[SECURITY] [DSA 1467-1] New mantis packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1467-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 19, 2008 http://www.debian.org/security/faq -...

DSA-1467-1 mantis - several vulnerabilities

Bulletin has no description...

Debian Security Advisory DSA 1168-1 (imagemagick)

The remote host is missing an update to imagemagick announced via advisory DSA 1168-1. Several remote vulnerabilities have been discovered in Imagemagick, a collection of image manipulation tools, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project...

Debian Security Advisory DSA 1008-1 (kdegraphics)

The remote host is missing an update to kdegraphics announced via advisory DSA 1008-1. Marcelo Ricardo Leitner noticed that the current patch in DSA 932 CVE-2005-3627 for kpdf, the PDF viewer for KDE, does not fix all buffer overflows, still allowing an attacker to execute arbitrary code. The old...

Debian Security Advisory DSA 1073-1 (mysql-dfsg-4.1)

The remote host is missing an update to mysql-dfsg-4.1 announced via advisory DSA 1073-1. OpenVAS Vulnerability Test $Id: deb10731.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1073-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1028-1 (libimager-perl)

The remote host is missing an update to libimager-perl announced via advisory DSA 1028-1. Kjetil Kjernsmo discovered a bug in libimager-perl, a Perl extension for generating 24 bit images, which can lead to a segmentation fault if it operates on 4-channel JPEG images. The old stable distribution...

Debian Security Advisory DSA 1171-1 (ethereal)

The remote host is missing an update to ethereal announced via advisory DSA 1171-1. Several remote vulnerabilities have been discovered in the Ethereal network scanner, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following...

Debian Security Advisory DSA 1370-2 (phpmyadmin)

The remote host is missing an update to phpmyadmin announced via advisory DSA 1370-2. OpenVAS Vulnerability Test $Id: deb13702.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1370-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1120-1 (mozilla-firefox)

The remote host is missing an update to mozilla-firefox announced via advisory DSA 1120-1. For details on the issues addressed with this update, please visit the referenced security advisories. OpenVAS Vulnerability Test $Id: deb11201.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description:...

Debian Security Advisory DSA 1216-1 (flexbackup)

The remote host is missing an update to flexbackup announced via advisory DSA 1216-1. Eric Romang discovered that the flexbackup backup tool creates temporary files in an insecure manner, which allows denial of service through a symlink attack. OpenVAS Vulnerability Test $Id: deb12161.nasl 6616...

Debian Security Advisory DSA 1157-1 (ruby1.8)

The remote host is missing an update to ruby1.8 announced via advisory DSA 1157-1. Several vulnerabilities have been discovered in the interpreter for the Ruby language, which may lead to the bypass of security restrictions or denial of service. The Common Vulnerabilities and Exposures project...

Debian Security Advisory DSA 1024-1 (clamav)

The remote host is missing an update to clamav announced via advisory DSA 1024-1. Several remote vulnerabilities have been discovered in the ClamAV anti-virus toolkit, which may lead to denial of service and potentially to the execution of arbitrary code. The Common Vulnerabilities and Exposures...

Debian Security Advisory DSA 1056-1 (webcalendar)

The remote host is missing an update to webcalendar announced via advisory DSA 1056-1. David Maciejak noticed that webcalendar, a PHP-Based multi-user calendar, returns different error messages on login attempts for an invalid password and a non-existing user, allowing remote attackers to gain...

Debian Security Advisory DSA 1214-2 (gv)

The remote host is missing an update to gv announced via advisory DSA 1214-2. The original update provided in DSA 1214-1 was insufficient; this update corrects this. For reference the original advisory below: Renaud Lifchitz discovered that gv, the PostScript and PDF viewer for X, performs...

Debian Security Advisory DSA 994-1 (freeciv)

The remote host is missing an update to freeciv announced via advisory DSA 994-1. Luigi Auriemma discovered a denial of service condition in the free Civilization server that allows a remote user to trigger a server crash. The old stable distribution woody is not affected by this problem. OpenVAS...

Debian Security Advisory DSA 1231-1 (gnupg)

The remote host is missing an update to gnupg announced via advisory DSA 1231-1. Several remote vulnerabilities have been discovered in the GNU privacy, a free PGP replacement, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the...

Debian Security Advisory DSA 999-1 (lurker)

The remote host is missing an update to lurker announced via advisory DSA 999-1. Several security related problems have been discovered in lurker, an archive tool for mailing lists with integrated search engine. The Common Vulnerability and Exposures project identifies the following problems:...

Debian Security Advisory DSA 1170-1 (gcc-3.4)

The remote host is missing an update to gcc-3.4 announced via advisory DSA 1170-1. Jürgen Weigert discovered that upon unpacking JAR archives fastjar from the GNU Compiler Collection does not check the path for included files and allows to create or overwrite files in upper directories. OpenVAS...

Debian Security Advisory DSA 1065-1 (hostapd)

The remote host is missing an update to hostapd announced via advisory DSA 1065-1. Matteo Rosi and Leonardo Maccari discovered that hostapd, a wifi network authenticator daemon, performs insufficient boundary checks on a key length value, which might be exploited to crash the service. The old...

Debian Security Advisory DSA 1244-1 (xine-lib)

The remote host is missing an update to xine-lib announced via advisory DSA 1244-1. It was discovered that the Xine multimedia library performs insufficient sanitising of Real streams, which might lead to the execution of arbitrary code through a buffer overflow. OpenVAS Vulnerability Test $Id:...