dhcp / KDE Update for Mandrake

Security 10963 Published by Philipp Esselbach 0

MandrakeSoft has released the follow security updates for Mandrake Linux:

MDKSA-2003:007 : dhcp

Several potential vulnerabilities were detected by the ISC (Internet Software Consortium) in their dhcp server software. The vulnerabilities affect the minires library and may be exploitable as stack buffer overflows, which could lead to remote code execution. All Mandrake Linux users are encouraged to upgrade; only Mandrake Linux 8.0 came with dhcp 2.x and is not vulnerable.

Read more

MDKSA-2003:004-1 : kde

Multiple instances of improperly quoted shell command execution exist in KDE 2.x up to and including KDE 3.0.5. KDE fails to properly quote parameters of instructions passed to the shell for execution. These parameters may contain data such as filenames, URLs, email address, and so forth; this data may be provided remotely to a victim via email, web pages, files on a network filesystem, or other untrusted sources.

Read more

dhcp3 / bugzilla Updates for Debian

Security 10963 Published by Philipp Esselbach 0

Two new security updates for Debian GNU/Linux has been released:

DSA-231-1 dhcp3 -- stack overflows
The Internet Software Consortium discoverd several vulnerabilities during an audit of the ISC DHCP Daemon. The vulnerabilities exist in error handling routines within the minires library and may be exploitable as stack overflows. This could allow a remote attacker to execute arbitrary code under the user id the dhcpd runs under, usually root. Other DHCP servers than dhcp3 doesn't seem to be affected.

Read more

DSA-230-1 bugzilla -- insecure permissions, spurious backup files

Two vulnerabilities have been discovered in Bugzilla, a web-based bug tracking system, by its authors.

Read more

xpdf-i Update for Debian

Security 10963 Published by Philipp Esselbach 0

A new security update for Debian GNU/Linux has been released

DSA-226-1 xpdf-i -- integer overflow
iDEFENSE discovered an integer overflow in the pdftops filter from the xpdf and xpdf-i packages that can be exploited to gain the privileges of the target user. This can lead to gaining unprivileged access to the 'lp' user if the pdftops program is part of the print filter.

For the current stable distribution (woody) xpdf-i is only a dummy package and the problem was fixed in xpdf already.

For the old stable distribution (potato) this problem has been fixed in version 0.90-8.1.

For the unstable distribution (sid) this problem has been fixed in version 2.01-2.
Download

geneweb Update for Debian

Security 10963 Published by Philipp Esselbach 0

A new security update for Debian GNU/Linux has been released

DSA-223-1 geneweb -- information exposure
A security issue has been discovered by Daniel de Rauglaudre, upstream author of geneweb, a genealogical software with web interface. It runs as a daemon on port 2317 by default. Paths are not properly sanitized, so a carefully crafted URL lead geneweb to read and display arbitrary files of the system it runs on.

For the current stable distribution (woody) this problem has been fixed in version 4.06-2.

The old stable distribution (potato) is not affected.

For the unstable distribution (sid) this problem has been fixed in version 4.09-1.
Download

xpdf Update for Debian

Security 10963 Published by Philipp Esselbach 0

A new security update for Debian GNU/Linux has been released

DSA-222-1 xpdf -- integer overflow
iDEFENSE discovered an integer overflow in the pdftops filter from the xpdf package that can be exploited to gain the privileges of the target user. This can lead to gaining privileged access to the 'lp' user if the pdftops program is part of the print filter.

For the current stable distribution (woody) this problem has been fixed in version 1.00-3.1.

For the old stable distribution (potato) this problem has been fixed in version 0.90-8.1.

For the unstable distribution (sid) this problem has been fixed in version 2.01-2.
Read more

Previous Page

Next Page

Windows

Linux

macOS

Community

  • Lexonight
    Hey everyone,Wanted to share a project I've been b ...
  • SeveG
    need some help here... situationPC= Packard BellOS= win1 ...
  • dhamu
    Hello Phil, I have a Linux Tutorial website that curre ...