14473 matches found
[SECURITY] [DSA 3229-1] mysql-5.5 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3229-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 19, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DLA 203-1] openldap security update
Package : openldap Version : 2.4.23-7.3+deb6u1 CVE IDs : CVE-2012-1164 CVE-2013-4449 CVE-2014-9713 CVE-2015-1545 Debian Bugs : 663644 729367 761406 776988 Multiple vulnerabilities were found in OpenLDAP, a free implementation of the Lightweight Directory Access Protocol. Please carefully check...
[SECURITY] [DLA 202-1] wesnoth-1.8 security update
Package : wesnoth-1.8 Version : 1:1.8.5-1+deb6u1 CVE ID : CVE-2015-0844 Ignacio R. Morelle discovered that missing path restrictions in the "Battle of Wesnoth" game could result in the disclosure of arbitrary files in the users home directory if malicious campaigns/maps are loaded. For the...
[SECURITY] [DLA 201-1] tzdata new upstream version
Package : tzdata Version : 2015c-0+deb6u1 Upstream published version 2015c, fixing the DST rule for Egypt. Aurelien Jarno GPG: 4096R/1DDD8C9B [email protected] http://www.aurel32.net...
[SECURITY] [DSA 3228-1] ppp security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3228-1 [email protected] http://www.debian.org/security/ Sebastien Delafond April 16, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3228-1] ppp security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3228-1 [email protected] http://www.debian.org/security/ Sebastien Delafond April 16, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3227-1] movabletype-opensource security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3227-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 15, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3227-1] movabletype-opensource security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3227-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 15, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DLA 200-1] ruby1.9.1 security update
Package : ruby1.9.1 Version : 1.9.2.0-2+deb6u3 CVE ID : CVE-2014-4975 CVE-2014-8080 CVE-2014-8090 CVE-2014-4975 The encodes function in pack.c had an off-by-one error that could lead to a stack-based buffer overflow. This could allow remote attackers to cause a denial of service crash or arbitrar...
[SECURITY] [DSA 3226-1] inspircd security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3226-1 [email protected] http://www.debian.org/security/ Sebastien Delafond April 15, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3226-1] inspircd security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3226-1 [email protected] http://www.debian.org/security/ Sebastien Delafond April 15, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3225-1] gst-plugins-bad0.10 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3225-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 15, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DLA 199-1] libx11 security update
Package : libx11 Version : 2:1.3.3-4+squeeze2 CVE ID : CVE-2013-7439 Abhishek Arya discovered a buffer overflow in the MakeBigReq macro provided by libx11, which could result in denial of service or the execution of arbitrary code. Several other xorg packages e.g. libxrender will be recompiled...
[SECURITY] [DLA 197-1] libvncserver security update
Package : libvncserver Version : 0.9.7-2+deb6u1 CVE ID : CVE-2014-6051 CVE-2014-6052 CVE-2014-6053 CVE-2014-6054 CVE-2014-6055 Debian Bug : 762745 Several vulnerabilities have been discovered in libvncserver, a library to implement VNC server functionality. These vulnerabilities might result in t...
[BSA-103] Security Update for shibboleth-sp
Matthew Vernon uploaded new packages for shibboleth-sp which fixed the following security problems: CVE-2015-2684 A denial of service vulnerability was found in the Shibboleth a federated identity framework Service Provider. When processing certain malformed SAML messages generated by an...
[SECURITY] [DLA 196-1] ia32-libs security update
Package : ia32-libs, ia32-libs-gtk Version : 20150413 The ia32-libs and ia32-libs-gtk packages contain 32 bit versions of various libraries for use on 64 bit systems. This update rolls in all security fixes made to these libraries since the previous update of ia32-libs and ia32-libs-gtk in Squeez...
[SECURITY] [DSA 3224-1] libx11 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3224-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 12, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DLA 195-1] libtasn1-3 security update
Package : libtasn1-3 Version : 2.7-1+squeeze+3 CVE ID : CVE-2015-2806 Hanno Boeck discovered a stack-based buffer overflow in the asn1derdecoding function in Libtasn1, a library to manage ASN.1 structures. A remote attacker could take advantage of this flaw to cause an application using the...
[SECURITY] [DSA 3223-1] ntp security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3223-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini April 12, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DLA 193-1] chrony security update
Package : chrony Version : 1.24-3+squeeze2 CVE ID : CVE-2015-1821 CVE-2015-1822 CVE-2015-1853 Debian Bug : 782160 CVE-2015-1853: Protect authenticated symmetric NTP associations against DoS attacks. An attacker knowing that NTP hosts A and B are peering with each other symmetric association can...
