[SECURITY] [DSA 3404-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3404-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 25, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3404-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3404-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 25, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DLA 347-1] putty security update

Package : putty Version : 0.60+2010-02-20-1+squeeze4 CVE ID : CVE-2015-5309 It was discovered that PuTTYs terminal emulator did not properly validate the parameter to the ECH erase characters control sequence, allowing a denial of service and possibly remote code execution...

[SECURITY] [DSA 3403-1] libcommons-collections3-java security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3403-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 24, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3402-1] symfony security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3402-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 24, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3402-1] symfony security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3402-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 24, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DLA 346-1] openjdk-6 security update

Package : openjdk-6 Version : 6b37-1.13.9-1deb6u1 CVE ID : CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4835 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4872 CVE-2015-4881 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4903 CVE-2015-4911 Several...

[SECURITY] [DSA 3401-1] openjdk-7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3401-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 22, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DLA 344-1] nspr security update

Package : nspr Version : 4.8.6-1+squeeze3 CVE ID : CVE-2015-7183 Google security engineer Ryan Sleevi found a vulnerability in the NetScape Portable Runtime Library NSPR. NSPR allocated memory without specific checks, making it possible for remote attackers to cause a Denial of Service or execute...

[SECURITY] [DSA 3400-1] lxc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3400-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 19, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3400-1] lxc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3400-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 19, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DLA 345-1] strongswan security update

Package : strongswan Version : 4.4.1-5.8 CVE ID : CVE-2015-8023 Tobias Brunner found an authentication bypass vulnerability in strongSwan, an IKE/IPsec suite. Due to insufficient validation of its local state the server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin can be...

[SECURITY] [DSA 3399-1] libpng security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3399-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 18, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3399-1] libpng security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3399-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 18, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DLA 342-1] openafs security update

Package : openafs Version : 1.4.12.1+dfsg-4+squeeze4 CVE ID : CVE-2015-3282 CVE-2015-3283 CVE-2015-3285 CVE-2015-6587 CVE-2015-7762 CVE-2015-7763 Several vulnerabilities have been found and solved in the distributed file system OpenAFS: CVE-2015-3282 vos leaked stack data clear on the wire when...

[SECURITY] [DLA 343-1] libpng security update

Package : libpng Version : 1.2.44-1+squeeze5 CVE ID : CVE-2012-3425 CVE-2015-7981 CVE-2015-8126 CVE-2015-7981 Added a safety check in pngsettIME Bug report from Qixue Xiao. CVE-2015-8126 Multiple buffer overflows in the 1 pngsetPLTE and 2 pnggetPLTE functions in libpng before 1.0.64, 1.1.x and...

[SECURITY] [DSA 3398-1] strongswan security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3398-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez November 16, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3208-2] freexl regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3208-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 14, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3208-2] freexl regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3208-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 14, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3395-2] krb5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3395-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 12, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3395-2] krb5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3395-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 12, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3397-1] wpa security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3397-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 10, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3397-1] wpa security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3397-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 10, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3396-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3396-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 10, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3396-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3396-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 10, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3386-2] unzip regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3386-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 09, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3386-2] unzip regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3386-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 09, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DLA 341-1] php5 security update

Package : php5 Version : 5.3.3.1-7+squeeze28 CVE ID : CVE-2015-6831 CVE-2015-6832 CVE-2015-6833 CVE-2015-6834 CVE-2015-6836 CVE-2015-6837 CVE-2015-6838 CVE-2015-7803 CVE-2015-7804 CVE-2015-6831 Use after free vulnerability was found in unserialize function. We can create ZVAL and free it via...

[SECURITY] [DLA 340-1] krb5 security update

Package : krb5 Version : 1.8.3+dfsg-4squeeze10 CVE ID : CVE-2015-2695 CVE-2015-2697 Several vulnerabilities were discovered in krb5, the MIT implementation of Kerberos. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2015-2695 It was discovered that...

[SECURITY] [DSA 3395-1] krb5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3395-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 06, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3395-1] krb5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3395-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 06, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3394-1] libreoffice security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3394-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 05, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3393-1] iceweasel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3393-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 04, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3392-1] freeimage security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3392-1 [email protected] https://www.debian.org/security/ Sebastien Delafond November 04, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3392-1] freeimage security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3392-1 [email protected] https://www.debian.org/security/ Sebastien Delafond November 04, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3391-1] php-horde security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3391-1 [email protected] https://www.debian.org/security/ Florian Weimer November 03, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DLA 339-1] libhtml-scrubber-perl security update

Package : libhtml-scrubber-perl Version : 0.08-4+deb6u1 CVE ID : CVE-2015-5667 Debian bug : 803943 HTML::Scrubber is vulnerable to a cross-site scripting XSS vulnerability when the comment feature is enabled. It allows remote attackers to inject arbitrary web script or HTML via a crafted comment...

[SECURITY] [DSA 3355-2] libvdpau regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3355-2 [email protected] https://www.debian.org/security/ Alessandro Ghedini November 02, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3390-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3390-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 02, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3390-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3390-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 02, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3389-1] elasticsearch end-of-life

------------------------------------------------------------------------- Debian Security Advisory DSA-3389-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 01, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3381-2] openjdk-7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3381-2 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 1, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3388-1] ntp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3388-1 [email protected] https://www.debian.org/security/ Kurt Roeckx November 01, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3387-1] openafs security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3387-1 [email protected] https://www.debian.org/security/ Florian Weimer November 01, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DLA 338-1] xscreensaver security update

Package : xscreensaver Version : 5.11-1+deb6u11 CVE ID : CVE-2015-8025 Debian Bug : 802914 xscreensaver, a screensaver daemon and frontend for X11 was vulnerable to crashing when hot-swapping monitors. For Debian 6 Squeeze, this issue has been fixed in xscreensaver version 5.11-1+deb6u11. Regards...

[SECURITY] [DSA 3386-1] unzip security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3386-1 [email protected] https://www.debian.org/security/ Laszlo Boszormenyi GCS October 31, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3386-1] unzip security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3386-1 [email protected] https://www.debian.org/security/ Laszlo Boszormenyi GCS October 31, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3385-1] mariadb-10.0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3385-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 31, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3385-1] mariadb-10.0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3385-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 31, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DLA 337-1] busybox security update

Package : busybox Version : 1:1.17.1-8+deb6u11 Debian Bug : 803097 busybox, a collection of tiny utilities for small and embedded systems, was vulnerable to crashing when handling a specially crafted zip file. The issue was discovered by Gustavo Grieco. For Debian 6 Squeeze, this issue has been...