[Backports-security-announce] Security update for devscripts

Adam D. Barratt uploaded new packages for devscripts which fixed the following security problem: CVE-2009-2946: When parsing watch files, uscan applied "mangle rules" by evaluating them as Perl code without any sanitisation. This could have lead to the execution of arbitrary code by users or...

[SECURITY] [DSA 1842-1] New openexr packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1842-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 28, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1837-1] New dbus packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1837-1 [email protected] http://www.debian.org/security/ Steffen Joeris July 18, 2009 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 1779-1 (apt)

The remote host is missing an update to apt announced via advisory DSA 1779-1. OpenVAS Vulnerability Test $Id: deb17791.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1779-1 apt Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian: Security Advisory (DSA-1779-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-762-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu USN-762-1 (apt)

The remote host is missing an update to apt announced via advisory USN-762-1. OpenVAS Vulnerability Test $Id: ubuntu7621.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7621.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-762-1 apt Authors: Thomas Reinke...

Debian DSA-1779-1 : apt - several vulnerabilities

Two vulnerabilities have been discovered in APT, the well-known dpkg frontend. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1300 In time zones where daylight savings time occurs at midnight, the apt cron.daily script fails, stopping new security...

[SECURITY] [DSA 1779-1] New apt packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1779-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 26, 2009 http://www.debian.org/security/faq -...

DSA-1779-1 apt - several vulnerabilities

Bulletin has no description...

Debian apt库签名校验漏洞

BUGTRAQ ID: 34630 CNCAN ID：CNCAN-2009042202 Debian apt是一款包管理工具。 Debian apt签名校验存在问题，远程攻击者可以利用漏洞伪造密钥，导致恶意代码在目标用户系统上执行。 解析作废或过期的密钥时，Debian apt进行校验存在问题，攻击者可以通过破坏库服务器或通过中间人攻击构造伪造签名，使恶意的程序在目标用户系统上信任的被执行。 Debian apt 0.7.20 2 Debian apt 0.7.20 1 Debian apt 0.7.20 可升级到Debian apt 0.7.21：...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 : apt vulnerabilities (USN-762-1)

Alexandre Martani discovered that the APT daily cron script did not check the return code of the date command. If a machine is configured for automatic updates and is in a time zone where DST occurs at midnight, under certain circumstances automatic updates might not be applied and could become...

Code injection

apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repository as valid even when it has been signed with a key that has been revoked or expired, which might allow remote attackers to trick apt into installing malicious repositories...

CVE-2009-1358

apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repository as valid even when it has been signed with a key that has been revoked or expired, which might allow remote attackers to trick apt into installing malicious repositories...

CVE-2009-1358

apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repository as valid even when it has been signed with a key that has been revoked or expired, which might allow remote attackers to trick apt into installing malicious repositories...

CVE-2009-1358

apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repository as valid even when it has been signed with a key that has been revoked or expired, which might allow remote attackers to trick apt into installing malicious repositories...

CVE-2009-1358

apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repository as valid even when it has been signed with a key that has been revoked or expired, which might allow remote attackers to trick apt into installing malicious repositories...

CVE-2009-1358

apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repository as valid even when it has been signed with a key that has been revoked or expired, which might allow remote attackers to trick apt into installing malicious repositories...

CVE-2009-1358

CVE-2009-1358 affects the Debian/Red Hat apt client: apt-get before 0.7.21 fails to validate the error code from gpgv, causing an otherwise revoked/expired OpenPGP key to be treated as valid and potentially allow installation of malicious repositories. Affected software is the apt package manager...

[USN-762-1] APT vulnerabilities

=========================================================== Ubuntu Security Notice USN-762-1 April 20, 2009 apt vulnerabilities CVE-2009-1300, https://launchpad.net/bugs/356012 =========================================================== A security issue affects the following Ubuntu releases: Ubun...