Debian DLA-316-1 : eglibc security update

Several vulnerabilities have been discovered in eglibc that may lead to a privilege escalation or denial of service. Glibc pointer guarding weakness A weakness in the dynamic loader prior has been found. The issue is that the LDPOINTERGUARD in the environment is not sanitized allowing local...

[SECURITY] [DLA 314-1] cups security update

Package : cups Version : 1.4.4-7+squeeze10 CVE ID : CVE-2015-3258 CVE-2015-3279 Petr Sklenar of Red Hat discovered that the texttopdf tool, part of cups filters, was susceptible to multiple heap-based buffer and integer overflows due to improper handling of print jobs. This could allow remote...

DLA-314-1 cups - security update

Bulletin has no description...

[SECURITY] [DLA 309-1] openldap security update

Package : openldap Version : 2.4.23-7.3+deb6u2 CVE ID : CVE-2015-6908 Debian Bug : 798622 Denis Andzakovic discovered that OpenLDAP, a free implementation of the Lightweight Directory Access Protocol, does not properly handle BER data. An unauthenticated remote attacker can use this flaw to cause...

DLA-309-1 openldap - security update

Bulletin has no description...

[SECURITY] [DLA 308-1] bind9 security update

Package : bind9 Version : 1:9.7.3.dfsg-1squeeze17 CVE ID : CVE-2015-5722 Hanno Böck from the Fuzzing Project discovered that incorrect validation of DNSSEC-signed records in the Bind DNS server could result in denial of service. For Debian 6 “Squeeze”, this issue has been fixed in bind9 version...

DLA-308-1 bind9 - security update

Bulletin has no description...

DLA-306-1 libvdpau - security update

Bulletin has no description...

DLA-304-1 openslp-dfsg - security update

Bulletin has no description...

Debian DLA-302-1 : zendframework security update

Dawid Golunski discovered that when running under PHP-FPM in a threaded environment, Zend Framework, a PHP framework, did not properly handle XML data in multibyte encoding. This could be used by remote attackers to perform an XML External Entity attack via crafted XML data. For Debian 6 'Squeeze...

DLA-303-1 openjdk-6 - security update

Bulletin has no description...

[SECURITY] [DLA 300-1] ruby1.9.1 security update

Package : ruby1.9.1 Version : 1.9.2.0-2+deb6u7 CVE ID : CVE-2009-5147 "sheepman" fixed a vulnerability in Ruby 1.9.1: DL::dlopen could open a library with tainted name even if $SAFE 0. For Debian 6 “Squeeze”, this issue has been fixed in ruby1.9.1 1.9.2.0-2+deb6u7...

[SECURITY] [DLA 299-1] ruby1.8 security update

Package : ruby1.8 Version : 1.8.7.302-2squeeze5 CVE ID : CVE-2009-5147 "sheepman" fixed a vulnerability in Ruby 1.8: DL::dlopen could open a library with tainted name even if $SAFE 0. For Debian 6 “Squeeze”, this issue has been fixed in ruby1.8 1.8.7.302-2squeeze5...

DLA-300-1 ruby1.9.1 - security update

Bulletin has no description...

DLA-299-1 ruby1.8 - security update

Bulletin has no description...

Debian DLA-295-1 : conntrack security update

'jann' discovered that in certain configurations, if the relevant conntrack kernel module is not loaded, conntrackd will crash when handling DCCP, SCTP or ICMPv6 packets. In the version found in Debian 6.0 'squeeze', this vulnerability only applies to ICMPv6. For the oldoldstable distribution...

DLA-295-1 conntrack - security update

Bulletin has no description...

[SECURITY] [DLA 291-1] libidn security update

Package : libidn Version : 1.15-2+deb6u2 Adam Sampson found a vulnerability in GNU Libidn, library that implements the IETF IDN specifications. Libdin incorrectly handled invalid UTF-8 input, causing it to bad free. This issue was introduced by the fix for CVE-2015-2059. For Debian 6 “Squeeze”,...

Debian DLA-289-1 : remind security update

Alexander Keller discovered a buffer overflow issue in remind, a tool for sophisticatedly reminding you of upcoming events. If running Debian squeeze LTS, we recommend upgrading remind to the latest version provided. NOTE: Tenable Network Security has extracted the preceding description block...

[SECURITY] [DLA 289-1] remind security update

Package : remind Version : 03.01.05-2+deb6u1 CVE ID : CVE-2015-5957 Alexander Keller discovered a buffer overflow issue in remind, a tool for sophisticatedly reminding you of upcoming events. If running Debian squeeze LTS, we recommend upgrading remind to the latest version provided. mike gabriel...