[SECURITY] [DSA 114-1] New GNUJSP packages fix directory and script source disclosure

-------------------------------------------------------------------------- Debian Security Advisory DSA 114-1 [email protected] http://www.debian.org/security/ Martin Schulze February 21th, 2002 - -------------------------------------------------------------------------- Package : gnujsp...

[SECURITY] [DSA 109-1] New Faq-O-Matic packages fix cross-site scripting vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 109-1 [email protected] http://www.debian.org/security/ Martin Schulze February 13th, 2002 - -------------------------------------------------------------------------- Package : faqomatic...

[SECURITY] [DSA 107-1] New jgroff packages fix printf format problem

-------------------------------------------------------------------------- Debian Security Advisory DSA 107-1 [email protected] http://www.debian.org/security/ Martin Schulze January 30th, 2002 - -------------------------------------------------------------------------- Package : jgroff...

[SECURITY] [DSA-089-2] updated i386 icecast-server package

Package : icecast-server Problem type : remote exploit and others Debian-specific: no In Debian Security Advisory DSA-089-1 we reported that icecast-server has several security problems. For details please see that advisory. The i386 package mention in the DSA-089-1 advisory was incorrectly...

[SECURITY] [DSA-105-1] enscript creates temporary files insecurely

Package : enscript Problem type : insecure temporary files Debian-specific: no The version of enscript a tool to convert ASCII text to different formats has been found to create temporary files insecurely. This has been fixed in version 1.6.2-4.1 . wget url will fetch the file for you dpkg -i...

[SECURITY] [DSA-103-1] glibc buffer overflow

Package : glibc Problem type : buffer overflow Debian-specific: no A buffer overflow has been found in the globbing code for glibc. This code which is used to glob patterns for filenames and is commonly used in applications like shells and FTP servers. This has been fixed in versino 2.1.3-20 and ...

[SECURITY] [DSA-091-1] OpenSSH UseLogin vulnerability

Package : ssh Problem type : influencing login Debian-specific: no If the UseLogin feature is enabled in for ssh local users could pass environment variables including variables like LDPRELOAD to the login process. This has been fixed by not copying the environment of UseLogin is enabled. Please...

[SECURITY] [DSA 086-1] New versions of ssh-nonfree & ssh-socks fix buffer overflow

Package: ssh-nonfree, ssh-socks Vulnerability: remote root exploit Debian-specific: no We have received reports that the "SSH CRC-32 compensation attack detector vulnerability" is being actively exploited. This is the same integer type error previously corrected for OpenSSH in DSA-027-1. OpenSSH...

[SECURITY] [DSA 084-1] New gftp packages won't display the password

-------------------------------------------------------------------------- Debian Security Advisory DSA 084-1 [email protected] http://www.debian.org/security/ Martin Schulze October 18th, 2001 - -------------------------------------------------------------------------- Package : gftp...

[SECURITY] [DSA 081-2] No w3m packages for powerpc available

-------------------------------------------------------------------------- Debian Security Advisory DSA 081-2 [email protected] http://www.debian.org/security/ Martin Schulze October 18th, 2001 - -------------------------------------------------------------------------- Packages : w3m, w3m-ssl...

[SECURITY] [DSA 079-1] New UUCP packages fix local exploit

---------------------------------------------------------------------------- Debian Security Advisory DSA 079-1 [email protected] http://www.debian.org/security/ Martin Schulze September 24, 2001 - ---------------------------------------------------------------------------- Package : uucp...

[SECURITY] [DSA-061-1] multiple gnupg problems

Package : gnupg Problem type : printf format attack web of trust pollution Debian-specific: no The version of GnuPG GNU Privacy Guard, an OpenPGP implementation as distributed in Debian GNU/Linux 2.2 suffers from two problems: fish stiqz reported on bugtraq that there was a printf format problem ...

[SECURITY] [DSA-060-1] fetchmail buffer overflow

Package : fetchmail Problem type : buffer overflow Debian-specific: no Wolfram Kleff found a problem in fetchmail: it would crash when processing emails with extremely long headers. The problem was a buffer overflow in the header parser which could be exploited. This has been fixed in version...

[SECURITY] [DSA-059-1] man-db symlink attack

Package : man-db Problem type : symlink attack Debian-specific: no Luki R. reported a bug in man-db: it did handle nested calls of dropeffectiveprivs and regaineffectiveprivs correctly which would cause it to regain privileges to early. This could be abused to make man create files as user man...

[SECURITY] [DSA 052-1] New sendfile packages fix root exploit

---------------------------------------------------------------------------- Debian Security Advisory DSA 052-1 [email protected] http://www.debian.org/security/ Martin Schulze April 23, 2001 - ---------------------------------------------------------------------------- Package : sendfile...

[SECURITY] [DSA 050-1] New version sendfile fix local root exploit

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------------- Debian Security Advisory DSA 050-1 [email protected] http://www.debian.org/security/ Martin Schulze April 20, 2001 -...

[SECURITY] [DSA-046-2] exuberant-ctags for sparc was incorrectly built

Package : exuberant-ctags Problem type : recompile of sparc package Debian-specific: yes The updated exuberant-ctags that was mentioned in DSA-046-1 was unfortunately compiled incorrectly: the stable chroot we used turned out to be running unstable instead. A new package with version 1:3.2.4-0.1....

[SECURITY] [DSA-048-2] samba for sparc was incorrectly built

Package : samba Problem type : recompile of sparc packages Debian-specific: yes The updated samba packages that were mentioned in DSA-048-1 were unfortunately compiled incorrectly: the stable chroot we used turned out to be running unstable instead. A new package with version 2.0.7-3.2.1 have bee...

[SECURITY] [DSA 045-1] ntp remote root exploit fixed

---------------------------------------------------------------------------- Debian Security Advisory DSA-045-1 [email protected] http://www.debian.org/security/ Michael Stone April 5, 2001 - ---------------------------------------------------------------------------- Package: ntp...

[SECURITY] [DSA 037-1] New versions of Athena Widget replacement libraries available

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------------- Debian Security Advisory DSA-037-1 [email protected] http://www.debian.org/security/ Martin Schulze March 7, 2001 -...