[Backports-security-announce] Security Update for xml-security-c

Russ Allbery uploaded new packages for xml-security-c which fixed the following security problems: CVE-2009-0217 CERT VU466161 It was discovered that the W3C XML Signature recommendation contains a protocol-level vulnerability related to HMAC output truncation. This update implements the proposed...

[Backports-security-announce] Security update for znc

Patrick Matthäi uploaded new packages for znc which fixed the following security problems: TEMP-0537977-000291, Debian BTS 537977 It was discovered that znc, an IRC proxy, did not properly process certain DCC requests, allowing attackers to upload arbitrary files. For the etch-backports...

[SECURITY] [DSA 1848-1] New znc packages fix remote code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1848-1 [email protected] http://www.debian.org/security/ Florian Weimer August 02, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1846-1] New kvm packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1846-1 [email protected] http://www.debian.org/security/ Dann Frazier July 28, 2009 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

Debian: Security Advisory (DSA-1840-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1842-1] New openexr packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1842-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 28, 2009 http://www.debian.org/security/faq -...

DSA-1843-1 squid3 - denial of service

Bulletin has no description...

DSA-1846-1 kvm - denial of service

Bulletin has no description...

[Backports-security-announce] Security Update for git-core

Sebastian Harl uploaded new packages for git-core which fixed the following security problems: DSA 1777-1, Debian bug 516669 Peter Palfrader discovered that on some architectures files under /usr/share/git-core/templates/ were owned by a non-root user. This allows a user with that uid on the loca...

[Backports-security-announce] Security Update for clamav

Sebastian Harl uploaded new packages for clamav which fixed the following security problems: CVE-2008-6680, DSA-1771-1, Debian bug 523016 Attackers can cause a denial of service crash via a crafted EXE file that triggers a divide-by-zero error. CVE-2009-1270, DSA-1771-1, Debian bug 523016 Attacke...

[SECURITY] [DSA 1837-1] New dbus packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1837-1 [email protected] http://www.debian.org/security/ Steffen Joeris July 18, 2009 http://www.debian.org/security/faq -...

Unfixed XSS vulnerability at www.lespetitsruisseaux.com

Security researcher Mystick, has submitted on 17/07/2009 a cross-site-scripting XSS vulnerability affecting www.lespetitsruisseaux.com, which at the time of submission ranked 10621239 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/06/2010. ...

[SECURITY] [DSA 1827-1] New ipplan packages fix cross-site scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1827-1 [email protected] http://www.debian.org/security/ Steffen Joeris July 06, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1826-1] New eggdrop packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1826-1 [email protected] http://www.debian.org/security/ Steffen Joeris July 04, 2009 http://www.debian.org/security/faq -...

CVE-2009-2286

Buffer overflow in compface 1.5.2 and earlier allows user-assisted attackers to cause a denial of service crash via a long declaration in a .xbm file. NOTE: this issue only affects compface on distributions that used a certain patch...

[SECURITY] [DSA 1824-1] New phpmyadmin packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1824-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst June 25, 2009 http://www.debian.org/security/faq -...

DSA-1823-1 samba - several vulnerabilities

Bulletin has no description...

Debian Security Advisory DSA 1816-1 (apache2)

The remote host is missing an update to apache2 announced via advisory DSA 1816-1. OpenVAS Vulnerability Test $Id: deb18161.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1816-1 apache2 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian DSA-1818-1 : gforge - insufficient input sanitising

Laurent Almeras and Guillaume Smet have discovered a possible SQL injection vulnerability and cross-site scripting vulnerabilities in gforge, a collaborative development tool. Due to insufficient input sanitising, it was possible to inject arbitrary SQL statements and use several parameters to...

[SECURITY] [DSA 1815-1] New libtorrent-rasterbar packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1815-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 14, 2009 http://www.debian.org/security/faq -...