[SECURITY] [DSA 2082-1] New gmime2.2 packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2082-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 02, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2091-1] New squirrelmail packages fix cross-site request forgery

------------------------------------------------------------------------ Debian Security Advisory DSA-2091-1 [email protected] http://www.debian.org/security/ Luciano Bello August 12, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2090-1] New socat packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-2090-1 [email protected] http://www.debian.org/security/ Luciano Bello August 06, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2084-1] New tiff packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-2084-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 03, 2010 http://www.debian.org/security/faq -...

[Backports-security-announce] Security Update for git

Sebastian Harl uploaded new packages for git, a popular distributed revision control system, which fixed the following security problem: CVE-2010-2542, Debian BTS 590026 A buffer overrun was found in the way Git sanitized path of a git directory. If a local attacker would create a specially-craft...

MDVA-2009:063 : mdkonline

This update fixes several issues with mdkapplet. On 2009.1 PowerPack, mdkonline wrongly set up the 2009.0 restricted media instead of the 2009.1 ones 50478. Mdkapplet checks once a day if a new distribution is availlable. When checking again for updates every 3 hoours by default, mdkapplet forgot...

DSA-2077-1 openldap - potential code execution

Bulletin has no description...

Debian Security Advisory DSA 2070-1 (freetype)

The remote host is missing an update to freetype announced via advisory DSA 2070-1. OpenVAS Vulnerability Test $Id: deb20701.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2070-1 freetype Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

[SECURITY] [DSA 2070-1] New freetype packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2070-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 14, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA-2068-1] New python-cjson packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2068-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano July 11, 2010 http://www.debian.org/security/faq -...

Debian DSA-2065-1 : kvirc - several vulnerabilities

Two security issues have been discovered in the DCC protocol support code of kvirc, a KDE-based next generation IRC client, which allow the overwriting of local files through directory traversal and the execution of arbitrary code through a format string attack. %NASLMINLEVEL 70300 C Tenable...

[SECURITY] [DSA 2063-1] New pmount packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-2063-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano June 17, 2010 http://www.debian.org/security/faq -...

Symantec AppStream and Workspace Streaming vulnerable to arbitrary code download and execution

Overview The Symantec AppStream and Workspace Streaming clients fail to properly validate downloads, which can allow a remote, unauthenticated attacker to download and execute arbitrary code on a vulnerable system. Description Symantec Workspace Streaming is a software distribution solution that...

Debian DSA-2059-1 : pcsc-lite - buffer overflow

It was discovered that PCSCD, a daemon to access smart cards, was vulnerable to a buffer overflow allowing a local attacker to elevate his privileges to root. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

[SECURITY] [DSA 2058-1] New glibc packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2058-1 [email protected] http://www.debian.org/security/ Aurelien Jarno June 10, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2057-1] New mysql-dfsg-5.0 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2057-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano June 07, 2010 http://www.debian.org/security/faq -...

[Backports-security-announce] Security update for openoffice.org

Rene Engelhard uploaded a new package for openoffice.org which fixed the following security problem: CVE-2010-0395 It was discovered that OpenOffice.org, a full-featured office productivity suite that provides a near drop-in replacement for MicrosoftR Office, is not properly handling python macro...

CentOS 5 : krb5 (CESA-2010:0343)

Updated krb5 packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

[Backports-security-announce] Security Update for postgresql-8.4

Gerfried Fuchs uploaded new packages for postgresql-8.4 which fixed the following security problems: CVE-2010-1169 PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 does not properly restrict...

[Backports-security-announce] Security Update for postgresql-8.4

Gerfried Fuchs uploaded new packages for postgresql-8.4 which fixed the following security problems: CVE-2010-1169 PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 does not properly restrict...