[SECURITY] [DSA 153-1] New mantis package fixes cross site code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 153-1 [email protected] http://www.debian.org/security/ Martin Schulze August 14th, 2002 http://www.debian.org/security/faq -...

DSA-146 dietlibc - integer overflow

Bulletin has no description...

DSA-145 tinyproxy - doubly freed memory

Bulletin has no description...

DSA-142 openafs - integer overflow

Bulletin has no description...

[SECURITY] [DSA 118-1] New xsane packages fix insecure temporary files

-------------------------------------------------------------------------- Debian Security Advisory DSA 118-1 [email protected] http://www.debian.org/security/ Martin Schulze March 5th, 2002 - -------------------------------------------------------------------------- Package : xsane...

[SECURITY] [DSA 107-1] New jgroff packages fix printf format problem

-------------------------------------------------------------------------- Debian Security Advisory DSA 107-1 [email protected] http://www.debian.org/security/ Martin Schulze January 30th, 2002 - -------------------------------------------------------------------------- Package : jgroff...

[Announce] SECURITY: mutt-1.2.5.1 and mutt-1.3.25 released.

mutt-1.2.5.1 and mutt-1.3.25 have just been released. These releases both fix a security hole which can be remotely exploited. The problem was found and a fix suggested by Joost Pol [email protected]. Thanks for that. mutt-1.2.5.1 is released as an update to the last stable version of mutt,...

[SECURITY] [DSA 026-1] New version of BIND 8 released

---------------------------------------------------------------------------- Debian Security Advisory DSA-026-1 [email protected] http://www.debian.org/security/ Martin Schulze January 29, 2001 - ---------------------------------------------------------------------------- Package : bind...

[SECURITY] [DSA-015-1] New version of sash released

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------------- Debian Security Advisory DSA-015-1 [email protected] http://www.debian.org/security/ Martin Schulze January 23, 2001 -...

[SECURITY] New Debian ncurses packages released

---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Daniel Jacobowitz November 21, 2000 - ---------------------------------------------------------------------------- Package: ncurses...

[SECURITY] New Debian cron packages released

Package: cron Vulnerability: local priviledge escalation Debian-specific: no Vulnerable: yes The version of Vixie Cron shipped with Debian GNU/Linux 2.2 is vulnerable to a local attack, discovered by Michal Zalewski. Several problems, including insecure permissions on temporary files and race...

[SECURITY] New version of Debian bind packages released

---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Daniel Jacobowitz November 12, 2000 - ---------------------------------------------------------------------------- Package: bind Vulnerability:...

Squid doesn't quote urls in error messages.

Hi, I noticed that Squid 2.3.STABLE4 doesn't quote urls in error messages. For example if a user visits the following url http://www.dotcom.com/ btest/b The user will get an invalid url page with test in bold. Or even more fun with: http://www.somecompany.com/img...

[SECURITY] New version of Debian php4 packages released (updated)

Package: php4 Vulnerability: possible remote exploit Debian-specific: no Vulnerable: yes Updated version: corrected URLs In versions of the PHP 4 packages before version 4.0.3, several format string bugs could allow properly crafted requests to execute code as the user running PHP scripts on the...

[SECURITY] New version of Debian php3 packages released

---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Daniel Jacobowitz October 14, 2000 - ---------------------------------------------------------------------------- Package: php3 Vulnerability:...

[SECURITY] New versions of Debian traceroute packages

Package: traceroute Vulnerability: local root exploit Debian-specific: no Vulnerable: yes In versions of the traceroute package before 1.4a5-3, it is possible for a local user to gain root access by exploiting an argument parsing error. This problem is fixed in version 1.4a5-3, uploaded to Debian...

[SECURITY] New versions of Debian traceroute packages

---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Daniel Jacobowitz October 13, 2000 - ---------------------------------------------------------------------------- Package: traceroute...

[SECURITY] Debian esound packages not affected by /tmp/.esd race condition

---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Daniel Jacobowitz October 8, 2000 - ---------------------------------------------------------------------------- Package: esound Vulnerability:...

[SECURITY] New version of cvsweb released

Package: cvsweb Vulnerability type: remote shell Debian-specific: no The versions of cvsweb distributed in Debian GNU/Linux 2.1 aka slink as well as in the frozen potato and unstable woody distributions, are vulnerable to a remote shell exploit. An attacker with write access to the cvs repository...

Linux news 05.05.00

2.2.15 Вышло долгожданное ядро из стабильной серии! Подробнее: ftp://ftp.kernel.org/pub/linux/kernel/v2.2/ Linux kernel 2.2.16pre2 Только появился релиз нового стабильного ядра Linux - Linux kernel 2.2.15, как сразу же за ним появился пререлиз следующего ядра - Linux kernel 2.2.16 и сразу же за...