Debian DSA-3048-1 : apt - security update

Guillem Jover discovered that the changelog retrieval functionality in apt-get used temporary files in an insecure way, allowing a local user to cause arbitrary files to be overwritten. This vulnerability is neutralized by the fs.protectedsymlinks setting in the Linux kernel, which is enabled by...

[SECURITY] [DSA 3048-1] apt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3048-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst October 08, 2014 http://www.debian.org/security/faq -...

DSA-3048-1 apt - security update

Bulletin has no description...

DSA-3047-1 rsyslog - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3048-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DSA-3043-1 tryton-server - security update

Bulletin has no description...

Debian DSA-3040-1 : rsyslog - security update

Rainer Gerhards, the rsyslog project leader, reported a vulnerability in Rsyslog, a system for log processing. As a consequence of this vulnerability an attacker can send malformed messages to a server, if this one accepts data from untrusted sources, and trigger a denial of service attack...

Debian: Security Advisory (DSA-3038-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-3037-1 : icedove - security update

Antoine Delignat-Lavaud from Inria discovered an issue in the way NSS the Mozilla Network Security Service library, embedded in Wheezy's Icedove, was parsing ASN.1 data used in signatures, making it vulnerable to a signature forgery attack. An attacker could craft ASN.1 data to forge RSA...

Debian DSA-3036-1 : mediawiki - security update

It was discovered that MediaWiki, a wiki engine, did not sufficiently filter CSS in uploaded SVG files, allowing for cross site scripting. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

Debian DSA-3033-1 : nss - security update

Antoine Delignat-Lavaud from Inria discovered an issue in the way NSS the Mozilla Network Security Service library was parsing ASN.1 data used in signatures, making it vulnerable to a signature forgery attack. An attacker could craft ASN.1 data to forge RSA certificates with a valid certification...

DSA-3037-1 icedove - security update

Bulletin has no description...

DSA-3034-1 iceweasel - security update

Bulletin has no description...

[SECURITY] [DSA 3032-1] bash security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3032-1 [email protected] http://www.debian.org/security/ Florian Weimer September 24, 2014 http://www.debian.org/security/faq -...

DSA-3032-1 bash - security update

Bulletin has no description...

Debian DSA-3029-1 : nginx - security update

Antoine Delignat-Lavaud and Karthikeyan Bhargavan discovered that it was possible to reuse cached SSL sessions in unrelated contexts, allowing virtual host confusion attacks in some configurations by an attacker in a privileged network position. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Debian DSA-3030-1 : mantis - security update

Multiple SQL injection vulnerabilities have been discovered in the Mantis bug tracking system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-3030. The text itself is copyright C Software...

DSA-3030-1 mantis - security update

Bulletin has no description...

Debian DSA-3025-1 : apt - security update

It was discovered that APT, the high level package manager, does not properly invalidate unauthenticated data CVE-2014-0488 , performs incorrect verification of 304 replies CVE-2014-0487 , does not perform the checksum check when the Acquire::GzipIndexes option is used CVE-2014-0489 and does not...

Debian: Security Advisory (DSA-3025-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...