[SECURITY] [DSA 3187-1] icu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3187-1 [email protected] http://www.debian.org/security/ Michael Gilbert March 15, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 172-1] libextlib-ruby security update

Package : libextlib-ruby Version : 0.9.13-2+deb6u1 CVE ID : CVE-2013-0156 Debian Bug : 697895 Import patches 633974b2759d9b92 and 4540e7102b803624 from uptream to remove symbol and YAML coercion from the XML parser...

[SECURITY] [DLA 171-1] libssh2 security update

Package : libssh2 Version : 1.2.6-1+deb6u1 CVE ID : CVE-2015-1782 Debian Bug : 780249 Mariusz Ziulek reported that libssh2, a SSH2 client-side library, was reading and using the SSHMSGKEXINIT packet without doing sufficient range checks when negotiating a new SSH session with a remote server. A...

[SECURITY] [DLA 170-1] mod-gnutls security update

Package : mod-gnutls Version : 0.5.6-1+squeeze2 CVE ID : CVE-2015-2091 Debian Bug : 578663 Thomas Klute discovered that in mod-gnutls, an Apache module providing SSL and TLS encryption with GnuTLS, a bug caused the servers client verify mode not to be considered at all, in case the directorys...

[SECURITY] [DSA 3186-1] nss security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3186-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso March 13, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3186-1] nss security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3186-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso March 13, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3185-1] libgcrypt11 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3185-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini March 12, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3184-1] gnupg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3184-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini March 12, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3183-1] movabletype-opensource security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3183-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso March 12, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3183-1] movabletype-opensource security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3183-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso March 12, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3182-1] libssh2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3182-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso March 11, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3182-1] libssh2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3182-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso March 11, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3177-1] mod-gnutls security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3177-1 [email protected] http://www.debian.org/security/ Sebastien Delafond March 10, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3177-1] mod-gnutls security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3177-1 [email protected] http://www.debian.org/security/ Sebastien Delafond March 10, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3181-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3181-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 10, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 169-1] axis security update

Package : axis Version : 1.4-12+deb6u1 CVE ID : CVE-2012-5784 CVE-2014-3596 Debian Bug : 762444 A vulnerability was fixed in axis, a SOAP implementation in Java: The getCN function in Apache Axis 1.4 and earlier does not properly verify that the server hostname matches a domain name in the subjec...

[SECURITY] [DLA 168-1] konversation security update

Package : konversation Version : 1.3.1-2+deb6u1 CVE ID : CVE-2014-8483 Debian Bug : 768191 It was discovered that Konversation, an IRC client for KDE, could by crashed when receiving malformed messages using FiSH encryption...

[SECURITY] [DLA 167-1] redcloth security update

Package : redcloth Version : 4.2.2-1.1+deb6u1 CVE ID : CVE-2012-6684 Debian Bug : 774748 Kousuke Ebihara discovered that redcloth, a Ruby module used to convert Textile markup to HTML, did not properly sanitize its input. This allowed a remote attacker to perform a cross-site scripting attack by...

[SECURITY] [DLA 166-1] libarchive security update

Package : libarchive Version : 2.8.4.forreal-1+squeeze3 CVE ID : not yet assigned Debian Bug : 778266 Alexander Cherepanov discovered that bsdcpio, an implementation of the cpio program part of the libarchive project, is susceptible to a directory traversal vulnerability via absolute paths...

[SECURITY] [DLA 165-1] eglibc security update

Package : eglibc Version : 2.11.3-4+deb6u5 CVE ID : CVE-2012-3405 CVE-2012-3406 CVE-2012-3480 CVE-2012-4412 CVE-2012-4424 CVE-2013-0242 CVE-2013-1914 CVE-2013-4237 CVE-2013-4332 CVE-2013-4357 CVE-2013-4458 CVE-2013-4788 CVE-2013-7423 CVE-2013-7424 CVE-2014-4043 CVE-2015-1472 CVE-2015-1473 Debian...

[SECURITY] [DSA 3180-1] libarchive security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3180-1 [email protected] http://www.debian.org/security/ Alessandro Ghedini March 05, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3179-1] icedove security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3179-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 03, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 164-1] unace security update

Package : unace Version : 1.2b-7+deb6u1 CVE ID : CVE-2015-2063 Debian Bug : 775003 Jakub Wilk discovered that unace, an utility to extract, test and view .ace archives, contained an integer overflow leading to a buffer overflow. If a user or automated system were tricked into processing a special...

