[SECURITY] [DLA 414-1] chrony security update

Package : chrony Version : 1.24-3+squeeze3 CVE ID : CVE-2016-1567 Debian Bug : 812923 chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trust...

[SECURITY] [DSA 3474-1] libgcrypt20 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3474-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 12, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3474-1] libgcrypt20 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3474-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 12, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 411-2] eglibc regression update

Package : eglibc Version : 2.11.3-4+deb6u10 CVE ID : CVE-2014-9761 Debian Bug : 814078 The fix for CVE-2014-9761 in Squeeze wrongly backported the upstream patch. New symbols were not declared as private and the ABI changed. This made some programs and services crash after the upgrade, and needed...

[SECURITY] [DSA 3473-1] nginx security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3473-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 11, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3473-1] nginx security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3473-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 11, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 413-1] gajim security update

Package : gajim Version : 0.13.4-3+squeeze4 CVE ID : CVE-2015-8688 Debian Bug : 809900 Affected versions of gajim allow remote attackers to modify the roster and intercept messages via a crafted roster-push IQ stanza. This has been fixed in squeeze-lts by version 0.13.4-3+squeeze4. - -- Brian May...

[SECURITY] [DSA 3472-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3472-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 08, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3472-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3472-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 08, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3471-1] qemu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3471-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 08, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3471-1] qemu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3471-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 08, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3470-1] qemu-kvm security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3470-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 08, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3470-1] qemu-kvm security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3470-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 08, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3469-1] qemu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3469-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 08, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3469-1] qemu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3469-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 08, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3468-1] polarssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3468-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 06, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3468-1] polarssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3468-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 06, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 412-1] linux-2.6 security update

Package : linux-2.6 Version : 2.6.32-48squeeze19 CVE ID : CVE-2015-7566 CVE-2015-8767 CVE-2015-8785 CVE-2016-0723 CVE-2016-2069 This update fixes the CVEs described below. CVE-2015-7566 Ralf Spenneberg of OpenSource Security reported that the visor...

[SECURITY] [DSA 3467-1] tiff security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3467-1 [email protected] https://www.debian.org/security/ Laszlo Boszormenyi GCS February 06, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3467-1] tiff security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3467-1 [email protected] https://www.debian.org/security/ Laszlo Boszormenyi GCS February 06, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 411-1] eglibc security update

Package : eglibc Version : eglibc2.11.3-4+deb6u9 CVE ID : CVE-2014-9761 CVE-2015-8776 CVE-2015-8778 CVE-2015-8779 Several vulnerabilities have been fixed in the Debian GNU C Library, eglibc: CVE-2014-9761 The maths nan function wrongly handled payload strings, yielding to an unbounded stack...

[SECURITY] [DSA 3466-1] krb5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3466-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 04, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3466-1] krb5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3466-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 04, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 410-1] openjdk-6 security update

Package : openjdk-6 Version : 6b38-1.13.10-1deb6u1 CVE ID : CVE-2015-7575 CVE-2015-8126 CVE-2015-8472 CVE-2016-0402 CVE-2016-0448 CVE-2016-0466 CVE-2016-0483 CVE-2016-0494 Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in breakout...

[SECURITY] [DSA 3465-1] openjdk-6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3465-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 02, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 409-1] mysql-5.5 security update

Package : mysql-5.5 Version : 5.5.47-0+deb6u1 CVE ID : CVE-2016-0505 CVE-2016-0546 CVE-2016-0596 CVE-2016-0597 CVE-2016-0598 CVE-2016-0600 CVE-2016-0606 CVE-2016-0608 CVE-2016-0609 CVE-2016-0616 Debian Bug : 811428 Several issues have been found in the MySQL database server. These issues have bee...

[SECURITY] [DSA 3464-1] rails security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3464-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 31, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3463-1] prosody security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3463-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 31, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 408-1] gosa security update

Package : gosa Version : 2.6.11-3+squeeze5 CVE ID : CVE-2015-8771 GOsa is a combination of system-administrator and end-user web interface, designed to handle LDAP based setups. GOsa upstream reported a code injection vulnerability in the Samba plugin code of GOsa. During Samba password changes i...

[SECURITY] [DSA 3461-1] freetype security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3461-1 [email protected] https://www.debian.org/security/ Sebastien Delafond January 30, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3461-1] freetype security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3461-1 [email protected] https://www.debian.org/security/ Sebastien Delafond January 30, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 407-1] prosody security update

Package : prosody Version : 0.7.0-1squeeze1+deb6u2 CVE ID : CVE-2016-0756 The flaw allows a malicious server to impersonate the vulnerable domain to any XMPP domain whose domain name includes the attackers domain as a suffix. For example, bber.example would be able to connect to jabber.example an...

[SECURITY] [DLA 406-1] phpmyadmin security update

Package : phpmyadmin Version : 4:3.3.7-11 CVE ID : CVE-2016-2039 CVE-2016-2041 Several flaws were discovered in the CSRF authentication code of phpMyAdmin. CVE-2016-2039 The XSRF/CSRF token is generated with a weak algorithm using functions that do not return cryptographically secure values...

[SECURITY] [DSA 3462-1] radicale security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3462-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez January 30, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 405-1] tiff security update

Package : tiff Version : 3.9.4-5+squeeze14 CVE ID : CVE-2015-8781 CVE-2015-8782 CVE-2015-8783 CVE-2015-8784 Debian Bug : Several security flaws have been found and solved in libtiff, a library that provides support for handling Tag Image File Format TIFF. These flaws concern out of bounds reads a...

[SECURITY] [DSA 3460-1] privoxy security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3460-1 [email protected] https://www.debian.org/security/ Sebastien Delafond January 30, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3460-1] privoxy security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3460-1 [email protected] https://www.debian.org/security/ Sebastien Delafond January 30, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3459-1] mysql-5.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3459-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 28, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3459-1] mysql-5.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3459-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 28, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3458-1] openjdk-7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3458-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 27, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3457-1] iceweasel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3457-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 27, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3456-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3456-1 [email protected] https://www.debian.org/security/ Michael Gilbert January 27, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3456-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3456-1 [email protected] https://www.debian.org/security/ Michael Gilbert January 27, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3455-1] curl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3455-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini January 27, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 404-1] nginx security update

Package : nginx Version : 0.7.67-3+squeeze4+deb6u1 CVE ID : CVE-2016-0742 Debian Bug : 812806 It was discovered that there was a invalid pointer deference in nginx, a small, powerful, scalable web/proxy server. An invalid pointer dereference might occur during DNS server response processing,...

[SECURITY] [DSA 3454-1] virtualbox security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3454-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 27, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DLA 403-1] radicale security update

Package : radicale Version : 0.3-2+deb6u1 CVE ID : CVE-2015-8747 CVE-2015-8748 Debian Bug : 809920 Several issues have been discovered by Unrud in Radicale, a calendar and addressbook server. A remote attacker could exploit these vulnerabilities and call arbitrary functions by sending crafted HTT...

[SECURITY] [DLA 402-1] tiff security update

Package : tiff Version : 3.9.4-5+squeeze13 CVE ID : CVE-2015-8665 CVE-2015-8683 Debian Bug : 809021 808968 Two security flaws have been found and solved in libtiff, library that provides support for handling Tag Image File Format TIFF. These flaws concern out of bounds reads in the TIFFRGBAImage...

[SECURITY] [DSA 3453-1] mariadb-10.0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3453-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 25, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3453-1] mariadb-10.0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3453-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 25, 2016 https://www.debian.org/security/faq -...