| 1 |
joeyh |
103 |
[09 Nov 2004] DSA-591-1 libgd2 - integer overflows |
| 2 |
|
|
{CAN-2004-0990} |
| 3 |
|
|
- libgd2 2.0.30-1 |
| 4 |
|
|
[09 Nov 2004] DSA-590-1 gnats - format string vulnerability |
| 5 |
|
|
{CAN-2004-0623} |
| 6 |
|
|
NOTE: DSA got version of fix for unstable wrong |
| 7 |
|
|
- gnats 4.0-6.1 |
| 8 |
|
|
[09 Nov 2004] DSA-589-1 libgd - integer overflows |
| 9 |
|
|
{CAN-2004-0990} |
| 10 |
|
|
- libgd1 (unfixed; bug #280134) |
| 11 |
joeyh |
99 |
[08 Nov 2004] DSA-588-1 gzip - insecure temporary files |
| 12 |
|
|
{CAN-2004-0970} |
| 13 |
|
|
NOTE: dsa says sid not affected |
| 14 |
|
|
[08 Nov 2004] DSA-587-1 freeamp - buffer overflow |
| 15 |
|
|
{CAN-2004-0964} |
| 16 |
|
|
NOTE: DSA says zinf not vulnerable in sarge |
| 17 |
|
|
[08 Nov 2004] DSA-586-1 ruby - infinite loop |
| 18 |
|
|
{CAN-2004-0983} |
| 19 |
|
|
- ruby1.6 1.6.8-12 |
| 20 |
|
|
- ruby1.8 1.8.1+1.8.2pre2-4 |
| 21 |
joeyh |
83 |
[05 Nov 2004] DSA-585-1 shadow - programming error |
| 22 |
|
|
{CAN-2004-1001} |
| 23 |
|
|
- shadow 1:4.0.3-30.3 |
| 24 |
joeyh |
73 |
[04 Nov 2004] DSA-584-1 dhcp - format string vulnerability |
| 25 |
|
|
{CAN-2004-1006} |
| 26 |
|
|
- dhcp 2.0pl5-19.1 |
| 27 |
joeyh |
68 |
[03 Nov 2004] DSA-583-1 lvm10 - insecure temporary directory |
| 28 |
|
|
{CAN-2004-0972} |
| 29 |
|
|
TODO: I thought this didn't really matter because the script |
| 30 |
|
|
TODO: was not included in the binary package. Check or fix. |
| 31 |
joeyh |
61 |
[02 Nov 2004] DSA-582-1 libxml - buffer overflow |
| 32 |
|
|
{CAN-2004-0989} |
| 33 |
|
|
- libxml 1.8.17-9 |
| 34 |
|
|
- libxml2 2.6.11-5 |
| 35 |
|
|
[01 Nov 2004] DSA-581-1 xpdf - integer overflows |
| 36 |
|
|
{CAN-2004-0888} |
| 37 |
|
|
- xpdf 3.00-9 |
| 38 |
joeyh |
54 |
[01 Nov 2004] DSA-580-1 iptables - missing initialisation |
| 39 |
|
|
{CAN-2004-0986} |
| 40 |
|
|
- iptables 1.2.11-4 |
| 41 |
|
|
[01 Nov 2004] DSA-579-1 abiword - buffer overflow |
| 42 |
|
|
{CAN-2004-0645} |
| 43 |
|
|
NOTE: according to DSA, sid's abiword is not affected. sarge is same |
| 44 |
|
|
[01 Nov 2004] DSA-578-1 mpg123 - buffer overflow |
| 45 |
|
|
{CAN-2004-0982} |
| 46 |
|
|
- mpg123 0.59r-17 |
| 47 |
joeyh |
36 |
[29 Oct 2004] DSA-577-1 postgresql - symlink vulnerability |
| 48 |
|
|
{CAN-2004-0977} |
| 49 |
|
|
- postgresql 7.4.6-1 |
| 50 |
|
|
[29 Oct 2004] DSA-576-1 squid - multiple |
