3863 matches found
Debian DSA-956-1 : lsh-server - filedescriptor leak
Stefan Pfetzing discovered that lshd, a Secure Shell v2 SSH2 protocol server, leaks a couple of file descriptors, related to the randomness generator, to user shells which are started by lshd. A local attacker can truncate the server's seed file, which may prevent the server from starting, and wi...
Debian DSA-1090-1 : spamassassin - programming error
A vulnerability has been discovered in SpamAssassin, a Perl-based spam filter using text analysis, that can allow remote attackers to execute arbitrary commands. This problem only affects systems where spamd is reachable via the internet and used with vpopmail virtual users, via the '-v' /...
Debian DSA-890-1 : libungif4 - several vulnerabilities
Chris Evans discovered several security related problems in libungif4, a shared library for GIF images. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CVE-2005-2974 NULL pointer dereference, that could cause a denial of service. - CVE-2005-3350 Out o...
Debian DSA-1155-2 : sendmail - programming error
It turned out that the sendmail binary depends on libsasl2 = 2.1.19.dfsg1 which is neither available in the stable nor in the security archive. This version is scheduled for the inclusion in the next update of the stable release, though. You'll have to download the referenced file for your...
[SECURITY] [DSA 1172-1] New bind9 packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 1172-1 [email protected] http://www.debian.org/security/ Martin Schulze September 9th, 2006 http://www.debian.org/security/faq -...
[Full-disclosure] [SECURITY] [DSA 1165-1] New capi4hylafax packages fix arbitrary command execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1165-1 [email protected] http://www.debian.org/security/ Martin Schulze September 1st, 2006 http://www.debian.org/security/faq -...
DSA-1164 sendmail - programming error
Bulletin has no description...
[Full-disclosure] [SECURITY] [DSA 1163-1] New gtetrinet packages fix arbitrary code execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1163-1 [email protected] http://www.debian.org/security/ Martin Schulze August 30th, 2006 http://www.debian.org/security/faq -...
DSA-1163 gtetrinet - programming error
Bulletin has no description...
[SECURITY] [DSA 1159-1] New Mozilla Thunderbird packages fix several problems
-------------------------------------------------------------------------- Debian Security Advisory DSA 1159-1 [email protected] http://www.debian.org/security/ Martin Schulze August 28th, 2006 http://www.debian.org/security/faq -...
DSA-1157 ruby1.8
Bulletin has no description...
[SECURITY] [DSA 1155-2] New sendmail packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 1155-2 [email protected] http://www.debian.org/security/ Martin Schulze August 24th, 2006 http://www.debian.org/security/faq -...
DSA-1154 squirrelmail - variable overwriting
Bulletin has no description...
[SECURITY] [DSA 1153-1] New ClamAV packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1153-1 [email protected] http://www.debian.org/security/ Martin Schulze August 18th, 2006 http://www.debian.org/security/faq -...
DSA-1151-1 heartbeat - out-of-bounds read
Bulletin has no description...
[SECURITY] [DSA 1148-1] New gallery packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1148-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 9th, 2006 http://www.debian.org/security/faq -...
DSA-1145-1 freeradius - several
Bulletin has no description...
DSA-1141-1 gnupg2 - integer overflow
Bulletin has no description...