Debian: Security Advisory (DLA-443-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-233-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Xymon useradm Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Xymon useradm Command Execution', 'Description' = %q This module exploits a command injection vulnerability in Xymon versions before 4.3.25 which...

[SECURITY] Debian 6 Squeeze has reached end-of-life

The Debian Long Term Support LTS Team hereby announces that Debian 6 "Squeeze" support has reached its end-of-life on February 29, 2016, five years after its initial release on February 6, 2011. There will be no further security support for Debian 6.0. The LTS Team will prepare the transition to...

[SECURITY] Debian 6 Squeeze has reached end-of-life

The Debian Long Term Support LTS Team hereby announces that Debian 6 "Squeeze" support has reached its end-of-life on February 29, 2016, five years after its initial release on February 6, 2011. There will be no further security support for Debian 6.0. The LTS Team will prepare the transition to...

Debian DLA-443-1 : bsh security update

A remote code execution vulnerability was found in BeanShell, an embeddable Java source interpreter with object scripting language features. CVE-2016-2510: An application that includes BeanShell on the classpath may be vulnerable if another part of the application uses Java serialization or XStre...

Debian DLA-441-1 : pcre3 security update

HP's Zero Day Initiative has identified a vulnerability affecting the pcre3 package. It was assigned ZDI id ZDI-CAN-3542. A CVE identifier has not been assigned yet. PCRE Regular Expression Compilation Stack Buffer Overflow Remote Code Execution Vulnerability. PCRE did not validate that handling...

[SECURITY] [DLA 443-1] bsh security update

Package : bsh Version : 2.0b4-12+deb6u1 CVE ID : CVE-2016-2510 A remote code execution vulnerability was found in BeanShell, an embeddable Java source interpreter with object scripting language features. CVE-2016-2510: An application that includes BeanShell on the classpath may be vulnerable if...

[SECURITY] [DLA 441-1] pcre3 security update

Package : pcre3 Version : 8.02-1.1+deb6u1 Debian Bug : 815921 HPs Zero Day Initiative has identified a vulnerability affecting the pcre3 package. It was assigned ZDI id ZDI-CAN-3542. A CVE identifier has not been assigned yet. PCRE Regular Expression Compilation Stack Buffer Overflow Remote Code...

DLA-441-1 pcre3 - security update

Bulletin has no description...

[SECURITY] [DLA 438-1] libebml security update

Package : libebml Version : 0.7.7-3.1 CVE ID : CVE-2015-8790 CVE-2015-8791 Two security-related issues were fixed in libebml, a library for accessing the EBML format: CVE-2015-8790 The EbmlUnicodeString::UpdateFromUTF8 function in libEBML before 1.3.3 allows context-dependent attackers to obtain...

DLA-438-1 libebml - security update

Bulletin has no description...

[SECURITY] [DLA 435-1] tomcat6 security update

Package : tomcat6 Version : 6.0.45-1deb6u1 CVE ID : CVE-2015-5174 CVE-2015-5345 CVE-2015-5351 CVE-2016-0706 CVE-2016-0714 CVE-2016-0763 Tomcat 6, an implementation of the Java Servlet and the JavaServer Pages JSP specifications and a pure Java web server environment, was affected by multiple...

[SECURITY] [DLA 434-1] gtk+2.0 security update

Package : gtk+2.0 Version : 2.20.1-2+deb6u2 CVE ID : CVE-2015-4491 CVE-2015-7673 CVE-2015-7674 Gustavo Grieco discovered different security issues in Gtk+2.0s gdk-pixbuf. CVE-2015-4491 Heap overflow when processing BMP images which may allow to execute of arbitrary code via malformed images...

DLA-434-1 gtk+2.0 - security update

Bulletin has no description...

[SECURITY] [DLA 431-1] libfcgi-perl security update

Package : libfcgi-perl Version : 0.71-1+squeeze1+deb6u1 CVE ID : CVE-2012-6687 Debian Bug : 815840 It was discovered that there was a remote denial of service in libfcgi-perl, a helper library for implementing the FastCGI web server protocol for Perl. For Debian 6 Squeeze, this issue has been fix...

[SECURITY] [DLA 430-1] libfcgi security update

Package : libfcgi Version : 2.4.0-8+deb6u1 CVE ID : CVE-2012-6687 Debian Bug : 681591 It was discovered that there was a remote denial of service in libfcgi, a library for implementing the FastCGI web server protocol. For Debian 6 Squeeze, this issue has been fixed in libfcgi version...

DLA-430-1 libfcgi - security update

Bulletin has no description...

DLA-431-1 libfcgi-perl - security update

Bulletin has no description...

[SECURITY] [DLA 429-1] pixman security update

Package : pixman Version : 0.16.4-1+deb6u2 CVE ID : CVE-2014-9766 It was discovered that there was a buffer overflow in pixman, a pixel-manipulation library for X and cairo. For Debian 6 Squeeze, this issue has been fixed in pixman version 0.16.4-1+deb6u2. Regards, - -- ,. : : : Chris Lamb...