[SECURITY] [DSA 1384-1] New xen-utils packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA 1384-1 [email protected] http://www.debian.org/security/ Steve Kemp October 5th, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1383-1] New gforge packages fix cross-site scripting

-------------------------------------------------------------------------- Debian Security Advisory DSA 1383-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst October 4th, 2007 http://www.debian.org/security/faq -...

Default configuration

The default configuration for twiki 4.1.2 on Debian GNU/Linux, and possibly other operating systems, specifies the work area directory cfgRCSWorkAreaDir under the web document root, which might allow remote attackers to obtain sensitive information when .htaccess restrictions are not applied...

CVE-2007-5193

The default configuration for twiki 4.1.2 on Debian GNU/Linux, and possibly other operating systems, specifies the work area directory cfgRCSWorkAreaDir under the web document root, which might allow remote attackers to obtain sensitive information when .htaccess restrictions are not applied...

CVE-2007-5193

The default configuration for twiki 4.1.2 on Debian GNU/Linux, and possibly other operating systems, specifies the work area directory cfgRCSWorkAreaDir under the web document root, which might allow remote attackers to obtain sensitive information when .htaccess restrictions are not applied...

CVE-2007-5193

The default configuration for twiki 4.1.2 on Debian GNU/Linux, and possibly other operating systems, specifies the work area directory cfgRCSWorkAreaDir under the web document root, which might allow remote attackers to obtain sensitive information when .htaccess restrictions are not applied...

[SECURITY] [DSA 1381-1] New Linux 2.6.18 packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1381-1 [email protected] http://www.debian.org/security/ Dann Frazier October 2nd, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1381-1] New Linux 2.6.18 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1381-1 [email protected] http://www.debian.org/security/ Dann Frazier October 2nd, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1365-3] New id3lib3.8.3 packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1365-3 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff, Dann Frazier October 2nd, 2007 http://www.debian.org/security/faq - -...

[SECURITY] [DSA 1377-2] New fetchmail packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1377-2 [email protected] http://www.debian.org/security/ Steve Kemp September 21, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1377-1] New fetchmail packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1377 [email protected] http://www.debian.org/security/ Steve Kemp September 21, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1372-1] New xorg-server packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 1372-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 9th, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1367-1] New krb5 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1367-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 4th, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1361-1] New postfix-policyd packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1361 [email protected] http://www.debian.org/security/ Steve Kemp August 29th, 2007 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

CVE-2007-2797

The CVE-2007-2797 issue affects xterm: Red Hat Enterprise Linux 4 (and derivatives such as CentOS 4) packages built with a bug that caused pseudo-terminal device files to be owned by the wrong group, enabling local users to write data to other users’ terminals. Public advisories (RHSA-2007:0701, ...

[SECURITY] [DSA 1358-1] New asterisk packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1358-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 26th, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1349-1] New libextractor packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1349-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 5th, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1345-1] New xulrunner packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1345-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 4th, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1342-1] New xfs packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 1342-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 30th, 2007 http://www.debian.org/security/faq -...

ISC BIND does not correctly set default access controls

Overview ISC Internet Systems Consortiuim BIND fails to properly set default access control lists. This may allow unauthorized users to make recursive querries and querry the cache. Description From the ISC BIND security page:The default access control lists acls are not being correctly set. If n...