| 51 |
|
|
{CVE-1999-0710 CAN-2004-0918} |
| 52 |
|
|
- squid 2.5.7-1 |
| 53 |
joeyh |
17 |
[28 Oct 2004] DSA-575-1 catdoc - insecure temporary file |
| 54 |
|
|
{CAN-2003-0193} |
| 55 |
|
|
- catdoc 0.91.5-2 |
| 56 |
|
|
[28 Oct 2004] DSA-574-1 cabextract - missing directory sanitising |
| 57 |
|
|
{CAN-2004-0916} |
| 58 |
|
|
- cabextract 1.1-1 |
| 59 |
joeyh |
2 |
[21 Oct 2004] DSA-573-1 cupsys - integer overflows |
| 60 |
|
|
{CAN-2004-0888} |
| 61 |
|
|
- cupsys 1.1.20final+rc1-10 |
| 62 |
|
|
{CAN-2004-0889} |
| 63 |
joeyh |
96 |
- xpdf 3.00-10 |
| 64 |
joeyh |
2 |
- kpdf (unfixed; bug #278173) |
| 65 |
|
|
- gpdf 2.8.0-1 |
| 66 |
amu |
101 |
- kfax (unfixed; bug #280373) |
| 67 |
joeyh |
2 |
[21 Oct 2004] DSA-572-1 ecartis - multiple |
| 68 |
|
|
{CAN-2004-0913} |
| 69 |
|
|
- ecartis 1.0.0+cvs.20030911-8 |
| 70 |
|
|
[20 Oct 2004] DSA-571-1 libpng3 - buffer overflows, integer overflow |
| 71 |
|
|
{CAN-2004-0955} |
| 72 |
|
|
- libpng3 1.2.5.0-9 |
| 73 |
|
|
[20 Oct 2004] DSA-570-1 libpng - integer overflow |
| 74 |
|
|
{CAN-2004-0955} |
| 75 |
|
|
- libpng 1.0.15-8 |
| 76 |
|
|
[18 Oct 2004] DSA-569-1 netkit-telnet-ssl - invalid free(3) |
| 77 |
|
|
{CAN-2004-0911} |
| 78 |
|
|
- netkit-telnet-ssl 0.17.24+0.1-4 |
| 79 |
|
|
[16 Oct 2004] DSA-568-1 cyrus-sasl-mit - unsanitised input |
| 80 |
|
|
{CAN-2004-0884} |
| 81 |
|
|
NOTE removed from testing |
| 82 |
|
|
NOTE maintainer reports hole not in cyrus-sasl2-mit |
| 83 |
|
|
[15 Oct 2004] DSA-567-1 tiff - heap overflows |
| 84 |
|
|
{CAN-2004-0803 CAN-2004-0804 CAN-2004-0886} |
| 85 |
|
|
- tiff 3.6.1-2 |
| 86 |
|
|
- tiff3g 3.6.1-2 |
| 87 |
|
|
[14 Oct 2004] DSA-566-1 cupsys - unsanitised input |
| 88 |
|
|
{CAN-2004-0923} |
| 89 |
|
|
- cupsys 1.1.20final+rc1-9 |
| 90 |
|
|
[13 Oct 2004] DSA-565-1 sox - buffer overflows |
| 91 |
|
|
{CAN-2004-0557} |
| 92 |
|
|
- sox 12.17.4-9 |
| 93 |
|
|
[13 Oct 2004] DSA-564-1 mpg123 - missing user input sanitising |
| 94 |
|
|
{CAN-2004-0805} |
| 95 |
|
|
- mpg123 0.59r-16 |
| 96 |
|
|
[12 Oct 2004] DSA-563-1 cyrus-sasl - unsanitised input |
| 97 |
|
|
{CAN-2004-0884} |
| 98 |
|
|
- cyrus-sasl 1.5.28-6.2 |
| 99 |
|
|
- cyrus-sasl2 2.1.19-1.3 |
| 100 |
|
|
[11 Oct 2004] DSA-562-2 mysql - several vulnerabilities |
| 101 |
|
|
{CAN-2004-0835 CAN-2004-0836 CAN-2004-0837} |
| 102 |
|
|
- mysql 4.0.21-1 |
| 103 |
|
|
