[SECURITY] [DSA 3017-1] php-cas security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3017-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst September 2, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3016-1] lua5.2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3016-1 [email protected] http://www.debian.org/security/ Florian Weimer September 01, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3015-1] lua5.1 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3015-1 [email protected] http://www.debian.org/security/ Florian Weimer September 01, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2987-2] openjdk-7 regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-2987-2 [email protected] http://www.debian.org/security/ Florian Weimer August 31, 2014 http://www.debian.org/security/faq -...

[DLA 42-1] live-config security update

Package : live-config Version : 2.0.15-1.1+deb6u1 Debian Bug : 741678 A vulnerability against Debian Live, the live systems project, was reported. The default, the live images include a SSH server allowing for log in with default user and password. This fix set PasswordAuthentication in...

[SECURITY] [DSA 3014-1] squid3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3014-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 28, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3014-1] squid3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3014-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 28, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3013-1] s3ql security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3013-1 [email protected] http://www.debian.org/security/ Florian Weiemr August 27, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3012-1] eglibc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3012-1 [email protected] http://www.debian.org/security/ Florian Weimer August 27, 2014 http://www.debian.org/security/faq -...

[DLA 41-1] python-imaging security update

Package : python-imaging Version : 1.1.7-2+deb6u1 CVE ID : CVE-2014-3589 Andrew Drake discovered that missing input sanitising in the icns decoder of the Python Imaging Library could result in denial of service if a malformed image is processed...

[SECURITY] [DSA 3011-1] mediawiki security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3011-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 23, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3011-1] mediawiki security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3011-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 23, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3010-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3010-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 22, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3010-1] python-django security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3010-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 22, 2014 http://www.debian.org/security/faq -...

[DLA 40-1] cacti security update

Package : cacti Version : 0.8.7g-1+squeeze5 CVE ID : CVE-2014-5025 CVE-2014-5026 CVE-2014-5261 CVE-2014-5262 Debian Bug : 755032 Multiple security issues cross-site scripting, missing input sanitizing and SQL injection have been discovered in Cacti, a web interface for graphing of monitoring...

[SECURITY] [DSA 3009-1] python-imaging security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3009-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 21, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3008-2] php5 regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3008-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 21, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3008-2] php5 regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3008-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 21, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2940-1] libstruts1.2-java security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2940-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff Aug 21, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3008-1] php5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3008-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 21, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3008-1] php5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3008-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 21, 2014 http://www.debian.org/security/faq -...

[DLA 39-1] gpgme1.0 security update

Package : gpgme1.0 Version : 1.2.0-1.2+deb6u1 CVE ID : CVE-2014-3564 Debian Bug : 756651 Tomas Trnka discovered a heap-based buffer overflow within the gpgsm status handler of GPGME, a library designed to make access to GnuPG easier for applications. An attacker could use this issue to cause an...

[SECURITY] [DSA 3007-1] cacti security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3007-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 20, 2014 http://www.debian.org/security/faq -...

[DLA 37-1] krb5 security update

Package : krb5 Version : 1.8.3+dfsg-4squeeze8 CVE ID : CVE-2014-4341 CVE-2014-4342 CVE-2014-4343 CVE-2014-4344 CVE-2014-4345 Debian Bug : 753624 753625 755520 755521 757416 Several vulnerabilities were discovered in krb5, the MIT implementation of Kerberos. The Common Vulnerabilities and Exposure...

[SECURITY] [DSA 3006-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3006-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 18, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3005-1] gpgme1.0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3005-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 14, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3005-1] gpgme1.0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3005-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 14, 2014 http://www.debian.org/security/faq -...

[DLA 25-3] python2.6 regression update

Package : python2.6 Version : 2.6.6-8+deb6u3 Debian Bug : 757776 The python2.6 packages distributed for squeeze-lts lacked some modules due to the package being built on systems running a 3.x version of the linux kernel...

[SECURITY] [DSA 2984-2] acpi-support regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-2984-2 [email protected] http://www.debian.org/security/ Raphael Geissert August 11, 2014 http://www.debian.org/security/faq -...

[DLA 36-1] polarssl security update

Package : polarssl Version : 1.2.9-1deb6u2 CVE ID : CVE-2014-4911 Debian Bug : 754655 Denial of Service against GCM enabled servers and clients...

[DLA 35-1] lzo2 security update

Package : lzo2 Version : 2.03-2+deb6u1 CVE ID : CVE-2014-4607 Debian Bug : 752861 Fix integer overflow in lzo1xdecompresssafe allowing denial of service or code execution...

[SECURITY] [DSA 3004-1] kde4libs security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3004-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 11, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3003-1] libav security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3003-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 10, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3002-1] wireshark security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3002-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 10, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3001-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3001-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 09, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3001-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3001-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 09, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3000-1] krb5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3000-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 09, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3000-1] krb5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3000-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 09, 2014 http://www.debian.org/security/faq -...

[DLA 34-1] libapache-mod-security security update

Package : libapache-mod-security Version : 2.5.12-1+squeeze4 CVE ID : CVE-2013-5705 Martin Holst Swende discovered a flaw in the way modsecurity handled chunked requests. A remote attacker could use this flaw to bypass intended modsecurity restrictions, allowing them to send requests containing...

[SECURITY] [DSA 2999-1] drupal7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2999-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 09, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2999-1] drupal7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2999-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 09, 2014 http://www.debian.org/security/faq -...

[DLA 33-1] openssl security update

Package : openssl Version : 0.9.8o-4squeeze17 CVE ID : CVE-2014-3505 CVE-2014-3506 CVE-2014-3507 CVE-2014-3508 CVE-2014-3510 Detailed descriptions of the vulnerabilities can be found at: https://www.openssl.org/news/secadv20140806.txt Its important that you upgrade the libssl0.9.8 package and not...

[DLA 32-1] nspr security update

Package : nspr Version : 4.8.6-1+squeeze2 CVE ID : CVE-2014-1545 Abhiskek Arya discovered an out of bounds write in the cvtt function of the NetScape Portable Runtime Library which could result in the execution of arbitrary code...

[DLA 31-1] reportbug security update

Package : reportbug Version : 4.12.6+deb6u1 CVE ID : CVE-2014-0479 Fix CVE-2014-0479: Arbitrary code execution in compareversions. A man-in-the-middle attacker could put shell metacharacters in the version number, causing execution of code of their choice...

[DLA 20-1] munin security update

Package : munin Version : 1.4.5-3+deb6u1 CVE ID : CVE-2012-3512 CVE-2013-6048 CVE-2013-6359 Christoph Biedl munin-node: more secure state file handling, introducing a new plugin state directory root, owned by uid 0. Then each plugin runs in its own UID plugin state directory, owned by that UID...

[SECURITY] [DSA 2998-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2998-1 [email protected] http://www.debian.org/security/ Raphael Geissert August 07, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2997-1] reportbug security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2997-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 05, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2997-1] reportbug security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2997-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 05, 2014 http://www.debian.org/security/faq -...

[DLA 25-2] python2.6 regression update

Package : python2.6 Version : 2.6.6-8+deb6u2 A regression has been identified in the python2.6 update of DLA-25-1, which may cause python applications to abort if they were running during the upgrade but they had not already imported the os module, and do so after the upgrade. This update fixes...

[DLA 30-1] acpi-support security update

Package : acpi-support Version : 0.137-5+deb6u1 CVE ID : CVE-2014-1419 CESG discovered a race condition in acpi-support which may allow an unprivileged user to execute arbitrary code as a different user, including root...