Security 10943 Published by Philipp Esselbach 0

Debian.org has released a ton of security updates for Debian GNU/Linux:

DSA-319 webmin
session ID spoofing

Read more

DSA-318 lyskom-server
denial of service

Read more

DSA-317 cupsys
denial of service

Read more

DSA-316 nethack
buffer overflow, incorrect permissions

Read more

DSA-315 gnocatan
buffer overflows, denial of service

Read more

DSA-314 atftp
buffer overflow

Read more

DSA-313 ethereal
buffer overflows, integer overflows

Read more

Security 10943 Published by Philipp Esselbach 0

Red Hat has released the following security updates for Red Hat Linux:

Updated hanterm packages provide security fixes
Updated hanterm pack ages provide security fixes Hangul Terminal is a terminal emulator for the X Window System, based on Xterm.

Hangul Terminal provides an escape sequence for reporting the current window title, which essentially takes the current title and places it directly on the command line.

Read more

Updated KDE packages fix security issue
Updated KDE packages fix security issue
KDE is a graphical desktop environment for the X Window System.

KDE versions 2.2.2 and earlier have a vulnerability in their SSL implementation that makes it possible for users of Konqueror and other SSL enabled KDE software to fall victim to a man-in-the-middle attack.

Read more

Updated kon2 packages fix buffer overflow
Updated kon2 packages fix buffer overflow KON is a Kanji emulator for the console. There is a buffer overflow vulnerability in the command line parsing code portion of the kon program up to and including version 0.3.9b.

Read more

Security 10943 Published by Philipp Esselbach 0

MandrakeSoft has released updated versions of Apache 2 and cups for Mandrake Linux

Apache 2
Two vulnerabilities were discovered in the Apache web server that affect all 2.x versions prior to 2.0.46. The first, discovered by John Hughes, is a build system problem that allows remote attackers to prevent access to authenticated content when a threaded server is used. This only affects versions of Apache compiled with threaded server "httpd.worker", which is not the default for Mandrake Linux.
Read more

cups
A Denial of Service (DoS) vulnerability was discovered in the CUPS printing system by Phil D'Amore of Red Hat. The IPP (Internet Printing Protocol) that CUPS uses is single-threaded and can only service one request at a time. A malicious user could create a partial request that does not time out and cause a Denial of Service condition where CUPS will not respond to other printing requests. This can only be done if the malicious user can create a TCP connection to the IPP port (631 by default)
Read more