[SECURITY] [DSA 3442-1] isc-dhcp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3442-1 [email protected] https://www.debian.org/security/ Michael Gilbert January 13, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 383-1] claws-mail security update

Package : claws-mail Version : 3.7.6-4+squeeze2 CVE ID : CVE-2015-8614 CVE-2015-8708 "DrWhax" of the Tails project reported that Claws Mail is missing range checks in some text conversion functions. A remote attacker could exploit this to run arbitrary code under the account...

[SECURITY] [DSA 3441-1] perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3441-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 11, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3441-1] perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3441-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 11, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3440-1] sudo security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3440-1 [email protected] https://www.debian.org/security/ Ben Hutchings January 11, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 381-1] icu security update

Package : icu Version : 4.4.1-8+squeeze5 CVE ID : CVE-2015-2632 A vulnerability was found in ICU, a set of libraries that provides Unicode and internationalization support. Integer overflows in the ICU layout engine made it possible to disclose information. For Debian 6 "Squeeze", this problem ha...

[SECURITY] [DLA 382-1] sudo security update

Package : sudo Version : 1.7.4p4-2.squeeze.6 CVE ID : CVE-2015-5602 Debian Bug : 804149 When sudo is configured to allow a user to edit files under a directory that they can already write to without using sudo, they can actually edit read and write arbitrary files. Daniel...

[SECURITY] [DSA 3438-1] xscreensaver security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3438-1 [email protected] https://www.debian.org/security/ Michael Gilbert January 09, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3438-1] xscreensaver security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3438-1 [email protected] https://www.debian.org/security/ Michael Gilbert January 09, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3439-1] prosody security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3439-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 10, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3439-1] prosody security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3439-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 10, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3437-1] gnutls26 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3437-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 09, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3437-1] gnutls26 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3437-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 09, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3436-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3436-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 08, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3436-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3436-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 08, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3435-1] git security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3435-1 [email protected] https://www.debian.org/security/ Laszlo Boszormenyi GCS January 05, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3435-1] git security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3435-1 [email protected] https://www.debian.org/security/ Laszlo Boszormenyi GCS January 05, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3434-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3434-1 [email protected] https://www.debian.org/security/ Ben Hutchings January 05, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3434-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3434-1 [email protected] https://www.debian.org/security/ Ben Hutchings January 05, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 378-1] linux-2.6 security update

Package : linux-2.6 Version : 2.6.32-48squeeze18 CVE ID : CVE-2015-7550 CVE-2015-8543 CVE-2015-8575 Debian Bug : 808293 This update fixes the CVEs described below. CVE-2015-7550 Dmitry Vyukov discovered a race condition in the keyring subsystem that allows a local...

[SECURITY] [DLA 380-1] libvncserver security update

Package : libvncserver Version : 0.9.7-2+deb6u2 An issue had been discovered and resolved by the libvncserver upstream developer Karl Runge addressing thread-safety in libvncserver when libvncserver is used for handling multiple VNC connections 1. Unfortunately, it is not trivially feasible becau...

[SECURITY] [DLA 374-3] cacti regression update

Package : cacti Version : 0.8.7g-1+squeeze9+deb6u13 CVE ID : CVE-2015-8369 Debian Bug : 807599 It was discovered that there was a regression in the patch intended to fix CVE-2015-8369 in the recent upload of cacti 0.8.7g-1+squeeze9+deb6u12. For Debian 6 Squeeze, this issue has been fixed in cacti...

[SECURITY] [DLA 379-1] samba security update

Package : samba Version : 2:3.5.6dfsg-3squeeze13 CVE ID : CVE-2015-5252 CVE-2015-5296 CVE-2015-5299 Several vulnerabilities were found in Samba, a SMB/CIFS implementation that provides a file, print, and login server. CVE-2015-5252 Jan "Yenya" Kasprzak and the Computer Systems Unit team at Facult...

[SECURITY] [DSA 3433-1] samba security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3433-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 02, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3433-1] samba security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3433-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 02, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 375-1] ia32-libs security update

Package : ia32-libs Version : 20151231 The ia32-libs package contains 32 bit versions of various libraries for use on 64 bit systems. This update rolls in all security fixes made to these libraries since the previous update of ia32-libs in Squeeze LTS...

