[SECURITY] [DSA 1378-1] New Linux 2.6.18 packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1378-1 [email protected] http://www.debian.org/security/ Dann Frazier September 27th, 2007 http://www.debian.org/security/faq -...

DSA-1378-1 fai-kernels linux-2.6 user-mode-linux - several vulnerabilities

Bulletin has no description...

CVE-2007-4849

The CVE-2007-4849 entry concerns JFFS2 on OLPC build 542 (and possibly other Linux systems) when POSIX ACL support is enabled. It describes a flaw where permissions may not be stored correctly during inode creation or ACL setting, caused by an inconsistency between dentry permissions and inode pe...

CVE-2005-4849

Apache Derby vulnerability CVE-2005-4849 affects Derby prior to 10.1.2.1. The issue exposes the (1) user and (2) password attributes in cleartext via the RDBNAM parameter of the ACCSEC command and via the output of DatabaseMetaData.getURL, enabling context-dependent attackers to obtain sensitive ...

CVE-2006-4849

PHP remote file inclusion vulnerability in header.php in MobilePublisherPHP 1.5 RC2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter...

MS:4A9FA131-CE58-4849-8486-007A3D7046CD

...