[Backports-security-announce] Security update for openoffice.org

Rene Engelhard uploaded a new package for openoffice.org which fixed the following security problem: CVE-2010-0395 It was discovered that OpenOffice.org, a full-featured office productivity suite that provides a near drop-in replacement for MicrosoftR Office, is not properly handling python macro...

CentOS 5 : krb5 (CESA-2010:0343)

Updated krb5 packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

[Backports-security-announce] Security Update for postgresql-8.4

Gerfried Fuchs uploaded new packages for postgresql-8.4 which fixed the following security problems: CVE-2010-1169 PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 does not properly restrict...

[Backports-security-announce] Security Update for postgresql-8.4

Gerfried Fuchs uploaded new packages for postgresql-8.4 which fixed the following security problems: CVE-2010-1169 PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2 does not properly restrict...

DSA-2050-1 kdegraphics - several vulnerabilities

Bulletin has no description...

NetBSD 5.0 - Hack GENOCIDE Environment Overflow (PoC)

NetBSD 5.0 - Hack GENOCIDE Environment Overflow PoC !/bin/sh NetBSD 5.0 and below Hack GENOCIDE Environment overflow proof of concept Successfull Exploitation gives guid 100 games Vulnerable Function is in hack.main.c. /usr/games/hack -D use the wizard mode. Only work in wizard mode. It is a basi...

DSA-2047-1 aria2 - directory traversal

Bulletin has no description...

[SECURITY] [DSA 2043-1] New vlc packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-2043-1 [email protected] http://www.debian.org/security/ Devin Carraway May 11, 2010 http://www.debian.org/security/faq -...

Facebook Now Installing Undesired Adware

Already under fire for taking liberties with users’ privacy, Facebook was outted on Thursday as a distributor of unwanted applications, some of which install adware or are added to user profiles without permission. Read the full article. The Register...

New Study Shows Nearly No Difference in Security of Web Frameworks

A new study by a Web security firm has found that despite the myriad differences in the common programming languages and frameworks deployed on the Web today, there is virtually no difference in their practical security and resistance to attack. The study, done by WhiteHat Security and based on...

DSA-2040-1 squidguard - several vulnerabilities

Bulletin has no description...

[SECURITY] [DSA 2021-2] New spamass-milter packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-2021-2 [email protected] http://www.debian.org/security/ Giuseppe Iuculano April 26, 2010 http://www.debian.org/security/faq -...

DEBIAN-CVE-2010-1320

Double free vulnerability in dotgsreq.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.7.x and 1.8.x before 1.8.2 allows remote authenticated users to cause a denial of service daemon crash or possibly execute arbitrary code via a request associated with 1 renewal or 2 validation...

Double free

Double free vulnerability in dotgsreq.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.7.x and 1.8.x before 1.8.2 allows remote authenticated users to cause a denial of service daemon crash or possibly execute arbitrary code via a request associated with 1 renewal or 2 validation...

CVE-2010-1320

Double free vulnerability in dotgsreq.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.7.x and 1.8.x before 1.8.2 allows remote authenticated users to cause a denial of service daemon crash or possibly execute arbitrary code via a request associated with 1 renewal or 2 validation...

DSA-2038-1 pidgin - denial of service

Bulletin has no description...

DSA-2037-1 kdebase - privilege escalation

Bulletin has no description...

DSA-2035-1 apache2 - several issues

Bulletin has no description...

[SECURITY] [DSA 2032-1] New libpng packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2032-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano April 11, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2031-1] New krb5 packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-2031-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano April 11, 2010 http://www.debian.org/security/faq -...