[SECURITY] [DSA 627-1] New namazu2 packages fix cross-site scripting vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 627-1 [email protected] http://www.debian.org/security/ Martin Schulze January 6th, 2005 http://www.debian.org/security/faq -...

Debian DSA-626-1 : tiff - unsanitised input

Dmitry V. Levin discovered a buffer overflow in libtiff, the Tag Image File Format library for processing TIFF graphics files. Upon reading a TIFF file it is possible to crash the application, and maybe also to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Debian DSA-625-1 : pcal - buffer overflows

Danny Lungstrom discovered two buffer overflows in pcal, a program to generate Postscript calendars, that could lead to the execution of arbitrary code when compiling a calendar. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

[SECURITY] [DSA 624-1] New zip packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 624-1 [email protected] http://www.debian.org/security/ Martin Schulze January 5th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 622-1] New htmlheadline package fixes insecure temporary files

-------------------------------------------------------------------------- Debian Security Advisory DSA 622-1 [email protected] http://www.debian.org/security/ Martin Schulze January 3rd, 2005 http://www.debian.org/security/faq -...

DSA-622-1 htmlheadline - insecure temporary files

Bulletin has no description...

Debian DSA-622-1 : htmlheadline - insecure temporary files

Javier Fernandez-Sanguino Pena from the Debian Security Audit Project has discovered multiple insecure uses of temporary files that could lead to overwriting arbitrary files via a symlink attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

[SECURITY] [DSA 621-1] New CUPS packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 621-1 [email protected] http://www.debian.org/security/ Martin Schulze December 31st, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 620-1] New perl packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 620-1 [email protected] http://www.debian.org/security/ Martin Schulze December 30th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 618-1] New imlib packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 618-1 [email protected] http://www.debian.org/security/ Martin Schulze December 24th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 618-1] New imlib packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 618-1 [email protected] http://www.debian.org/security/ Martin Schulze December 24th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 617-1] New libtiff packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 617-1 [email protected] http://www.debian.org/security/ Martin Schulze December 24th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 615-1] New debmake package fixes insecure temporary directories

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 615-1 [email protected] http://www.debian.org/security/ Martin Schulze December 22nd, 2004 http://www.debian.org/security/faq -...

Debian DSA-615-1 : debmake - insecure temporary files

Javier Fernandez-Sanguino Pena from the Debian Security Audit Project noticed that the debstd script from debmake, a deprecated helper package for Debian packaging, created temporary directories in an insecure manner. This can be exploited by a malicious user to overwrite arbitrary files owned by...

[SECURITY] [DSA 614-1] New xzgv packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 614-1 [email protected] http://www.debian.org/security/ Martin Schulze December 21st, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 612-1] New a2ps packages fix arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 612-1 [email protected] http://www.debian.org/security/ Martin Schulze December 20th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 611-1] New htget packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 611-1 [email protected] http://www.debian.org/security/ Martin Schulze December 20th, 2004 http://www.debian.org/security/faq -...

Debian DSA-611-1 : htget - buffer overflow

'infamous41md' discovered a buffer overflow in htget, a file grabber that will get files from HTTP servers. It is possible to overflow a buffer and execute arbitrary code by accessing a malicious URL. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

Debian DSA-612-1 : a2ps - unsanitised input

Rudolf Polzer discovered a vulnerability in a2ps, a converter and pretty-printer for many formats to PostScript. The program did not escape shell meta characters properly which could lead to the execution of arbitrary commands as a privileged user if a2ps is installed as a printer filter...

[SECURITY] [DSA 610-1] New cscope packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 610-1 [email protected] http://www.debian.org/security/ Martin Schulze December 17th, 2004 http://www.debian.org/security/faq -...