[SECURITY] [DLA 231-1] dulwich security update

Package : dulwich Version : 0.6.1-1+deb6u1 CVE ID : CVE-2015-0838 Ivan Fratric of the Google Security Team has found a buffer overflow in the C implementation of the applydelta function, used when accessing Git objects in pack files. An attacker could take advantage of this flaw to cause the...

[SECURITY] [DLA 230-1] eglibc security update

Package : eglibc Version : 2.11.3-4+deb6u6 CVE ID : CVE-2015-1781 Arjun Shankar of Red Hat discovered that gethostbynamer and related functions compute the size of an input buffer incorrectly if the passed-in buffer is misaligned. This results in a buffer overflow. For the oldoldstable distributi...

[SECURITY] [DLA 229-1] libnokogiri-ruby security update

Package : libnokogiri-ruby Version : 1.4.0-4+deb6u1 CVE ID : CVE-2012-6685 An XML eXternal Entity XXE flaw was found in Nokogiri, a Ruby gem for parsing HTML, XML, and SAX. Using external XML entities, a remote attacker could specify a URL in a specially crafted XML that, when parsed, would cause...

[SECURITY] [DLA 226-2] ntfs-3g regression update

Package : ntfs-3g Version : 1:2010.3.6-1+deb6u2 CVE ID : CVE-2015-3202 The patch applied for ntfs-3g to fix CVE-2015-3202 in DLA 226-1 was incomplete. This update corrects that problem. For reference the original advisory text follows. Tavis Ormandy discovered that NTFS-3G, a read-write NTFS driv...

[SECURITY] [DSA 3268-2] ntfs-3g security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3268-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 26, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3268-2] ntfs-3g security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3268-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 26, 2015 http://www.debian.org/security/faq -...

[BSA-107] Security Update for horizon

Thomas Goirand uploaded new packages for horizon which fixed the following security problem: CVE-2015-3988: Sunil Yadav from IBM Security Services reported a persistent XSS in Horizon. An authenticated user may conduct a persistent XSS attack by setting a malicious metadata to a Glance image, a...

[SECURITY] [DSA 3273-1] tiff security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3273-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 25, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 226-1] ntfs-3g security update

Package : ntfs-3g Version : 1:2010.3.6-1+deb6u1 CVE ID : CVE-2015-3202 Tavis Ormandy discovered that NTFS-3G, a read-write NTFS driver for FUSE, does not scrub the environment before executing mount or umount with elevated privileges. A local user can take advantage of this flaw to overwrite...

[BSA-106] Security Update for nbd

Wouter Verhelst uploaded new packages for nbd which fixed the following security problems: CVE-2015-0847 Tuomas Räsänen discovered that nbd-server unsafe signal handling in nbd-server, the server for the Network Block Device protocol, could allow remote attackers to cause a deadlock in the server...

[SECURITY] [DSA 3265-2] zendframework regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3265-2 [email protected] http://www.debian.org/security/ Alessandro Ghedini May 24, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3272-1] ipsec-tools security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3272-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 23, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3272-1] ipsec-tools security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3272-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 23, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3271-1] nbd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3271-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini May 23, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3270-1] postgresql-9.4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3270-1 [email protected] http://www.debian.org/security/ Christoph Berg May 22, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3270-1] postgresql-9.4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3270-1 [email protected] http://www.debian.org/security/ Christoph Berg May 22, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3269-1] postgresql-9.1 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3269-1 [email protected] http://www.debian.org/security/ Christoph Berg May 22, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3269-1] postgresql-9.1 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3269-1 [email protected] http://www.debian.org/security/ Christoph Berg May 22, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3268-1] ntfs-3g security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3268-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 22, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3268-1] ntfs-3g security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3268-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 22, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3267-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3267-1 [email protected] http://www.debian.org/security/ Michael Gilbert May 22, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3267-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3267-1 [email protected] http://www.debian.org/security/ Michael Gilbert May 22, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3266-1] fuse security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3266-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 21, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3266-1] fuse security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3266-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 21, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 225-1] dnsmasq security update

Package : dnsmasq Version : 2.55-2+deb6u1 CVE ID : CVE-2015-3294 Debian Bug : 783459 The following vulnerability vulnerability was found in dnsmasq: CVE-2015-3294 Remote attackers could read process memory and cause DoS via malformed DNS requests. For Debian 6 “Squeeze”, these issues have been...

