[SECURITY] [DLA 381-1] icu security update

Package : icu Version : 4.4.1-8+squeeze5 CVE ID : CVE-2015-2632 A vulnerability was found in ICU, a set of libraries that provides Unicode and internationalization support. Integer overflows in the ICU layout engine made it possible to disclose information. For Debian 6 "Squeeze", this problem ha...

DLA-381-1 icu - security update

Bulletin has no description...

[SECURITY] [DLA 374-3] cacti regression update

Package : cacti Version : 0.8.7g-1+squeeze9+deb6u13 CVE ID : CVE-2015-8369 Debian Bug : 807599 It was discovered that there was a regression in the patch intended to fix CVE-2015-8369 in the recent upload of cacti 0.8.7g-1+squeeze9+deb6u12. For Debian 6 Squeeze, this issue has been fixed in cacti...

Debian DLA-376-1 : mono security update

Mono's string-to-double parser may crash, on specially crafted input. This could theoretically lead to arbitrary code execution. This issue has been fixed in Debian 6 Squeeze with the version 2.6.7-5.1+deb6u2 of mono. We recommend that you upgrade your mono packages. NOTE: Tenable Network Securit...

DLA-374-3 cacti - regression update

Bulletin has no description...

DLA-377-1 ia32-libs - security update

Bulletin has no description...

[SECURITY] [DLA 374-2] cacti regression update

Package : cacti Version : 0.8.7g-1+squeeze9+deb6u12 It was discovered that there was a regression in the patch intended to fix CVE-2015-8369 in the recent upload of cacti 0.8.7g-1+squeeze9+deb6u11. For Debian 6 Squeeze, this issue has been fixed in cacti version 0.8.7g-1+squeeze9+deb6u12. Regards...

[SECURITY] [DLA 376-1] mono security update

Package : mono Version : 2.6.7-5.1+deb6u2 CVE ID : CVE-2009-0689 Monos string-to-double parser may crash, on specially crafted input. This could theoretically lead to arbitrary code execution. This issue has been fixed in Debian 6 Squeeze with the version 2.6.7-5.1+deb6u2 of mono. We recommend th...

DLA-376-1 mono - security update

Bulletin has no description...

DLA-374-2 cacti - regression update

Bulletin has no description...

[SECURITY] [DLA 374-1] cacti security update

Package : cacti Version : 0.8.7g-1+squeeze9+deb6u11 CVE IDs : CVE-2015-8369 CVE-2015-8377 Debian Bug : 807599 It was discovered that there were SQL injection vulnerabilities in cacti, a web interface for graphing of monitoring systems. For Debian 6 Squeeze, this issue has been fixed in cacti...

DLA-374-1 cacti - security update

Bulletin has no description...

[SECURITY] [DLA 372-1] virtualbox-ose 3.2.x is no longer supported in Debian 6

Package : virtualbox-ose Oracle stopped supporting version 3.2 of VirtualBox last June. They also do not disclose enough information about vulnerabilities discovered and fixed in newer versions so that it is impossible for us to verify whether the vulnerability also applies to 3.2 and to backport...

[SECURITY] [DLA 371-1] foomatic-filters security update

Package : foomatic-filters Version : 4.0.5-6+squeeze2+deb6u12 CVE ID : CVE-2015-8560 Debian Bug : 807993 Adam Chester discovered that there was an injection vulnerability in foomatic-filters which is used by printer spoolers to convert incoming PostScript data into the printers native format. Thi...

DLA-372-1 virtualbox-ose - end of support

Bulletin has no description...

DLA-371-1 foomatic-filters - security update

Bulletin has no description...

[SECURITY] [DLA 368-1] grub2 security update

Package : grub2 Version : 1.98+20100804-14+squeeze2 CVE ID : CVE-2015-8370 Debian Bug : 807614 Hector Marco-Gisbert, from the Universitat Politècnica de València Cybersecurity Team, reported a buffer overflow in grub2 when checking password during bootup. For Debian 6 "Squeeze", this problem has...

DLA-368-1 grub2 - security update

Bulletin has no description...

[SECURITY] [DLA 367-1] kdelibs security update

Package : kdelibs Version : 3.5.10.dfsg.1-5+deb6u1 CVE ID : CVE-2015-7543 It has been reported that kdelibs uses the insecure mktemp function to create the temporary directory it uses to host user-specific sockets. It is thus possible for another user to hijack this temporary directory and gain...

[SECURITY] [DLA 366-1] arts security update

Package : arts Version : 1.5.9-3+deb6u1 CVE ID : CVE-2015-7543 It has been reported that arts uses the insecure mktemp function to create the temporary directory it uses to host user-specific sockets. It is thus possible for another user to hijack this temporary directory and gain IPC access it...