[SECURITY] [DLA 308-1] bind9 security update

Package : bind9 Version : 1:9.7.3.dfsg-1squeeze17 CVE ID : CVE-2015-5722 Hanno Böck from the Fuzzing Project discovered that incorrect validation of DNSSEC-signed records in the Bind DNS server could result in denial of service. For Debian 6 “Squeeze”, this issue has been fixed in bind9 version...

DLA-308-1 bind9 - security update

Bulletin has no description...

DLA-306-1 libvdpau - security update

Bulletin has no description...

DLA-304-1 openslp-dfsg - security update

Bulletin has no description...

Debian DLA-302-1 : zendframework security update

Dawid Golunski discovered that when running under PHP-FPM in a threaded environment, Zend Framework, a PHP framework, did not properly handle XML data in multibyte encoding. This could be used by remote attackers to perform an XML External Entity attack via crafted XML data. For Debian 6 'Squeeze...

DLA-303-1 openjdk-6 - security update

Bulletin has no description...

[SECURITY] [DLA 300-1] ruby1.9.1 security update

Package : ruby1.9.1 Version : 1.9.2.0-2+deb6u7 CVE ID : CVE-2009-5147 "sheepman" fixed a vulnerability in Ruby 1.9.1: DL::dlopen could open a library with tainted name even if $SAFE 0. For Debian 6 “Squeeze”, this issue has been fixed in ruby1.9.1 1.9.2.0-2+deb6u7...

[SECURITY] [DLA 299-1] ruby1.8 security update

Package : ruby1.8 Version : 1.8.7.302-2squeeze5 CVE ID : CVE-2009-5147 "sheepman" fixed a vulnerability in Ruby 1.8: DL::dlopen could open a library with tainted name even if $SAFE 0. For Debian 6 “Squeeze”, this issue has been fixed in ruby1.8 1.8.7.302-2squeeze5...

DLA-300-1 ruby1.9.1 - security update

Bulletin has no description...

DLA-299-1 ruby1.8 - security update

Bulletin has no description...

Debian DLA-295-1 : conntrack security update

'jann' discovered that in certain configurations, if the relevant conntrack kernel module is not loaded, conntrackd will crash when handling DCCP, SCTP or ICMPv6 packets. In the version found in Debian 6.0 'squeeze', this vulnerability only applies to ICMPv6. For the oldoldstable distribution...

DLA-295-1 conntrack - security update

Bulletin has no description...

[SECURITY] [DLA 291-1] libidn security update

Package : libidn Version : 1.15-2+deb6u2 Adam Sampson found a vulnerability in GNU Libidn, library that implements the IETF IDN specifications. Libdin incorrectly handled invalid UTF-8 input, causing it to bad free. This issue was introduced by the fix for CVE-2015-2059. For Debian 6 “Squeeze”,...

Debian DLA-289-1 : remind security update

Alexander Keller discovered a buffer overflow issue in remind, a tool for sophisticatedly reminding you of upcoming events. If running Debian squeeze LTS, we recommend upgrading remind to the latest version provided. NOTE: Tenable Network Security has extracted the preceding description block...

[SECURITY] [DLA 289-1] remind security update

Package : remind Version : 03.01.05-2+deb6u1 CVE ID : CVE-2015-5957 Alexander Keller discovered a buffer overflow issue in remind, a tool for sophisticatedly reminding you of upcoming events. If running Debian squeeze LTS, we recommend upgrading remind to the latest version provided. mike gabriel...

[SECURITY] [DLA 288-1] openssh security update

Package : openssh Version : 1:5.5p1-6+squeeze6 CVE ID : CVE-2015-5352 CVE-2015-5600 Debian Bug : 790798 793616 A recent upload of OpenSSH to Debian squeeze-lts fixes two security issues. CVE-2015-5352 It was reported that when forwarding X11 connections with ForwardX11Trusted=no, connections made...

DLA-289-1 remind - security update

Bulletin has no description...

[SECURITY] [DLA 287-1] ia32-libs security update

Package : ia32-libs, ia32-libs-gtk Version : 20150804 The ia32-libs and ia32-libs-gtk packages contain 32 bit versions of various libraries for use on 64 bit systems. This update rolls in all security fixes made to these libraries since the previous update of ia32-libs and ia32-libs-gtk in Squeez...

DLA-287-1 ia32-libs - security update

Bulletin has no description...

[SECURITY] [DLA 286-1] squid3 security update

Package : squid3 Version : 3.1.6-1.2+squeeze5 CVE ID : CVE-2015-5400 Debian Bug : 793128 Alex Rousskov discovered that Squid configured with cachepeer and operating on explicit proxy traffic does not correctly handle CONNECT method peer responses. In some configurations, it allows remote clients ...