USN-339-1: OpenSSL vulnerability

Philip Mackenzie, Marius Schilder, Jason Waddle and Ben Laurie of Google Security discovered that the OpenSSL library did not sufficiently check the padding of PKCS 1 v1.5 signatures if the exponent of the public key is 3 which is widely used for CAs. This could be exploited to forge signatures...

[SA21615] ImageMagick XCF and Sun Rasterfile Buffer Overflows

TITLE: ImageMagick XCF and Sun Rasterfile Buffer Overflows SECUNIA ADVISORY ID: SA21615 VERIFY ADVISORY: http://secunia.com/advisories/21615/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: ImageMagick 6.x http://secunia.com/product/3763/ ImageMagick 5.x...

Slackware 10.0 / 10.1 / 10.2 / 9.0 / 9.1 / current : libtiff (SSA:2006-230-01)

New libtiff packages are available for Slackware 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix security issues. These issues could be used to crash programs linked to libtiff or possibly to execute code as the program's user. Thanks to Tavis Ormandy and the Google Security Team. %NASLMINLEVEL...

[ MDKSA-2006:140 ] - Updated ncompress packages fix vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:140 http://www.mandriva.com/security/ Package : ncompress Date : August 9, 2006 Affected: 2006.0, Corporate 3.0 Problem Description: Tavis Ormandy, of the Google Security Team, discovered that ncompress, whe...