[SECURITY] [DSA 3421-1] grub2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3421-1 [email protected] https://www.debian.org/security/ Luciano Bello December 16, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3421-1] grub2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3421-1 [email protected] https://www.debian.org/security/ Luciano Bello December 16, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3422-1] iceweasel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3422-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 16, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DLA 359-1] MySQL 5.5 packages added; end of support for MySQL 5.1

Oracle, the upstream maintainer of MySQL, no longer supports MySQL version 5.1, which is included in Debian 6.0 "squeeze". MySQL 5.1 likely suffers from multiple vulnerabilities fixed in newer versions after the end of upstream support, but Oracle does not disclose enough information either to...

[SECURITY] [DSA 3420-1] bind9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3420-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 15, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3420-1] bind9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3420-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 15, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DLA 369-1] pygments security update

Package : pygments Version : 1.3.1+dfsg-1+deb6u11 CVE ID : CVE-2015-8557 Debian Bug : 802828 It was discovered that there was a shell injection vulnerability in pygments, a syntax highlighting package written in Python. For Debian 6 Squeeze, this issue has been fixed in pygments version...

[SECURITY] [DSA 3419-1] cups-filters security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3419-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 15, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3419-1] cups-filters security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3419-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 15, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3418-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3418-1 [email protected] https://www.debian.org/security/ Michael Gilbert December 14, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3418-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3418-1 [email protected] https://www.debian.org/security/ Michael Gilbert December 14, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3417-1] bouncycastle security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3417-1 [email protected] https://www.debian.org/security/ Luciano Bello December 14, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3417-1] bouncycastle security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3417-1 [email protected] https://www.debian.org/security/ Luciano Bello December 14, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3416-1] libphp-phpmailer security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3416-1 [email protected] https://www.debian.org/security/ Luciano Bello December 13, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3416-1] libphp-phpmailer security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3416-1 [email protected] https://www.debian.org/security/ Luciano Bello December 13, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DLA 368-1] grub2 security update

Package : grub2 Version : 1.98+20100804-14+squeeze2 CVE ID : CVE-2015-8370 Debian Bug : 807614 Hector Marco-Gisbert, from the Universitat Politècnica de València Cybersecurity Team, reported a buffer overflow in grub2 when checking password during bootup. For Debian 6 "Squeeze", this problem has...

[SECURITY] [DLA 367-1] kdelibs security update

Package : kdelibs Version : 3.5.10.dfsg.1-5+deb6u1 CVE ID : CVE-2015-7543 It has been reported that kdelibs uses the insecure mktemp function to create the temporary directory it uses to host user-specific sockets. It is thus possible for another user to hijack this temporary directory and gain...

[SECURITY] [DLA 366-1] arts security update

Package : arts Version : 1.5.9-3+deb6u1 CVE ID : CVE-2015-7543 It has been reported that arts uses the insecure mktemp function to create the temporary directory it uses to host user-specific sockets. It is thus possible for another user to hijack this temporary directory and gain IPC access it...

[SECURITY] [DSA 3415-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3415-1 [email protected] https://www.debian.org/security/ Michael Gilbert December 09, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3415-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3415-1 [email protected] https://www.debian.org/security/ Michael Gilbert December 09, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3414-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3414-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 09, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DLA 365-1] foomatic-filters security update

Package : foomatic-filters Version : 4.0.5-6+squeeze2+deb6u11 CVE ID : CVE-2015-8327 Debian Bug : 806886 It was discovered that there was an injection vulnerability in foomatic-filters which is used by printer spoolers to convert incoming PostScript data into the printers native format. For Debia...

[SECURITY] [DLA 364-1] gnutls26 security update

Package : gnutls26 Version : 2.8.6-1+squeeze6 CVE ID : CVE-2015-8313 Hanno Böck discovered that GnuTLS, a library implementing the TLS and SSL protocols, incorrectly validated the first padding byte in CBC modes. A remote attacker can possibly take advantage of this flaw to perform a padding orac...

[SECURITY] [DLA 363-1] libphp-phpmailer security update

Package : libphp-phpmailer Version : 5.1-1+deb6u11 CVE ID : CVE-2015-8476 Debian Bug : 807265 It was discovered that there was a header injection vulnerability in libphp-phpmailer, am email transfer library for PHP. For Debian 6 Squeeze, this issue has been fixed in libphp-phpmailer version...

[SECURITY] [DLA 362-1] dhcpcd security update

Package : dhcpcd Version : 1:3.2.3-5+squeeze2 CVE ID : CVE-2012-6698 CVE-2012-6699 CVE-2012-6700 Guido Vranken discovered several memory-related vulnerabilities while fuzzing DHCP messages sent to dhcpcd. For Debian 6 “Squeeze”, those issues have been fixed in version 1:3.2.3-5+squeeze2...

