were applied upstream to the 9.0.19 version, backported to 8.4.22 which was the las...
Debian DLA-158-1 : request-tracker3.8 security update
Multiple vulnerabilities have been discovered in Request Tracker, an extensible trouble-ticket tracking system. The Common Vulnerabilities and Exposures project identifies the following problems : CVE-2014-9472 Christian Loos discovered a remote denial of service vulnerability, exploitable via th...
Debian DLA-139-1 : eglibc security update (GHOST)
A vulnerability has been fixed in eglibc, Debian's version of the GNU C library : CVE-2015-0235 Qualys discovered that the gethostbyname and gethostbyname2 functions were subject to a buffer overflow if provided with a crafted IP address argument. This could be used by an attacker to execute...
Debian DLA-92-1 : tomcat-native security followup update
This is an upgrade from tomcat-native 1.1.20 the version previously available in squeeze to 1.1.31, the full list of changes between these versions can be seen in the upstream changelog, which is available online at http://tomcat.apache.org/native-doc/miscellaneous/changelog.html This update itse...
Debian DLA-147-1 : wpasupplicant security update
It was discovered that wpasupplicant could be tricked into executing arbitrary commands when calling action scripts. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as...
Debian DLA-118-1 : linux-2.6 security update
Non-maintainer upload by the Squeeze LTS and Kernel Teams. New upstream stable release 2.6.32.65, see http://lkml.org/lkml/2014/12/13/81 for more information. The stable release 2.6.32.65 includes the following new commits compared to the previous 2.6.32-48squeeze9 package : - USB: whiteheat: Add...
Debian DLA-114-1 : heirloom-mailx security update
Two security vulnerabilities were discovered in Heirloom mailx, an implementation of the 'mail' command : CVE-2004-2771 mailx interprets interprets shell meta-characters in certain email addresses. CVE-2014-7844 An unexpected feature of mailx treats syntactically valid email addresses as shell...
Debian DLA-143-1 : python-django security update
Multiple security issues have been found in Django: https://www.djangoproject.com/weblog/2015/jan/13/security/ For Debian 6 Squeeeze, they have been fixed in version 1.2.3-3+squeeze12 of python-django. Here is what the upstream developers have to say about those issues : CVE-2015-0219 - WSGI head...
DLA-180-1 gnutls26 - security update
Bulletin has no description...
DLA-179-1 tzdata - new upstream version
Bulletin has no description...
DLA-177-1 openssl - security update
Bulletin has no description...
DLA-176-1 mono - security update
Bulletin has no description...
DLA-173-1 putty - security update
Bulletin has no description...
DLA-172-1 libextlib-ruby - security update
Bulletin has no description...
DLA-171-1 libssh2 - security update
Bulletin has no description...
DLA-115-2 gosa - regression update
Bulletin has no description...
DLA-169-1 axis - security update
Bulletin has no description...
DLA-168-1 konversation - security update
Bulletin has no description...