[11 Oct 2004] DSA-561-1 xfree86 - integer and stack overflows |
| 104 |
|
|
{CAN-2004-0687 CAN-2004-0688} |
| 105 |
|
|
- xfree86 4.3.0.dfsg.1-8 |
| 106 |
|
|
[07 Oct 2004] DSA-600-1 samba - arbitrary file access |
| 107 |
|
|
{CAN-2004-0815} |
| 108 |
|
|
NOTE: not affected according to DSA |
| 109 |
|
|
[07 Oct 2004] DSA-560-1 lesstif1-1 - integer and stack overflows |
| 110 |
|
|
{CAN-2004-0687 CAN-2004-0688} |
| 111 |
|
|
- lesstif1-1 0.93.94-10 |
| 112 |
|
|
[06 Oct 2004] DSA-559-1 net-acct - insecure temporary file |
| 113 |
|
|
{CAN-2004-0851} |
| 114 |
|
|
- net-acct 0.71-7 |
| 115 |
|
|
[06 Oct 2004] DSA-558-1 libapache-mod-dav - null pointer dereference |
| 116 |
|
|
{CAN-2004-0809} |
| 117 |
|
|
- libapache-mod-dav 1.0.3-10 |
| 118 |
|
|
- apache2 2.0.51-1 |
| 119 |
|
|
[04 Oct 2004] DSA-557-1 pppoe - missing privilegue dropping |
| 120 |
|
|
{CAN-2004-0564} |
| 121 |
|
|
- pppoe 3.5-4 |
| 122 |
|
|
[03 Oct 2004] DSA-556-1 netkit-telnet - invalid free(3) |
| 123 |
|
|
{CAN-2004-0911} |
| 124 |
|
|
- netkit-telnet 0.17-26 |
| 125 |
|
|
[30 Sep 2004] DSA-555-1 freenet6 - file permissions |
| 126 |
|
|
{CAN-2004-0563} |
| 127 |
|
|
- freenet6 1.0-2.2 |
| 128 |
|
|
[27 Sep 2004] DSA-554-1 sendmail - pre-set password |
| 129 |
|
|
{CAN-2004-0833} |
| 130 |
|
|
- sendmail 8.13.1-13 |
| 131 |
|
|
[27 Sep 2004] DSA-553-1 getmail - symlink vulnerability |
| 132 |
|
|
{CAN-2004-0880 CAN-2004-0881} |
| 133 |
|
|
- getmail 3.2.5-1 |
| 134 |
|
|
[22 Sep 2004] DSA-552-1 imlib2 - unsanitised input |
| 135 |
|
|
{CAN-2004-0802} |
| 136 |
|
|
- imlib2 1.1.0-12.4 |
| 137 |
|
|
[21 Sep 2004] DSA-551-1 lukemftpd - incorrect internal variable handling |
| 138 |
|
|
{CAN-2004-0794} |
| 139 |
|
|
- lukemftpd 1.1-2.2 |
| 140 |
|
|
[20 Sep 2004] DSA-550-1 wv - buffer overflow |
| 141 |
|
|
{CAN-2004-0645} |
| 142 |
|
|
- wv 1.0.2-0.1 |
| 143 |
|
|
[17 Sep 2004] DSA-549-1 gtk+2.0 - multiple holes |
| 144 |
|
|
{CAN-2004-0782 CAN-2004-0783 CAN-2004-0788} |
| 145 |
|
|
- gtk+2.0 2.4.9-2 |
| 146 |
|
|
[16 Sep 2004] DSA-548-1 imlib - unsanitised input |
| 147 |
|
|
{CAN-2004-0817} |
| 148 |
|
|
- imlib 1.9.14-17 |
| 149 |
|
|
- imlib+png2 1.9.14-16 |
| 150 |
|
|
[16 Sep 2004] DSA-547-1 imagemagic - buffer overflows |
| 151 |
|
|
{CAN-2004-0827} |
| 152 |
|
|
- imagemagic 6.0.6.2-1 |
| 153 |
|
|
[16 Sep 2004] DSA-546-1 gdk-pixbuf - multiple holes |
| 154 |
|
|
