[SECURITY] [DSA 3102-1] libyaml security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3102-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 13, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3101-1] c-icap security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3101-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 13, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3101-1] c-icap security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3101-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 13, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 108-1] nfs-utils security update

Package : nfs-utils Version : 1:1.2.2-4squeeze3 CVE ID : CVE-2012-3541 In the past, rpc.statd posted SMNOTIFY requests using the same socket it used for sending downcalls to the kernel. To receive replies from remote hosts, the socket was bound to INADDRANY. To prevent unwanted data injection, bi...

[SECURITY] [DSA 3100-1] mediawiki security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3100-1 [email protected] http://www.debian.org/security/ Sebastien Delafond December 12, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3100-1] mediawiki security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3100-1 [email protected] http://www.debian.org/security/ Sebastien Delafond December 12, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 107-1] unbound security update

Package : unbound Version : 1.4.6-1+squeeze4 CVE ID : CVE-2014-8602 Debian Bug : 772622 Florian Maury from ANSSI discovered that unbound, a validating, recursive, and caching DNS resolver, was prone to a denial of service vulnerability. An attacker crafting a malicious zone and able to emit or ma...

[SECURITY] [DLA 106-1] getmail4 security update

Package : getmail4 Version : 4.46.0-1deb6u1 CVE ID : CVE-2014-7273 CVE-2014-7274 CVE-2014-7275 Debian Bug : 766670 Several vulnerabilities have been discovered in getmail4, a mail retriever with support for POP3, IMAP4 and SDPS, that could allow man-in-the-middle attacks. CVE-2014-7273 The...

[SECURITY] [DLA 105-1] graphviz security update

Package : graphviz Version : 2.26.3-5+squeeze3 CVE ID : CVE-2014-9157 Debian Bug : 772648 Joshua Rogers discovered a format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz, a rich set of graph drawing tools. An attacker could use this flaw to cause graphviz to crash ...

[SECURITY] [DLA 104-1] pdns-recursor security update

Package : pdns-recursor Version : 3.2-4+deb6u1 CVE ID : CVE-2014-8601 Florian Maury from ANSSI discovered a flaw in pdns-recursor, a recursive DNS server : a remote attacker controlling maliciously-constructed zones or a rogue server could affect the performance of pdns-recursor, thus leading to...

[SECURITY] [DSA 3099-1] dbus security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3099-1 [email protected] http://www.debian.org/security/ Florian Weimer December 11, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3098-1] graphviz security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3098-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 11, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3098-1] graphviz security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3098-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 11, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3096-1] pdns-recursor security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3096-1 [email protected] http://www.debian.org/security/ Sebastien Delafond December 11, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3096-1] pdns-recursor security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3096-1 [email protected] http://www.debian.org/security/ Sebastien Delafond December 11, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3097-1] unbound security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3097-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez December 10, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3095-1] xorg-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3095-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 10, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 103-1] linux-2.6 security update

Package : linux-2.6 Version : CVE-2014-90902.6.32-48squeeze9 CVE ID : CVE-2012-6657 CVE-2013-0228 CVE-2013-7266 CVE-2014-4157 CVE-2014-4508 CVE-2014-4653 CVE-2014-4654 CVE-2014-4655 CVE-2014-4943 CVE-2014-5077 CVE-2014-5471 CVE-2014-5472 This security upload has been prepared in cooperation of th...

[SECURITY] [DSA 3094-1] bind9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3094-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano December 08, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3094-1] bind9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3094-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano December 08, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3093-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3093-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 08, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3093-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3093-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 08, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 102-1] tcpdump security update

Package : tcpdump Version : 4.1.1-1+deb6u1 CVE ID : CVE-2014-8767 CVE-2014-8769 CVE-2014-9140 Debian Bug : 770424 770434 Several vulnerabilities have been discovered in tcpdump, a command-line network traffic analyzer. These vulnerabilities might result in denial of service, leaking sensitive...

[SECURITY] [DSA 3092-1] icedove security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3092-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 07, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3091-1] getmail4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3091-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano December 07, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3091-1] getmail4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3091-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano December 07, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 101-1] jasper security update

Package : jasper Version : 1.900.1-7+squeeze2 CVE ID : CVE-2014-9029 Josh Duart of the Google Security Team discovered heap-based buffer overflow flaws in JasPer, a library for manipulating JPEG-2000 files, which could lead to denial of service application crash or the execution of arbitrary code...

[SECURITY] [DLA 100-1] mutt security update

Package : mutt Version : 1.5.20-9+squeeze4 CVE ID : CVE-2014-0467 Debian Bug : 771125 A flaw was discovered in mutt, a text-based mailreader. A specially crafted mail header could cause mutt to crash, leading to a denial of service condition...

[SECURITY] [DLA 99-1] flac security update

Package : flac Version : 1.2.1-2+deb6u1 CVE ID : CVE-2014-8962 CVE-2014-9028 Michele Spagnuolo, of Google Security Team, and Miroslav Lichvar, of Red Hat, discovered two issues in flac, a library handling Free Lossless Audio Codec media: by providing a specially crafted FLAC file, an attacker cou...

[SECURITY] [DSA 3090-1] iceweasel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3090-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 04, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3089-1] jasper security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3089-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 04, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3089-1] jasper security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3089-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 04, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3088-1] qemu-kvm security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3088-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 04, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3088-1] qemu-kvm security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3088-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 04, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3087-1] qemu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3087-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 04, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3087-1] qemu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3087-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 04, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3086-1] tcpdump security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3086-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 03, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3086-1] tcpdump security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3086-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 03, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3085-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3085-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez December 03, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 95-1] clamav security update

this was initially sent on 2014-11-27, but did not reach the list due to a mistake on my side Package : clamav Version : 0.98.1+dfsg-1+deb6u4 CVE ID : CVE-2014-9050 CVE-2013-6497 Debian Bug : 770985 Two bugs were discovered in clamav and are fixed by this release. One issue is in clamscan, the...

[SECURITY] [DLA 98-1] openvpn security update

Package : openvpn Version : 2.1.3-2+squeeze3 CVE ID : CVE-2014-8104 Dragana Damjanovic discovered that an authenticated client could crash an OpenVPN server by sending a control packet containing less than four bytes as payload. For the oldstable distribution squeeze, this problem has been fixed ...

[SECURITY] [DSA 3084-1] openvpn security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3084-1 [email protected] http://www.debian.org/security/ Florian Weimer December 01, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3083-1] mutt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3083-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 30, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3083-1] mutt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3083-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 30, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3082-1] flac security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3082-1 [email protected] http://www.debian.org/security/ Sebastien Delafond November 30, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3082-1] flac security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3082-1 [email protected] http://www.debian.org/security/ Sebastien Delafond November 30, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 97-1] eglibc security update

Package : eglibc Version : 2.11.3-4+deb6u2 CVE ID : CVE-2012-6656 CVE-2014-6040 CVE-2014-7817 CVE-2012-6656 Fix validation check when converting from ibm930 to utf. When converting IBM930 code with iconv, if IBM930 code which includes invalid multibyte character "0xffff" is specified, then iconv...

[SECURITY] [DSA 3081-1] libvncserver security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3081-1 [email protected] http://www.debian.org/security/ Luciano Bello November 29, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3080-1] openjdk-7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3080-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 29, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3079-1] ppp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3079-1 [email protected] http://www.debian.org/security/ Sebastien Delafond November 28, 2014 http://www.debian.org/security/faq -...