Debian Security Advisory DSA 2976-1 (eglibc - security update)

Stephane Chazelas discovered that the GNU C library, glibc, processed '..' path segments in locale-related environment variables, possibly allowing attackers to circumvent intended restrictions, such as ForceCommand in OpenSSH, assuming that they can supply crafted locale settings. OpenVAS...

DSA-573-1 cupsys - integer overflows

Bulletin has no description...

Debian DSA-163-1 : mhonarc - XSS

Jason Molenda and Hiromitsu Takagi foundways to exploit cross site scripting bugs in mhonarc, a mail to HTML converter. When processing maliciously crafted mails of type text/html mhonarc does not deactivate all scripting parts properly. This is fixed in upstream version 2.5.3. If you are worried...

DSA-507 cadaver - buffer overflow

Bulletin has no description...

DSA-494 ident2 - buffer overflow

Bulletin has no description...

DSA-449 metamail - buffer overflow, format string bugs

Bulletin has no description...

DSA-285 lprng - insecure temporary file

Bulletin has no description...

DSA-252 slocate - buffer overflow

Bulletin has no description...