[DLA 33-1] openssl security update

Package : openssl Version : 0.9.8o-4squeeze17 CVE ID : CVE-2014-3505 CVE-2014-3506 CVE-2014-3507 CVE-2014-3508 CVE-2014-3510 Detailed descriptions of the vulnerabilities can be found at: https://www.openssl.org/news/secadv20140806.txt Its important that you upgrade the libssl0.9.8 package and not...

[DLA 32-1] nspr security update

Package : nspr Version : 4.8.6-1+squeeze2 CVE ID : CVE-2014-1545 Abhiskek Arya discovered an out of bounds write in the cvtt function of the NetScape Portable Runtime Library which could result in the execution of arbitrary code...

[DLA 31-1] reportbug security update

Package : reportbug Version : 4.12.6+deb6u1 CVE ID : CVE-2014-0479 Fix CVE-2014-0479: Arbitrary code execution in compareversions. A man-in-the-middle attacker could put shell metacharacters in the version number, causing execution of code of their choice...

[DLA 20-1] munin security update

Package : munin Version : 1.4.5-3+deb6u1 CVE ID : CVE-2012-3512 CVE-2013-6048 CVE-2013-6359 Christoph Biedl munin-node: more secure state file handling, introducing a new plugin state directory root, owned by uid 0. Then each plugin runs in its own UID plugin state directory, owned by that UID...

[SECURITY] [DSA 2998-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2998-1 [email protected] http://www.debian.org/security/ Raphael Geissert August 07, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2997-1] reportbug security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2997-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 05, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2997-1] reportbug security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2997-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 05, 2014 http://www.debian.org/security/faq -...

[DLA 25-2] python2.6 regression update

Package : python2.6 Version : 2.6.6-8+deb6u2 A regression has been identified in the python2.6 update of DLA-25-1, which may cause python applications to abort if they were running during the upgrade but they had not already imported the os module, and do so after the upgrade. This update fixes...

[DLA 30-1] acpi-support security update

Package : acpi-support Version : 0.137-5+deb6u1 CVE ID : CVE-2014-1419 CESG discovered a race condition in acpi-support which may allow an unprivileged user to execute arbitrary code as a different user, including root...

[SECURITY] [DSA 2996-1] icedove security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2996-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 03, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2995-1] lzo2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2995-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 03, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2995-1] lzo2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2995-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 03, 2014 http://www.debian.org/security/faq -...

[DLA 29-1] puppet security update

Package : puppet Version : 2.6.2-5+squeeze10 CVE ID : CVE-2012-6120 It was discovered that the puppet package did not restrict the permissions and ownership of the /var/log/puppet directory, which may expose sensitive information...

[DLA 28-1] augeas security update

Package : augeas Version : 0.7.2-1+deb6u1 CVE ID : CVE-2012-0786 CVE-2012-0787 CVE-2013-6412 Debian Bug : 731111 731132 Multiple race conditions were discovered in augeas when saving configuration files which expose it to symlink attacks. Write access to the directory where the configuration file...

[DLA 17-1] tor: new upstream version

Package : tor Version : 0.2.4.23-1deb6u1 The Tor version previously in Debian squeeze, 0.2.2.39, is no longer supported by upstream. This update brings the currently stable version of Tor, 0.2.4.23, to Debian squeeze. Changes include use of stronger cryptographic primitives, always clearing bignu...

[DLA 25-1] python2.6 security update

Package : python2.6 Version : 2.6.6-8+deb6u1 CVE ID : CVE-2011-1015 CVE-2011-1521 CVE-2011-4940 CVE-2011-4944 CVE-2012-0845 CVE-2012-1150 CVE-2013-4238 CVE-2014-1912 Multiple vulnerabilities were discovered in python2.6. The more relevant are: CVE-2013-4238 Incorrect handling of NUL bytes in...

[DLA 27-1] file security update

Package : file Version : 5.04-5+squeeze6 CVE ID : CVE-2014-0207 CVE-2014-0237 CVE-2014-0238 CVE-2014-3478 CVE-2014-3479 CVE-2014-3480 CVE-2014-3487 Fix various denial of service attacks: CVE-2014-3487 The cdfreadpropertyinfo function does not properly validate a stream offset, which allows remote...

[SECURITY] [DSA 2994-1] nss security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2994-1 [email protected] http://www.debian.org/security/ Raphael Geissert July 31, 2014 http://www.debian.org/security/faq -...

[DLA 26-1] python-scipy security update

Package : python-scipy Version : 0.7.2+dfsg1-1+deb6u1 CVE ID : CVE-2013-4251 Debian Bug : 726093 It was discovered that python-scipy did not correctly handle temporary directories, which may allow arbitrary code execution...

