Debian DSA-1445-1 : maradns - programming error

Michael Krieger and Sam Trenholme discovered a programming error in MaraDNS, a simple security-aware Domain Name Service server, which might lead to denial of service through malformed DNS packets. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...

Debian DSA-1440-1 : inotify-tools - buffer overflow

It was discovered that a buffer overflow in the filename processing of the inotify-tools, a command-line interface to inotify, may lead to the execution of arbitrary code. This only affects the internal library and none of the frontend tools shipped in Debian. The old stable distribution sarge do...

DSA-1438-1 tar

Bulletin has no description...

Debian DSA-1434-1 : mydns - buffer overflow

It was discovered that in MyDNS, a domain name server with database backend, the daemon could be crashed through malicious remote update requests, which may lead to denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Debian DSA-1430-1 : libnss-ldap - denial of service

It was reported that a race condition exists in libnss-ldap, an NSS module for using LDAP as a naming service, which could cause denial of service attacks if applications use pthreads. This problem was spotted in the dovecot IMAP/POP server but potentially affects more programs. %NASLMINLEVEL 703...

[SECURITY] [DSA 1431-1] New ruby-gnome2 packages fix execution of arbitrary code

------------------------------------------------------------------------ Debian Security Advisory DSA-1431-1 [email protected] http://www.debian.org/security/ Steve Kemp December 11, 2007 http://www.debian.org/security/faq -...

Debian DSA-1424-1 : iceweasel - several vulnerabilities

Several remote vulnerabilities have been discovered in the Iceweasel web browser, an unbranded version of the Firefox browser. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-5947 Jesse Ruderman and Petko D. Petkov discovered that the URI handler fo...

DSA-1430-1 libnss-ldap - information disclosure

Bulletin has no description...

[SECURITY] [DSA 1426-1] New qt-x11-free packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1426-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 08, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1421-1] New wesnoth packages fix arbitrary file disclosure

-------------------------------------------------------------------------- Debian Security Advisory DSA 1421-1 [email protected] http://www.debian.org/security/ Martin Schulze December 6th, 2007 http://www.debian.org/security/faq -...

[Full-disclosure] [SECURITY] [DSA 1421-1] New wesnoth packages fix arbitrary file disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1421-1 [email protected] http://www.debian.org/security/ Martin Schulze December 6th, 2007 http://www.debian.org/security/faq -...

DSA-1407-1 cupsys - buffer overflow with arbitrary code execution

Bulletin has no description...

DSA-1406-1 horde3 - several vulnerabilities

Bulletin has no description...

Debian DSA-1404-1 : gallery2 - programming error

Nicklous Roberts discovered that the Reupload module of Gallery 2, a web-based photo management application, allowed unauthorized users to edit Gallery's data file. The oldstable distribution sarge does not contain a gallery2 package. The previous gallery package is not affected by this...

DSA-1400-1 perl - arbitrary code execution

Bulletin has no description...

DSA-1399-1 pcre3 - arbitrary code execution

Bulletin has no description...

[SECURITY] [DSA 1395-1] New xen-utils packages fix file truncation

------------------------------------------------------------------------ Debian Security Advisory DSA 1395-1 [email protected] http://www.debian.org/security/ Steve Kemp October 25th, 2007 http://www.debian.org/security/faq -...

Debian DSA-1391-1 : icedove - several vulnerabilities

Several remote vulnerabilities have been discovered in the Icedove mail client, an unbranded version of the Thunderbird client. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3734 Bernd Mielke, Boris Zbarsky, David Baron, Daniel Veditz, Jesse...

[SECURITY] [DSA 1390-1] New t1lib packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1390-1 [email protected] http://www.debian.org/security/ Noah Meyerhans October 18, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1386-1] New wesnoth packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1386-1 [email protected] http://www.debian.org/security/ Martin Schulze October 15th, 2007 http://www.debian.org/security/faq -...