[Backports-security-announce] Security update for openoffice.org

Rene Engelhard uploaded a new package for openoffice.org which fixed the following security problem: CVE-2010-0395 It was discovered that OpenOffice.org, a full-featured office productivity suite that provides a near drop-in replacement for MicrosoftR Office, is not properly handling python macro...

[Backports-security-announce] Security Update for postgresql-8.4

Gerfried Fuchs uploaded new packages for postgresql-8.4 which fixed the following security problems: CVE-2010-1169 PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 does not properly restrict...

xwine 1.0.1 - .exe Local Crash (PoC)

xwine 1.0.1 - .exe Local Crash PoC xwine v1.0.1 .exe file Local Crash PoC Exploit Install: sudo apt-get install xwine Author: JosS mail: sys-projectathotmaildotcom site: http://hack0wn.com/ team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk. Author...

[Backports-security-announce] Security Update for drupal6

Luigi Gangitano uploaded new packages for drupal6 which fixed the following security problems: SA-CORE-2010-001 Multiple vulnerabilities and weaknesses were discovered in Drupal. Installation cross site scripting A user-supplied value is directly output during installation allowing a malicious us...

Debian DSA-1961-1 : bind9 - DNS cache poisoning

Michael Sinatra discovered that the DNS resolver component in BIND does not properly check DNS records contained in additional sections of DNS responses, leading to a cache poisoning vulnerability. This vulnerability is only present in resolvers which have been configured with DNSSEC trust anchor...

[Backports-security-announce] Security Update for dokuwiki

Gerfried Fuchs uploaded new packages for dokuwiki which fixed the following security problems: CVE-2010-0287 It was discovered that an internal variable is not properly sanitized before being used to list directories. This can be exploited to list contents of arbitrary directories. CVE-2010-0288,...

[SECURITY] [DSA-1990-2] New trac-git package fixes regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1990-2 [email protected] http://www.debian.org/security/ Stefan Fritsch February 04, 2010 http://www.debian.org/security/faq -...

[Backports-security-announce] Security update for transmission

Leo Costela and Josselin Mouette uploaded new packages for transmission which fixed the following security problem: CVE-2010-0012 DSA-1967-1 Dan Rosenberg discovered that Transmission, a lightweight client for the Bittorrent filesharing protocol performs insufficient sanitizing of file names...

[Backports-security-announce] Security Update for pdns-recursor

Gerfried Fuchs uploaded new packages for pdns-recursor which fixed the following security problems: CVE-2009-4009 A buffer overflow can be exploited to crash the daemon, or potentially execute arbitrary code. CVE-2009-4010 A cache poisoning vulnerability may allow attackers to trick the server in...

New cups packages fix cross-site scripting

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1933-1 [email protected] http://www.debian.org/security/ Steffen Joeris November 10, 2009...

[Backports-security-announce] Security update for devscripts

Adam D. Barratt uploaded new packages for devscripts which fixed the following security problem: CVE-2009-2946: When parsing watch files, uscan applied "mangle rules" by evaluating them as Perl code without any sanitisation. This could have lead to the execution of arbitrary code by users or...

[SECURITY] [DSA 1842-1] New openexr packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1842-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 28, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1837-1] New dbus packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1837-1 [email protected] http://www.debian.org/security/ Steffen Joeris July 18, 2009 http://www.debian.org/security/faq -...

Code injection

apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repository as valid even when it has been signed with a key that has been revoked or expired, which might allow remote attackers to trick apt into installing malicious repositories...

CVE-2009-1358

apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repository as valid even when it has been signed with a key that has been revoked or expired, which might allow remote attackers to trick apt into installing malicious repositories...

CVE-2009-1358

apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repository as valid even when it has been signed with a key that has been revoked or expired, which might allow remote attackers to trick apt into installing malicious repositories...

CVE-2009-1358

apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repository as valid even when it has been signed with a key that has been revoked or expired, which might allow remote attackers to trick apt into installing malicious repositories...

CVE-2009-1358

apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repository as valid even when it has been signed with a key that has been revoked or expired, which might allow remote attackers to trick apt into installing malicious repositories...

SystemTap模块加载本地竞争条件漏洞

BUGTRAQ ID: 34260 CVECAN ID: CVE-2009-0784 SystemTap是一款Linux内核诊断工具，允许从运行中的Linux内核快速和安全地获取信息。 systemtap在检查和加载某些内核模块时存在竞争条件。漏洞起因是checkpath检查了路径（modulerealpath变量），但之后没有使用该路径打开文件。因此，用户可以要求stap加载当前目录中符号链接到有效内核对象的内核模块，然后迅速用恶意内核对象替换符号链接所指向的对象，导致执行本应受限制的目录之外的内核对象。...

[SECURITY] [DSA 1747-1] New glib2.0 packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1747-1 [email protected] http://www.debian.org/security/ Steffen Joeris March 20, 2009 http://www.debian.org/security/faq -...