Debian DSA-882-1 : openssl095 - cryptographic weakness

Yutaka Oiwa discovered a vulnerability in the Open Secure Socket Layer OpenSSL library that can allow an attacker to perform active protocol-version rollback attacks that could lead to the use of the weaker SSL 2.0 protocol even though both ends support SSL 3.0 or TLS 1.0. The following matrix...

Debian DSA-1087-1 : postgresql - programming error

Several encoding problems have been discovered in PostgreSQL, a popular SQL database. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-2313 Akio Ishida and Yasuo Ohgaki discovered a weakness in the handling of invalidly-encoded multibyte text data...

[SECURITY] [DSA 1172-1] New bind9 packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1172-1 [email protected] http://www.debian.org/security/ Martin Schulze September 9th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1170-1] New fastjar packages fix directory traversal

-------------------------------------------------------------------------- Debian Security Advisory DSA 1170-1 [email protected] http://www.debian.org/security/ Martin Schulze September 6th, 2006 http://www.debian.org/security/faq -...

[Full-disclosure] [SECURITY] [DSA 1165-1] New capi4hylafax packages fix arbitrary command execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1165-1 [email protected] http://www.debian.org/security/ Martin Schulze September 1st, 2006 http://www.debian.org/security/faq -...

DSA-1164 sendmail - programming error

Bulletin has no description...

DSA-1163 gtetrinet - programming error

Bulletin has no description...

[SECURITY] [DSA 1159-1] New Mozilla Thunderbird packages fix several problems

-------------------------------------------------------------------------- Debian Security Advisory DSA 1159-1 [email protected] http://www.debian.org/security/ Martin Schulze August 28th, 2006 http://www.debian.org/security/faq -...

DSA-1157 ruby1.8

Bulletin has no description...

DSA-1154 squirrelmail - variable overwriting

Bulletin has no description...

[SECURITY] [DSA 1153-1] New ClamAV packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1153-1 [email protected] http://www.debian.org/security/ Martin Schulze August 18th, 2006 http://www.debian.org/security/faq -...

DSA-1151-1 heartbeat - out-of-bounds read

Bulletin has no description...

[SECURITY] [DSA 1148-1] New gallery packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1148-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 9th, 2006 http://www.debian.org/security/faq -...

DSA-1145-1 freeradius - several

Bulletin has no description...

DSA-1141-1 gnupg2 - integer overflow

Bulletin has no description...

[SECURITY] [DSA 1139-1] New ruby1.6 packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 1139-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 3rd, 2006 http://www.debian.org/security/faq -...

DSA-1140-1 gnupg - integer overflow

Bulletin has no description...

DSA-1138-1 cfs - integer overflow

Bulletin has no description...

DSA-1135-1 libtunepimp - buffer overflow

Bulletin has no description...

[SECURITY] [DSA 1133-1] New mantis packages fix execution of arbitrary web script code

-------------------------------------------------------------------------- Debian Security Advisory DSA 1133-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 1st, 2006 http://www.debian.org/security/faq -...