[SECURITY] [DSA 3094-1] bind9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3094-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano December 08, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3093-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3093-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 08, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3093-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3093-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 08, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 102-1] tcpdump security update

Package : tcpdump Version : 4.1.1-1+deb6u1 CVE ID : CVE-2014-8767 CVE-2014-8769 CVE-2014-9140 Debian Bug : 770424 770434 Several vulnerabilities have been discovered in tcpdump, a command-line network traffic analyzer. These vulnerabilities might result in denial of service, leaking sensitive...

[SECURITY] [DSA 3092-1] icedove security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3092-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 07, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3091-1] getmail4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3091-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano December 07, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3091-1] getmail4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3091-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano December 07, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 101-1] jasper security update

Package : jasper Version : 1.900.1-7+squeeze2 CVE ID : CVE-2014-9029 Josh Duart of the Google Security Team discovered heap-based buffer overflow flaws in JasPer, a library for manipulating JPEG-2000 files, which could lead to denial of service application crash or the execution of arbitrary code...

[SECURITY] [DLA 100-1] mutt security update

Package : mutt Version : 1.5.20-9+squeeze4 CVE ID : CVE-2014-0467 Debian Bug : 771125 A flaw was discovered in mutt, a text-based mailreader. A specially crafted mail header could cause mutt to crash, leading to a denial of service condition...

[SECURITY] [DLA 99-1] flac security update

Package : flac Version : 1.2.1-2+deb6u1 CVE ID : CVE-2014-8962 CVE-2014-9028 Michele Spagnuolo, of Google Security Team, and Miroslav Lichvar, of Red Hat, discovered two issues in flac, a library handling Free Lossless Audio Codec media: by providing a specially crafted FLAC file, an attacker cou...

[SECURITY] [DSA 3090-1] iceweasel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3090-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 04, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3089-1] jasper security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3089-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 04, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3089-1] jasper security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3089-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 04, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3088-1] qemu-kvm security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3088-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 04, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3088-1] qemu-kvm security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3088-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 04, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3087-1] qemu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3087-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 04, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3087-1] qemu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3087-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 04, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3086-1] tcpdump security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3086-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 03, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3086-1] tcpdump security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3086-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 03, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3085-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3085-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez December 03, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 95-1] clamav security update

this was initially sent on 2014-11-27, but did not reach the list due to a mistake on my side Package : clamav Version : 0.98.1+dfsg-1+deb6u4 CVE ID : CVE-2014-9050 CVE-2013-6497 Debian Bug : 770985 Two bugs were discovered in clamav and are fixed by this release. One issue is in clamscan, the...

[SECURITY] [DLA 98-1] openvpn security update

Package : openvpn Version : 2.1.3-2+squeeze3 CVE ID : CVE-2014-8104 Dragana Damjanovic discovered that an authenticated client could crash an OpenVPN server by sending a control packet containing less than four bytes as payload. For the oldstable distribution squeeze, this problem has been fixed ...

[SECURITY] [DSA 3084-1] openvpn security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3084-1 [email protected] http://www.debian.org/security/ Florian Weimer December 01, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3083-1] mutt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3083-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 30, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3083-1] mutt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3083-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 30, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3082-1] flac security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3082-1 [email protected] http://www.debian.org/security/ Sebastien Delafond November 30, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3082-1] flac security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3082-1 [email protected] http://www.debian.org/security/ Sebastien Delafond November 30, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 97-1] eglibc security update

Package : eglibc Version : 2.11.3-4+deb6u2 CVE ID : CVE-2012-6656 CVE-2014-6040 CVE-2014-7817 CVE-2012-6656 Fix validation check when converting from ibm930 to utf. When converting IBM930 code with iconv, if IBM930 code which includes invalid multibyte character "0xffff" is specified, then iconv...

