[SECURITY] [DSA 3433-1] samba security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3433-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 02, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 375-1] ia32-libs security update

Package : ia32-libs Version : 20151231 The ia32-libs package contains 32 bit versions of various libraries for use on 64 bit systems. This update rolls in all security fixes made to these libraries since the previous update of ia32-libs in Squeeze LTS...

[SECURITY] [DSA 3432-1] icedove security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3432-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 01, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3431-1] ganeti security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3431-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 01, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 374-2] cacti regression update

Package : cacti Version : 0.8.7g-1+squeeze9+deb6u12 It was discovered that there was a regression in the patch intended to fix CVE-2015-8369 in the recent upload of cacti 0.8.7g-1+squeeze9+deb6u11. For Debian 6 Squeeze, this issue has been fixed in cacti version 0.8.7g-1+squeeze9+deb6u12. Regards...

[SECURITY] [DLA 376-1] mono security update

Package : mono Version : 2.6.7-5.1+deb6u2 CVE ID : CVE-2009-0689 Monos string-to-double parser may crash, on specially crafted input. This could theoretically lead to arbitrary code execution. This issue has been fixed in Debian 6 Squeeze with the version 2.6.7-5.1+deb6u2 of mono. We recommend th...

[SECURITY] [DLA 375-1] libpng security update

Package : libpng Version : 1.2.44-1+squeeze6 CVE ID : CVE-2012-3425 CVE-2015-8472 CVE-2015-8540 CVE-2015-8472 update incomplete patch for CVE-2015-8126 CVE-2015-8540 underflow read in pngcheckkeyword in pngwutil.c CVE-2012-3425 The pngpushreadzTXt function in pngpread.c in libpng 1.0.x before...

[SECURITY] [DLA 374-1] cacti security update

Package : cacti Version : 0.8.7g-1+squeeze9+deb6u11 CVE IDs : CVE-2015-8369 CVE-2015-8377 Debian Bug : 807599 It was discovered that there were SQL injection vulnerabilities in cacti, a web interface for graphing of monitoring systems. For Debian 6 Squeeze, this issue has been fixed in cacti...

[SECURITY] [DLA 373-1] libxml2 security update

Package : libxml2 Version : 2.7.8.dfsg-2+squeeze16 CVE ID : CVE-2015-5312 CVE-2015-7497 CVE-2015-7498 CVE-2015-7499 CVE-2015-7500 Several vulnerabilities were discovered in libxml2, a library providing support to read, modify and write XML and HTML files. A remote attacker could provide a special...

[SECURITY] [DSA 3430-1] libxml2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3430-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 23, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3430-1] libxml2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3430-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 23, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3429-1] foomatic-filters security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3429-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 21, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3429-1] foomatic-filters security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3429-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 21, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3428-1] tomcat8 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3428-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 18, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3427-1] blueman security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3427-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 18, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DLA 372-1] virtualbox-ose 3.2.x is no longer supported in Debian 6

Package : virtualbox-ose Oracle stopped supporting version 3.2 of VirtualBox last June. They also do not disclose enough information about vulnerabilities discovered and fixed in newer versions so that it is impossible for us to verify whether the vulnerability also applies to 3.2 and to backport...

[SECURITY] [DLA 371-1] foomatic-filters security update

Package : foomatic-filters Version : 4.0.5-6+squeeze2+deb6u12 CVE ID : CVE-2015-8560 Debian Bug : 807993 Adam Chester discovered that there was an injection vulnerability in foomatic-filters which is used by printer spoolers to convert incoming PostScript data into the printers native format. Thi...

