[BSA-107] Security Update for horizon

Thomas Goirand uploaded new packages for horizon which fixed the following security problem: CVE-2015-3988: Sunil Yadav from IBM Security Services reported a persistent XSS in Horizon. An authenticated user may conduct a persistent XSS attack by setting a malicious metadata to a Glance image, a...

[SECURITY] [DSA 3273-1] tiff security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3273-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 25, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 226-1] ntfs-3g security update

Package : ntfs-3g Version : 1:2010.3.6-1+deb6u1 CVE ID : CVE-2015-3202 Tavis Ormandy discovered that NTFS-3G, a read-write NTFS driver for FUSE, does not scrub the environment before executing mount or umount with elevated privileges. A local user can take advantage of this flaw to overwrite...

[BSA-106] Security Update for nbd

Wouter Verhelst uploaded new packages for nbd which fixed the following security problems: CVE-2015-0847 Tuomas Räsänen discovered that nbd-server unsafe signal handling in nbd-server, the server for the Network Block Device protocol, could allow remote attackers to cause a deadlock in the server...

[SECURITY] [DSA 3265-2] zendframework regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3265-2 [email protected] http://www.debian.org/security/ Alessandro Ghedini May 24, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3272-1] ipsec-tools security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3272-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 23, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3272-1] ipsec-tools security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3272-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 23, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3271-1] nbd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3271-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini May 23, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3270-1] postgresql-9.4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3270-1 [email protected] http://www.debian.org/security/ Christoph Berg May 22, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3270-1] postgresql-9.4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3270-1 [email protected] http://www.debian.org/security/ Christoph Berg May 22, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3269-1] postgresql-9.1 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3269-1 [email protected] http://www.debian.org/security/ Christoph Berg May 22, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3269-1] postgresql-9.1 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3269-1 [email protected] http://www.debian.org/security/ Christoph Berg May 22, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3268-1] ntfs-3g security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3268-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 22, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3268-1] ntfs-3g security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3268-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 22, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3267-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3267-1 [email protected] http://www.debian.org/security/ Michael Gilbert May 22, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3267-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3267-1 [email protected] http://www.debian.org/security/ Michael Gilbert May 22, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3266-1] fuse security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3266-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 21, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3266-1] fuse security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3266-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 21, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 225-1] dnsmasq security update

Package : dnsmasq Version : 2.55-2+deb6u1 CVE ID : CVE-2015-3294 Debian Bug : 783459 The following vulnerability vulnerability was found in dnsmasq: CVE-2015-3294 Remote attackers could read process memory and cause DoS via malformed DNS requests. For Debian 6 “Squeeze”, these issues have been...

[SECURITY] [DSA 3261-2] libmodule-signature-perl regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3261-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 20, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3261-2] libmodule-signature-perl regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3261-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 20, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3265-1] zendframework security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3265-1 [email protected] http://www.debian.org/security/ David Prévot May 20, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3263-1] proftpd-dfsg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3263-1 [email protected] http://www.debian.org/security/ Sebastien Delafond May 19, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3263-1] proftpd-dfsg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3263-1 [email protected] http://www.debian.org/security/ Sebastien Delafond May 19, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3264-1] icedove security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3264-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 19, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 222-1] commons-httpclient security update

Package : commons-httpclient Version : 3.1-9+deb6u1 CVE ID : CVE-2012-5783 CVE-2012-6153 CVE-2014-3577 CVE-2012-5783 and CVE-2012-6153 Apache Commons HttpClient 3.1 did not verify that the server hostname matches a domain name in the subjects Common Name CN or subjectAltName field of the X.509...

[SECURITY] [DSA 3175-2] kfreebsd-9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3175-2 [email protected] http://www.debian.org/security/ Alessandro Ghedini May 18, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 224-1] ruby1.8 security update

Package : ruby1.8 Version : 1.8.7.302-2squeeze4 CVE ID : CVE-2015-1855 It was discovered that the Ruby OpenSSL extension, part of the interpreter for the Ruby language, did not properly implement hostname matching, in violation of RFC 6125. This could allow remote attackers to perform a...

[SECURITY] [DSA 3262-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3262-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 18, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 223-1] nbd security update

Package : nbd Version : 1:2.9.16-8+squeeze2 CVE ID : CVE-2015-0847 Debian Bug : 784657 A vulnerability has been discovered in nbd-server, the server for the Linux Network Block Device. CVE-2015-0847 Tuomas Räsänen discovered that unsafe signal handling is present in nbd-server. This vulnerability...

[SECURITY] [DLA 221-1] tiff security update

Package : tiff Version : 3.9.4-5+squeeze12 CVE ID : CVE-2014-8128 CVE-2014-8129 CVE-2014-9330 CVE-2014-9655 Debian Bug : 773987 Several vulnerabilities have been discovered in the LibTIFF library and utilities for the Tag Image File Format. These could lead to a denial of service, information...

[SECURITY] [DLA 220-1] dpkg security update

Package : dpkg Version : 1.15.12 CVE ID : CVE-2015-0840 Debian Bug : 617923 695919 Jann Horn discovered that the source package integrity verification in dpkg-source can be bypassed via a specially crafted Debian source control file .dsc. Note that this flaw only affects extraction of local Debia...

[SECURITY] [DSA 3261-1] libmodule-signature-perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3261-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 15, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3261-1] libmodule-signature-perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3261-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 15, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 219-1] icu security update

Package : icu Version : 4.4.1-8+squeeze3 CVE ID : CVE-2013-1569 CVE-2013-2383 CVE-2013-2384 CVE-2013-2419 CVE-2014-6585 CVE-2014-6591 CVE-2014-7923 CVE-2014-7926 CVE-2014-7940 CVE-2014-9654 Several vulnerabilities were discovered in the International Components for Unicode ICU library:...

[SECURITY] [DSA 3260-1] iceweasel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3260-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 13, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3259-1] qemu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3259-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 13, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3258-1] quassel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3258-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini May 12, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3257-1] mercurial security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3257-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 11, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3257-1] mercurial security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3257-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 11, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3256-1] libtasn1-6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3256-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 10, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3256-1] libtasn1-6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3256-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 10, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3255-1] zeromq3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3255-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini May 10, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3254-1] suricata security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3254-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 09, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3254-1] suricata security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3254-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 09, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3251-2] dnsmasq regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3251-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 07, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3251-2] dnsmasq regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3251-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 07, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3253-1] pound security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3253-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 07, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3252-1] sqlite3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3252-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 06, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3251-1] dnsmasq security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3251-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 05, 2015 http://www.debian.org/security/faq -...