Important: Red Hat Security Advisory: : An updated LHA package fixes security vulnerabilities

An updated LHA package that fixes several security vulnerabilities is now available. LHA is an archiving and compression utility for LHarc format archives. Ulf Harnhammar discovered two stack buffer overflows and two directory traversal flaws in LHA. An attacker could exploit the buffer overflows...

[SECURITY] [DSA 496-1] New eterm packages fix indirect arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 496-1 [email protected] http://www.debian.org/security/ Martin Schulze April 29th, 2004 http://www.debian.org/security/faq -...

DSA-492 iproute - denial of service

Bulletin has no description...

[SECURITY] [DSA 491-1] New Linux 2.4.19 packages fix local root exploit (mips)

-------------------------------------------------------------------------- Debian Security Advisory DSA 491-1 [email protected] http://www.debian.org/security/ Martin Schulze April 17th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 488-1] New logcheck packages fix insecure temporary directory

-------------------------------------------------------------------------- Debian Security Advisory DSA 488-1 [email protected] http://www.debian.org/security/ Matt Zimmerman April 16th, 2004 http://www.debian.org/security/faq -...

[Full-Disclosure] [SECURITY] [DSA 488-1] New logcheck packages fix insecure temporary directory

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 488-1 [email protected] http://www.debian.org/security/ Matt Zimmerman April 16th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 485-1] New ssmtp packages fix format string vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 485-1 [email protected] http://www.debian.org/security/ Matt Zimmerman April 14th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 484-1] New xonix packages fix failure to drop privileges

-------------------------------------------------------------------------- Debian Security Advisory DSA 484-1 [email protected] http://www.debian.org/security/ Matt Zimmerman April 14th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 479-2] New Linux 2.4.18 packages fix local root exploit (i386)

-------------------------------------------------------------------------- Debian Security Advisory DSA 479-2 [email protected] http://www.debian.org/security/ Martin Schulze April 14th, 2004 http://www.debian.org/security/faq -...

Important: Red Hat Security Advisory: : Updated cadaver package fixes security vulnerability in neon

An updated cadaver package that fixes a vulnerability in neon exploitable by a malicious DAV server is now available. cadaver is a command-line WebDAV client that uses inbuilt code from neon, an HTTP and WebDAV client library. Versions of the neon client library up to and including 0.24.4 have be...

[Full-Disclosure] [RHSA-2004:158-01] Updated cadaver package fixes security vulnerability in neon

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Updated cadaver package fixes security vulnerability in neon Advisory ID: RHSA-2004:158-01 Issue date: 2004-04-14 Updated on: 2004-04-14 Produc...

[SECURITY] [DSA 460-2] New sysstat packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 460-2 [email protected] http://www.debian.org/security/ Matt Zimmerman April 3rd, 2004 http://www.debian.org/security/faq -...

Low: Red Hat Security Advisory: : Updated squid package fixes security vulnerability

An updated squid package is avaliable that fixes a security vulnerability in URL decoding and provides a new ACL type for protecting vulnerable clients. Squid is a full-featured Web proxy cache. A bug was found in the processing of %-encoded characters in a URL in versions of Squid 2.5.STABLE4 an...

[SECURITY] [DSA 462-1] New xitalk packages fix local group utmp exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 462-1 [email protected] http://www.debian.org/security/ Martin Schulze March 12th, 2004 http://www.debian.org/security/faq -...

DSA-463 samba - privilege escalation

Bulletin has no description...

[SECURITY] [DSA 459-1] New kdelibs, kdelibs-crypto packages fix cookie traversal bug

-------------------------------------------------------------------------- Debian Security Advisory DSA 459-1 [email protected] http://www.debian.org/security/ Matt Zimmerman March 10th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 452-1] New libapache-mod-python packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 452-1 [email protected] http://www.debian.org/security/ Matt Zimmerman February 29th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 451-1] New xboing packages fix buffer overflows

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 451-1 [email protected] http://www.debian.org/security/ Matt Zimmerman February 27th, 2004 http://www.debian.org/security/faq -...

Moderate: Red Hat Security Advisory: : Updated PWLib packages fix protocol security issues

Updated PWLib packages that contain fixes for security issues found during protocol testing by the NISCC are now available. PWLib is a cross-platform class library designed to support the OpenH323 project. OpenH323 provides an implementation of the ITU H.323 teleconferencing protocol, used by...

Important: Red Hat Security Advisory: : Updated XFree86 packages fix privilege escalation vulnerability

Updated XFree86 packages that fix a privilege escalation vulnerability are now available. XFree86 is an implementation of the X Window System, providing the core graphical user interface and video drivers. iDefense discovered two buffer overflows in the parsing of the 'font.alias' file. A local...