[SECURITY] [DSA 3328-2] wordpress regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3328-2 [email protected] https://www.debian.org/security/ Thijs Kinkhorst August 04, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3325-1] apache2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3325-1 [email protected] https://www.debian.org/security/ Stefan Fritsch August 01, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3294-1] wireshark security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3294-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 23, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DLA 211-1] curl security update

Package : curl Version : 7.21.0-2.1+squeeze12 CVE ID : CVE-2015-3143 CVE-2015-3148 Several vulnerabilities were discovered in cURL, an URL transfer library: CVE-2015-3143 NTLM-authenticated connections could be wrongly reused for requests without any credentials set, leading to HTTP requests bein...

[SECURITY] [DLA 189-1] libgd2 security update

Package : libgd2 Version : 2.0.36rc1dfsg-5+deb6u1 CVE ID : CVE-2014-2497 CVE-2014-9709 Debian Bug : 744719 Multiple vulnerabilities were discovered in libgd2, a graphics library: CVE-2014-2497 The gdImageCreateFromXpm function would try to dereference a NULL pointer when reading an XPM file with ...

[SECURITY] [DSA 3057-2] libxml2 regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3057-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 07, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 166-1] libarchive security update

Package : libarchive Version : 2.8.4.forreal-1+squeeze3 CVE ID : not yet assigned Debian Bug : 778266 Alexander Cherepanov discovered that bsdcpio, an implementation of the cpio program part of the libarchive project, is susceptible to a directory traversal vulnerability via absolute paths...

[SECURITY] [DSA 3144-1] openjdk-7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3144-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 29, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3087-1] qemu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3087-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 04, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 81-1] openssl security update

Package : openssl Version : 0.9.8o-4squeeze18 CVE ID : CVE-2014-3567 CVE-2014-3568 CVE-2014-3569 Several vulnerabilities have been found in OpenSSL. CVE-2014-3566 "POODLE" A flaw was found in the way SSL 3.0 handled padding bytes when decrypting messages encrypted using block ciphers in cipher...

[SECURITY] [DSA 2955-1] iceweasel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2955-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 11, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2939-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2939-1 [email protected] http://www.debian.org/security/ Michael Gilbert May 31, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2932-1] qemu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2932-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano May 19, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2891-2] mediawiki regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-2891-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst March 31, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2857-1] libspring-java security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2857-1 [email protected] http://www.debian.org/security/ Markus Koschany February 08, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2695-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2695-1 [email protected] http://www.debian.org/security/ Michael Gilbert May 29, 2013 http://www.debian.org/security/faq -...

[BSA-080] Security Update for postgresql-9.1

Package : postgresql-9.1 Vulnerability : several Problem type : remote Debian-specific: no CVE ID : CVE-2013-1899 CVE-2013-1900 CVE-2013-1901 Debian Bug : 704479 Several vulnerabilities were discovered in PostgreSQL database server. CVE-2013-1899 Mitsumasa Kondo and Kyotaro Horiguchi of NTT Open...

[SECURITY] [DSA 2655-1] rails security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2655-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 28, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2634-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2634-1 [email protected] http://www.debian.org/security/ Nico Golde February 27, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2609-1] rails security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2609-1 [email protected] http://www.debian.org/security/ Florian Weimer January 16, 2013 http://www.debian.org/security/faq -...

[BSA 076] Security update for libreoffice

Rene Engelhard uploaded new packages for libreoffice which fixed the following security problems: CVE-2012-1149 multiple heap-based buffer overflows in OpenOffice.orgs XML manifest encryption tag parsing code For the squeeze-backports distribution the problems have been fixed in version...

[SECURITY] [DSA 2548-1] iceape security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2458-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 24, 2012 http://www.debian.org/security/faq -...

[BSA-056] Security update for Iceweasel

I uploaded new packages for icewease which fixed the following security problems: CVE-2011-3647 "mozbugra4" discovered a privilege escalation vulnerability in addon handling. CVE-2011-3648 Yosuke Hasegawa discovered that incorrect handling of Shift-JIS encodings could lead to cross-site scripting...

[SECURITY] [DSA 2343-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2343-1 [email protected] http://www.debian.org/security/ Raphael Geissert November 09, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2301-1] rails security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2301-1 [email protected] http://www.debian.org/security/ Luciano Bello September 5, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA-2154-1] exim4 security update

------------------------------------------------------------------------ Debian Security Advisory DSA-2154-1 [email protected] http://www.debian.org/security/ Stefan Fritsch January 30, 2011 http://www.debian.org/security/faq -...

