Debian DLA-375-1 : ia32-libs security update

The ia32-libs package contains 32 bit versions of various libraries for use on 64 bit systems. This update rolls in all security fixes made to these libraries since the previous update of ia32-libs in Squeeze LTS. NOTE: Tenable Network Security has extracted the preceding description block direct...

DLA-359-1 mysql-5.5 - packages as an option announcement

Bulletin has no description...

Debian DLA-357-1 : libphp-snoopy security update

It was discovered that missing input sanitizing in Snoopy, a PHP class that simulates a web browser may result in the execution of arbitrary commands. For the oldoldstable distribution squeeze-lts, this problem has been fixed in version 2.0.0-1deb6u1. We recommend that you upgrade your...

DLA-357-1 libphp-snoopy - security update

Bulletin has no description...

[SECURITY] [DLA 309-1] openldap security update

Package : openldap Version : 2.4.23-7.3+deb6u2 CVE ID : CVE-2015-6908 Debian Bug : 798622 Denis Andzakovic discovered that OpenLDAP, a free implementation of the Lightweight Directory Access Protocol, does not properly handle BER data. An unauthenticated remote attacker can use this flaw to cause...

DLA-309-1 openldap - security update

Bulletin has no description...

Debian DLA-289-1 : remind security update

Alexander Keller discovered a buffer overflow issue in remind, a tool for sophisticatedly reminding you of upcoming events. If running Debian squeeze LTS, we recommend upgrading remind to the latest version provided. NOTE: Tenable Network Security has extracted the preceding description block...

[SECURITY] [DLA 289-1] remind security update

Package : remind Version : 03.01.05-2+deb6u1 CVE ID : CVE-2015-5957 Alexander Keller discovered a buffer overflow issue in remind, a tool for sophisticatedly reminding you of upcoming events. If running Debian squeeze LTS, we recommend upgrading remind to the latest version provided. mike gabriel...

[SECURITY] [DLA 288-1] openssh security update

Package : openssh Version : 1:5.5p1-6+squeeze6 CVE ID : CVE-2015-5352 CVE-2015-5600 Debian Bug : 790798 793616 A recent upload of OpenSSH to Debian squeeze-lts fixes two security issues. CVE-2015-5352 It was reported that when forwarding X11 connections with ForwardX11Trusted=no, connections made...

DLA-289-1 remind - security update

Bulletin has no description...

[SECURITY] [DLA 287-1] ia32-libs security update

Package : ia32-libs, ia32-libs-gtk Version : 20150804 The ia32-libs and ia32-libs-gtk packages contain 32 bit versions of various libraries for use on 64 bit systems. This update rolls in all security fixes made to these libraries since the previous update of ia32-libs and ia32-libs-gtk in Squeez...

DLA-287-1 ia32-libs - security update

Bulletin has no description...

Debian DLA-278-2 : cacti regression update

The last update of cacti in squeeze-lts, version 0.8.7g-1+squeeze7, had two regressions that caused certain output of scripts to not be processed and caused the save button of graphs.php to not save the changes. The regressions have been fixed in 0.8.7g-1+squeeze8. NOTE: Tenable Network Security...

[SECURITY] [DLA 278-2] cacti regression update

Package : cacti Version : 0.8.7g-1+squeeze8 The last update of cacti in squeeze-lts, version 0.8.7g-1+squeeze7, had two regressions that caused certain output of scripts to not be processed and caused the save button of graphs.php to not save the changes. The regressions have been fixed in...

Debian DLA-268-1 : virtualbox-ose security update (Venom)

Three vulnerabilities have been fixed in the Debian squeeze-lts version of VirtualBox package name: virtualbox-ose, a x86 virtualisation solution. CVE-2015-0377 Avoid VirtualBox allowing local users to affect availability via unknown vectors related to Core, which might result in denial of servic...

[SECURITY] [DLA 268-1] virtualbox-ose security update

Package : virtualbox-ose Version : 3.2.10-dfsg-1+squeeze4 CVE ID : CVE-2015-0377 CVE-2015-0418 CVE-2015-3456 Debian Bug : 775888 785424 Three vulnerabilities have been fixed in the Debian squeeze-lts version of VirtualBox package name: virtualbox-ose, a x86 virtualisation solution. CVE-2015-0377...

Debian DLA-266-1 : libxml2 security update

This upload to Debian squeeze-lts fixes three issues found in the libxml2 package. 1 CVE-2015-1819 / 782782 Florian Weimer from Red Hat reported an issue against libxml2, where a parser which uses libxml2 chokes on a crafted XML document, allocating gigabytes of data. This is a fine line issue...

Debian DLA-265-2 : pykerberos regression update

It was discovered that the original fix did not disable KDC verification support by default and changed checkPassowrd's signature. This update corrects this. This was the text of the original advisiory : Martin Prpic has reported the possibility of a man-in-the-middle attack in the pykerberos cod...

DLA-268-1 virtualbox-ose - security update

Bulletin has no description...

[SECURITY] [DLA 266-1] libxml2 security update

Package : libxml2 Version : 2.7.8.dfsg-2+squeeze12 CVE ID : CVE-2015-1819 Debian Bug : 782782 782985 783010 This upload to Debian squeeze-lts fixes three issues found in the libxml2 package. 1 CVE-2015-1819 / 782782 Florian Weimer from Red Hat reported an issue against libxml2, where a parser whi...