CVE-2014-0471

Directory traversal vulnerability in the unpacking functionality in dpkg before 1.15.9, 1.16.x before 1.16.13, and 1.17.x before 1.17.8 allows remote attackers to write arbitrary files via a crafted source package, related to "C-style filename quoting."...

DSA-2888-1 ruby-actionpack-3.2 - security update

Bulletin has no description...

Oracle Linux 6 : rsyslog (ELSA-2012-0796)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0796 advisory. 5.8.10-2 - add patch to update information on debugging in the man page Resolves: 820311 - add patch to prevent debug output to stdout after forking Resolves:...

[SECURITY] [DSA 2624-1] ffmpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2624-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 16, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2561-1] tiff security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2561-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 21, 2012 http://www.debian.org/security/faq -...

CVE-2012-0211

debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via a crafted tarball file name in the top-level directory of an original .orig source tarball of a source package...

Directory traversal

debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via a crafted tarball file name in the top-level directory of an original .orig source tarball of a source package...

CVE-2012-0211

debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via a crafted tarball file name in the top-level directory of an original .orig source tarball of a source package...

CVE-2012-0211

debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via a crafted tarball file name in the top-level directory of an original .orig source tarball of a source package...

CVE-2012-0211

debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via a crafted tarball file name in the top-level directory of an original .orig source tarball of a source package...

Debian Security Advisory DSA 2336-1 (ffmpeg)

The remote host is missing an update to ffmpeg announced via advisory DSA 2336-1. OpenVAS Vulnerability Test $Id: deb23361.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2336-1 ffmpeg Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

DSA-2378-1 ffmpeg - several

Bulletin has no description...

vsftpd Compromised Source Packages Backdoor Vulnerability - Active Check

vsftpd is prone to a backdoor vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vsftpdproject:vsftpd"; ifdescription...

[SECURITY] Fedora 15 Update: gnome-python2-extras-2.25.3-32.fc15

The gnome-python-extra package contains the source packages for additional Python bindings for GNOME. It should be used together with gnome-python...

ProFTPD受控制源软件包后门安全漏洞

ProFTPD是一款开放源代码FTP服务程序。 ProFTPD的特定时期版本被插入了后门代码，远程攻击者可利用这些后门非授权获取对FTP服务器的访问，从而控制系统。 此问题影响项目的主FTP服务器和所有镜像服务器发布的被攻击的ProFTPD 1.3.3c源代码包，此代码包中包含允许远程root权限访问的后门。2010年11月28日至12月2日期间下载的源代码受此问题影响。 ProFTPD Project ProFTPD 1.3.x 厂商补丁： ProFTPD Project --------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

[SECURITY] Fedora 12 Update: gnome-python2-extras-2.25.3-22.fc12

The gnome-python-extra package contains the source packages for additional Python bindings for GNOME. It should be used together with gnome-python...

[SECURITY] Fedora 13 Update: gnome-python2-extras-2.25.3-22.fc13

The gnome-python-extra package contains the source packages for additional Python bindings for GNOME. It should be used together with gnome-python...

[SECURITY] Fedora 11 Update: gnome-python2-extras-2.25.3-12.fc11

The gnome-python-extra package contains the source packages for additional Python bindings for GNOME. It should be used together with gnome-python...

Ubuntu Update for dpkg vulnerability USN-909-1

Ubuntu Update for Linux kernel vulnerabilities USN-909-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9091.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for dpkg vulnerability USN-909-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 / 9.10 : dpkg vulnerability (USN-909-1)

William Grant discovered that dpkg-source did not safely apply diffs when unpacking source packages. If a user or an automated system were tricked into unpacking a specially crafted source package, a remote attacker could modify files outside the target unpack directory, leading to a denial of...