1046 matches found
Debian DLA-118-1 : linux-2.6 security update
Non-maintainer upload by the Squeeze LTS and Kernel Teams. New upstream stable release 2.6.32.65, see http://lkml.org/lkml/2014/12/13/81 for more information. The stable release 2.6.32.65 includes the following new commits compared to the previous 2.6.32-48squeeze9 package : - USB: whiteheat: Add...
Debian DLA-114-1 : heirloom-mailx security update
Two security vulnerabilities were discovered in Heirloom mailx, an implementation of the 'mail' command : CVE-2004-2771 mailx interprets interprets shell meta-characters in certain email addresses. CVE-2014-7844 An unexpected feature of mailx treats syntactically valid email addresses as shell...
Debian DLA-92-1 : tomcat-native security followup update
This is an upgrade from tomcat-native 1.1.20 the version previously available in squeeze to 1.1.31, the full list of changes between these versions can be seen in the upstream changelog, which is available online at http://tomcat.apache.org/native-doc/miscellaneous/changelog.html This update itse...
Debian DLA-147-1 : wpasupplicant security update
It was discovered that wpasupplicant could be tricked into executing arbitrary commands when calling action scripts. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as...
Debian DLA-143-1 : python-django security update
Multiple security issues have been found in Django: https://www.djangoproject.com/weblog/2015/jan/13/security/ For Debian 6 Squeeeze, they have been fixed in version 1.2.3-3+squeeze12 of python-django. Here is what the upstream developers have to say about those issues : CVE-2015-0219 - WSGI head...
Debian DLA-139-1 : eglibc security update (GHOST)
A vulnerability has been fixed in eglibc, Debian's version of the GNU C library : CVE-2015-0235 Qualys discovered that the gethostbyname and gethostbyname2 functions were subject to a buffer overflow if provided with a crafted IP address argument. This could be used by an attacker to execute...
DLA-180-1 gnutls26 - security update
Bulletin has no description...
DLA-179-1 tzdata - new upstream version
Bulletin has no description...
DLA-177-1 openssl - security update
Bulletin has no description...
DLA-176-1 mono - security update
Bulletin has no description...
DLA-173-1 putty - security update
Bulletin has no description...
DLA-172-1 libextlib-ruby - security update
Bulletin has no description...
DLA-171-1 libssh2 - security update
Bulletin has no description...
DLA-115-2 gosa - regression update
Bulletin has no description...
DLA-169-1 axis - security update
Bulletin has no description...
DLA-166-1 libarchive - security update
Bulletin has no description...
DLA-168-1 konversation - security update
Bulletin has no description...
DLA-167-1 redcloth - security update
Bulletin has no description...