[SECURITY] [DSA 3081-1] libvncserver security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3081-1 [email protected] http://www.debian.org/security/ Luciano Bello November 29, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3080-1] openjdk-7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3080-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 29, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3079-1] ppp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3079-1 [email protected] http://www.debian.org/security/ Sebastien Delafond November 28, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3079-1] ppp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3079-1 [email protected] http://www.debian.org/security/ Sebastien Delafond November 28, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 96-1] openjdk-6 security update

Package : openjdk-6 Version : 6b33-1.13.5-2deb6u1 CVE ID : CVE-2014-2490 CVE-2014-4209 CVE-2014-4216 CVE-2014-4218 CVE-2014-4219 CVE-2014-4244 CVE-2014-4252 CVE-2014-4262 CVE-2014-4263 CVE-2014-4266 CVE-2014-4268 CVE-2014-6457 CVE-2014-6502 CVE-2014-6504 CVE-2014-6506 CVE-2014-6511 CVE-2014-6512...

[SECURITY] [DSA 3078-1] libksba security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3078-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 27, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3078-1] libksba security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3078-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 27, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3077-1] openjdk-6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3077-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 26, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 94-1] php5 security update

Package : php5 Version : 5.3.3-7+squeeze23 CVE ID : CVE-2014-3668 CVE-2014-3669 CVE-2014-3670 CVE-2014-3710 CVE-2014-3668 Fix bug 68027 - fix date parsing in XMLRPC lib CVE-2014-3669 Fix bug 68044: Integer overflow in unserialize 32-bits only CVE-2014-3670 Fix bug 68113 Heap corruption in...

[SECURITY] [DSA 3076-1] wireshark security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3076-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 25, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 93-1] libgcrypt11 security update

Package : libgcrypt11 Version : 1.4.5-2+squeeze2 CVE ID : CVE-2014-5270 Daniel Genkin, Itamar Pipman and Eran Tromer discovered that Elgamal encryption subkeys in applications using the libgcrypt11 library, for example GnuPG 2.x, could be leaked via a side-channel attack see...

[SECURITY] [DLA 92-1] tomcat-native security followup update

Package : tomcat-native Version : 1.1.31-1deb6u1 This is an upgrade from tomcat-native 1.1.20 the version previously available in squeeze to 1.1.31, the full list of changes between these versions can be seen in the upstream changelog, which is available online at...

[SECURITY] [DLA 91-1] tomcat6 security update

Package : tomcat6 Version : 6.0.41-2+squeeze5 CVE ID : CVE-2012-3439 CVE-2013-1571 CVE-2013-4286 CVE-2013-4322 CVE-2013-4590 CVE-2014-0033 Debian Bugs : 299635 608286 654136 659748 664072 665393 666256 668761 671373 677912 682955 687818 692440 695250 713796 717279 This is an upgrade from tomcat...

[SECURITY] [DLA 90-1] imagemagick security update

Package : imagemagick Version : 8:6.6.0.4-3+squeeze5 CVE ID : CVE-2014-8716 Debian Bug : 768494 Some special crafted JPEG file could lead to dos due to missing check in embeded EXIF properties EXIF directory offsets must be greater than 0...

[SECURITY] [DLA 89-1] nss security update

Package : nss Version : 3.12.8-1+squeeze10 CVE ID : CVE-2014-1544 In nss, a set of libraries designed to support cross-platform development of security-enabled client and server applications, Tyson Smith and Jesse Schwartzentruber discovered a use-after-free vulnerability that allows remote...

[SECURITY] [DLA 88-1] ruby1.8 security update

Package : ruby1.8 Version : 1.8.7.302-2squeeze3 CVE ID : CVE-2011-0188 CVE-2011-2686 CVE-2011-2705 CVE-2011-4815 CVE-2014-8080 CVE-2014-8090 This update fixes multiple local and remote denial of service and remote code execute problems: CVE-2011-0188 Properly allocate memory, to prevent arbitrary...

[SECURITY] [DSA 3075-1] drupal7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3075-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 20, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3075-1] drupal7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3075-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 20, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 87-1] dbus security update

Package : dbus Version : 1.2.24-4+squeeze3 CVE ID : CVE-2014-3477 CVE-2014-3638 CVE-2014-3639 This updates fixes multiple local denial of services discovered by Alban Crequy and Simon McVittie. CVE-2014-3477 Fix a denial of service failure to obtain bus name in newly-activated system services tha...

[SECURITY] [DSA 3074-2] php5 regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3074-2 [email protected] http://www.debian.org/security/ Yves-Alexis Perez November 19, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3074-1] php5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3074-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez November 18, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3073-1] libgcrypt11 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3073-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 16, 2014 http://www.debian.org/security/faq -...