1065 matches found
DLA-240-1 libapache-mod-jk - security update
Bulletin has no description...
Debian DLA-238-1 : fuse security update
Tavis Ormandy discovered that FUSE, a Filesystem in USErspace, does not scrub the environment before executing mount or umount with elevated privileges. A local user can take advantage of this flaw to overwrite arbitrary files and gain elevated privileges by accessing debugging features via the...
[SECURITY] [DLA 236-1] wordpress security update
Package : wordpress Version : 3.6.1+dfsg-1deb6u6 CVE ID : CVE-2014-9031 CVE-2014-9033 CVE-2014-9034 CVE-2014-9035 CVE-2014-9036 CVE-2014-9037 CVE-2014-9038 CVE-2014-9039 CVE-2015-3438 CVE-2015-3439 CVE-2015-3440 Debian Bug : 783347 783554 770425 In the Debian squeeze-lts version of Wordpress,...
Debian DLA-227-1 : postgresql-8.4 update
Several vulnerabilities were discovered in PostgreSQL, a relational database server system. The 8.4 branch is EOLed upstream, but still present in Debian squeeze. This new LTS minor version contains the fixes that were applied upstream to the 9.0.20 version, backported to 8.4.22 which was the las...
[SECURITY] [DLA-227-1] postgresql-8.4 update
Package : postgresql-8.4 Version : 8.4.22lts2-0+deb6u2 CVE ID : CVE-2015-3165 CVE-2015-3166 CVE-2015-3167 Several vulnerabilities were discovered in PostgreSQL, a relational database server system. The 8.4 branch is EOLed upstream, but still present in Debian squeeze. This new LTS minor version...
Debian DLA-232-1 : tomcat6 security update
The following vulnerabilities were found in Apache Tomcat 6 : CVE-2014-0227 The Tomcat security team identified that it was possible to conduct HTTP request smuggling attacks or cause a DoS by streaming malformed data. CVE-2014-0230 AntBean@secdig, from the Baidu Security Team, disclosed that it...
[SECURITY] [DLA 232-1] tomcat6 security update
Package : tomcat6 Version : 6.0.41-2+squeeze7 CVE ID : CVE-2014-0227 CVE-2014-0230 CVE-2014-7810 Debian Bug : 787010 785312 785316 The following vulnerabilities were found in Apache Tomcat 6: CVE-2014-0227 The Tomcat security team identified that it was possible to conduct HTTP request smuggling...
Debian DLA-230-1 : eglibc security update
Arjun Shankar of Red Hat discovered that gethostbynamer and related functions compute the size of an input buffer incorrectly if the passed-in buffer is misaligned. This results in a buffer overflow. For the oldoldstable distribution squeeze, this problem has been fixed in version 2.11.3-4+deb6u6...
DLA-233-1 clamav - security update
Bulletin has no description...
DLA-232-1 tomcat6 - security update
Bulletin has no description...
DLA-227-1 postgresql-8.4 - security update
Bulletin has no description...
Debian DLA-225-1 : dnsmasq security update
The following vulnerability vulnerability was found in dnsmasq : CVE-2015-3294 Remote attackers could read process memory and cause DoS via malformed DNS requests. For Debian 6 'Squeeze', these issues have been fixed in dnsmasq version 2.55-2+deb6u1. NOTE: Tenable Network Security has extracted t...
[SECURITY] [DLA 225-1] dnsmasq security update
Package : dnsmasq Version : 2.55-2+deb6u1 CVE ID : CVE-2015-3294 Debian Bug : 783459 The following vulnerability vulnerability was found in dnsmasq: CVE-2015-3294 Remote attackers could read process memory and cause DoS via malformed DNS requests. For Debian 6 “Squeeze”, these issues have been...
DLA-225-1 dnsmasq - security update
Bulletin has no description...
Debian DLA-224-1 : ruby1.8 security update
It was discovered that the Ruby OpenSSL extension, part of the interpreter for the Ruby language, did not properly implement hostname matching, in violation of RFC 6125. This could allow remote attackers to perform a man-in-the-middle attack via crafted SSL certificates. For the oldoldstable...
Debian DLA-220-1 : dpkg security update
Jann Horn discovered that the source package integrity verification in dpkg-source can be bypassed via a specially crafted Debian source control file .dsc. Note that this flaw only affects extraction of local Debian source packages via dpkg-source but not the installation of packages from the...
DLA-224-1 ruby1.8 - security update
Bulletin has no description...
Debian DLA-221-1 : tiff security update
Several vulnerabilities have been discovered in the LibTIFF library and utilities for the Tag Image File Format. These could lead to a denial of service, information disclosure or privilege escalation. CVE-2014-8128 William Robinet discovered that out-of-bounds writes are triggered in several of...
