604 matches found
DLA-319-1 freetype - security update
Bulletin has no description...
[SECURITY] [DLA 314-1] cups security update
Package : cups Version : 1.4.4-7+squeeze10 CVE ID : CVE-2015-3258 CVE-2015-3279 Petr Sklenar of Red Hat discovered that the texttopdf tool, part of cups filters, was susceptible to multiple heap-based buffer and integer overflows due to improper handling of print jobs. This could allow remote...
Debian DLA-306-1 : libvdpau security update
Florian Weimer of Red Hat Product Security discovered that libvdpau, the VDPAU wrapper library, did not properly validate environment variables, allowing local attackers to gain additional privileges. For Debian 6 'Squeeze', these problems have been fixed in libvdpau version 0.4.1-2+deb6u1. See D...
[SECURITY] [DLA 308-1] bind9 security update
Package : bind9 Version : 1:9.7.3.dfsg-1squeeze17 CVE ID : CVE-2015-5722 Hanno Böck from the Fuzzing Project discovered that incorrect validation of DNSSEC-signed records in the Bind DNS server could result in denial of service. For Debian 6 “Squeeze”, this issue has been fixed in bind9 version...
DLA-308-1 bind9 - security update
Bulletin has no description...
DLA-306-1 libvdpau - security update
Bulletin has no description...
DLA-304-1 openslp-dfsg - security update
Bulletin has no description...
Debian DLA-303-1 : openjdk-6 security update (Bar Mitzvah) (Logjam)
Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in the execution of arbitrary code, breakouts of the Java sandbox, information disclosure, denial of service or insecure cryptography. For Debian 6 'Squeeze', these issues have been...
[SECURITY] [DLA 303-1] openjdk-6 security update
Package : openjdk-6 Version : 6b36-1.13.8-1deb6u1 CVE ID : CVE-2015-2590 CVE-2015-2601 CVE-2015-2621 CVE-2015-2625 CVE-2015-2628 CVE-2015-2632 CVE-2015-2808 CVE-2015-4000 CVE-2015-4731 CVE-2015-4732 CVE-2015-4733 CVE-2015-4748 CVE-2015-4749 CVE-2015-4760 Several vulnerabilities have been discover...
Debian DLA-302-1 : zendframework security update
Dawid Golunski discovered that when running under PHP-FPM in a threaded environment, Zend Framework, a PHP framework, did not properly handle XML data in multibyte encoding. This could be used by remote attackers to perform an XML External Entity attack via crafted XML data. For Debian 6 'Squeeze...
[SECURITY] [DLA 302-1] zendframework security update
Package : zendframework Version : 1.10.6-1squeeze5 CVE ID : CVE-2015-5161 Dawid Golunski discovered that when running under PHP-FPM in a threaded environment, Zend Framework, a PHP framework, did not properly handle XML data in multibyte encoding. This could be used by remote attackers to perform...
DLA-303-1 openjdk-6 - security update
Bulletin has no description...
[SECURITY] [DLA 300-1] ruby1.9.1 security update
Package : ruby1.9.1 Version : 1.9.2.0-2+deb6u7 CVE ID : CVE-2009-5147 "sheepman" fixed a vulnerability in Ruby 1.9.1: DL::dlopen could open a library with tainted name even if $SAFE 0. For Debian 6 “Squeeze”, this issue has been fixed in ruby1.9.1 1.9.2.0-2+deb6u7...
[SECURITY] [DLA 299-1] ruby1.8 security update
Package : ruby1.8 Version : 1.8.7.302-2squeeze5 CVE ID : CVE-2009-5147 "sheepman" fixed a vulnerability in Ruby 1.8: DL::dlopen could open a library with tainted name even if $SAFE 0. For Debian 6 “Squeeze”, this issue has been fixed in ruby1.8 1.8.7.302-2squeeze5...
DLA-300-1 ruby1.9.1 - security update
Bulletin has no description...
DLA-299-1 ruby1.8 - security update
Bulletin has no description...
[SECURITY] [DLA 291-1] libidn security update
Package : libidn Version : 1.15-2+deb6u2 Adam Sampson found a vulnerability in GNU Libidn, library that implements the IETF IDN specifications. Libdin incorrectly handled invalid UTF-8 input, causing it to bad free. This issue was introduced by the fix for CVE-2015-2059. For Debian 6 “Squeeze”,...
[SECURITY] [DLA 286-1] squid3 security update
Package : squid3 Version : 3.1.6-1.2+squeeze5 CVE ID : CVE-2015-5400 Debian Bug : 793128 Alex Rousskov discovered that Squid configured with cachepeer and operating on explicit proxy traffic does not correctly handle CONNECT method peer responses. In some configurations, it allows remote clients ...