[SECURITY] [DSA 3222-1] chrony security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3222-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini April 12, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DLA 194-1] das-watchdog security update
Package : das-watchdog Version : 0.9.0-2+deb6u1 CVE ID : CVE-2015-2831 Debian Bug : 781806 Adam Sampson discovered a buffer overflow in the handling of the XAUTHORITY environment variable in das-watchdog, a watchdog daemon to ensure a realtime process wont hang the machine. A local user can explo...
[SECURITY] [DSA 3221-1] das-watchdog security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3221-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 12, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3221-1] das-watchdog security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3221-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 12, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3220-1] libtasn1-3 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3220-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 11, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3220-1] libtasn1-3 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3220-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 11, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3219-1] libdbd-firebird-perl security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3219-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini April 11, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DLA 192-1] ntp security update
Package : ntp Version : 1:4.2.6.p2+dfsg-1+deb6u3 CVE ID : CVE-2015-1798 CVE-2015-1799 Debian Bug : 782095 Brief introduction CVE-2015-1798 When ntpd is configured to use a symmetric key to authenticate a remote NTP server/peer, it checks if the NTP message authentication code MAC in received...
[SECURITY] [DSA 3218-1] wesnoth-1.10 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3218-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 10, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3217-1] dpkg security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3217-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 09, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3217-1] dpkg security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3217-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 09, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DLA 191-1] checkpw security update
Package : checkpw Version : 1.02-1+deb6u1 CVE ID : CVE-2015-0885 Hiroya Ito of GMO Pepabo, Inc. reported that checkpw, a password authentication program, has a flaw in processing account names which contain double dashes. A remote attacker can use this flaw to cause a denial of service infinite...
[SECURITY] [DLA 190-1] libgcrypt11 security update
Package : libgcrypt11 Version : 1.4.5-2+squeeze3 CVE ID : CVE-2014-3591 CVE-2015-0837 Multiple vulnerabilities were discovered in libgcrypt: CVE-2014-3591 The Elgamal decryption routine was susceptible to a side-channel attack discovered by researchers of Tel Aviv University. Ciphertext blinding...
[SECURITY] [DLA 189-1] libgd2 security update
Package : libgd2 Version : 2.0.36rc1dfsg-5+deb6u1 CVE ID : CVE-2014-2497 CVE-2014-9709 Debian Bug : 744719 Multiple vulnerabilities were discovered in libgd2, a graphics library: CVE-2014-2497 The gdImageCreateFromXpm function would try to dereference a NULL pointer when reading an XPM file with ...
[SECURITY] [DLA 188-1] arj security update
Package : arj Version : 3.10.22-9+deb6u1 CVE ID : CVE-2015-0556 CVE-2015-0557 CVE-2015-2782 Debian Bug : 774015 774434 774435 Multiple vulnerabilities have been discovered in arj, an open source version of the arj archiver. The Common Vulnerabilities and Exposures project identifies the following...
[SECURITY] [DSA 3057-2] libxml2 regression update
------------------------------------------------------------------------- Debian Security Advisory DSA-3057-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 07, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3057-2] libxml2 regression update
------------------------------------------------------------------------- Debian Security Advisory DSA-3057-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 07, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DLA 187-1] tor security update
Package : tor Version : 0.2.4.27-1deb6u1 CVE ID : CVE-2015-2928 CVE-2015-2929 Several hidden service related denial-of-service issues have been discovered in Tor, a connection-based low-latency anonymous communication system. o "disgleirio" discovered that a malicious client could trigger an...
[SECURITY] [DSA 3216-1] tor security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3216-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 06, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3215-1] libgd2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3215-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini April 06, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3215-1] libgd2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3215-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini April 06, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DLA 186-1] mailman security update
Package : mailman Version : 1:2.1.13-6 CVE ID : CVE-2015-2775 Debian Bug : 781626 A path traversal vulnerability was discovered in Mailman, the mailing list manager. Installations using a transport script such as postfix-to-mailman.py to interface with their MTA instead of static aliases were...
[SECURITY] [DSA 3214-1] mailman security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3214-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 06, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3213-1] arj security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3213-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 06, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3213-1] arj security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3213-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 06, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3212-1] icedove security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3212-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez April 02, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3211-1] iceweasel security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3211-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 01, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3211-1] iceweasel security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3211-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 01, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DLA 185-1] freetype security update
Package : freetype Version : 2.4.2-2.1+squeeze5 CVE ID : CVE-2014-9656 CVE-2014-9657 CVE-2014-9658 CVE-2014-9660 CVE-2014-9661 CVE-2014-9663 CVE-2014-9664 CVE-2014-9665 CVE-2014-9666 CVE-2014-9667 CVE-2014-9669 CVE-2014-9670 CVE-2014-9671 CVE-2014-9672 CVE-2014-9673 CVE-2014-9674 CVE-2014-9675...
[SECURITY] [DSA 3210-1] wireshark security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3210-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 31, 2015 http://www.debian.org/security/faq -...