{CAN-2004-0753 CAN-2004-0782 CAN-2004-0788} |
| 155 |
|
|
- gdk-pixbuf 0.22.0-7 |
| 156 |
|
|
[15 Sep 2004] DSA-545-1 cupsys - denial of service |
| 157 |
|
|
{CAN-2004-0558} |
| 158 |
|
|
- cupsys 1.1.20final+rc1-6 |
| 159 |
|
|
[14 Sep 2004] DSA-544-1 webmin - insecure temporary directory |
| 160 |
|
|
{CAN-2004-0559} |
| 161 |
|
|
- webmin 1.160-1 |
| 162 |
|
|
- usermin 1.090-1 |
| 163 |
|
|
[31 Aug 2004] DSA-543-1 krb5 -- several vulnerabilities |
| 164 |
|
|
{CAN-2004-0642 CAN-2004-0643 CAN-2004-0644 CAN-2004-0772} |
| 165 |
|
|
- krb5 1.3.4-3 |
| 166 |
|
|
[31 Aug 2004] DSA-458-2 python2.2 - buffer overflow |
| 167 |
|
|
{CAN-2004-0150} |
| 168 |
|
|
NOTE: not affected according to DSA |
| 169 |
|
|
[30 Aug 2004] DSA-542-1 qt - unsanitised input |
| 170 |
|
|
{CAN-2004-0691 CAN-2004-0692 CAN-2004-0693} |
| 171 |
|
|
- qt-x11-free 3.3.3-4 |
| 172 |
|
|
[25 Aug 2004] DSA-541 icecast-server - cross site scripting |
| 173 |
|
|
{CAN-2004-0781} |
| 174 |
|
|
- icecast-server 1.3.12-8 |
| 175 |
|
|
[18 Aug 2004] DSA-540 mysql-dfsg - insecure file creation |
| 176 |
|
|
{CAN-2004-0457} |
| 177 |
|
|
- mysql-dfsg 4.0.20-11 |
| 178 |
|
|
[18 Aug 2004] DSA-539 kdelibs - denial of service |
| 179 |
|
|
{CAN-2004-0689} |
| 180 |
|
|
- kdelibs 4:3.2.3-3.sarge.1 |
| 181 |
|
|
[17 Aug 2004] DSA-538 rsync - unauthorised directory traversal and file access |
| 182 |
|
|
- rsync 2.6.2-3 |
| 183 |
|
|
[16 Aug 2004] DSA-537 ruby -- insecure file permissions |
| 184 |
|
|
{CAN-2004-0755} |
| 185 |
|
|
- ruby1.8 1.8.1+1.8.2pre1-4 |
| 186 |
|
|
HELP: is ruby1.6 vulnerable? |
| 187 |
|
|
[04 Aug 2004] DSA-536 libpng - several vulnerabilities |
| 188 |
|
|
{CAN-2004-0597 CAN-2004-0598 CAN-2004-0599 CAN-2004-0768} |
| 189 |
|
|
- libpng 1.0.15-6 |
| 190 |
|
|
- libpng3 1.2.5.0-7 |
| 191 |
|
|
[02 Aug 2004] DSA-535 squirrelmail - several vulnerabilities |
| 192 |
|
|
{CAN-2004-0519 CAN-2004-0520 CAN-2004-0521 CAN-2004-0639} |
| 193 |
|
|
- squirrelmail 2:1.4.3a-0.1 |
| 194 |
|
|
[22 Jul 2004] DSA-534 mailreader - directory traversal |
| 195 |
|
|
{CAN-2002-1581} |
| 196 |
|
|
- mailreader 2.3.29-9 |
| 197 |
|
|
[22 Jul 2004] DSA-533 courier - cross-site scripting |
| 198 |
|
|
{CAN-2004-0591} |
| 199 |
|
|
- courier 0.45.4-4 |
| 200 |
|
|
[22 Jul 2004] DSA-532 libapache-mod-ssl - several vulnerabilities |
| 201 |
|
|
{CAN-2004-0488 CAN-2004-0700} |
| 202 |
|
|
