DLA-349-1 python-django - security update

Bulletin has no description...

Debian DLA-346-1 : openjdk-6 security update

Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform. These vulnerabilities relate to execution of arbitrary code, breakouts of the Java sandbox, information disclosure and denial of service. For Debian 6 'Squeeze', these problems have been fixed ...

[SECURITY] [DLA 346-1] openjdk-6 security update

Package : openjdk-6 Version : 6b37-1.13.9-1deb6u1 CVE ID : CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4835 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4872 CVE-2015-4881 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4903 CVE-2015-4911 Several...

DLA-346-1 openjdk-6 - security update

Bulletin has no description...

[SECURITY] [DLA 344-1] nspr security update

Package : nspr Version : 4.8.6-1+squeeze3 CVE ID : CVE-2015-7183 Google security engineer Ryan Sleevi found a vulnerability in the NetScape Portable Runtime Library NSPR. NSPR allocated memory without specific checks, making it possible for remote attackers to cause a Denial of Service or execute...

[SECURITY] [DLA 342-1] openafs security update

Package : openafs Version : 1.4.12.1+dfsg-4+squeeze4 CVE ID : CVE-2015-3282 CVE-2015-3283 CVE-2015-3285 CVE-2015-6587 CVE-2015-7762 CVE-2015-7763 Several vulnerabilities have been found and solved in the distributed file system OpenAFS: CVE-2015-3282 vos leaked stack data clear on the wire when...

DLA-342-1 openafs - security update

Bulletin has no description...

Debian DLA-337-1 : busybox security update

busybox, a collection of tiny utilities for small and embedded systems, was vulnerable to crashing when handling a specially crafted zip file. The issue was discovered by Gustavo Grieco. For Debian 6 Squeeze, this issue has been fixed in busybox version 1.17.1-8+deb6u11. NOTE: Tenable Network...

[SECURITY] [DLA 338-1] xscreensaver security update

Package : xscreensaver Version : 5.11-1+deb6u11 CVE ID : CVE-2015-8025 Debian Bug : 802914 xscreensaver, a screensaver daemon and frontend for X11 was vulnerable to crashing when hot-swapping monitors. For Debian 6 Squeeze, this issue has been fixed in xscreensaver version 5.11-1+deb6u11. Regards...

[SECURITY] [DLA 337-1] busybox security update

Package : busybox Version : 1:1.17.1-8+deb6u11 Debian Bug : 803097 busybox, a collection of tiny utilities for small and embedded systems, was vulnerable to crashing when handling a specially crafted zip file. The issue was discovered by Gustavo Grieco. For Debian 6 Squeeze, this issue has been...

DLA-338-1 xscreensaver - security update

Bulletin has no description...

Debian DLA-333-1 : cakephp security update

CakePHP, an open source web application framework for PHP, was vulnerable to SSRF Server Side Request Forgery attacks. Remote attacker can utilize it for at least DoS Denial of Service attacks, if the target application accepts XML as an input. It is caused by insecure design of Cake's Xml class...

[SECURITY] [DLA 333-1] cakephp security update

Package : cakephp Version : 1.3.2-1.1+deb6u11 CakePHP, an open-source web application framework for PHP, was vulnerable to SSRF Server Side Request Forgery attacks. Remote attacker can utilize it for at least DoS Denial of Service attacks, if the target application accepts XML as an input. It is...

DLA-333-1 cakephp - security update

Bulletin has no description...

DLA-330-1 unzip - security update

Bulletin has no description...

DLA-332-1 optipng - security update

Bulletin has no description...

DLA-328-1 tzdata - new upstream version

Bulletin has no description...

[SECURITY] [DLA 326-1] zendframework security update

Package : zendframework Version : 1.10.6-1squeeze6 CVE ID : CVE-2015-7695 The PDO adapters of Zend Framework 1 did not filter null bytes values in SQL statements. A PDO adapter can treat null bytes in a query as a string terminator, allowing an attacker to add arbitrary SQL following a null byte,...

DLA-326-1 zendframework - security update

Bulletin has no description...

[SECURITY] [DLA 319-1] freetype security update

Package : freetype Version : 2.4.2-2.1+squeeze6 CVE ID : CVE-2014-9745 CVE-2014-9746 CVE-2014-9747 Debian Bug : 798619 798620 Sergey Gorbaty reported issues related to the FreeType font engine. FreeType improperly handled certain malformed font files, allowing remote attackers to cause a Denial o...