[SECURITY] [DSA 3079-1] ppp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3079-1 [email protected] http://www.debian.org/security/ Sebastien Delafond November 28, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 96-1] openjdk-6 security update

Package : openjdk-6 Version : 6b33-1.13.5-2deb6u1 CVE ID : CVE-2014-2490 CVE-2014-4209 CVE-2014-4216 CVE-2014-4218 CVE-2014-4219 CVE-2014-4244 CVE-2014-4252 CVE-2014-4262 CVE-2014-4263 CVE-2014-4266 CVE-2014-4268 CVE-2014-6457 CVE-2014-6502 CVE-2014-6504 CVE-2014-6506 CVE-2014-6511 CVE-2014-6512...

[SECURITY] [DSA 3078-1] libksba security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3078-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 27, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3078-1] libksba security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3078-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 27, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3077-1] openjdk-6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3077-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 26, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 94-1] php5 security update

Package : php5 Version : 5.3.3-7+squeeze23 CVE ID : CVE-2014-3668 CVE-2014-3669 CVE-2014-3670 CVE-2014-3710 CVE-2014-3668 Fix bug 68027 - fix date parsing in XMLRPC lib CVE-2014-3669 Fix bug 68044: Integer overflow in unserialize 32-bits only CVE-2014-3670 Fix bug 68113 Heap corruption in...

[SECURITY] [DSA 3076-1] wireshark security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3076-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 25, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 93-1] libgcrypt11 security update

Package : libgcrypt11 Version : 1.4.5-2+squeeze2 CVE ID : CVE-2014-5270 Daniel Genkin, Itamar Pipman and Eran Tromer discovered that Elgamal encryption subkeys in applications using the libgcrypt11 library, for example GnuPG 2.x, could be leaked via a side-channel attack see...

[SECURITY] [DLA 92-1] tomcat-native security followup update

Package : tomcat-native Version : 1.1.31-1deb6u1 This is an upgrade from tomcat-native 1.1.20 the version previously available in squeeze to 1.1.31, the full list of changes between these versions can be seen in the upstream changelog, which is available online at...

[SECURITY] [DLA 91-1] tomcat6 security update

Package : tomcat6 Version : 6.0.41-2+squeeze5 CVE ID : CVE-2012-3439 CVE-2013-1571 CVE-2013-4286 CVE-2013-4322 CVE-2013-4590 CVE-2014-0033 Debian Bugs : 299635 608286 654136 659748 664072 665393 666256 668761 671373 677912 682955 687818 692440 695250 713796 717279 This is an upgrade from tomcat...

[SECURITY] [DLA 90-1] imagemagick security update

Package : imagemagick Version : 8:6.6.0.4-3+squeeze5 CVE ID : CVE-2014-8716 Debian Bug : 768494 Some special crafted JPEG file could lead to dos due to missing check in embeded EXIF properties EXIF directory offsets must be greater than 0...

[SECURITY] [DLA 89-1] nss security update

Package : nss Version : 3.12.8-1+squeeze10 CVE ID : CVE-2014-1544 In nss, a set of libraries designed to support cross-platform development of security-enabled client and server applications, Tyson Smith and Jesse Schwartzentruber discovered a use-after-free vulnerability that allows remote...

[SECURITY] [DLA 88-1] ruby1.8 security update

Package : ruby1.8 Version : 1.8.7.302-2squeeze3 CVE ID : CVE-2011-0188 CVE-2011-2686 CVE-2011-2705 CVE-2011-4815 CVE-2014-8080 CVE-2014-8090 This update fixes multiple local and remote denial of service and remote code execute problems: CVE-2011-0188 Properly allocate memory, to prevent arbitrary...

[SECURITY] [DSA 3075-1] drupal7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3075-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 20, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3075-1] drupal7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3075-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 20, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 87-1] dbus security update

Package : dbus Version : 1.2.24-4+squeeze3 CVE ID : CVE-2014-3477 CVE-2014-3638 CVE-2014-3639 This updates fixes multiple local denial of services discovered by Alban Crequy and Simon McVittie. CVE-2014-3477 Fix a denial of service failure to obtain bus name in newly-activated system services tha...