[SECURITY] [DSA 3426-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3426-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 17, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3426-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3426-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 17, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3425-1] tryton-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3425-1 [email protected] https://www.debian.org/security/ Luciano Bello December 17, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3425-1] tryton-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3425-1 [email protected] https://www.debian.org/security/ Luciano Bello December 17, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3425-1] tryton-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3425-1 [email protected] https://www.debian.org/security/ Luciano Bello December 17, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3425-1] tryton-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3425-1 [email protected] https://www.debian.org/security/ Luciano Bello December 17, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3337-2] gdk-pixbuf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3337-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 17, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3337-2] gdk-pixbuf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3337-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 17, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DLA 370-1] bind9 security update

Package : bind9 Version : 1:9.7.3.dfsg-1squeeze18 CVE ID : CVE-2015-8000 It was discovered that the BIND DNS server does not properly handle the parsing of incoming responses, allowing some records with an incorrect class to be accepted by BIND instead of being rejected as malformed. This can...

[SECURITY] [DSA 3424-1] subversion security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3424-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 16, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3423-1] cacti security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3423-1 [email protected] https://www.debian.org/security/ Luciano Bello December 16, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3423-1] cacti security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3423-1 [email protected] https://www.debian.org/security/ Luciano Bello December 16, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3421-1] grub2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3421-1 [email protected] https://www.debian.org/security/ Luciano Bello December 16, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3421-1] grub2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3421-1 [email protected] https://www.debian.org/security/ Luciano Bello December 16, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3422-1] iceweasel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3422-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 16, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DLA 359-1] MySQL 5.5 packages added; end of support for MySQL 5.1

Oracle, the upstream maintainer of MySQL, no longer supports MySQL version 5.1, which is included in Debian 6.0 "squeeze". MySQL 5.1 likely suffers from multiple vulnerabilities fixed in newer versions after the end of upstream support, but Oracle does not disclose enough information either to...

[SECURITY] [DSA 3420-1] bind9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3420-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 15, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3420-1] bind9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3420-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 15, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DLA 369-1] pygments security update

Package : pygments Version : 1.3.1+dfsg-1+deb6u11 CVE ID : CVE-2015-8557 Debian Bug : 802828 It was discovered that there was a shell injection vulnerability in pygments, a syntax highlighting package written in Python. For Debian 6 Squeeze, this issue has been fixed in pygments version...

[SECURITY] [DSA 3419-1] cups-filters security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3419-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 15, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3419-1] cups-filters security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3419-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 15, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3418-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3418-1 [email protected] https://www.debian.org/security/ Michael Gilbert December 14, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3418-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3418-1 [email protected] https://www.debian.org/security/ Michael Gilbert December 14, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3417-1] bouncycastle security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3417-1 [email protected] https://www.debian.org/security/ Luciano Bello December 14, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3417-1] bouncycastle security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3417-1 [email protected] https://www.debian.org/security/ Luciano Bello December 14, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3416-1] libphp-phpmailer security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3416-1 [email protected] https://www.debian.org/security/ Luciano Bello December 13, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3416-1] libphp-phpmailer security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3416-1 [email protected] https://www.debian.org/security/ Luciano Bello December 13, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DLA 368-1] grub2 security update

Package : grub2 Version : 1.98+20100804-14+squeeze2 CVE ID : CVE-2015-8370 Debian Bug : 807614 Hector Marco-Gisbert, from the Universitat Politècnica de València Cybersecurity Team, reported a buffer overflow in grub2 when checking password during bootup. For Debian 6 "Squeeze", this problem has...

[SECURITY] [DLA 367-1] kdelibs security update

Package : kdelibs Version : 3.5.10.dfsg.1-5+deb6u1 CVE ID : CVE-2015-7543 It has been reported that kdelibs uses the insecure mktemp function to create the temporary directory it uses to host user-specific sockets. It is thus possible for another user to hijack this temporary directory and gain...

[SECURITY] [DLA 366-1] arts security update

Package : arts Version : 1.5.9-3+deb6u1 CVE ID : CVE-2015-7543 It has been reported that arts uses the insecure mktemp function to create the temporary directory it uses to host user-specific sockets. It is thus possible for another user to hijack this temporary directory and gain IPC access it...

[SECURITY] [DSA 3415-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3415-1 [email protected] https://www.debian.org/security/ Michael Gilbert December 09, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3415-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3415-1 [email protected] https://www.debian.org/security/ Michael Gilbert December 09, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3414-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3414-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 09, 2015 https://www.debian.org/security/faq -...