[SECURITY] [DSA 3120-1] mantis security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3120-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 06, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3119-1] libevent security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3119-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 06, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3119-1] libevent security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3119-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 06, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3118-1] strongswan security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3118-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez January 05, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 129-1] polarssl security update

Package : polarssl Version : 1.2.9-1deb6u3 CVE ID : CVE-2014-8628 It was discovered that a memory leak in parsing X.509 certificates may result in denial of service...

[SECURITY] [DLA 128-1] sox security update

Package : sox Version : 14.3.1-1+deb6u1 CVE ID : CVE-2014-8145 Debian Bug : 773720 Michele Spagnuolo of the Google Security Team dicovered two heap-based buffer overflows in SoX, the Swiss Army knife of sound processing programs. A specially crafted wav file could cause an application using SoX t...

[SECURITY] [DLA 127-1] pyyaml security update

Package : pyyaml Version : 3.09-5+deb6u1 CVE ID : CVE-2014-9130 Debian Bug : 772815 Jonathan Gray and Stanislaw Pitucha found an assertion failure in the way wrapped strings are parsed in Python-YAML, a YAML parser and emitter for Python. An attacker able to load specially crafted YAML input into...

[SECURITY] [DSA 3117-1] php5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3117-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 31, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3117-1] php5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3117-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 31, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3116-1] polarssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3116-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 30, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3115-1] pyyaml security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3115-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 29, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 126-1] ettercap security update

Package : ettercap Version : 1:0.7.3-2.1+squeeze2 CVE ID : CVE-2014-9380 CVE-2014-9381 Debian Bug : 773416 Patches a bunch of security vulnerabilities: - CVE-2014-9380 Buffer over-read - CVE-2014-9381 Signedness error See: https://www.obrela.com/home/security-labs/advisories/osi-advisory-osi-1402...

[SECURITY] [DLA 125-1] mime-support security update

Package : mime-support Version : 3.48-1+deb6u1 CVE ID : CVE-2014-7209 Timothy D. Morgan discovered that run-mailcap, an utility to execute programs via entries in the mailcap file, is prone to shell command injection via shell meta-characters in filenames. In specific scenarios this flaw could...

[SECURITY] [DSA 3114-1] mime-support security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3114-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 29, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3114-1] mime-support security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3114-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 29, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 124-1] unzip security update

Package : unzip Version : 6.0-4+deb6u1 CVE ID : CVE-2014-8139 CVE-2014-8140 CVE-2014-8141 Debian Bug : 773722 Michele Spagnuolo of the Google Security Team discovered that unzip, an extraction utility for archives compressed in .zip format, is affected by heap-based buffer overflows within the...

[SECURITY] [DSA 3113-1] unzip security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3113-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 28, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3113-1] unzip security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3113-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 28, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3110-1] mediawiki security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3110-1 [email protected] http://www.debian.org/security/ Sebastien Delafond December 23, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3110-1] mediawiki security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3110-1 [email protected] http://www.debian.org/security/ Sebastien Delafond December 23, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3112-1] sox security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3112-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 23, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3112-1] sox security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3112-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 23, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 123-1] firebird2.5 security update

Package : firebird2.5 Version : 2.5.0.26054ReleaseCandidate3.ds2-1+squeeze2 CVE ID : CVE-2014-9323 Debian Bug : 772880 Apply patch from upstream revision 60322 fixing an unauthenticated remote null-pointer dereference crash...

[SECURITY] [DSA 3111-1] cpio security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3111-1 [email protected] http://www.debian.org/security/ Michael Gilbert December 22, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3111-1] cpio security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3111-1 [email protected] http://www.debian.org/security/ Michael Gilbert December 22, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 122-1] eglibc security update

Package : eglibc Version : 2.11.3-4+deb6u3 CVE ID : CVE-2014-9402 Avoid infinite loop in nssdns getnetbyname BZ 17630...

[SECURITY] [DLA 121-1] jasper security update

Package : jasper Version : 1.900.1-7+squeeze3 CVE ID : CVE-2014-8137 CVE-2014-8138 Jose Duart of the Google Security Team discovered a double free flaw CVE-2014-8137 and a heap-based buffer overflow flaw CVE-2014-8138 in JasPer, a library for manipulating JPEG-2000 files. A specially crafted file...

[SECURITY] [DLA 120-1] xorg-server security update

Package : xorg-server Version : 2:1.7.7-18+deb6u1 CVE ID : CVE-2014-8091 CVE-2014-8092 CVE-2014-8093 CVE-2014-8094 CVE-2014-8095 CVE-2014-8096 CVE-2014-8097 CVE-2014-8098 CVE-2014-8099 CVE-2014-8100 CVE-2014-8101 CVE-2014-8102 Ilja van Sprundel of IOActive discovered several security issues in th...