[SECURITY] [DSA 3074-2] php5 regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3074-2 [email protected] http://www.debian.org/security/ Yves-Alexis Perez November 19, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3074-1] php5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3074-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez November 18, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3073-1] libgcrypt11 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3073-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 16, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3073-1] libgcrypt11 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3073-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 16, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3050-3] iceweasel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3050-3 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 12, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3050-3] iceweasel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3050-3 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 12, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 86-1] file security update

Package : file Version : 5.04-5+squeeze8 CVE ID : CVE-2014-3710 Debian Bug : 768806 Francisco Alonso of Red Hat Product Security found an issue in the file utility: when checking ELF files, note headers are incorrectly checked, thus potentially allowing attackers to cause a denial of service...

[SECURITY] [DSA 3072-1] file security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3072-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst November 11, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3071-1] nss security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3071-1 [email protected] http://www.debian.org/security/ Sebastien Delafond November 11, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3071-1] nss security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3071-1 [email protected] http://www.debian.org/security/ Sebastien Delafond November 11, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 85-1] libxml-security-java security update

Package : libxml-security-java Version : 1.4.3-2+deb6u1 CVE ID : CVE-2013-2172 James Forshaw discovered that, in Apache Santuario XML Security for Java, CanonicalizationMethod parameters were incorrectly validated: by specifying an arbitrary weak canonicalization algorithm, an attacker could spoo...

[SECURITY] [DLA 84-1] curl security update

Package : curl Version : 7.21.0-2.1+squeeze10 CVE ID : CVE-2014-3707 Symeon Paraschoudis discovered that the curleasyduphandle function in cURL, an URL transfer library, has a bug that can lead to libcurl eventually sending off sensitive data that was not intended for sending, while performing a...

[SECURITY] [DSA 3070-1] kfreebsd-9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3070-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 07, 2014 http://www.debian.org/security/faq -...

[BSA-099] Security update for libreofice

Rene Engelhard uploaded new packages for libreoffice which fixed the following security problems: CVE-2014-3693: Use-After-Free in socket manager of Impress Remote It was discovered that LibreOffice 4.0.0 and later does not manage the port 1599 for the LibreOffice Impress correctly. An external...

[BSA-099] Security update for libreofice

Rene Engelhard uploaded new packages for libreoffice which fixed the following security problems: CVE-2014-3693: Use-After-Free in socket manager of Impress Remote It was discovered that LibreOffice 4.0.0 and later does not manage the port 1599 for the LibreOffice Impress correctly. An external...

[SECURITY] [DSA 3069-1] curl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3069-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 07, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3069-1] curl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3069-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 07, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3068-1] konversation security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3068-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 07, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 83-1] ffmpeg update

Package : ffmpeg Version : 4:0.5.10-1+deb6u1 This update to ffmpeg disables support for over 100 codecs, decoders, and formats that are rarely used nowadays, for which the support available in squeeze is most likely insufficient, etc. This update is only meant to reduce the attack surface. ffmpeg...

[SECURITY] [DSA 3067-1] qemu-kvm security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3067-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 06, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3067-1] qemu-kvm security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3067-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 06, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3066-1] qemu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3066-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 06, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3066-1] qemu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3066-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 06, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3065-1] libxml-security-java security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3065-1 [email protected] http://www.debian.org/security/ Sebastien Delafond November 06, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3065-1] libxml-security-java security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3065-1 [email protected] http://www.debian.org/security/ Sebastien Delafond November 06, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3064-1] php5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3064-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 04, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3064-1] php5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3064-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 04, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 82-1] wget security update

Package : wget Version : 1.12-2.1+deb6u1 CVE ID : CVE-2014-4877 HD Moore of Rapid7 discovered a symlink attack in Wget, a command-line utility to retrieve files via HTTP, HTTPS, and FTP. The vulnerability allows to create arbitrary files on the users system when Wget runs in recursive mode agains...

[SECURITY] [DSA 3063-1] quassel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3063-1 [email protected] http://www.debian.org/security/ Luciano Bello November 02, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3062-1] wget security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3062-1 [email protected] http://www.debian.org/security/ Luciano Bello November 01, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DLA 81-1] openssl security update

Package : openssl Version : 0.9.8o-4squeeze18 CVE ID : CVE-2014-3567 CVE-2014-3568 CVE-2014-3569 Several vulnerabilities have been found in OpenSSL. CVE-2014-3566 "POODLE" A flaw was found in the way SSL 3.0 handled padding bytes when decrypting messages encrypted using block ciphers in cipher...

[SECURITY] [DSA 3061-1] icedove security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3061-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 31, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3060-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3060-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso October 31, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3060-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3060-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso October 31, 2014 http://www.debian.org/security/faq -...