906 matches found
[Backports-security-announce] etch-backports discontinued
Hi users, Hi contributors, as some of you may heard 1 the security support for etch terminated on February 15th. That means that our support for etch backports also ends here. Please dont upload to etch-backports anymore. The downloads are still possible, but please remember that there is no...
[Backports-security-announce] etch-backports discontinued
Hi users, Hi contributors, as some of you may heard 1 the security support for etch terminated on February 15th. That means that our support for etch backports also ends here. Please dont upload to etch-backports anymore. The downloads are still possible, but please remember that there is no...
[Backports-security-announce] Security Update for openoffice.org
Rene Engelhard uploaded a new package for openoffice.org which fixed the following security problems: CVE-2010-0136 It was discovered that macro security settings were insufficiently enforced for VBA macros. CVE-2009-0217 It was discovered that the W3C XML Signature recommendation contains a...
[Backports-security-announce] Security Update for openoffice.org
Rene Engelhard uploaded a new package for openoffice.org which fixed the following security problems: CVE-2010-0136 It was discovered that macro security settings were insufficiently enforced for VBA macros. CVE-2009-0217 It was discovered that the W3C XML Signature recommendation contains a...
[Backports-security-announce] Security Update for openoffice.org
Rene Engelhard uploaded a new package for openoffice.org which fixed the following security problems: CVE-2010-0136 It was discovered that macro security settings were insufficiently enforced for VBA macros. CVE-2009-0217 It was discovered that the W3C XML Signature recommendation contains a...
[Backports-security-announce] Security Update for dokuwiki
Gerfried Fuchs uploaded new packages for dokuwiki which fixed the following security problems: CVE-2010-0287 It was discovered that an internal variable is not properly sanitized before being used to list directories. This can be exploited to list contents of arbitrary directories. CVE-2010-0288,...
[Backports-security-announce] Security Update for dokuwiki
Gerfried Fuchs uploaded new packages for dokuwiki which fixed the following security problems: CVE-2010-0287 It was discovered that an internal variable is not properly sanitized before being used to list directories. This can be exploited to list contents of arbitrary directories. CVE-2010-0288,...
[Backports-security-announce] Security update for transmission
Leo Costela and Josselin Mouette uploaded new packages for transmission which fixed the following security problem: CVE-2010-0012 DSA-1967-1 Dan Rosenberg discovered that Transmission, a lightweight client for the Bittorrent filesharing protocol performs insufficient sanitizing of file names...
[Backports-security-announce] Security Update for lintian
Raphael Geissert uploaded new packages for lintian which fixed the following security problems: CVE-2009-4013: missing control files sanitation Control field names and values were not sanitised before using them in certain operations that could lead to directory traversals. Patch systems control...
[Backports-security-announce] Security Update for lintian
Raphael Geissert uploaded new packages for lintian which fixed the following security problems: CVE-2009-4013: missing control files sanitation Control field names and values were not sanitised before using them in certain operations that could lead to directory traversals. Patch systems control...
[Backports-security-announce] Security Update for proftpd-dfsg
Francesco P. Lovergine uploaded new packages for proftpd-dfsg which fixed the following security problem: CVE-2009-3639 The modtls module in ProFTPD before 1.3.2b, and 1.3.3 before 1.3.3rc2, when the dNSNameRequired TLS option is enabled, does not properly handle a \0 character in a domain name i...
[Backports-security-announce] Support for etch-backports discontinued on February 15th
Hi, since security support for Debian Etch 4.0 is discontinued on Februrary 15th 1 etch-backports will close its doors the same day. What does that mean? - No uploads to etch-backports are allowed after this date - Downloads will still be available, but every user is recommended to update to Debi...
[Backports-security-announce] Support for etch-backports discontinued on February 15th
Hi, since security support for Debian Etch 4.0 is discontinued on Februrary 15th 1 etch-backports will close its doors the same day. What does that mean? - No uploads to etch-backports are allowed after this date - Downloads will still be available, but every user is recommended to update to Debi...
[Backports-security-announce] Security Update for pdns-recursor
Gerfried Fuchs uploaded new packages for pdns-recursor which fixed the following security problems: CVE-2009-4009 A buffer overflow can be exploited to crash the daemon, or potentially execute arbitrary code. CVE-2009-4010 A cache poisoning vulnerability may allow attackers to trick the server in...
[Backports-security-announce] Security Update for pdns-recursor
Gerfried Fuchs uploaded new packages for pdns-recursor which fixed the following security problems: CVE-2009-4009 A buffer overflow can be exploited to crash the daemon, or potentially execute arbitrary code. CVE-2009-4010 A cache poisoning vulnerability may allow attackers to trick the server in...
[Backports-security-announce] Security Update for dovecot
Marco Nenciarini uploaded new packages for dovecot which fix the following security problem: CVE-2009-3897 Dovecot 1.2.x before 1.2.8 sets 0777 permissions during creation of certain directories at installation time, which allows local users to access arbitrary user accounts by replacing the auth...
[Backports-security-announce] Security Update for dovecot
Marco Nenciarini uploaded new packages for dovecot which fix the following security problem: CVE-2009-3897 Dovecot 1.2.x before 1.2.8 sets 0777 permissions during creation of certain directories at installation time, which allows local users to access arbitrary user accounts by replacing the auth...
[Backports-security-announce] Security update for dovecot
Jaldhar H. Vyas uploaded new packages which fix the following problem: DSA-1892-1 CVE-2009-2632, CVE-2009-3235 Multiple stack-based buffer overflows in the Sieve plugin in Dovecot For the etch-backports distribution the problem has been fixed in version 1.0.15-2.3+lenny1bpo40+1 For the...
[Backports-security-announce] Security update for dovecot
Jaldhar H. Vyas uploaded new packages which fix the following problem: DSA-1892-1 CVE-2009-2632, CVE-2009-3235 Multiple stack-based buffer overflows in the Sieve plugin in Dovecot For the etch-backports distribution the problem has been fixed in version 1.0.15-2.3+lenny1bpo40+1 For the...
[Backports-security-announce] Security update for dovecot
Jaldhar H. Vyas uploaded new packages which fix the following problem: DSA-1892-1 CVE-2009-2632, CVE-2009-3235 Multiple stack-based buffer overflows in the Sieve plugin in Dovecot For the etch-backports distribution the problem has been fixed in version 1.0.15-2.3+lenny1bpo40+1 For the...