[SECURITY] [DLA 360-1] linux-2.6 security update

Package : linux-2.6 Version : 2.6.32-48squeeze17 CVE ID : CVE-2013-7446 CVE-2015-7799 CVE-2015-7833 CVE-2015-7990 CVE-2015-8324 This update fixes the CVEs described below. CVE-2013-7446 Dmitry Vyukov discovered that a particular sequence of valid...

[SECURITY] [DLA 361-1] bouncycastle security update

Package : bouncycastle Version : 1.44+dfsg-2+deb6u1 CVE ID : CVE-2015-7940 Debian Bug : 802671 The Bouncy Castle Java library before 1.51 does not validate that a point is within the elliptic curve, which makes it easier for remote attackers to obtain private keys via a series of crafted elliptic...

[SECURITY] [DSA 3413-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3413-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 04, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3413-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3413-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 04, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DLA 358-1] openssl security update

Package : openssl Version : 0.9.8o-4squeeze22 CVE ID : CVE-2015-3195 When presented with a malformed X509ATTRIBUTE structure OpenSSL will leak memory. This structure is used by the PKCS7 and CMS routines so any application which reads PKCS7 or CMS data from untrusted sources is affected. SSL/TLS ...

[SECURITY] [DSA 3412-1] redis security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3412-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 03, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3412-1] redis security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3412-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 03, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3411-1] cups-filters security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3411-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 02, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3410-1] icedove security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3410-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 01, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3409-1] putty security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3409-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 01, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3409-1] putty security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3409-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 01, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3408-1] gnutls26 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3408-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 01, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3408-1] gnutls26 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3408-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 01, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DLA 357-1] libphp-snoopy security update

Package : libphp-snoopy Version : 2.0.0-1deb6u1 CVE ID : CVE-2008-7313 CVE-2014-5008 Debian Bug : 778634 It was discovered that missing input sanitizing in Snoopy, a PHP class that simulates a web browser may result in the execution of arbitrary commands. For the oldoldstable distribution...

[SECURITY] [DLA 356-1] libsndfile security update

Package : libsndfile Version : 1.0.21-3+squeeze2 CVE ID : CVE-2014-9496 CVE-2014-9756 CVE-2015-7805 Debian Bug : 774162 804445 804447 CVE-2014-9496 The sd2parsersrcfork function in sd2.c in libsndfile allows attackers to have unspecified impact via vectors related to a 1 map offset or 2 rsrc...

[SECURITY] [DLA 355-1] libxml2 security update

Package : libxml2 Version : 2.7.8.dfsg-2+squeeze15 CVE ID : CVE-2015-8241 CVE-2015-8317 Debian Bug : 806384 CVE-2015-8241 Buffer overread with XML parser in xmlNextChar CVE-2015-8317 - issues in the xmlParseXMLDecl function: If we fail conversing the current input stream while processing the...

[SECURITY] [DLA 354-1] nss security update

Package : nss Version : 3.12.8-1+squeeze13 CVE ID : CVE-2015-7181 CVE-2015-7182 Debian Bug : Several vulnerabilities have been discovered in nss, the Mozilla Network Security Service library. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2015-7181 The...

[SECURITY] [DLA 353-1] imagemagick security update

Package : imagemagick Version : 8:6.6.0.4-3+squeeze7 Debian Bug : 806441 Submitting specially crafted icons .ico or .pict images to ImageMagick can trigger integer overflows that can lead to buffer overflows and memory allocations issues. Depending on the case, this can lead to a denial of servic...

[SECURITY] [DLA 348-1] smokeping security update

...

[SECURITY] [DLA 352-1] libcommons-collections3-java security update

Package : libcommons-collections3-java Version : 3.2.1-4+deb6u1 The Apache commons collection suffered from security issues, making applications to accept serialized objects from untrusted sources. Remote attackers might take advantage of these issues to execute arbitrary Java functions and even...

[SECURITY] [DSA 3407-1] dpkg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3407-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 26, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3407-1] dpkg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3407-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 26, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DLA 350-1] eglibc security update

Package : eglibc Version : 2.11.3-4+deb6u8 CVE ID : not assigned yet Debian Bug : 803927 The strxfrm function is vulnerable to integer overflows when computing memory allocation sizes similar to CVE-2012-4412. Furthermore since it fallbacks to use alloca when malloc fails, it is vulnerable to...

[SECURITY] [DLA 351-1] redmine security update

Package : redmine Version : 1.0.1-2+deb6u11 CVE ID : CVE-2015-8346 It was discovered that there was a data disclosure vulnerability in Redmine, a web-based bug and project management tool. The time logging form could disclose subjects of issues that are not visible/public. Patch by Holger Just. F...

[SECURITY] [DSA 3406-1] nspr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3406-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 25, 2015 https://www.debian.org/security/faq -...