1065 matches found
DLA-329-1 postgresql-8.4 - security update
Bulletin has no description...
DLA-328-1 tzdata - new upstream version
Bulletin has no description...
[SECURITY] [DLA 326-1] zendframework security update
Package : zendframework Version : 1.10.6-1squeeze6 CVE ID : CVE-2015-7695 The PDO adapters of Zend Framework 1 did not filter null bytes values in SQL statements. A PDO adapter can treat null bytes in a query as a string terminator, allowing an attacker to add arbitrary SQL following a null byte,...
DLA-326-1 zendframework - security update
Bulletin has no description...
DLA-325-1 linux-2.6 - security update
Bulletin has no description...
[SECURITY] [DLA 323-1] fuseiso security update
Package : fuseiso Version : 20070708-2+deb6u1 Debian Bug : 779047 The following two issues have recently been fixed in Debian LTS squeeze for the fuseiso package. Issue 1 An integer overflow, leading to a heap-based buffer overflow flaw was found in the way FuseISO, a FUSE module to mount ISO...
Debian DLA-321-1 : wordpress security update
Various security issue have been fixed in the Debian LTS squeeze version of the Wordpress content management system. CVE-2015-5714 A cross-site scripting vulnerability when processing shortcode tags has been discovered. The issue has been fixed by not allowing unclosed HTML elements in attributes...
DLA-323-1 fuseiso - security update
Bulletin has no description...
[SECURITY] [DLA 319-1] freetype security update
Package : freetype Version : 2.4.2-2.1+squeeze6 CVE ID : CVE-2014-9745 CVE-2014-9746 CVE-2014-9747 Debian Bug : 798619 798620 Sergey Gorbaty reported issues related to the FreeType font engine. FreeType improperly handled certain malformed font files, allowing remote attackers to cause a Denial o...
[SECURITY] [DLA 288-2] openssh regression update
Package : openssh Version : 1:5.5p1-6+squeeze7 CVE ID : CVE-2015-5600 In Debian LTS squeeze, the fix for CVE-2015-56001 in openssh 1:5.5p1-6+squeeze7 breaks authentication mechanisms that rely on the keyboard-interactive method. Thanks to Colin Watson for making aware of that. The patch fixing...
Debian DLA-317-1 : vorbis-tools security update
Various issues have been fixed in Debian LTS squeeze for package vorbis-tools. CVE-2014-9638 A crafted WAV file with number of channels set to 0 will cause oggenc to crash due to a division by zero issue. This issue has been fixed upstream by providing a fix for CVE-2014-9639. Reported upstream b...
[SECURITY] [DLA 317-1] vorbis-tools security update
Package : vorbis-tools Version : 1.4.0-1+deb6u1 CVE ID : CVE-2014-9638 CVE-2014-9639 CVE-2014-9640 CVE-2015-6749 Debian Bug : 771363 797461 776086 Various issues have been fixed in Debian LTS squeeze for package vorbis-tools. CVE-2014-9638 A crafted WAV file with number of channels set to 0 will...
DLA-317-1 vorbis-tools - security update
Bulletin has no description...
DLA-288-2 openssh - regression update
Bulletin has no description...
DLA-319-1 freetype - security update
Bulletin has no description...
Debian DLA-316-1 : eglibc security update
Several vulnerabilities have been discovered in eglibc that may lead to a privilege escalation or denial of service. Glibc pointer guarding weakness A weakness in the dynamic loader prior has been found. The issue is that the LDPOINTERGUARD in the environment is not sanitized allowing local...
[SECURITY] [DLA 314-1] cups security update
Package : cups Version : 1.4.4-7+squeeze10 CVE ID : CVE-2015-3258 CVE-2015-3279 Petr Sklenar of Red Hat discovered that the texttopdf tool, part of cups filters, was susceptible to multiple heap-based buffer and integer overflows due to improper handling of print jobs. This could allow remote...
DLA-314-1 cups - security update
Bulletin has no description...
[SECURITY] [DLA 309-1] openldap security update
Package : openldap Version : 2.4.23-7.3+deb6u2 CVE ID : CVE-2015-6908 Debian Bug : 798622 Denis Andzakovic discovered that OpenLDAP, a free implementation of the Lightweight Directory Access Protocol, does not properly handle BER data. An unauthenticated remote attacker can use this flaw to cause...