[SECURITY] [DSA 118-1] New xsane packages fix insecure temporary files

-------------------------------------------------------------------------- Debian Security Advisory DSA 118-1 [email protected] http://www.debian.org/security/ Martin Schulze March 5th, 2002 - -------------------------------------------------------------------------- Package : xsane...

[SECURITY] [DSA 116-1] New CFS packages fix security problems

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 116-1 [email protected] http://www.debian.org/security/ Martin Schulze March 2nd, 2002 -...

[SECURITY] [DSA 114-1] New GNUJSP packages fix directory and script source disclosure

-------------------------------------------------------------------------- Debian Security Advisory DSA 114-1 [email protected] http://www.debian.org/security/ Martin Schulze February 21th, 2002 - -------------------------------------------------------------------------- Package : gnujsp...

[SECURITY] [DSA 079-2] New UUCP packages finally fix uucp uid/gid access

-------------------------------------------------------------------------- Debian Security Advisory DSA 079-2 [email protected] http://www.debian.org/security/ Martin Schulze February 8th, 2002 - -------------------------------------------------------------------------- Package : uucp...

[SECURITY] [DSA 079-2] New UUCP packages finally fix uucp uid/gid access

-------------------------------------------------------------------------- Debian Security Advisory DSA 079-2 [email protected] http://www.debian.org/security/ Martin Schulze February 8th, 2002 - -------------------------------------------------------------------------- Package : uucp...

[SECURITY] [DSA 108-1] New wmtv packages fix symlink vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 108-1 [email protected] http://www.debian.org/security/ Martin Schulze February 7th, 2002 - -------------------------------------------------------------------------- Package : wmtv...

[SECURITY] [DSA 102-2] New at packages really fix heap corruption vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 102-2 [email protected] http://www.debian.org/security/ Martin Schulze January 18th, 2002 - -------------------------------------------------------------------------- Package : at...

[SECURITY] [DSA 081-1] New w3m packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 081-1 [email protected] http://www.debian.org/security/ Martin Schulze October 18th, 2001 - -------------------------------------------------------------------------- Packages : w3m, w3m-ssl...

[SECURITY] [DSA 079-1] New UUCP packages fix local exploit

---------------------------------------------------------------------------- Debian Security Advisory DSA 079-1 [email protected] http://www.debian.org/security/ Martin Schulze September 24, 2001 - ---------------------------------------------------------------------------- Package : uucp...

[SECURITY] [DSA-075-2] [sparc-only] telnetd-ssl AYT buffer overflow

---------------------------------------------------------------------------- Debian Security Advisory DSA 075-2 [email protected] http://www.debian.org/security/ Martin Schulze August 14, 2001 - ---------------------------------------------------------------------------- Package :...

[SECURITY] [DSA 045-1] ntp remote root exploit fixed

---------------------------------------------------------------------------- Debian Security Advisory DSA-045-1 [email protected] http://www.debian.org/security/ Michael Stone April 5, 2001 - ---------------------------------------------------------------------------- Package: ntp...

[SECURITY] [DSA-032-1] proftp runs as root, /var symlink removal

Package: proftpd Vulnerability: proftpd running as root, /var symlink removal Debian-specific: yes The following problems have been reported for the version of proftpd in Debian 2.2 potato: 1. There is a configuration error in the postinst script, when the user enters yes, when asked if anonymous...

[SECURITY] [DSA 030-2] New m68k packages of XFree86 released

---------------------------------------------------------------------------- Debian Security Advisory DSA 030-2 [email protected] http://www.debian.org/security/ Martin Schulze February 12, 2001 - ---------------------------------------------------------------------------- Package : xfree86-1...

[SECURITY] New version of Debian php3 packages released

---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Daniel Jacobowitz October 14, 2000 - ---------------------------------------------------------------------------- Package: php3 Vulnerability:...

[SECURITY] New version of xpdf released

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman September 10, 2000 - ------------------------------------------------------------------------ Package : xpdf Problem type : local...

[SECURITY] New version of canna released.

-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman July 2, 2000 - ------------------------------------------------------------------------ Packa...

[SECURITY] New version of canna released.

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman July 2, 2000 - ------------------------------------------------------------------------ Package : canna Problem type : remote...

[SECURITY] New version of dump released.

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman December 2, 1999 - ------------------------------------------------------------------------ The version of dump that was...

[SECURITY] New versions of smtp-refuser fixes security hole

This bug was experienced in May 1999 but wasnt reported on this channel yet. Former versions of the smtp-refuser package came with unchecked logging facility to /tmp/log. This allowed deleting arbitrary, root-owned files by any user who has write access to /tmp. We recommend you upgrade your...

[SECURITY] New version of fte fixes access problems

We have found that the fte package as supplied in our slink frozen and potato unstable archives does not drop its root priviliges after initializing the virtual console device. This allows all users to read and write files with root priviliges, and execute all programs as root. A new package...