1065 matches found
Debian DLA-219-1 : icu security update
Several vulnerabilities were discovered in the International Components for Unicode ICU library : CVE-2013-1569 Glyph table issue. CVE-2013-2383 Glyph table issue. CVE-2013-2384 Font layout issue. CVE-2013-2419 Font processing issue. CVE-2014-6585 Out-of-bounds read. CVE-2014-6591 Additional...
[SECURITY] [DLA 219-1] icu security update
Package : icu Version : 4.4.1-8+squeeze3 CVE ID : CVE-2013-1569 CVE-2013-2383 CVE-2013-2384 CVE-2013-2419 CVE-2014-6585 CVE-2014-6591 CVE-2014-7923 CVE-2014-7926 CVE-2014-7940 CVE-2014-9654 Several vulnerabilities were discovered in the International Components for Unicode ICU library:...
DLA-219-1 icu - security update
Bulletin has no description...
[SECURITY] [DLA 120-2] xorg-server regression update
Package : xorg-server Version : 2:1.7.7-18+deb6u3 CVE ID : CVE-2015-3418 Debian Bug : 774308 Andreas Cord-Landwehr reported an issue where the X.Org Xserver would often crash with an arithmetic exception when maximizing application windows. This issue CVE-2015-3418 is a regression which got...
[SECURITY] [DLA 218-1] xorg-server security update
Package : xorg-server Version : 2:1.7.7-18+deb6u2 CVE ID : CVE-2015-0255 Olivier Fourdan discovered that missing input validation in the Xservers handling of XkbSetGeometry requests may result in an information leak or denial of service. This upload to Debian squeeze-lts fixes the issue by not...
[SECURITY] [DLA 217-1] xdg-utils security update
The two below CVE issues have recently been fixed in Debian squeeze-lts: CVE-2014-9622 John Houwer discovered a way to cause xdg-open, a tool that automatically opens URLs in a users preferred application, to execute arbitrary commands remotely. CVE-2015-1877 Jiri Horner discovered a way to cause...
Debian DLA-215-1 : libjson-ruby security update
The JSON gem for Ruby allowed remote attackers to cause a denial of service resource consumption or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby symbols or certain internal objects, as demonstrated by conducting a SQL...
DLA-218-1 xorg-server - security update
Bulletin has no description...
DLA-217-1 xdg-utils - security update
Bulletin has no description...
Debian DLA-213-1 : openjdk-6 security update
Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in the execution of arbitrary code, breakouts of the Java sandbox, information disclosure or denial of service. For Debian 6 'Squeeze', these problems have been fixed in version...
[SECURITY] [DLA 215-1] libjson-ruby security update
Package : libjson-ruby Version : 1.1.9-1+deb6u1 CVE ID : CVE-2013-0269 The JSON gem for Ruby allowed remote attackers to cause a denial of service resource consumption or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby symbo...
[SECURITY] [DLA 214-1] libxml-libxml-perl security update
Package : libxml-libxml-perl Version : 1.70.ds-1+deb6u1 CVE ID : CVE-2015-3451 Debian Bug : 783443 In some cases, XML::LibXML did not respect the request to disable entities expansion. Applications handling untrusted XML files can then be tricked into disclosing the content of local files. In...
[SECURITY] [DLA 213-1] openjdk-6 security update
Package : openjdk-6 Version : 6b35-1.13.7-1deb6u1 CVE ID : CVE-2015-0460 CVE-2015-0469 CVE-2015-0470 CVE-2015-0477 CVE-2015-0478 CVE-2015-0480 CVE-2015-0488 Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in the execution of...
DLA-215-1 libjson-ruby - security update
Bulletin has no description...
DLA-213-1 openjdk-6 - security update
Bulletin has no description...
DLA-208-1 tzdata - new upstream version
Bulletin has no description...
Debian DLA-198-1 : wireshark security update
The following vulnerabilities were discovered in the Squeeze's Wireshark version : CVE-2015-2188 The WCP dissector could crash CVE-2015-0564 Wireshark could crash while decypting TLS/SSL sessions CVE-2015-0562 The DEC DNA Routing Protocol dissector could crash CVE-2014-8714 TN5250 infinite loops...
DLA-202-1 wesnoth-1.8 - security update
Bulletin has no description...