[SECURITY] [DSA 3136-1] polarssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3136-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 24, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3135-1] mysql-5.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3135-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 23, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3135-1] mysql-5.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3135-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 23, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3134-1] sympa security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3134-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 20, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3134-1] sympa security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3134-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 20, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3133-1] privoxy security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3133-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 20, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 91-2] tomcat6 regression update

Package : tomcat6 Version : 6.0.41-2+squeeze6 This update fixes a "NoSuchElementException" when an XML attribute has an empty string as value...

[SECURITY] [DSA 3132-1] icedove security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3132-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 19, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3131-1] xdg-utils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3131-1 [email protected] http://www.debian.org/security/ Michael Gilbert January 18, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3131-1] xdg-utils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3131-1 [email protected] http://www.debian.org/security/ Michael Gilbert January 18, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3130-1] lsyncd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3130-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 16, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 135-1] ia32-libs security update

Package : ia32-libs, ia32-libs-gtk Version : 20150116 The ia32-libs and ia32-libs-gtk packages contain 32 bit versions of various libraries for use on 64 bit systems. This update rolls in all security fixes made to these libraries since the previous update of ia32-libs and ia32-libs-gtk in Squeez...

[SECURITY] [DSA 3129-1] rpm security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3129-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 15, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 134-1] curl security update

Package : curl Version : 7.21.0-2.1+squeeze11 CVE ID : CVE-2014-8150 Andrey Labunets of Facebook discovered that cURL, an URL transfer library, fails to properly handle URLs with embedded end-of-line characters. An attacker able to make an application using libcurl to access a specially crafted U...

[SECURITY] [DSA 3128-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3128-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 15, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3128-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3128-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 15, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 133-1] unrtf security update

Package : unrtf Version : 0.19.3-1.1+deb6u1 CVE ID : CVE-2014-9274 CVE-2014-9275 Debian Bug : 772811 CVE-2014-9274: check that accesses to color table stay within bounds Patches taken from upstream commits: - CVE-2014-9274: b0cef89a170a66bc48f8dd288ce562ea8ca91f7a CVE-2014-9275: various crashes ....

[SECURITY] [DSA 3127-1] iceweasel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3127-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 14, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3123-2] binutils-mingw-w64 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3123-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 13, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3126-1] php5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3126-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 12, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 132-1] openssl security update

Package : openssl Version : 0.9.8o-4squeeze19 CVE ID : CVE-2014-3570 CVE-2014-3571 CVE-2014-3572 CVE-2014-8275 CVE-2015-0204 Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit. The Common Vulnerabilities and Exposures project identifies the following issues:...

[SECURITY] [DSA 3125-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3125-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 11, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3125-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3125-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 11, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3124-1] otrs2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3124-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 10, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3124-1] otrs2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3124-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 10, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3123-1] binutils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3123-1 [email protected] http://www.debian.org/security/ Luciano Bello January 09, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 131-1] file security update

Package : file Version : 5.04-5+squeeze9 CVE ID : CVE-2014-8116 CVE-2014-8117 Debian Bug : 773148 Multiple security issues have been found in file, a tool/library to determine a file type. Processing a malformed file could result in denial of service. Most of the changes are related to parsing EL...

[SECURITY] [DLA 130-1] firebird2.1 security update

Package : firebird2.1 Version : 2.1.3.18185-0.ds1-11+squeeze2 CVE ID : CVE-2014-9323 Segfault in server caused by malformed network packet. See: http://tracker.firebirdsql.org/browse/CORE-4630...

[SECURITY] [DSA 3122-1] curl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3122-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 08, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3122-1] curl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3122-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 08, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3121-1] file security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3121-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 08, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3120-1] mantis security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3120-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 06, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3119-1] libevent security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3119-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 06, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3119-1] libevent security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3119-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 06, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3118-1] strongswan security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3118-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez January 05, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 129-1] polarssl security update

Package : polarssl Version : 1.2.9-1deb6u3 CVE ID : CVE-2014-8628 It was discovered that a memory leak in parsing X.509 certificates may result in denial of service...

[SECURITY] [DLA 128-1] sox security update

Package : sox Version : 14.3.1-1+deb6u1 CVE ID : CVE-2014-8145 Debian Bug : 773720 Michele Spagnuolo of the Google Security Team dicovered two heap-based buffer overflows in SoX, the Swiss Army knife of sound processing programs. A specially crafted wav file could cause an application using SoX t...

[SECURITY] [DLA 127-1] pyyaml security update

Package : pyyaml Version : 3.09-5+deb6u1 CVE ID : CVE-2014-9130 Debian Bug : 772815 Jonathan Gray and Stanislaw Pitucha found an assertion failure in the way wrapped strings are parsed in Python-YAML, a YAML parser and emitter for Python. An attacker able to load specially crafted YAML input into...

[SECURITY] [DSA 3117-1] php5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3117-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 31, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3117-1] php5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3117-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 31, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3116-1] polarssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3116-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 30, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3115-1] pyyaml security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3115-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 29, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 126-1] ettercap security update

Package : ettercap Version : 1:0.7.3-2.1+squeeze2 CVE ID : CVE-2014-9380 CVE-2014-9381 Debian Bug : 773416 Patches a bunch of security vulnerabilities: - CVE-2014-9380 Buffer over-read - CVE-2014-9381 Signedness error See: https://www.obrela.com/home/security-labs/advisories/osi-advisory-osi-1402...

[SECURITY] [DLA 125-1] mime-support security update

Package : mime-support Version : 3.48-1+deb6u1 CVE ID : CVE-2014-7209 Timothy D. Morgan discovered that run-mailcap, an utility to execute programs via entries in the mailcap file, is prone to shell command injection via shell meta-characters in filenames. In specific scenarios this flaw could...

[SECURITY] [DSA 3114-1] mime-support security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3114-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 29, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3114-1] mime-support security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3114-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 29, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 124-1] unzip security update

Package : unzip Version : 6.0-4+deb6u1 CVE ID : CVE-2014-8139 CVE-2014-8140 CVE-2014-8141 Debian Bug : 773722 Michele Spagnuolo of the Google Security Team discovered that unzip, an extraction utility for archives compressed in .zip format, is affected by heap-based buffer overflows within the...

[SECURITY] [DSA 3113-1] unzip security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3113-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 28, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3113-1] unzip security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3113-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 28, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3110-1] mediawiki security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3110-1 [email protected] http://www.debian.org/security/ Sebastien Delafond December 23, 2014 http://www.debian.org/security/faq -...