- libapache-mod-ssl 2.8.19-1 |
| 203 |
|
|
[20 Jul 2004] DSA-531 php4 - several vulnerabilities |
| 204 |
|
|
{CAN-2004-0594 CAN-2004-0595} |
| 205 |
|
|
! php4 4:4.3.8-1 |
| 206 |
|
|
[17 Jul 2004] DSA-530 l2tpd - buffer overflow |
| 207 |
|
|
{CAN-2004-0649} |
| 208 |
|
|
- l2tpd 0.70-pre20031121-2 |
| 209 |
|
|
[17 Jul 2004] DSA-529 netkit-telnet-ssl - format string |
| 210 |
|
|
{CAN-2004-0640} |
| 211 |
|
|
! netkit-telnet-ssl 0.17.24+0.1-2 |
| 212 |
|
|
[17 Jul 2004] DSA-528 ethereal - denial of service |
| 213 |
|
|
{CAN-2004-0635} |
| 214 |
|
|
- ethereal 0.10.5-1 |
| 215 |
|
|
[03 Jul 2004] DSA-527 pavuk - buffer overflow |
| 216 |
|
|
{CAN-2004-0456} |
| 217 |
|
|
NOTE: DSA is incorrect; pavuk is in sarge and unstable. |
| 218 |
|
|
! pavuk 0.9pl28-3 |
| 219 |
|
|
[03 Jul 2004] DSA-526 webmin - several vulnerabilities |
| 220 |
|
|
{CAN-2004-0582 CAN-2004-0583} |
| 221 |
|
|
- webmin 1.150-1 |
| 222 |
|
|
[24 Jun 2004] DSA-525 apache - buffer overflow |
| 223 |
|
|
{CAN-2004-0492} |
| 224 |
|
|
- apache 1.3.31-2 |
| 225 |
|
|
[19 Jun 2004] DSA-524 rlpr - several vulnerabilities |
| 226 |
|
|
{CAN-2004-0393 CAN-2004-0454} |
| 227 |
|
|
- rlpr 2.02-7.1 |
| 228 |
|
|
[19 Jun 2004] DSA-523 www-sql - buffer overflow |
| 229 |
|
|
{CAN-2004-0455} |
| 230 |
|
|
- www-sql 0.5.7-18 |
| 231 |
|
|
[19 Jun 2004] DSA-522 super - format string vulnerability |
| 232 |
|
|
{CAN-2004-0579} |
| 233 |
|
|
- super 3.23.0-1 |
| 234 |
|
|
[18 Jun 2004] DSA-521 sup - format string vulnerability |
| 235 |
|
|
{CAN-2004-0451} |
| 236 |
|
|
- sup 1.8-11 |
| 237 |
|
|
[16 Jun 2004] DSA-520 krb5 - buffer overflows |
| 238 |
|
|
{CAN-2004-0523} |
| 239 |
|
|
- krb5 1.3.3-2 |
| 240 |
|
|
[15 Jun 2004] DSA-519 cvs - several vulnerabilities |
| 241 |
|
|
{CAN-2004-0416 CAN-2004-0417 CAN-2004-0418} |
| 242 |
|
|
- cvs 1:1.12.9-1 |
| 243 |
|
|
[14 Jun 2004] DSA-518 kdelibs - unsanitised input |
| 244 |
|
|
{CAN-2004-0411} |
| 245 |
|
|
- kdelibs 3.2.3 |
| 246 |
|
|
[10 Jun 2004] DSA-517 cvs - buffer overflow |
| 247 |
|
|
{CAN-2004-0414] |
| 248 |
|
|
- cvs 1.12.9-1 |
| 249 |
|
|
[07 Jun 2004] DSA-516 postgresql - buffer overflow |
| 250 |
|
|
{CAN-2004-0547} |
| 251 |
|
|
- postgresql 07.03.0200-3. |
| 252 |
|
|
[05 Jun 2004] DSA-515 lha - several vulnerabilities |
| 253 |
|
|
{CAN-2004-0234 CAN-2004-0235} |
| 254 |
|
|
! lha 1.14i-8 |
| 255 |
|
|
