[Backports-security-announce] Security Update for git-core

Sebastian Harl uploaded new packages for git-core which fixed the following security problems: DSA 1777-1, Debian bug 516669 Peter Palfrader discovered that on some architectures files under /usr/share/git-core/templates/ were owned by a non-root user. This allows a user with that uid on the loca...

[Backports-security-announce] Security Update for clamav

Sebastian Harl uploaded new packages for clamav which fixed the following security problems: CVE-2008-6680, DSA-1771-1, Debian bug 523016 Attackers can cause a denial of service crash via a crafted EXE file that triggers a divide-by-zero error. CVE-2009-1270, DSA-1771-1, Debian bug 523016 Attacke...

[SECURITY] [DSA 1837-1] New dbus packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1837-1 [email protected] http://www.debian.org/security/ Steffen Joeris July 18, 2009 http://www.debian.org/security/faq -...

Unfixed XSS vulnerability at www.lespetitsruisseaux.com

Security researcher Mystick, has submitted on 17/07/2009 a cross-site-scripting XSS vulnerability affecting www.lespetitsruisseaux.com, which at the time of submission ranked 10621239 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/06/2010. ...

[SECURITY] [DSA 1827-1] New ipplan packages fix cross-site scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1827-1 [email protected] http://www.debian.org/security/ Steffen Joeris July 06, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1826-1] New eggdrop packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1826-1 [email protected] http://www.debian.org/security/ Steffen Joeris July 04, 2009 http://www.debian.org/security/faq -...

CVE-2009-2286

Buffer overflow in compface 1.5.2 and earlier allows user-assisted attackers to cause a denial of service crash via a long declaration in a .xbm file. NOTE: this issue only affects compface on distributions that used a certain patch...

[SECURITY] [DSA 1824-1] New phpmyadmin packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1824-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst June 25, 2009 http://www.debian.org/security/faq -...

DSA-1823-1 samba - several vulnerabilities

Bulletin has no description...

Debian Security Advisory DSA 1816-1 (apache2)

The remote host is missing an update to apache2 announced via advisory DSA 1816-1. OpenVAS Vulnerability Test $Id: deb18161.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1816-1 apache2 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian DSA-1818-1 : gforge - insufficient input sanitising

Laurent Almeras and Guillaume Smet have discovered a possible SQL injection vulnerability and cross-site scripting vulnerabilities in gforge, a collaborative development tool. Due to insufficient input sanitising, it was possible to inject arbitrary SQL statements and use several parameters to...

[SECURITY] [DSA 1815-1] New libtorrent-rasterbar packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1815-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 14, 2009 http://www.debian.org/security/faq -...

DSA-1815-1 libtorrent-rasterbar - denial of service

Bulletin has no description...

[SECURITY] [DSA 1813-1] New evolution-data-server packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1813-1 [email protected] http://www.debian.org/security/ Steffen Joeris June 08, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1806-1] New cscope packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1806-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 24, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1803-1] New nsd packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1803-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 20, 2009 http://www.debian.org/security/faq -...

[SECURITY] Fedora 9 Update: nsd-3.2.2-1.fc9

NSD is a complete implementation of an authoritative DNS name server. For further information about what NSD is and what NSD is not please consult the REQUIREMENTS document which is a part of this distribution thanks to Olaf...

DSA-1802-1 squirrelmail - several vulnerabilities

Bulletin has no description...

Important: Red Hat Security Advisory: Red Hat Enterprise Linux 4.8 kernel security and bug fix update

Updated kernel packages are now available as part of the ongoing support and maintenance of Red Hat Enterprise Linux version 4. This is the eighth regular update. These updated packages fix two security issues, hundreds of bugs, and add numerous enhancements. Space precludes a detailed descriptio...

Debian Security Advisory DSA 1798-1 (pango1.0)

The remote host is missing an update to pango1.0 announced via advisory DSA 1798-1. OpenVAS Vulnerability Test $Id: deb17981.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1798-1 pango1.0 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...