mc

New mc packages are available for Slackware 9.0, 9.1, and -current to fix security issues that These could lead to a denial of service or the execution of arbitrary code as the user running mc. Sites that use mc should upgrade to the new mc package. More details about this issue may be found in t...

[SECURITY] [DSA 502-1] New exim-tls packages fix buffer overflows

-------------------------------------------------------------------------- Debian Security Advisory DSA 502-1 [email protected] http://www.debian.org/security/ Martin Schulze May 11th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 501-1] New exim packages fix buffer overflows

-------------------------------------------------------------------------- Debian Security Advisory DSA 501-1 [email protected] http://www.debian.org/security/ Martin Schulze May 7th, 2004 http://www.debian.org/security/faq -...

Important: Red Hat Security Advisory: : Updated mc packages resolve several vulnerabilities

Updated mc packages that resolve several buffer overflow vulnerabilities, one format string vulnerability and several temporary file creation vulnerabilities are now available. Midnight Commander mc is a visual shell much like a file manager. Several buffer overflows, several temporary file...

Important: Red Hat Security Advisory: : An updated LHA package fixes security vulnerabilities

An updated LHA package that fixes several security vulnerabilities is now available. LHA is an archiving and compression utility for LHarc format archives. Ulf Harnhammar discovered two stack buffer overflows and two directory traversal flaws in LHA. An attacker could exploit the buffer overflows...

[SECURITY] [DSA 496-1] New eterm packages fix indirect arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 496-1 [email protected] http://www.debian.org/security/ Martin Schulze April 29th, 2004 http://www.debian.org/security/faq -...

DSA-492 iproute - denial of service

Bulletin has no description...

[SECURITY] [DSA 491-1] New Linux 2.4.19 packages fix local root exploit (mips)

-------------------------------------------------------------------------- Debian Security Advisory DSA 491-1 [email protected] http://www.debian.org/security/ Martin Schulze April 17th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 488-1] New logcheck packages fix insecure temporary directory

-------------------------------------------------------------------------- Debian Security Advisory DSA 488-1 [email protected] http://www.debian.org/security/ Matt Zimmerman April 16th, 2004 http://www.debian.org/security/faq -...

[Full-Disclosure] [SECURITY] [DSA 488-1] New logcheck packages fix insecure temporary directory

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 488-1 [email protected] http://www.debian.org/security/ Matt Zimmerman April 16th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 485-1] New ssmtp packages fix format string vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 485-1 [email protected] http://www.debian.org/security/ Matt Zimmerman April 14th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 484-1] New xonix packages fix failure to drop privileges

-------------------------------------------------------------------------- Debian Security Advisory DSA 484-1 [email protected] http://www.debian.org/security/ Matt Zimmerman April 14th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 479-2] New Linux 2.4.18 packages fix local root exploit (i386)

-------------------------------------------------------------------------- Debian Security Advisory DSA 479-2 [email protected] http://www.debian.org/security/ Martin Schulze April 14th, 2004 http://www.debian.org/security/faq -...

Important: Red Hat Security Advisory: : Updated cadaver package fixes security vulnerability in neon

An updated cadaver package that fixes a vulnerability in neon exploitable by a malicious DAV server is now available. cadaver is a command-line WebDAV client that uses inbuilt code from neon, an HTTP and WebDAV client library. Versions of the neon client library up to and including 0.24.4 have be...

[Full-Disclosure] [RHSA-2004:158-01] Updated cadaver package fixes security vulnerability in neon

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Updated cadaver package fixes security vulnerability in neon Advisory ID: RHSA-2004:158-01 Issue date: 2004-04-14 Updated on: 2004-04-14 Produc...

[SECURITY] [DSA 460-2] New sysstat packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 460-2 [email protected] http://www.debian.org/security/ Matt Zimmerman April 3rd, 2004 http://www.debian.org/security/faq -...

Low: Red Hat Security Advisory: : Updated squid package fixes security vulnerability

An updated squid package is avaliable that fixes a security vulnerability in URL decoding and provides a new ACL type for protecting vulnerable clients. Squid is a full-featured Web proxy cache. A bug was found in the processing of %-encoded characters in a URL in versions of Squid 2.5.STABLE4 an...

[SECURITY] [DSA 462-1] New xitalk packages fix local group utmp exploit

-------------------------------------------------------------------------- Debian Security Advisory DSA 462-1 [email protected] http://www.debian.org/security/ Martin Schulze March 12th, 2004 http://www.debian.org/security/faq -...

DSA-463 samba - privilege escalation

Bulletin has no description...

[SECURITY] [DSA 459-1] New kdelibs, kdelibs-crypto packages fix cookie traversal bug

-------------------------------------------------------------------------- Debian Security Advisory DSA 459-1 [email protected] http://www.debian.org/security/ Matt Zimmerman March 10th, 2004 http://www.debian.org/security/faq -...