[SECURITY] [DLA 369-1] pygments security update

2015-12-15 Thread Chris Lamb
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Package: pygments Version: 1.3.1+dfsg-1+deb6u11 CVE ID : CVE-2015-8557 Debian Bug : 802828 It was discovered that there was a shell injection vulnerability in pygments, a syntax highlighting package written in Python.

Accepted mysql-5.5 5.5.46-0+deb6u1 (source all amd64) into squeeze-lts, squeeze-lts

2015-12-15 Thread Santiago Ruano Rincón
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 09 Dec 2015 18:06:07 +0100 Source: mysql-5.5 Binary: libmysqlclient18 mysql-common-5.5 mysql-client-5.5 mysql-server-core-5.5 mysql-server-5.5 mysql-server mysql-client mysql-testsuite-5.5 mysql-source-5.5 Architecture:

Re: squeeze update of dwarfutils?

2015-12-15 Thread Troy Heber
On 12/11/15 11:21, Guido Günther wrote: > the Debian LTS team would like to fix the security issues which are > currently open in the Squeeze version of dwarfutils: > https://security-tracker.debian.org/tracker/CVE-2015-8538 > > Would you like to take care of this yourself? According to the

Re: squeeze update of cacti?

2015-12-15 Thread Chris Lamb
> Please find attached the debdiff that I could come up with from my work > on sid, jessie and wheezy. It isn't tested yet (I don't have a suitable > setup for that) so I appreciate it if somebody could check the patch > doesn't break graph.php. Whilst I happened to have generated it, here is the

foomatic-filters: security fix for Squeeze LTS

2015-12-15 Thread Yann Soubeyrand
Hi, I prepared a new package of foomatic-filters for Squeeze LTS which fixes the new security vulnerability (https://security-tracker.debian.org/tracker/CVE-2015-8560). You can find the debdiff below for a review. Jörg, if you need help to prepare the packages for Wheezy and Jessie, feel free to

[SECURITY] [DLA 359-1] MySQL 5.5 packages added; end of support for MySQL 5.1

2015-12-15 Thread Santiago Ruano Rincón
Oracle, the upstream maintainer of MySQL, no longer supports MySQL version 5.1, which is included in Debian 6.0 "squeeze". MySQL 5.1 likely suffers from multiple vulnerabilities fixed in newer versions after the end of upstream support, but Oracle does not disclose enough information either to