[SECURITY] [DSA 219-1] New dhcpcd packages fix remote command execution vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 219-1 [email protected] http://www.debian.org/security/ Martin Schulze December 31st, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 215-1] New cyrus-imapd packages fix remote command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 215-1 [email protected] http://www.debian.org/security/ Martin Schulze December 23th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 199-1] New mhonarc packages fix cross site scripting

-------------------------------------------------------------------------- Debian Security Advisory DSA 199-1 [email protected] http://www.debian.org/security/ Martin Schulze November 19th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 176-1] New gv packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 176-1 [email protected] http://www.debian.org/security/ Martin Schulze October 16th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 169-1] New tomcat packages fix unintended source code disclosure

-------------------------------------------------------------------------- Debian Security Advisory DSA 169-1 [email protected] http://www.debian.org/security/ Martin Schulze October, 4th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 167-1] New kdelibs fix cross site scripting bug

-------------------------------------------------------------------------- Debian Security Advisory DSA 167-1 [email protected] http://www.debian.org/security/ Martin Schulze September 16th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA-136-2] Multiple OpenSSL problems (update)

Package : openssl094, openssl095, openssl Problem type : multiple remote exploits Debian-specific: no CVE : CAN-2002-0655 CAN-2002-0656 CAN-2002-0657 CAN-2002-0659 Note: this advisory is an update to DSA-136-1, issued 30 Jul 2002. It includes ASN1 updates in the woody packages, plus the potato...

[SECURITY] [DSA 161-1] New Mantis package fixes privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 161-1 [email protected] http://www.debian.org/security/ Martin Schulze September 4th, 2002 http://www.debian.org/security/faq -...

[SECURITY] [DSA 150-1] New interchange packages fix illegal file exposition

-------------------------------------------------------------------------- Debian Security Advisory DSA 150-1 [email protected] http://www.debian.org/security/ Martin Schulze August 13th, 2002 - -------------------------------------------------------------------------- Package : interchange...

[SECURITY] [DSA 146-1] New dietlibc packages fix integer overflows

-------------------------------------------------------------------------- Debian Security Advisory DSA 146-1 [email protected] http://www.debian.org/security/ Martin Schulze August 8th, 2002 - -------------------------------------------------------------------------- Package : dietlibc...

[SECURITY] [DSA 143-1] New krb5 packages fix integer overflow bug

-------------------------------------------------------------------------- Debian Security Advisory DSA 143-1 [email protected] http://www.debian.org/security/ Martin Schulze August 5th, 2002 - -------------------------------------------------------------------------- Package : krb5...

[SECURITY] [DSA 140-2] New libpng packages fix potential buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 140-2 [email protected] http://www.debian.org/security/ Martin Schulze August 5th, 2002 - -------------------------------------------------------------------------- Package : libpng, libpng3...

[SECURITY] [DSA 116-1] New CFS packages fix security problems

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 116-1 [email protected] http://www.debian.org/security/ Martin Schulze March 2nd, 2002 -...

[SECURITY] [DSA 110-1] New CUPS packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 110-1 [email protected] http://www.debian.org/security/ Martin Schulze February 13th, 2002 - -------------------------------------------------------------------------- Package : cupsys...

[SECURITY] [DSA-063-1] two xinetd problems

Package : xinetd Problem type : change default umask buffer overflow Debian-specific: no zen-parse reported on bugtraq that there is a possible buffer overflow in the logging code from xinetd. This could be triggered by using a fake identd that returns special replies when xinetd does an ident...

[SECURITY] [DSA-032-2] proftp runs as root, /var symlink removal

Package: proftpd Vulnerability: proftpd running as root, /var symlink removal Debian-specific: yes This is an update to the DSA-032-1 advisory. The powerpc package that was listed in that advisory was unfortunately compiled on the wrong system which caused it to not work on a Debian GNU/Linux 2.2...

[SECURITY] [DSA-008-1] dialog symlink attack

Package : dialog Problem type : insecure temporary files Debian-specific: no Matt Kraai reported that he found a problem in the way dialog creates lock-files: it did not create them safely which made it susceptible to a symlink attack. This has been fixed in version 0.9a-20000118-3bis. wget url...

[SECURITY] [DSA-001-1] ed symlink attack

Package : ed Problem type : symlink attack Debian-specific: no Alan Cox discovered that GNU ed a classed line editor tool created temporary files unsafely. This has been fixed in version 0.2-18.1. wget url will fetch the file for you dpkg -i file.deb will install the referenced file. Debian...

[SECURITY] New versions of Boa packages available

---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Daniel Jacobowitz October 9, 2000 - ---------------------------------------------------------------------------- Package: boa Vulnerability:...

[SECURITY] New version of xlockmore/xlockmore-gl released

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Michael Stone August 16, 2000 - ------------------------------------------------------------------------ Package: xlockmore, xlockmore-gl...