DLA-208-1 tzdata - new upstream version

Bulletin has no description...

Debian DLA-198-1 : wireshark security update

The following vulnerabilities were discovered in the Squeeze's Wireshark version : CVE-2015-2188 The WCP dissector could crash CVE-2015-0564 Wireshark could crash while decypting TLS/SSL sessions CVE-2015-0562 The DEC DNA Routing Protocol dissector could crash CVE-2014-8714 TN5250 infinite loops...

DLA-202-1 wesnoth-1.8 - security update

Bulletin has no description...

DLA-201-1 tzdata - new upstream version

Bulletin has no description...

DLA-198-1 wireshark - security update

Bulletin has no description...

Debian DLA-196-1 : ia32-libs security update

The ia32-libs and ia32-libs-gtk packages contain 32 bit versions of various libraries for use on 64 bit systems. This update rolls in all security fixes made to these libraries since the previous update of ia32-libs and ia32-libs-gtk in Squeeze LTS. NOTE: Tenable Network Security has extracted th...

DLA-196-1 ia32-libs - security update

Bulletin has no description...

DLA-186-1 mailman - security update

Bulletin has no description...

DLA-185-1 freetype - security update

Bulletin has no description...

DLA-183-1 libxfont - security update

Bulletin has no description...

DLA-184-1 binutils - security update

Bulletin has no description...

DLA-182-1 batik - security update

Bulletin has no description...

DLA-181-1 xerces-c - security update

Bulletin has no description...

Debian DLA-113-1 : bsd-mailx security update

It was discovered that bsd-mailx, an implementation of the 'mail' command, had an undocumented feature which treats syntactically valid email addresses as shell commands to execute. Users who need this feature can re-enable it using the 'expandaddr' in an appropriate mailrc file. This update also...

Debian DLA-98-1 : openvpn security update

Dragana Damjanovic discovered that an authenticated client could crash an OpenVPN server by sending a control packet containing less than four bytes as payload. For the oldstable distribution squeeze, this problem has been fixed in version 2.1.3-2+squeeze3 in squeeze-lts. We recommend that you...

Debian DLA-52-1 : ia32-libs security update

The ia32-libs and ia32-libs-gtk packages contain 32 bit versions of various libraries for use on 64 bit systems. This update rolls in all security fixes made to these libraries since the start of Squeeze LTS. NOTE: Tenable Network Security has extracted the preceding description block directly fr...

Debian DLA-120-2 : xorg-server regression update

Andreas Cord-Landwehr reported an issue where the X.Org Xserver would often crash with an arithmetic exception when maximizing application windows. This issue CVE-2015-3418 is a regression which got introduced by fixing CVE-2014-8092. The above referenced version of xorg-server in Debian...

Debian DLA-158-1 : request-tracker3.8 security update

Multiple vulnerabilities have been discovered in Request Tracker, an extensible trouble-ticket tracking system. The Common Vulnerabilities and Exposures project identifies the following problems : CVE-2014-9472 Christian Loos discovered a remote denial of service vulnerability, exploitable via th...

Debian DLA-111-1 : cpio security update

Multiple issues have been identified in cpio, including a buffer overflow and multiple NULL pointer dereference, resulting at least in a denial of service and possibly also in an unwanted code execution. This has been fixed in Debian 6 Squeeze with version 2.11-4+deb6u1 by applying the upstream...

Debian DLA-152-1 : postgresql-8.4 update

Several vulnerabilities were discovered in PostgreSQL, a relational database server system. The 8.4 branch is EOLed upstream, but still present in Debian squeeze. This new LTS minor version contains the fixes that were applied upstream to the 9.0.19 version, backported to 8.4.22 which was the las...