[SECURITY] New version of lpr released

Package: lpr Vulnerability type: remote exploit Debian-specific: no The version of lpr that was distributed with Debian GNU/Linux 2.1 and the updated version released in 2.1r4 have a two security problems: the client hostname wasnt verified properly, so if someone is able to control the DNS entry...

[SECURITY] New version of htdig released

Package : htdig Vulnerability type: remote exploit Debian-specific : no The version of htdig that was shipped in Debian GNU/Linux 2.1 has a problem with calling external programs to handle non-HTML documents: it calls the external program with the document as a parameter, but does not check for...

[SECURITY] New version of amd fixes remove exploit

The version of amd that was distributed with Debian GNU/Linux 2.1 is vulnerable to a remote exploit. Passing a big directory name to amd its logging code would overflow a buffer which could be exploited. This has been fixed in version 23.0slink1. We recommand that you upgrade your amd package...