MDKSA-2000:028 kon2 update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Linux-Mandrake Security Update Advisory Package name: kon2 Date: August 1st, 2000 Advisory ID: MDKSA-2000:028 Affected versions: 7.0, 7.1 Problem Description: There is a vulnerable suid program called fld. This program accepts option input from a text...

tcp_wrappers-CERT.txt

Date: Fri, 22 Jan 1999 20:12:36 -0500 From: Eric To: [email protected] Subject: CERT Advisory CA-99.01 - TCP Wrappers Trojan Horse fwd Date: Fri, 22 Jan 1999 16:42:00 -0500 Message-Id: From: CERT Advisory To: [email protected] Subject: CERT Advisory CA-99.01 - TCP Wrappers Trojan Hor...

caldera.coas.shadow.txt

Date: Tue, 27 Apr 1999 20:26:16 -0600 From: synapse To: [email protected] Subject: Caldera Advisory Heya Aleph, Not sure if this had come accross the list. -----BEGIN PGP SIGNED MESSAGE----- Caldera Systems, Inc. Security Advisory Subject: COAS Advisory number: CSSA-1999:009.0 Issue date: 1999...

[SECURITY] New version of zgv fixes buffer overflows

We have received reports that the zgv package is vulnerable to buffer overflows. We recommend you upgrade your zgv package immediately. wget url will fetch the file for you dpkg -i file.deb will install the referenced file. Debian GNU/Linux 2.0 alias hamm This version of Debian was released only...

[SECURITY] Current versions of mailx fixes /tmp problem

Former versions of mailx used an unsecure means of opening files beneath /tmp for writing. This can be used to damage files in a users directory or even systemwide. We recommend you upgrade your mailx package immediately. dpkg -i file.deb will install the referenced file. Debian GNU/Linux 1.3.1...

[SECURITY] Security fixed versions of sparc binaries available

==================================================================== Debian GNU/Linux Security May 17, 1998 We have received reports that former versions of procps, shadow, fakeroot, gzip, perl and bind in hamm were vulnerable to some exploits. Please refer to the following web pages to get more...

[SECURITY] New versions of gzip available

We were told by Michal Zalewski that gzexe as shipped with gzip uses an unsecure method decompressing executables on the fly opening a way of calling arbitrary programs. Newer versions for bo and hamm are fixing this. We recommend you upgrade your gzip package if youre using the gzexe method. dpk...