[SECURITY] [DSA 045-1] ntp remote root exploit fixed

---------------------------------------------------------------------------- Debian Security Advisory DSA-045-1 [email protected] http://www.debian.org/security/ Michael Stone April 5, 2001 - ---------------------------------------------------------------------------- Package: ntp...

[SECURITY] [DSA 037-1] New versions of Athena Widget replacement libraries available

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------------- Debian Security Advisory DSA-037-1 [email protected] http://www.debian.org/security/ Martin Schulze March 7, 2001 -...

[SECURITY] [DSA 042-1] New XEmacs and gnuserv packages available

---------------------------------------------------------------------------- Debian Security Advisory DSA-042-1 [email protected] http://www.debian.org/security/ Martin Schulze March 8, 2001 - ---------------------------------------------------------------------------- Packages : gnuserv,...

[SECURITY] [DSA 038-1] New version of sgml-tools available

---------------------------------------------------------------------------- Debian Security Advisory DSA-038-1 [email protected] http://www.debian.org/security/ Martin Schulze March 8, 2001 - ---------------------------------------------------------------------------- Package : sgml-tools...

[SECURITY] [DSA 036-1] New version of Midnight Commander available

---------------------------------------------------------------------------- Debian Security Advisory DSA-036-1 [email protected] http://www.debian.org/security/ Martin Schulze March 7, 2001 - ---------------------------------------------------------------------------- Package : mc...

[SECURITY] [DSA 033-1] New versions of analog available

---------------------------------------------------------------------------- Debian Security Advisory DSA-033-1 [email protected] http://www.debian.org/security/ Martin Schulze March 7, 2001 - ---------------------------------------------------------------------------- Package : analog...

[SECURITY] [DSA 026-1] New version of BIND 8 released

---------------------------------------------------------------------------- Debian Security Advisory DSA-026-1 [email protected] http://www.debian.org/security/ Martin Schulze January 29, 2001 - ---------------------------------------------------------------------------- Package : bind...

[SECURITY] [DSA 025-2] New sparc packages of OpenSSH released

---------------------------------------------------------------------------- Debian Security Advisory DSA-025-2 [email protected] http://www.debian.org/security/ Martin Schulze January 28, 2001 - ---------------------------------------------------------------------------- Package : openssh...

[SECURITY] [DSA 025-1] New sparc packages of OpenSSH released

---------------------------------------------------------------------------- Debian Security Advisory DSA-025-1 [email protected] http://www.debian.org/security/ Martin Schulze January 28, 2001 - ---------------------------------------------------------------------------- Package : openssh...

[SECURITY] [DSA 024-1] New version of cron released

---------------------------------------------------------------------------- Debian Security Advisory DSA-024-1 [email protected] http://www.debian.org/security/ Martin Schulze January 27, 2001 - ---------------------------------------------------------------------------- Package : cron...

[SECURITY] [DSA-016-3] Correction: New version of wu-ftpd released

---------------------------------------------------------------------------- Debian Security Advisory DSA-016-3 [email protected] http://www.debian.org/security/ Martin Schulze January 24, 2001 - ---------------------------------------------------------------------------- Package : wu-ftpd...

Дырка в sash в Debian

При копировании /etc/shadow создаются файлы открытые на чтение...

[SECURITY] [DSA-015-1] New version of sash released

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------------- Debian Security Advisory DSA-015-1 [email protected] http://www.debian.org/security/ Martin Schulze January 23, 2001 -...

[SECURITY] [DSA-012-1] New version of micq released

---------------------------------------------------------------------------- Debian Security Advisory DSA-012-1 [email protected] http://www.debian.org/security/ Martin Schulze January 22, 2001 - ---------------------------------------------------------------------------- Package : micq...

[SECURITY] [DSA-009-1] multiple stunnel vulnerabilities

Package : stunnel Problem type : insecure file handling, format string bug Debian-specific: no Lez discovered a format string problem in stunnel a tool to create Universal SSL tunnel for other network daemons. Brian Hatch responded by stating he was already preparing a new release with multiple...

[SECURITY] [DSA-005-1] slocate local exploit

Package : slocate Problem type : local exploit Debian-specific: no Michel Kaempf reported a security problem in slocate a secure version of locate, a tool to quickly locate files on a filesystem on bugtraq which was originally discovered by zorgon. He discovered there was a bug in the database...

[SECURITY] [DSA-004-1] nano symlink attack

Package : nano Problem type : symlink attack Debian-specific: no The problem that was previously reported for joe also occurs with other editors. When nano a free pico clone unexpectedly dies it tries a warning message to a new file with a predictable name the name of the file being edited with...

[SECURITY] [DSA-001-1] ed symlink attack

-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------------ Debian Security Advisory 001-1 [email protected] http://www.debian.org/security/ Wichert Akkerman November 29, 2000 -...

[SECURITY] No koules vulnerability

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Martin Schulze November 22, 2000 - ------------------------------------------------------------------------ Package : koules Problem type : local...

[SECURITY] New version of joe released

Package : joe Problem type : symlink attack Debian-specific: no When joe Joes Own Editor dies due to a signal instead of a normal exit it saves a list of the files it is editing to a file called DEADJOE in its current directory. Unfortunately this wasnt done safely which made joe vulnerable to a...