NOTE: If 1.14i-8 cannot get into testing, the fix for 1.14i-2.0.1 |
| 256 |
|
|
from the DSA could to updated via t-p-u. |
| 257 |
|
|
[04 Jun 2004] DSA-514 kernel-image-sparc-2.2 - failing function and TLB flush |
| 258 |
|
|
{CAN-2004-0077} |
| 259 |
|
|
- kernel-image-sparc-2.2 9.1 |
| 260 |
|
|
NOTE: did not check other versions of the kernel |
| 261 |
|
|
[03 Jun 2004] DSA-513 log2mail - format string |
| 262 |
|
|
{CAN-2004-0450} |
| 263 |
|
|
! log2mail 0.2.8-3 |
| 264 |
|
|
[02 Jun 2004] DSA-512 gallery - unauthenticated access |
| 265 |
|
|
{CAN-2004-0522} |
| 266 |
|
|
- gallery 1.4.3-pl2-1 |
| 267 |
|
|
[30 May 2004] DSA-511 ethereal - buffer overflows |
| 268 |
|
|
{CAN-2004-0176 |
| 269 |
|
|
- ethereal 0.10.3-1 |
| 270 |
|
|
[29 May 2004] DSA-510 jftpgw - format string |
| 271 |
|
|
{CAN-2004-0448} |
| 272 |
|
|
- jftpgw 0.13.4-1 |
| 273 |
|
|
[29 May 2004] DSA-509 gatos - privilege escalation |
| 274 |
|
|
{CAN-2004-0395} |
| 275 |
|
|
- gatos 0.0.5-12 |
| 276 |
|
|
[22 May 2004] DSA-508 xpcd - buffer overflow |
| 277 |
|
|
{CAN-2004-0402} |
| 278 |
|
|
- xpcd 2.08-10 |
| 279 |
|
|
[19 May 2004] DSA-507 cadaver - buffer overflow |
| 280 |
|
|
{CAN-2004-0398} |
| 281 |
|
|
- cadaver 0.22.1-3 |
| 282 |
|
|
[19 May 2004] DSA-506 neon - buffer overflow |
| 283 |
|
|
{CAN-2004-0398} |
| 284 |
|
|
- neon 0.24.6.dfsg-1 |
| 285 |
|
|
[19 May 2004] DSA-505 cvs - heap overflow |
| 286 |
|
|
{CAN-2004-0396} |
| 287 |
|
|
- cvs 1.12.5-6 |
| 288 |
|
|
[18 May 2004] DSA-504 heimdal - missing input sanitising |
| 289 |
|
|
{CAN-2004-0434} |
| 290 |
|
|
- heimdal 0.6.2-1 |
| 291 |
|
|
[13 May 2004] DSA-503 mah-jong - missing argument check |
| 292 |
|
|
{CAN-2004-0458} |
| 293 |
|
|
- mah-jong 1.6.2-1 |
| 294 |
|
|
[11 May 2004] DSA-502 exim-tls - buffer overflow |
| 295 |
|
|
{CAN-2004-0399 CAN-2004-0400} |
| 296 |
|
|
NOTE: exim-tls not in sarge |
| 297 |
|
|
[07 May 2004] DSA-501 exim - buffer overflow |
| 298 |
|
|
{CAN-2004-0399 CAN-2004-0400} |
| 299 |
|
|
- exim 3.36-11 |
| 300 |
|
|
- exim4 4.33-1 |
| 301 |
|
|
[01 May 2004] DSA-500 flim - insecure temporary file |
| 302 |
|
|
{CAN-2004-0422} |
| 303 |
|
|
- flim 1:1.14.6+0.20040415-1 |
| 304 |
|
|
[01 May 2004] DSA-499 rsync - directory traversal |
| 305 |
|
|
{CAN-2004-0426} |
| 306 |
|
|
- rsync 2.6.1-1 |
| 307 |
|
|
[30 Apr 2004] DSA-498 libpng - out of bound access |
| 308 |
|
|