[SECURITY] [DSA 3178-1] unace security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3178-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso March 02, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3178-1] unace security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3178-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso March 02, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 163-1] bind9 security update

Package : bind9 Version : 1:9.7.3.dfsg-1squeeze14 CVE ID : CVE-2015-1349 Debian Bug : 778733 Jan-Piet Mens discovered that the BIND DNS server would crash when processing an invalid DNSSEC key rollover, either due to an error on the zone operators part, or due to interference with network traffic...

[SECURITY] [DLA 162-1] e2fsprogs security update

Package : e2fsprogs Version : 1.41.12-4+deb6u2 CVE ID : CVE-2015-1572 Debian Bug : 778948 ose Duart of the Google Security Team discovered a buffer overflow in in e2fsprogs, a set of utilities for the ext2, ext3, and ext4 file systems. This issue can possibly lead to arbitrary code execution if a...

[SECURITY] [DLA 161-1] libgtk2-perl security update

Package : libgtk2-perl Version : 2:1.222-1+deb6u1 It was discovered that libgtk2-perl, a Perl interface to the 2.x series of the Gimp Toolkit library, incorrectly frees memory which GTK+ still holds onto and might access later, leading to denial of service application crash or, potentially, to...

[SECURITY] [DLA 160-1] sudo security update

Package : sudo Version : 1.7.4p4-2.squeeze.5 CVE ID : CVE-2014-0106 CVE-2014-9680 Debian Bug : 772707 This update fixes the CVEs described below. CVE-2014-0106 Todd C. Miller reported that if the envreset option is disabled in the sudoers file, the envdelete option is not correctly applied to...

[SECURITY] [DLA 159-1] cups security update

Package : cups Version : 1.4.4-7+squeeze7 CVE ID : CVE-2014-9679 Debian Bug : 778387 Peter De Wachter discovered that CUPS, the Common UNIX Printing System, did not correctly parse compressed raster files. By submitting a specially crafted raster file, a remote attacker could use this vulnerabili...

[SECURITY] [DLA 158-1] request-tracker3.8 security update

Package : request-tracker3.8 Version : 3.8.8-7+squeeze8 CVE ID : CVE-2014-9472 CVE-2015-1165 CVE-2015-1464 Multiple vulnerabilities have been discovered in Request Tracker, an extensible trouble-ticket tracking system. The Common Vulnerabilities and Exposures project identifies the following...

[SECURITY] [DSA 3176-1] request-tracker4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3176-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 26, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3176-1] request-tracker4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3176-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 26, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3175-1] kfreebsd-9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3175-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 25, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3174-1] iceweasel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3174-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 25, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3173-1] libgtk2-perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3173-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 25, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3173-1] libgtk2-perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3173-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 25, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3172-1] cups security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3172-1 [email protected] http://www.debian.org/security/ Sebastien Delafond February 25, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3172-1] cups security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3172-1 [email protected] http://www.debian.org/security/ Sebastien Delafond February 25, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 157-1] openjdk-6 security update

Package : openjdk-6 Version : 6b34-1.13.6-1deb6u1 CVE ID : CVE-2014-3566 CVE-2014-6585 CVE-2014-6587 CVE-2014-6591 CVE-2014-6593 CVE-2014-6601 CVE-2015-0383 CVE-2015-0395 CVE-2015-0407 CVE-2015-0408 CVE-2015-0410 CVE-2015-0412 Several vulnerabilities have been discovered in OpenJDK, an...

[SECURITY] [DSA 3170-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3160-1 [email protected] http://www.debian.org/security/ Ben Hutchings February 23, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 156-1] samba security update

Package : samba Version : 2:3.5.6dfsg-3squeeze12 CVE ID : CVE-2015-0240 Debian Bug : 779033 Richard van Eeden of Microsoft Vulnerability Research discovered that Samba, a SMB/CIFS file, print, and login server for Unix, contains a flaw in the netlogon server code which allows remote code executio...

[SECURITY] [DSA 3171-1] samba security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3171-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 23, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3171-1] samba security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3171-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 23, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3169-1] eglibc security update

---------------------------------------------------------------------- Debian Security Advisory DSA-3169-1 [email protected] http://www.debian.org/security/ Aurelien Jarno February 23, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3168-1] ruby-redcloth security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3168-1 [email protected] http://www.debian.org/security/ Sebastien Delafond February 22, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3168-1] ruby-redcloth security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3168-1 [email protected] http://www.debian.org/security/ Sebastien Delafond February 22, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3167-1] sudo security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3167-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 22, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3167-1] sudo security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3167-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 22, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3166-1] e2fsprogs security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3166-1 [email protected] http://www.debian.org/security/ Michael Gilbert February 22, 2015 http://www.debian.org/security/faq -...