[SECURITY] [DLA 1441-1] sympa security update

Package : sympa Version : 6.1.23dfsg-2+deb8u2 CVE ID : CVE-2018-1000550 A vulnerability has been discovered in Sympa, a modern mailing list manager, that allows write access to files on the server filesystem. This flaw allows to create or modify any file writable by the Sympa user, located on the...

[SECURITY] [DSA 4193-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4193-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 05, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1318-1] irssi security update

Package : irssi Version : 0.8.15-5+deb7u6 CVE ID : CVE-2018-7051 Debian Bug : 890677 It was discovered that there was an issue in the irssi IRC client where certain nick names could result in out-of-bounds access when printing theme strings. For Debian 7 "Wheezy", this issue has been fixed in irs...

[SECURITY] [DSA 4076-1] asterisk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4076-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 30, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4009-1] shadowsocks-libev security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4009-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 29, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3978-1] gdk-pixbuf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3978-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 18, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 1097-1] tcpdump security update

Package : tcpdump Version : 4.9.2-1deb7u1 CVE ID : CVE-2017-12894 CVE-2017-12895 CVE-2017-12896 CVE-2017-12897 CVE-2017-12898 CVE-2017-12899 CVE-2017-12900 CVE-2017-12901 CVE-2017-12902 CVE-2017-12985 CVE-2017-12986 CVE-2017-12987 CVE-2017-12988 CVE-2017-12989 CVE-2017-12990 CVE-2017-12991...

[SECURITY] [DSA 3919-1] openjdk-8 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3919-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 25, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3853-1] bitlbee security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3853-1 [email protected] https://www.debian.org/security/ Sebastien Delafond May 15, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 909-1] libcroco security update

Package : libcroco Version : 0.6.6-2+deb7u1 CVE ID : CVE-2017-7960 CVE-2017-7961 Debian Bug : 860961 CVE-2017-7960 A heap-based buffer over-read vulnerability could be triggered remotely via a crafted CSS file to cause a denial of service. CVE-2017-7961 An "outside the range of representable valu...

[SECURITY] [DSA 3825-1] jhead security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3825-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 31, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DLA 864-1] jhead security update

Package : jhead Version : 1:2.95-1+deb7u1 CVE ID : CVE-2016-3822 Debian Bug : 858213 It was discovered that there was a vulnerability in jhead, a tool to manipulate the non-image part of EXIF-compliant JPEG files; remote attackers were able to execute arbitrary code via crafted image data. For...

[SECURITY] [DSA 3729-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3729-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 07, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 654-1] libxfixes security update

Package : libxfixes Version : 1:5.0-4+deb7u2 CVE ID : CVE-2016-7944 Debian Bug : 840442 It was discovered that there was a integer overflow in libxfixes, a library providing a client interface to the X11 XFIXES extension. The 32 bit field "rep.length" was not checked for validity, which allowed a...

[SECURITY] [DSA 3678-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3678-1 [email protected] https://www.debian.org/security/ Florian Weimer September 26, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3666-1] mysql-5.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3666-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 14, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3653-1] flex security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3653-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 25, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3635-1] libdbd-mysql-perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3635-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 29, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 554-1] libarchive security update

Package : libarchive Version : 3.0.4-3+wheezy2 CVE ID : CVE-2015-8917 CVE-2015-8919 CVE-2015-8920 CVE-2015-8921 CVE-2015-8922 CVE-2015-8923 CVE-2015-8924 CVE-2015-8925 CVE-2015-8926 CVE-2015-8930 CVE-2015-8931 CVE-2015-8932 CVE-2015-8933 CVE-2015-8934 CVE-2016-4300 CVE-2016-4302 CVE-2016-4809...

[SECURITY] [DLA 521-1] firefox-esr security update

Package : firefox-esr Version : 45.2.0esr-1deb7u1 CVE ID : CVE-2016-2818 CVE-2016-2819 CVE-2016-2821 CVE-2016-2822 CVE-2016-2828 CVE-2016-2831 Multiple security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors, buffer overflows and other implementation erro...

[SECURITY] [DLA 511-1] libtorrent-rasterbar security update

Package : libtorrent-rasterbar Version : 0.15.10-1+deb7u1 CVE ID : CVE-2016-5301 Debian Bug : 826380 A specially crafted HTTP response from a tracker or potentially a UPnP broadcast can crash libtorrent in the parsechunkheader function. Although this function is not present in this version,...

[SECURITY] [DSA 3525-1] pixman security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3525-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 22, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 382-1] sudo security update

Package : sudo Version : 1.7.4p4-2.squeeze.6 CVE ID : CVE-2015-5602 Debian Bug : 804149 When sudo is configured to allow a user to edit files under a directory that they can already write to without using sudo, they can actually edit read and write arbitrary files. Daniel...

