GNU C library dynamic linker expands $ORIGIN in setuid library search path

Overview Certain versions of glibc unsafely handle the $ORIGIN ELF substitution sequence which can be exploited to gain local privilege escalation. Description Tavis Ormandy's advisory states:"$ORIGIN is an ELF substitution sequence representing the location of the executable being loaded in the...

Linux kernel RDS protocol vulnerability

Overview The RDS protocol implementation of Linux kernels 2.6.30 through 2.6.38-rc8 contain a local privilege escalation vulnerability. Description Kernel functions fail to properly check if a user supplied address exists in the user segment of memory. By providing a kernel address to a socket ca...

[SECURITY] [DSA-2114-1] New git-core packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-2114-1 [email protected] http://www.debian.org/security/ Stefan Fritsch September 26, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2111-1] New squid3 packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2111-1 [email protected] http://www.debian.org/security/ Steffen Joeris September 19, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2111-1] New squid3 packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-2111-1 [email protected] http://www.debian.org/security/ Steffen Joeris September 19, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2108-1] New cvsnt package fixes arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - ------------------------------------------------------------------------ Debian Security Advisory DSA-2108-1 [email protected] http://www.debian.org/security/ Sebastien Delafond Sep 14, 2010 http://www.debian.org/security/faq - -...

CVE-2010-2953

Technical details about CVE-2010-2953 (affected products, root cause, and fixes) are not publicly provided in the supplied documents; monitor for updates from vendors and security advisories.

[SECURITY] [DSA 2108-1] New cvsnt package fixes arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-2108-1 [email protected] http://www.debian.org/security/ Sébastien Delafond Sep 14, 2010 http://www.debian.org/security/faq - -...

[SECURITY] [DSA 2097-2] New phpmyadmin packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2097-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst September 11, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA-2104-1] New quagga packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2104-1 [email protected] http://www.debian.org/security/ Florian Weimer September 06, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2099-1] New OpenOffice.org packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 2099-1 [email protected] http://www.debian.org/security/ Martin Schulze August, 30th, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1919-2] New smarty packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1919-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst August 17, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2081-1] New libmikmod packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2081-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 01, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2078-1] New kvirc packages fix arbitrary IRC command execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2078-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 31, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2087-1] New cabextract packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2087-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 04, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2084-1] New tiff packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-2084-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 03, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2081-1] New libmikmod packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-2081-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 01, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2080-1] New ghostscript packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2080-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 01, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2070-1] New freetype packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2070-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 14, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA-2069-1] New znc packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2069-1 [email protected] http://www.debian.org/security/ Raphael Geissert Jul 11, 2010 http://www.debian.org/security/faq -...