[Backports-security-announce] Security Update for clamav

Sebastian Harl uploaded new packages for clamav which fixed the following security problems: CVE-2008-5050, Debian BTS 505134 Moritz Jodeit discovered that ClamAV, an anti-virus solution, suffers from an off-by-one-error in its VBA project file processing, leading to a heap-based buffer overflow...

[Backports-security-announce] Security Update for xen-3

Frederik Schüler uploaded new packages for xen-3 which fixed the following security problems: CVE-2008-0928, Debian Bug 469649, 469654, 469662, 469666 Qemu 0.9.1 and earlier does not perform range checks for block device read or write requests, which allows guest host users with root privileges t...

[Backports-security-announce] Security Update for xen-3

Frederik Schüler uploaded new packages for xen-3 which fixed the following security problems: CVE-2008-0928, Debian Bug 469649, 469654, 469662, 469666 Qemu 0.9.1 and earlier does not perform range checks for block device read or write requests, which allows guest host users with root privileges t...

pidgin security and bug fix update

2.5.2-6 - Automatically detect booleans to enable build features from dist tag - Unify RHEL4 and RHEL5 spec with Fedora to make both easier to maintain 2.5.2-2 - Upstream backports: 100: sametime-redirect-null crash 101: NetworkManager-improvement 102: no-password-in-dialog-if-not-remembering 103...

[Backports-security-announce] Security Update for ngircd

Gerfried Fuchs uploaded new packages for ngircd which fixed the following security problem: CVE-2008-0285, Debian Bug 461067 ngIRCd 0.10.x before 0.10.4 and 0.11.0 before 0.11.0-pre2 allows remote attackers to cause a denial of service crash via crafted IRC PART message, which triggers an invalid...

[Backports-security-announce] Security Update for pdns

Gerfried Fuchs uploaded new packages for pdns which fixed the following security problem: CVE-2008-5277 Some PowerDNS Configurations can be forced to restart remotely through receiving a HINFO CH query. For the etch-backports distribution the problem has been fixed in version 2.9.21.2-1bpo40+1. F...

[Backports-security-announce] Security Update for pdns

Gerfried Fuchs uploaded new packages for pdns which fixed the following security problem: CVE-2008-5277 Some PowerDNS Configurations can be forced to restart remotely through receiving a HINFO CH query. For the etch-backports distribution the problem has been fixed in version 2.9.21.2-1bpo40+1. F...

[Backports-security-announce] Security Update for nagios3

Jan Wagner uploaded a new package for nagios3 which fixed the following security problem: CVE-2008-5028, SA32610 and Debian Bug 504894 Andreas Ericsson has discovered a vulnerability in Nagios, which can be exploited by malicious people to conduct cross-site request forgery attacks. The applicati...

[Backports-security-announce] Security Update for tor

Peter Palfrader uploaded new packages for tor which fixed the following security problem: Debian Bug 505178 tor didnt properly drop privileges when using the "User" and "Group" config options. For the etch-backports distribution the problem has been fixed in version 0.2.0.32-1bpo40+1. For the len...

[Backports-security-announce] Security Update for vim

Norbert Tretkowski uploaded new packages for vim which fixed the following security problems: CVE-2008-4101, Debian Bug 500381 Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to 1 execute arbitrary shell commands by entering a K keystro...

[Backports-security-announce] Security Update for dovecot

Gerfried Fuchs uploaded new packages for dovecot which fixed the following security problems: CVE-2008-4577, Debian Bug 502967 The ACL plugin in Dovecot before 1.1.4 treats negative access rights as if they are positive access rights, which allows attackers to bypass intended access restrictions...

[Backports-security-announce] Security Update for dovecot

Gerfried Fuchs uploaded new packages for dovecot which fixed the following security problems: CVE-2008-4577, Debian Bug 502967 The ACL plugin in Dovecot before 1.1.4 treats negative access rights as if they are positive access rights, which allows attackers to bypass intended access restrictions...

openSUSE 10 Security Update : mozilla-xulrunner181 (mozilla-xulrunner181-5820)

This update backports security fixes to the Mozilla XULRunner engine. It fixes following security issues : CVE-2008-0017 / MFSA 2008-54: The http-index-format MIME type parser nsDirIndexParser in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 does not check...

[Backports-security-announce] Security Update for trac

Jan Wagner uploaded a new package for trac which fixed the following security problem: Some vulnerabilities have been reported in Trac, which can be exploited by malicious people to cause a DoS Denial of Service or to conduct phishing attacks. 1 An unspecified error in the HTML sanitiser filter c...

[Backports-security-announce] Security Update for trac

Jan Wagner uploaded a new package for trac which fixed the following security problem: Some vulnerabilities have been reported in Trac, which can be exploited by malicious people to cause a DoS Denial of Service or to conduct phishing attacks. 1 An unspecified error in the HTML sanitiser filter c...

[Backports-security-announce] Security Update for ikiwiki

Alexander Wirt uploaded a new package for ikiwiki which fixed the following security problem: Feeding ikiwiki page sources containing certian forms of malformed UTF-8 can cause it to crash. This can potentially be used for a denial of service attack. For the etch-backports distribution the proble...

[Backports-security-announce] Security Update for virtualbox-ose

Michael Meskes uploaded new packages for virtualbox-ose which fixed the following security problem: Debian Bug 504149 Symlink vulnerability due to bad /tmp handling allowing an attacker to overwrite any files owned by the starting user of virtualbox. For the etch-backports distribution the proble...

[Backports-security-announce] Security update for openoffice.org

Rene Engelhard uploaded new packages for openoffice.org which fixed the following security problems: Debian BTS 496361 left-over debugging echos writing into an insecure temp file can allow attackers to overwrite files on the system with the prvilieges of the user executing senddoc File - Send...

[Backports-security-announce] Security update for openoffice.org

Rene Engelhard uploaded new packages for openoffice.org which fixed the following security problems: Debian BTS 496361 left-over debugging echos writing into an insecure temp file can allow attackers to overwrite files on the system with the prvilieges of the user executing senddoc File - Send...

[Backports-security-announce] Security update for openoffice.org

Rene Engelhard uploaded new packages for openoffice.org which fixed the following security problems: Debian BTS 496361 left-over debugging echos writing into an insecure temp file can allow attackers to overwrite files on the system with the prvilieges of the user executing senddoc File - Send...