{CAN-2004-0421} |
| 309 |
|
|
- libpng 1.0.15-5 |
| 310 |
|
|
- libpng3 1.2.5.0-6 |
| 311 |
|
|
[29 Apr 2004] DSA-497 mc - several vulnerabilities |
| 312 |
|
|
{CAN-2004-0226 CAN-2004-0231 CAN-2004-0232} |
| 313 |
|
|
- mc 1:4.6.0-4.6.1-pre1-2 |
| 314 |
|
|
[29 Apr 2004] DSA-496 eterm - missing input sanitising |
| 315 |
|
|
{CAN-2003-0068} |
| 316 |
|
|
- eterm 0.9.2-6 |
| 317 |
|
|
[26 Apr 2004] DSA-495 linux-kernel-2.4.16-arm - several vulnerabilities |
| 318 |
|
|
{CAN-2003-0127 CAN-2004-0003 CAN-2004-0010 CAN-2004-0109 CAN-2004-0177 CAN-2004-0178} |
| 319 |
|
|
NOTE: 2.4.16 not present. Did not check newer kernels. |
| 320 |
|
|
[21 Apr 2004] DSA-494 ident2 - buffer overflow |
| 321 |
|
|
{CAN-2004-0408} |
| 322 |
|
|
- ident2 1.04-2 |
| 323 |
|
|
[21 Apr 2004] DSA-493 xchat - buffer overflow |
| 324 |
|
|
{CAN-2004-0409} |
| 325 |
|
|
- xchat 2.0.8-1 |
| 326 |
|
|
[18 Apr 2004] DSA-492 iproute - denial of service |
| 327 |
|
|
{CAN-2003-0856} |
| 328 |
|
|
- iproute 20010824-13.1 |
| 329 |
|
|
[17 Apr 2004] DSA-491 linux-kernel-2.4.19-mips - several vulnerabilities |
| 330 |
|
|
{CAN-2004-0003 CAN-2004-0010 CAN-2004-0109 CAN-2004-0177 CAN-2004-0178} |
| 331 |
|
|
NOTE: 2.4.19 not present. Did not check newer kernels. |
| 332 |
|
|
[17 Apr 2004] DSA-490 zope - arbitrary code execution |
| 333 |
|
|
{CVE-2002-0688} |
| 334 |
|
|
- zope 2.6.0-0.1 |
| 335 |
|
|
[17 Apr 2004] DSA-489 linux-kernel-2.4.17-mips+mipsel - several vulnerabilities |
| 336 |
|
|
{CAN-2004-0003 CAN-2004-0010 CAN-2004-0109 CAN-2004-0177 CAN-2004-0178} |
| 337 |
|
|
NOTE: 2.4.17 not present. Did not check newer kernels. |
| 338 |
|
|
[16 Apr 2004] DSA-488 logcheck - insecure temporary directory |
| 339 |
|
|
{CAN-2004-0404} |
| 340 |
|
|
- logcheck 1.1.1-13.2 |
| 341 |
|
|
[16 Apr 2004] DSA-487 neon - format string |
| 342 |
|
|
{CAN-2004-0179} |
| 343 |
|
|
- newo 0.24.5-1 |
| 344 |
|
|
[16 Apr 2004] DSA-486 cvs - several vulnerabilities |
| 345 |
|
|
{CAN-2004-0180 CAN-2004-0405} |
| 346 |
|
|
- cvs 1:1.12.5-4 |
| 347 |
|
|
[14 Apr 2004] DSA-485 ssmtp - format string |
| 348 |
|
|
{CAN-2004-0156} |
| 349 |
|
|
- ssmtp 2.60.7 |
| 350 |
|
|
[14 Apr 2004] DSA-484 xonix - failure to drop privileges |
| 351 |
|
|
{CAN-2004-0157} |
| 352 |
|
|
- xonix 1.4-21 |
| 353 |
|
|
[14 Apr 2004] DSA-483 mysql - insecure temporary file creation |
| 354 |
|
|
{CAN-2004-0381} |