[SECURITY] [DLA 119-1] subversion security update

Package : subversion Version : 1.6.12dfsg-7+deb6u1 CVE ID : CVE-2014-3580 Debian Bug : 773263 Evgeny Kotkov discovered a NULL pointer dereference while processing REPORT requests in moddavsvn, the Subversion component which is used to serve repositories with the Apache web server. A remote attack...

[SECURITY] [DLA 118-1] linux-2.6 security update

Package : linux-2.6 Version : 2.6.32-48squeeze10 CVE ID : CVE-2014-3185 CVE-2014-3687 CVE-2014-3688 CVE-2014-6410 CVE-2014-7841 CVE-2014-8709 CVE-2014-8884 Non-maintainer upload by the Squeeze LTS and Kernel Teams. New upstream stable release 2.6.32.65, see http://lkml.org/lkml/2014/12/13/81 for...

[SECURITY] [DLA 117-1] qt4-x11 security update

Package : qt4-x11 Version : 4:4.6.3-4+squeeze2 CVE ID : CVE-2011-3193 CVE-2011-3194 CVE-2011-3193 Check for buffer overflow in LookupMarkMarkPos that may cause crash in this function with certain fonts. CVE-2011-3194 Fix tiff reader to handle TIFFTAGSAMPLESPERPIXEL for grayscale images. The reade...

[SECURITY] [DSA 3109-1] firebird2.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3109-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 21, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3109-1] firebird2.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3109-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 21, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 116-1] ntp security update

Package : ntp Version : 4.2.6.p2+dfsg-1+deb6u1 CVE ID : CVE-2014-9293 CVE-2014-9294 CVE-2014-9295 CVE-2014-9296 Debian Bug : 773576 Several vulnerabilities were discovered in the ntp package, an implementation of the Network Time Protocol. CVE-2014-9293 ntpd generated a weak key for its internal...

[SECURITY] [DSA 3107-2] subversion regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3107-2 [email protected] http://www.debian.org/security/ Florian Weimer December 20, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3108-1] ntp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3108-1 [email protected] http://www.debian.org/security/ Florian Weimer December 20, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3107-1] subversion security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3107-1 [email protected] http://www.debian.org/security/ Florian Weimer December 20, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3106-1] jasper security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3106-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 20, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3106-1] jasper security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3106-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 20, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 114-1] heirloom-mailx security update

Package : heirloom-mailx Version : 12.4-2+deb6u1 CVE ID : CVE-2004-2771 CVE-2014-7844 Two security vulnerabilities were discovered in Heirloom mailx, an implementation of the "mail" command: CVE-2004-2771 mailx interprets interprets shell meta-characters in certain email addresses. CVE-2014-7844 ...

[SECURITY] [DLA 113-1] bsd-mailx security update

Package : bsd-mailx Version : 8.1.2-0.20100314cvs-1+deb6u1 CVE ID : CVE-2014-7844 It was discovered that bsd-mailx, an implementation of the "mail" command, had an undocumented feature which treats syntactically valid email addresses as shell commands to execute. Users who need this feature can...

[SECURITY] [DSA 3105-1] heirloom-mailx security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3105-1 [email protected] http://www.debian.org/security/ Florian Weimer December 16, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3104-1] bsd-mailx security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3104-1 [email protected] http://www.debian.org/security/ Florian Weimer December 16, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 112-1] bind9 security update

Package : bind9 Version : 9.7.3.dfsg-1squeeze13 CVE ID : CVE-2014-8500 Debian Bug : 772610 This update fixes a denial of service vulnerability in BIND, a DNS server. By making use of maliciously-constructed zones or a rogue server, an attacker could exploit an oversight in the code BIND 9 used to...

[SECURITY] [DLA 111-1] cpio security update

Package : cpio Version : 2.11-4+deb6u1 CVE ID : CVE-2014-9112 Debian Bug : 772793 Multiple issues have been identified in cpio, including a buffer overflow and multiple NULL pointer dereference, resulting at least in a denial of service and possibly also in an unwanted code execution. This has be...

[SECURITY] [DLA 110-1] libyaml security update

Package : libyaml Version : 0.1.3-1+deb6u5 CVE ID : CVE-2014-9130 Debian Bug : 771366 Jonathan Gray and Stanislaw Pitucha found an assertion failure in the way wrapped strings are parsed in LibYAML, a fast YAML 1.1 parser and emitter library. An attacker able to load specially crafted YAML input...

[SECURITY] [DLA 109-1] libyaml-libyaml-perl security update

Package : libyaml-libyaml-perl Version : 0.33-1+squeeze4 CVE ID : CVE-2014-9130 Debian Bug : 771365 Jonathan Gray and Stanislaw Pitucha found an assertion failure in the way wrapped strings are parsed in LibYAML, a fast YAML 1.1 parser and emitter library. An attacker able to load specially craft...

[SECURITY] [DSA 3103-1] libyaml-libyaml-perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3103-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 13, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3103-1] libyaml-libyaml-perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3103-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 13, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3102-1] libyaml security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3102-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 13, 2014 http://www.debian.org/security/faq -...