[SECURITY] [DLA 143-1] python-django security update

Package : python-django Version : 1.2.3-3+squeeze12 CVE ID : CVE-2015-0219 CVE-2015-0220 CVE-2015-0221 Multiple security issues have been found in Django: https://www.djangoproject.com/weblog/2015/jan/13/security/ For Debian 6 Squeeeze, they have been fixed in version 1.2.3-3+squeeze12 of...

[SECURITY] [DLA 142-1] privoxy security update

Package : privoxy Version : 3.0.16-1+deb6u1 CVE ID : CVE-2015-1031 CVE-2015-1381 CVE-2015-1382 Several vulnerabilities have been fixed in privoxy, a privacy enhancing HTTP proxy: CVE-2015-1031, CID66394: unmap: Prevent use-after-free if the map only consists of one item. CVE-2015-1031, CID66376 a...

[SECURITY] [DLA 141-1] libksba security update

Package : libksba Version : 1.0.7-2+deb6u1 CVE ID : CVE-2014-9087 A vulnerability has been fixed in the libksba X.509 and CMS support library: CVE-2014-9087 Fix buffer overflow in ksbaoidtostr reported by Hanno Böck. We recommend that you upgrade your libksba packages...

[SECURITY] [DLA 138-1] jasper security update

Package : jasper Version : 1.900.1-7+squeeze4 CVE ID : CVE-2014-8157 CVE-2014-8158 Debian Bug : 775970 An off-by-one flaw, leading to a heap-based buffer overflow CVE-2014-8157, and an unrestricted stack memory use flaw CVE-2014-8158 were found in JasPer, a library for manipulating JPEG-2000 file...

[SECURITY] [DSA 3143-1] virtualbox security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3143-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 28, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 140-1] rpm security update

Package : rpm Version : 4.8.1-6+squeeze2 CVE ID : CVE-2012-0060 CVE-2012-0061 CVE-2012-0815 CVE-2013-6435 CVE-2014-8118 Several vulnerabilities have been fixed in rpm: CVE-2014-8118 Fix integer overflow which allowed remote attackers to execute arbitrary code. CVE-2013-6435 Prevent remote attacke...

[SECURITY] [DLA 139-1] eglibc security update

Package : eglibc Version : 2.11.3-4+deb6u4 CVE ID : CVE-2015-0235 A vulnerability has been fixed in eglibc, Debians version of the GNU C library: CVE-2015-0235 Qualys discovered that the gethostbyname and gethostbyname2 functions were subject to a buffer overflow if provided with a crafted IP...

[SECURITY] [DSA 3142-1] eglibc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3142-1 [email protected] http://www.debian.org/security/ Florian Weimer January 27, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3141-1] wireshark security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3141-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 27, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3140-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3140-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 27, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 137-1] libevent security update

Package : libevent Version : 1.4.13-stable-1+deb6u1 CVE ID : CVE-2014-6272 Debian Bug : 774645 The libevent library was vulnerable to a potential heap overflow in the buffer/bufferevent APIs. This update was prepared by Nguyen Cong who used the upstream-provided patch. Thanks to them! Raphaël...

[SECURITY] [DSA 3139-1] squid security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3139-1 [email protected] http://www.debian.org/security/ Sebastien Delafond January 25, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3139-1] squid security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3139-1 [email protected] http://www.debian.org/security/ Sebastien Delafond January 25, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3138-1] jasper security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3138-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 25, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3138-1] jasper security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3138-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 25, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 136-1] websvn security update

Package : websvn Version : 2.3.3-1+deb6u1 CVE ID : CVE-2013-6892 Debian Bug : 775682 James Clawson discovered that websvn, a web viewer for Subversion repositories, would follow symlinks in a repository when presenting a file for download. An attacker with repository write access could thereby...

[SECURITY] [DSA 3137-1] websvn security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3137-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 24, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3137-1] websvn security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3137-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 24, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3136-1] polarssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3136-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 24, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3136-1] polarssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3136-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 24, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3135-1] mysql-5.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3135-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 23, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3135-1] mysql-5.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3135-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 23, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3134-1] sympa security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3134-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 20, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3134-1] sympa security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3134-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 20, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3133-1] privoxy security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3133-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 20, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 91-2] tomcat6 regression update

Package : tomcat6 Version : 6.0.41-2+squeeze6 This update fixes a "NoSuchElementException" when an XML attribute has an empty string as value...

[SECURITY] [DSA 3132-1] icedove security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3132-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 19, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3131-1] xdg-utils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3131-1 [email protected] http://www.debian.org/security/ Michael Gilbert January 18, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3131-1] xdg-utils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3131-1 [email protected] http://www.debian.org/security/ Michael Gilbert January 18, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3130-1] lsyncd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3130-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 16, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 135-1] ia32-libs security update

Package : ia32-libs, ia32-libs-gtk Version : 20150116 The ia32-libs and ia32-libs-gtk packages contain 32 bit versions of various libraries for use on 64 bit systems. This update rolls in all security fixes made to these libraries since the previous update of ia32-libs and ia32-libs-gtk in Squeez...

[SECURITY] [DSA 3129-1] rpm security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3129-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 15, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 134-1] curl security update

Package : curl Version : 7.21.0-2.1+squeeze11 CVE ID : CVE-2014-8150 Andrey Labunets of Facebook discovered that cURL, an URL transfer library, fails to properly handle URLs with embedded end-of-line characters. An attacker able to make an application using libcurl to access a specially crafted U...

[SECURITY] [DSA 3128-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3128-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 15, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3128-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3128-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 15, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 133-1] unrtf security update

Package : unrtf Version : 0.19.3-1.1+deb6u1 CVE ID : CVE-2014-9274 CVE-2014-9275 Debian Bug : 772811 CVE-2014-9274: check that accesses to color table stay within bounds Patches taken from upstream commits: - CVE-2014-9274: b0cef89a170a66bc48f8dd288ce562ea8ca91f7a CVE-2014-9275: various crashes ....

[SECURITY] [DSA 3127-1] iceweasel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3127-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 14, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3123-2] binutils-mingw-w64 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3123-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 13, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3126-1] php5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3126-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 12, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 132-1] openssl security update

Package : openssl Version : 0.9.8o-4squeeze19 CVE ID : CVE-2014-3570 CVE-2014-3571 CVE-2014-3572 CVE-2014-8275 CVE-2015-0204 Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit. The Common Vulnerabilities and Exposures project identifies the following issues:...

[SECURITY] [DSA 3125-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3125-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 11, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3125-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3125-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 11, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3124-1] otrs2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3124-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 10, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3124-1] otrs2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3124-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 10, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3123-1] binutils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3123-1 [email protected] http://www.debian.org/security/ Luciano Bello January 09, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 131-1] file security update

Package : file Version : 5.04-5+squeeze9 CVE ID : CVE-2014-8116 CVE-2014-8117 Debian Bug : 773148 Multiple security issues have been found in file, a tool/library to determine a file type. Processing a malformed file could result in denial of service. Most of the changes are related to parsing EL...

[SECURITY] [DLA 130-1] firebird2.1 security update

Package : firebird2.1 Version : 2.1.3.18185-0.ds1-11+squeeze2 CVE ID : CVE-2014-9323 Segfault in server caused by malformed network packet. See: http://tracker.firebirdsql.org/browse/CORE-4630...

[SECURITY] [DSA 3122-1] curl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3122-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 08, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3122-1] curl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3122-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 08, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3121-1] file security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3121-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 08, 2015 http://www.debian.org/security/faq -...