1048 matches found
DLA-273-1 tidy - security update
Bulletin has no description...
Debian DLA-272-1 : python-django security update
Several vulnerabilities were discovered in Django, a high-level Python web development framework : CVE-2015-2317 Daniel Chatfield discovered that python-django, a high-level Python web development framework, incorrectly handled user-supplied redirect URLs. A remote attacker could use this flaw to...
Debian DLA-268-1 : virtualbox-ose security update (Venom)
Three vulnerabilities have been fixed in the Debian squeeze-lts version of VirtualBox package name: virtualbox-ose, a x86 virtualisation solution. CVE-2015-0377 Avoid VirtualBox allowing local users to affect availability via unknown vectors related to Core, which might result in denial of servic...
[SECURITY] [DLA 268-1] virtualbox-ose security update
Package : virtualbox-ose Version : 3.2.10-dfsg-1+squeeze4 CVE ID : CVE-2015-0377 CVE-2015-0418 CVE-2015-3456 Debian Bug : 775888 785424 Three vulnerabilities have been fixed in the Debian squeeze-lts version of VirtualBox package name: virtualbox-ose, a x86 virtualisation solution. CVE-2015-0377...
Debian DLA-266-1 : libxml2 security update
This upload to Debian squeeze-lts fixes three issues found in the libxml2 package. 1 CVE-2015-1819 / 782782 Florian Weimer from Red Hat reported an issue against libxml2, where a parser which uses libxml2 chokes on a crafted XML document, allocating gigabytes of data. This is a fine line issue...
Debian DLA-265-2 : pykerberos regression update
It was discovered that the original fix did not disable KDC verification support by default and changed checkPassowrd's signature. This update corrects this. This was the text of the original advisiory : Martin Prpic has reported the possibility of a man-in-the-middle attack in the pykerberos cod...
DLA-268-1 virtualbox-ose - security update
Bulletin has no description...
[SECURITY] [DLA 266-1] libxml2 security update
Package : libxml2 Version : 2.7.8.dfsg-2+squeeze12 CVE ID : CVE-2015-1819 Debian Bug : 782782 782985 783010 This upload to Debian squeeze-lts fixes three issues found in the libxml2 package. 1 CVE-2015-1819 / 782782 Florian Weimer from Red Hat reported an issue against libxml2, where a parser whi...
DLA-265-1 pykerberos - security update
Bulletin has no description...
DLA-267-1 unattended-upgrades - security update
Bulletin has no description...
DLA-266-1 libxml2 - security update
Bulletin has no description...
Debian DLA-264-1 : libmodule-signature-perl security update
John Lightsey discovered multiple vulnerabilities in Module::Signature, a Perl module to manipulate CPAN SIGNATURE files. The Common Vulnerabilities and Exposures project identifies the following problems : CVE-2015-3406 Module::Signature could parse the unsigned portion of the SIGNATURE file as...
Debian DLA-263-1 : ruby1.9.1 security update
Two vulnerabilities were identified in the Ruby language interpreter, version 1.9.1. CVE-2012-5371 Jean-Philippe Aumasson identified that Ruby computed hash values without properly restricting the ability to trigger hash collisions predictably, allowing context-dependent attackers to cause a deni...
[SECURITY] [DLA 263-1] ruby1.9.1 security update
Package : ruby1.9.1 Version : 1.9.2.0-2+deb6u5 CVE ID : CVE-2012-5371 CVE-2013-0269 Debian Bug : 693024 700471 Two vulnerabilities were identified in the Ruby language interpreter, version 1.9.1. CVE-2012-5371 Jean-Philippe Aumasson identified that Ruby computed hash values without properly...
[SECURITY] [DLA 260-1] hostapd security update
Package : hostapd Version : 1:0.6.10-2+squeeze2 CVE ID : CVE-2015-4142 A vulnerability was found in WMM Action frame processing in a case where hostapd is used to implement AP mode MLME/SME functionality i.e., Host AP driver of a mac80211-based driver on Linux. This vulnerability can be used to...
Debian DLA-257-1 : libwmf security update
libwmf is vulnerable to two denial of service due to invalid read operations when processing specially crafted WMF files. CVE-2015-4695 Heap buffer overread in libwmf CVE-2015-4696 Read after free in wmf2gd/wmf2eps For the squeeze distribution, those issues have been fixed in libwmf...
DLA-260-1 hostapd - security update
Bulletin has no description...
DLA-256-1 t1utils - security update
Bulletin has no description...
Debian DLA-256-1 : t1utils security update
Jakub Wilk found a vulnerability in the Type 1 font manipulation programs, t1utils : CVE-2015-3905 Buffer overflow in the setcsstart function in t1disasm.c in t1utils before 1.39 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted font file...