GDM security update

Upgraded gdm packages are available for Slackware 9.0 and -current. These fix a security issue where a local user may use GDM to read any file on the system. Here are the details from the Slackware 9.0 ChangeLog: Sun Aug 24 14:36:29 PDT 2003 patches/packages/gdm-2.4.1.6-i386-1.tgz: Upgraded to...

[SECURITY] [DSA-371-1] New perl packages fix cross-site scripting

-------------------------------------------------------------------------- Debian Security Advisory DSA 371-1 [email protected] http://www.debian.org/security/ Matt Zimmerman August 11th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA-368-1] New xpcd packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 368-1 [email protected] http://www.debian.org/security/ Matt Zimmerman August 8th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA-364-2] New man-db packages fix problem with DSA-364-1

-------------------------------------------------------------------------- Debian Security Advisory DSA 364-2 [email protected] http://www.debian.org/security/ Matt Zimmerman August 8th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA-360-1] New xfstt packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 360-1 [email protected] http://www.debian.org/security/ Matt Zimmerman August 1st, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA-362-1] New mindi packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 362-1 [email protected] http://www.debian.org/security/ Matt Zimmerman August 2nd, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA-355-1] New gallery packages fix cross-site scripting

-------------------------------------------------------------------------- Debian Security Advisory DSA 355-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 30th, 2003 http://www.debian.org/security/faq -...

Gallery XSS security advisory (with fix and patch instructions)

PROBLEM DESCRIPTION Gallery is an open source image management system. Learn more about it at http://gallery.sourceforge.net Gallery has a feature that allows users to search their image captions and descriptions for specific search terms. A typo in the security code of this feature permits a cro...

[SECURITY] [DSA-354-1] New xconq packages fix buffer overflows

-------------------------------------------------------------------------- Debian Security Advisory DSA 354-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 29th, 2003 http://www.debian.org/security/faq -...

ManDB Utility 2.32.4 - Local Buffer Overflow

ManDB Utility 2.32.4 - Local Buffer Overflow source: https://www.securityfocus.com/bid/8303/info The mandb utility has been reported to be affected by multiple local buffer overflow vulnerabilities. These issues present themselves due to insufficient bounds checking performed on user-supplied dat...

[SECURITY] [DSA-351-1] New php4 packages fix cross-site scripting vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 351-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 16th, 2003 http://www.debian.org/security/faq -...

nfs-utils packages replaced

New nfs-utils packages are available for Slackware 8.1, 9.0, and -current to replace the ones that were issued yesterday. A bug in has been fixed in utils/mountd/auth.c that could cause mountd to crash. Here are the details from the Slackware 9.0 ChangeLog: Tue Jul 15 10:42:58 PDT 2003...

[SECURITY] [DSA-350-1] New falconseye packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 350-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 15th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA-349-1] New nfs-utils package fixes buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 349-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 14th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA-345-1] New xbl packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 345-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 8th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA-344-1] New unzip packages fix directory traversal

-------------------------------------------------------------------------- Debian Security Advisory DSA 344-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 8th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA-342-1] New mozart packages fix unsafe mailcap configuration

-------------------------------------------------------------------------- Debian Security Advisory DSA 342-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 7th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA-340-1] New x-face-el packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 340-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 6th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA-338-1] New proftpd packages fix SQL injection

-------------------------------------------------------------------------- Debian Security Advisory DSA 338-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 29th, 2003 http://www.debian.org/security/faq -...

[SECURITY] [DSA-335-1] New mantis packages fix insecure file permissions

-------------------------------------------------------------------------- Debian Security Advisory DSA 335-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 28th, 2003 http://www.debian.org/security/faq -...