[SECURITY] [DSA 3432-1] icedove security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3432-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 01, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3431-1] ganeti security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3431-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 01, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 374-2] cacti regression update

Package : cacti Version : 0.8.7g-1+squeeze9+deb6u12 It was discovered that there was a regression in the patch intended to fix CVE-2015-8369 in the recent upload of cacti 0.8.7g-1+squeeze9+deb6u11. For Debian 6 Squeeze, this issue has been fixed in cacti version 0.8.7g-1+squeeze9+deb6u12. Regards...

[SECURITY] [DLA 376-1] mono security update

Package : mono Version : 2.6.7-5.1+deb6u2 CVE ID : CVE-2009-0689 Monos string-to-double parser may crash, on specially crafted input. This could theoretically lead to arbitrary code execution. This issue has been fixed in Debian 6 Squeeze with the version 2.6.7-5.1+deb6u2 of mono. We recommend th...

[SECURITY] [DLA 375-1] libpng security update

Package : libpng Version : 1.2.44-1+squeeze6 CVE ID : CVE-2012-3425 CVE-2015-8472 CVE-2015-8540 CVE-2015-8472 update incomplete patch for CVE-2015-8126 CVE-2015-8540 underflow read in pngcheckkeyword in pngwutil.c CVE-2012-3425 The pngpushreadzTXt function in pngpread.c in libpng 1.0.x before...

[SECURITY] [DLA 374-1] cacti security update

Package : cacti Version : 0.8.7g-1+squeeze9+deb6u11 CVE IDs : CVE-2015-8369 CVE-2015-8377 Debian Bug : 807599 It was discovered that there were SQL injection vulnerabilities in cacti, a web interface for graphing of monitoring systems. For Debian 6 Squeeze, this issue has been fixed in cacti...

[SECURITY] [DLA 373-1] libxml2 security update

Package : libxml2 Version : 2.7.8.dfsg-2+squeeze16 CVE ID : CVE-2015-5312 CVE-2015-7497 CVE-2015-7498 CVE-2015-7499 CVE-2015-7500 Several vulnerabilities were discovered in libxml2, a library providing support to read, modify and write XML and HTML files. A remote attacker could provide a special...

[SECURITY] [DSA 3430-1] libxml2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3430-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 23, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3430-1] libxml2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3430-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 23, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3429-1] foomatic-filters security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3429-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 21, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3429-1] foomatic-filters security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3429-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 21, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3428-1] tomcat8 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3428-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 18, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3427-1] blueman security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3427-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 18, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DLA 372-1] virtualbox-ose 3.2.x is no longer supported in Debian 6

Package : virtualbox-ose Oracle stopped supporting version 3.2 of VirtualBox last June. They also do not disclose enough information about vulnerabilities discovered and fixed in newer versions so that it is impossible for us to verify whether the vulnerability also applies to 3.2 and to backport...

[SECURITY] [DLA 371-1] foomatic-filters security update

Package : foomatic-filters Version : 4.0.5-6+squeeze2+deb6u12 CVE ID : CVE-2015-8560 Debian Bug : 807993 Adam Chester discovered that there was an injection vulnerability in foomatic-filters which is used by printer spoolers to convert incoming PostScript data into the printers native format. Thi...

[SECURITY] [DSA 3426-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3426-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 17, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3426-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3426-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 17, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3425-1] tryton-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3425-1 [email protected] https://www.debian.org/security/ Luciano Bello December 17, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3425-1] tryton-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3425-1 [email protected] https://www.debian.org/security/ Luciano Bello December 17, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3425-1] tryton-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3425-1 [email protected] https://www.debian.org/security/ Luciano Bello December 17, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3425-1] tryton-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3425-1 [email protected] https://www.debian.org/security/ Luciano Bello December 17, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3337-2] gdk-pixbuf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3337-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 17, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3337-2] gdk-pixbuf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3337-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 17, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DLA 370-1] bind9 security update

Package : bind9 Version : 1:9.7.3.dfsg-1squeeze18 CVE ID : CVE-2015-8000 It was discovered that the BIND DNS server does not properly handle the parsing of incoming responses, allowing some records with an incorrect class to be accepted by BIND instead of being rejected as malformed. This can...