[BSA-020] Security Update for openoffice.org

Rene Engelhard uploaded new packages for OpenOffice.org which fixed the following security problems: CVE-2010-3450 = =20 = =20 During an internal security audit within Red Hat, a directory = =20 traversal vulnerability has been discovered in the way = =20 OpenOffice.org 3.1.1 through 3.2.1...

[BSA-022] Security Update for request-tracker3.8

Jan Wagner uploaded new packages for request-tracker3.8 which fixed the following security problems: CVE-2011-0009 It was discovered that Request Tracker, an issue tracking system, stored passwords in its database by using an insufficiently strong hashing method. If an attacker would have access ...

[SECURITY] [DSA-2141-4] New lighttpd packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-2141-4 [email protected] http://www.debian.org/security/ Stefan Fritsch January 12, 2011 http://www.debian.org/security/faq -...

BSA-010 Security Update for iceweasel

Alexander Reichle-Schmehl uploaded new packages for iceweasel which fixed the following security problems: CVE-2010-3174 CVE-2010-3176 Multiple unspecified vulnerabilities in the browser engine in Iceweasel allow remote attackers to cause a denial of service memory corruption and application cras...

[SECURITY] [DSA 2111-1] New squid3 packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-2111-1 [email protected] http://www.debian.org/security/ Steffen Joeris September 19, 2010 http://www.debian.org/security/faq -...

[Backports-security-announce] Security Update for xulrunner

Alexander Reichle-Schmehl uploaded new packages for xulrunner which fixed the following security problems: CVE-2010-1211 Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of...

[Backports-security-announce] Security Update for xulrunner

Alexander Reichle-Schmehl uploaded new packages for packagename which fixed the following security problems: CVE-2010-0159...

[SECURITY] [DSA-1940-1] New php5 packages fix several issues

------------------------------------------------------------------------ Debian Security Advisory DSA-1940-1 [email protected] http://www.debian.org/security/ Stefan Fritsch November 25, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1899-1] New strongswan packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1899-1 [email protected] http://www.debian.org/security/ Florian Weimer October 02, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1862-1] New Linux 2.6.26 packages fix privilege escalation

---------------------------------------------------------------------- Debian Security Advisory DSA-1862-1 [email protected] http://www.debian.org/security/ dann frazier Aug 14, 2009 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

[SECURITY] [DSA 1825-1] New nagios2/nagios3 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA-1825-1 [email protected] http://www.debian.org/security/ Nico Golde July 3rd, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1784-1] New freetype packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA-1784-1 [email protected] http://www.debian.org/security/ Nico Golde April 30th, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1592-1] New Linux 2.6.18 packages fix overflow conditions

---------------------------------------------------------------------- Debian Security Advisory DSA-1592-1 [email protected] http://www.debian.org/security/ dann frazier Jun 09, 2008 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

[SECURITY] [DSA 1588-1] New Linux 2.6.18 packages fix several vulnerabilities

---------------------------------------------------------------------- Debian Security Advisory DSA-1588-1 [email protected] http://www.debian.org/security/ dann frazier May 27, 2008 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

[SECURITY] [DSA 1576-2] New openssh packages fix predictable randomness

------------------------------------------------------------------------ Debian Security Advisory DSA-1576-2 [email protected] http://www.debian.org/security/ Noah Meyerhans May 16, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1537-1] New xpdf packages fix multiple vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1537-1 [email protected] http://www.debian.org/security/ Devin Carraway April 02, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1506-1] New iceape packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1506-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 24, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1494-1] New linux-2.6 packages fix privilege escalation

---------------------------------------------------------------------- Debian Security Advisory DSA-1494-1 [email protected] http://www.debian.org/security/ Florian Weimer February 11, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1478-1] New mysql-dfsg-5.0 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1478-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 28, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1466-1] New xorg-server packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1466-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 17, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1411-1] New libopenssl-ruby packages fix insecure SSL certificate validation

------------------------------------------------------------------------ Debian Security Advisory DSA-1411-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 24, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1356-1] New Linux 2.6.18 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1356-1 [email protected] http://www.debian.org/security/ Dann Frazier August 15th, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1199-1] New webmin packages fix input validation problems

------------------------------------------------------------------------ Debian Security Advisory DSA-1199-1 [email protected] http://www.debian.org/security/ Noah Meyerhans October 23, 2006 - ------------------------------------------------------------------------ Package : webmin...

[SECURITY] [DSA 1160-2] New Mozilla packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1160-2 [email protected] http://www.debian.org/security/ Martin Schulze September 15th, 2006 http://www.debian.org/security/faq -...