908 matches found
[Backports-security-announce] Security update for dovecot
Jaldhar H. Vyas uploaded new packages which fix the following problem: DSA-1892-1 CVE-2009-2632, CVE-2009-3235 Multiple stack-based buffer overflows in the Sieve plugin in Dovecot For the etch-backports distribution the problem has been fixed in version 1.0.15-2.3+lenny1bpo40+1 For the...
[Backports-security-announce] Security update for dovecot
Jaldhar H. Vyas uploaded new packages which fix the following problem: DSA-1892-1 CVE-2009-2632, CVE-2009-3235 Multiple stack-based buffer overflows in the Sieve plugin in Dovecot For the etch-backports distribution the problem has been fixed in version 1.0.15-2.3+lenny1bpo40+1 For the...
[Backports-security-announce] Security update for opemsaml and shibboleth-sp
Russ Allbery uploaded new packages for opensaml and shibboleth-sp which fixed the following security problems: DSA-1896-1 Several vulnerabilities have been discovered in the opensaml and shibboleth-sp packages, as used by Shibboleth 1.x: Chris Ries discovered that decoding a crafted URL leads to ...
[Backports-security-announce] Security update for opemsaml and shibboleth-sp
Russ Allbery uploaded new packages for opensaml and shibboleth-sp which fixed the following security problems: DSA-1896-1 Several vulnerabilities have been discovered in the opensaml and shibboleth-sp packages, as used by Shibboleth 1.x: Chris Ries discovered that decoding a crafted URL leads to ...
SuSE9 Security Update : Epiphany (YOU Patch Number 12326)
The Mozilla Browser received backports for security problems in 1.8.1.14. The following security issues were fixed : - Mozilla security researcher mozbugra4 reported that an XBL binding, when attached to an unloaded document, can be used to violate the same-origin policy and execute arbitrary...
[Backports-security-announce] Security update for silc-client/silc-toolkit
Jérémy Bobbio uploaded new packages for silc-client/silc-toolkit which fixed the following security problems: DSA 1879-1 Several vulnerabilities have been discovered in the software suite for the SILC protocol, a network protocol designed to provide end-to-end security for conferencing services...
[Backports-security-announce] Security update for devscripts
Adam D. Barratt uploaded new packages for devscripts which fixed the following security problem: CVE-2009-2946: When parsing watch files, uscan applied "mangle rules" by evaluating them as Perl code without any sanitisation. This could have lead to the execution of arbitrary code by users or...
[Backports-security-announce] Security update for devscripts
Adam D. Barratt uploaded new packages for devscripts which fixed the following security problem: CVE-2009-2946: When parsing watch files, uscan applied "mangle rules" by evaluating them as Perl code without any sanitisation. This could have lead to the execution of arbitrary code by users or...
[Backports-security-announce] Security update for devscripts
Adam D. Barratt uploaded new packages for devscripts which fixed the following security problem: CVE-2009-2946: When parsing watch files, uscan applied "mangle rules" by evaluating them as Perl code without any sanitisation. This could have lead to the execution of arbitrary code by users or...
[Backports-security-announce] Security update for webauth
Russ Allbery uploaded new packages for webauth which fixed the following security problem: CVE-2009-2945 WebAuth 3.5.5 introduced a new method to probe for browser cookie support in the WebLogin script. Under rare circumstances, a browser may present the test cookie when loading the login form bu...
[Backports-security-announce] Security update for openoffice.org
Rene Engelhard uploaded new packages for openoffice.org which fixed the following security updates: CVE-2009-0200 Dyon Balding of Secunia Research has discovered a vulnerability, which can be exploited by opening a specially crafted Microsoft Word document. When reading a Microsoft Word document,...
[Backports-security-announce] Security update for openoffice.org
Rene Engelhard uploaded new packages for openoffice.org which fixed the following security updates: CVE-2009-0200 Dyon Balding of Secunia Research has discovered a vulnerability, which can be exploited by opening a specially crafted Microsoft Word document. When reading a Microsoft Word document,...
[Backports-security-announce] Security update for devscripts
Adam D. Barratt uploaded new packages for devscripts which fixed the following security problem: CVE-2009-2946: When parsing watch files, uscan applied "mangle rules" by evaluating them as Perl code without any sanitisation. This could have lead to the execution of arbitrary code by users or...
[Backports-security-announce] Security update for devscripts
Adam D. Barratt uploaded new packages for devscripts which fixed the following security problem: CVE-2009-2946: When parsing watch files, uscan applied "mangle rules" by evaluating them as Perl code without any sanitisation. This could have lead to the execution of arbitrary code by users or...
[Backports-security-announce] Security Update for ikiwiki
Alexander Wirt uploaded a new package for ikiwiki which fixes the following security problem: DSA-DSA-1875 Josh Triplett discovered that the blacklist for potentially harmful TeX code of the teximg module of the Ikiwiki wiki compiler was incomplete, resulting in information disclosure. For the...
[Backports-security-announce] Security Update for xml-security-c
Russ Allbery uploaded new packages for xml-security-c which fixed the following security problems: CVE-2009-0217 CERT VU466161 It was discovered that the W3C XML Signature recommendation contains a protocol-level vulnerability related to HMAC output truncation. This update implements the proposed...
[Backports-security-announce] Security update for znc
Patrick Matthäi uploaded new packages for znc which fixed the following security problems: TEMP-0537977-000291, Debian BTS 537977 It was discovered that znc, an IRC proxy, did not properly process certain DCC requests, allowing attackers to upload arbitrary files. For the etch-backports...
[Backports-security-announce] Security Update for egroupware
Jan Wagner uploaded new packages for egroupware which fixed the following security problems: CVE-2009-2265 Multiple directory traversal vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to create executable files in arbitrary directories via directory traversal sequences in the...
[Backports-security-announce] Security Update for pidgin
Gerfried Fuchs uploaded new packages for pidgin which fixed the following security problems: CVE-2009-1373 Buffer overflow in the XMPP SOCKS5 bytestream server in Pidgin formerly Gaim before 2.5.6 allows remote authenticated users to execute arbitrary code via vectors involving an outbound XMPP...