[SECURITY] [DSA 3404-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3404-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 25, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3387-1] openafs security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3387-1 [email protected] https://www.debian.org/security/ Florian Weimer November 01, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DLA 313-1] virtualbox-ose security update

Package : virtualbox-ose Version : 3.2.28-dfsg-1+squeeze1 CVE ID : CVE-2013-3792 CVE-2014-2486 CVE-2014-2488 CVE-2014-2489 CVE-2015-2594 Bugs : 715327 754939 792446 The latest maintenance release of the VirtualBox OSE 3.2.x series i.e., version 3.2.28 has been uploaded to Debian LTS squeeze. Than...

[SECURITY] [DLA 307-1] php5 security update

Package : php5 Version : 5.3.3.1-7+squeeze27 CVE ID : CVE-2015-3307 CVE-2015-3411 CVE-2015-3412 CVE-2015-4021 CVE-2015-4022 CVE-2015-4025 CVE-2015-4026 CVE-2015-4147 CVE-2015-4148 CVE-2015-4598 CVE-2015-4599 CVE-2015-4600 CVE-2015-4601 CVE-2015-4602 CVE-2015-4604 CVE-2015-4605 CVE-2015-4643...

[SECURITY] [DSA 3341-1] conntrack security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3341-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 20, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3198-2] php5 regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3198-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso March 28, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 176-1] mono security update

Package : mono Version : 2.6.7-5.1+deb6u1 CVE ID : CVE-2015-2318 CVE-2015-2319 CVE-2015-2320 Debian Bug : 780751 Three issues with Monos TLS stack are addressed. CVE-2015-2318 Monos implementation of the SSL/TLS stack failed to check the order of the handshake messages. Which would allow various...

[SECURITY] [DSA 3170-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3160-1 [email protected] http://www.debian.org/security/ Ben Hutchings February 23, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3161-1] dbus security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3161-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 11, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 58-2] apt regression fix

Package : apt Version : 0.8.10.3+squeeze6 CVE ID : CVE-2014-6273 This update fixes a regression introduced in 0.8.10.3+squeeze5 where apt would send invalid HTTP requests when sending If-Range queries. Thanks to Steven McDonald who reported1 the regression and to Michael Vogt for having uploaded ...

[SECURITY] [DLA 70-1] tryton-server security update

Package : tryton-server Version : 1.6.1-2+squeeze2 CVE ID : CVE-2014-6633 duesenfranz discovered, that safeeval in trytond could be used to execute arbitrary commands, mainly via the webdav interface. The patches applied do not allow double underscores in safeeval and avoid double evaluation from...

[SECURITY] [DLA 63-1] bash security update

Package : bash Version : 4.1-3+deb6u2 CVE ID : CVE-2014-7169 Debian Bug : 762760 762761 Tavis Ormandy discovered that the patch applied to fix CVE-2014-6271 released in DSA-3032-1 for bash, the GNU Bourne-Again Shell, was incomplete and could still allow some characters to be injected into anothe...

[SECURITY] [DSA 3013-1] s3ql security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3013-1 [email protected] http://www.debian.org/security/ Florian Weiemr August 27, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2979-1] fail2ban security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2979-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 17, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2867-1] otrs2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2867-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 23, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2772-1] typo3-src security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2772-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 10, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2751-1] libmodplug security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2751-1 [email protected] http://www.debian.org/security/ Raphael Geissert September 04, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2636-2] xen regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-2636-2 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 03, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2626-1] lighttpd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2626-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst February 17, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2544-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2544-1 [email protected] http://www.debian.org/security/ Raphael Geissert September 08, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2514-1] iceweasel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2514-1 [email protected] http://www.debian.org/security/ Nico Golde July 17, 2012 http://www.debian.org/security/faq - -------------------------------------------------------------------------...

[SECURITY] [DSA 2436-1] libapache2-mod-fcgid security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2436-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst March 19, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2354-1] cups security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2354-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez November 28, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2198-1] tex-common security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2198-1 [email protected] http://www.debian.org/security/ Nico Golde March 22, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2057-1] New mysql-dfsg-5.0 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2057-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano June 07, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1925-1] New proftpd-dfsg packages fix SSL certificate verification weakness

------------------------------------------------------------------------ Debian Security Advisory DSA-1925-1 [email protected] http://www.debian.org/security/ Steffen Joeris October 31, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1901-1] New mediawiki1.7 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1901-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano October 05, 2009 http://www.debian.org/security/faq -...