[DLA 24-1] poppler security update

Package : poppler Version : 0.12.4-1.2+squeeze4 CVE ID : CVE-2010-5110 Debian Bug : 722705 It was discovered that poppler did return program execution to the libjpeg library under error conditions, which is not expected by the library and results in application crash and possibly code execution...

[DLA 23-1] nss security update

Package : nss Version : 3.12.8-1+squeeze8 CVE ID : CVE-2013-1741 CVE-2013-5606 CVE-2014-1491 CVE-2014-1492 CVE-2013-1741 Runaway memset in certificate parsing on 64-bit computers leading to a crash by attempting to write 4Gb of nulls. CVE-2013-5606 Certificate validation with the verifylog mode d...

[SECURITY] [DSA 2993-1] tor security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2993-1 [email protected] http://www.debian.org/security/ Peter Palfrader July 31, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2993-1] tor security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2993-1 [email protected] http://www.debian.org/security/ Peter Palfrader July 31, 2014 http://www.debian.org/security/faq -...

[DLA-0022-1] cups security update

Debian Security Advisory DLA-0022-1 https://wiki.debian.org/LTS - --------------------------------------------------------------------- Package : cups Version : 1.4.4-7+squeeze6 CVE ID : CVE-2014-3537 CVE-2014-5029 CVE-2014-5030 CVE-2014-5031 It was discovered that the web interface in CUPS, the...

[DLA-0019-1] postgresql-8.4 update

Debian Security Advisory DLA-0019-1 https://wiki.debian.org/LTS - ---------------------------------------------------------------------------- Package : postgresql-8.4 Version : 8.4.22-0+deb6u1 CVE ID : CVE-2014-0067 New upstream minor release. Users should upgrade to this version at their next...

[SECURITY] [DSA 2992-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2992-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso July 29, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2992-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2992-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso July 29, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2991-1] modsecurity-apache security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2991-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso July 27, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2991-1] modsecurity-apache security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2991-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso July 27, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2990-1] cups security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2990-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso July 27, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2990-1] cups security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2990-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso July 27, 2014 http://www.debian.org/security/faq -...

[DLA-0021-1] fail2ban security update

Package : fail2ban Version : 0.8.4-3+squeeze3 CVE ID : CVE-2013-7176 CVE-2013-7177 Use anchored failregex for filters to avoid possible DoS. Manually picked up from the current status of 0.8 branch as of 0.8.13-29-g09b2016: - CVE-2013-7176: postfix.conf - anchored on the front, expects...

[SECURITY] [DSA 2989-1] apache2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2989-1 [email protected] http://www.debian.org/security/ Stefan Fritsch July 24, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2989-1] apache2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2989-1 [email protected] http://www.debian.org/security/ Stefan Fritsch July 24, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2988-1] transmission security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2988-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 24, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2987-1] openjdk-7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2987-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 23, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2986-1] iceweasel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2986-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 23, 2014 http://www.debian.org/security/faq -...

[DLA-0018-1] php5 security update

Package : php5 Version : 5.3.3-7+squeeze20 CVE ID : CVE-2014-3515 CVE-2014-0207 CVE-2014-3480 CVE-2014-4721 CVE-2014-3515: fix unserialize SPL ArrayObject / SPLObjectStorage Type Confusion CVE-2014-0207: fileinfo: cdfreadshortsector insufficient boundary check CVE-2014-3480: fileinfo: cdfcountcha...

[SECURITY] [DSA 2985-1] mysql-5.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2985-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso July 22, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2985-1] mysql-5.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2985-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso July 22, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2984-1] acpi-support security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2984-1 [email protected] http://www.debian.org/security/ Luciano Bello July 22, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2983-1] drupal7 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2983-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 20, 2014 http://www.debian.org/security/faq -...

[DLA-0016-1] libxml2 security update

Package : libxml2 Version : 2.7.8.dfsg-2+squeeze9 CVE ID : CVE-2014-0191 Debian Bug : 747309 Daniel P. Berrange discovered a denial of service vulnerability in libxml2 entity substitution...

libxml2 security update

Package : libxml2 Version : 2.7.8.dfsg-2+squeeze9 CVE ID : CVE-2014-0191 Debian Bug : 747309 Daniel P. Berrange discovered a denial of service vulnerability in libxml2 entity substitution...

libxml2 security update

Package : libxml2 Version : 2.7.8.dfsg-2+squeeze9 CVE ID : CVE-2014-0191 Debian Bug : 747309 Daniel P. Berrange discovered a denial of service vulnerability in libxml2 entity substitution...

[SECURITY] [DSA 2982-1] ruby-activerecord-3.2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2982-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 19, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2981-1] polarssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2981-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso July 18, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2981-1] polarssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2981-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso July 18, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2980-1] openjdk-6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2980-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 17, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2979-1] fail2ban security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2979-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 17, 2014 http://www.debian.org/security/faq -...