[SECURITY] [DSA 3261-2] libmodule-signature-perl regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3261-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 20, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3261-2] libmodule-signature-perl regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3261-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 20, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3265-1] zendframework security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3265-1 [email protected] http://www.debian.org/security/ David Prévot May 20, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3263-1] proftpd-dfsg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3263-1 [email protected] http://www.debian.org/security/ Sebastien Delafond May 19, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3263-1] proftpd-dfsg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3263-1 [email protected] http://www.debian.org/security/ Sebastien Delafond May 19, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3264-1] icedove security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3264-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 19, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 222-1] commons-httpclient security update

Package : commons-httpclient Version : 3.1-9+deb6u1 CVE ID : CVE-2012-5783 CVE-2012-6153 CVE-2014-3577 CVE-2012-5783 and CVE-2012-6153 Apache Commons HttpClient 3.1 did not verify that the server hostname matches a domain name in the subjects Common Name CN or subjectAltName field of the X.509...

[SECURITY] [DSA 3175-2] kfreebsd-9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3175-2 [email protected] http://www.debian.org/security/ Alessandro Ghedini May 18, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 224-1] ruby1.8 security update

Package : ruby1.8 Version : 1.8.7.302-2squeeze4 CVE ID : CVE-2015-1855 It was discovered that the Ruby OpenSSL extension, part of the interpreter for the Ruby language, did not properly implement hostname matching, in violation of RFC 6125. This could allow remote attackers to perform a...

[SECURITY] [DSA 3262-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3262-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 18, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 223-1] nbd security update

Package : nbd Version : 1:2.9.16-8+squeeze2 CVE ID : CVE-2015-0847 Debian Bug : 784657 A vulnerability has been discovered in nbd-server, the server for the Linux Network Block Device. CVE-2015-0847 Tuomas Räsänen discovered that unsafe signal handling is present in nbd-server. This vulnerability...

[SECURITY] [DLA 221-1] tiff security update

Package : tiff Version : 3.9.4-5+squeeze12 CVE ID : CVE-2014-8128 CVE-2014-8129 CVE-2014-9330 CVE-2014-9655 Debian Bug : 773987 Several vulnerabilities have been discovered in the LibTIFF library and utilities for the Tag Image File Format. These could lead to a denial of service, information...

[SECURITY] [DLA 220-1] dpkg security update

Package : dpkg Version : 1.15.12 CVE ID : CVE-2015-0840 Debian Bug : 617923 695919 Jann Horn discovered that the source package integrity verification in dpkg-source can be bypassed via a specially crafted Debian source control file .dsc. Note that this flaw only affects extraction of local Debia...

[SECURITY] [DSA 3261-1] libmodule-signature-perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3261-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 15, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3261-1] libmodule-signature-perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3261-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 15, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 219-1] icu security update

Package : icu Version : 4.4.1-8+squeeze3 CVE ID : CVE-2013-1569 CVE-2013-2383 CVE-2013-2384 CVE-2013-2419 CVE-2014-6585 CVE-2014-6591 CVE-2014-7923 CVE-2014-7926 CVE-2014-7940 CVE-2014-9654 Several vulnerabilities were discovered in the International Components for Unicode ICU library:...

[SECURITY] [DSA 3260-1] iceweasel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3260-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 13, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3259-1] qemu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3259-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 13, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3258-1] quassel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3258-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini May 12, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3257-1] mercurial security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3257-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 11, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3257-1] mercurial security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3257-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 11, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3256-1] libtasn1-6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3256-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 10, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3256-1] libtasn1-6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3256-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 10, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3255-1] zeromq3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3255-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini May 10, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3254-1] suricata security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3254-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 09, 2015 http://www.debian.org/security/faq -...