| 355 |
|
|
- mysql-dfsg 4.0.18-4 |
| 356 |
|
|
{CAN-2004-0388} |
| 357 |
|
|
! mysql-dfsg 4.0.18-6 |
| 358 |
|
|
[14 Apr 2004] DSA-482 linux-kernel-2.4.17-apus+s390 - several vulnerabilities |
| 359 |
|
|
{CAN-2004-0003 CAN-2004-0010 CAN-2004-0109 CAN-2004-0177 CAN-2004-0178} |
| 360 |
|
|
NOTE: 2.4.17 not present. Did not check newer kernels. |
| 361 |
|
|
[14 Apr 2004] DSA-481 linux-kernel-2.4.17-ia64 - several vulnerabilities |
| 362 |
|
|
{CAN-2004-0003 CAN-2004-0010 CAN-2004-0109 CAN-2004-0177 CAN-2004-0178} |
| 363 |
|
|
NOTE: 2.4.17 not present. Did not check newer kernels. |
| 364 |
|
|
[14 Apr 2004] DSA-480 linux-kernel-2.4.17+2.4.18-hppa - several vulnerabilities |
| 365 |
|
|
{CAN-2004-0003 CAN-2004-0010 CAN-2004-0109 CAN-2004-0177 CAN-2004-0178} |
| 366 |
|
|
NOTE: 2.4.17/18 not present. Did not check newer kernels. |
| 367 |
|
|
[14 Apr 2004] DSA-479 linux-kernel-2.4.18-alpha+i386+powerpc - several vulnerabilities |
| 368 |
|
|
{CAN-2004-0003 CAN-2004-0010 CAN-2004-0109 CAN-2004-0177 CAN-2004-0178} |
| 369 |
|
|
NOTE: 2.4.18 not present. Did not check newer kernels. |
| 370 |
|
|
[06 Apr 2004] DSA-478 tcpdump - denial of service |
| 371 |
|
|
{CAN-2004-0183 CAN-2004-0184} |
| 372 |
|
|
- tcpdump 3.7.2-4 |
| 373 |
|
|
[06 Apr 2004] DSA-477 xine-ui - insecure temporary file creation |
| 374 |
|
|
{CAN-2004-0372} |
| 375 |
|
|
- xine-ui 0.99.1-1 |
| 376 |
|
|
[06 Apr 2004] DSA-476 heimdal - cross-realm |
| 377 |
|
|
{CAN-2004-0371} |
| 378 |
|
|
- heimdal 0.6.1-1 |
| 379 |
|
|
[05 Apr 2004] DSA-475 linux-kernel-2.4.18-hppa - several vulnerabilities |
| 380 |
|
|
{CAN-2003-0961 CAN-2003-0985 CAN-2004-0077} |
| 381 |
|
|
NOTE: 2.4.18 not present. Did not check newer kernels. |
| 382 |
|
|
[03 Apr 2004] DSA-474 squid - ACL bypass |
| 383 |
|
|
{CAN-2004-0189} |
| 384 |
|
|
- squid 2.5.5-1 |
| 385 |
|
|
[03 Apr 2004] DSA-473 oftpd - denial of service |
| 386 |
|
|
{CAN-2004-0376} |
| 387 |
|
|
- oftpd 20040304-1 |
| 388 |
|
|
[03 Apr 2004] DSA-472 fte - several vulnerabilities |
| 389 |
|
|
{CAN-2003-0648} |
| 390 |
|
|
- fte 0.50.0-1.1 |
| 391 |
|
|
[02 Apr 2004] DSA-471 interchange - missing input sanitising |
| 392 |
|
|
{CAN-2004-0374} |
| 393 |
|
|
- interchange 5.0.1-1 |
| 394 |
|
|
[01 Apr 2004] DSA-470 linux-kernel-2.4.17-hppa - several vulnerabilities |
| 395 |
|
|
{CAN-2003-0961 CAN-2003-0985 CAN-2004-0077} |
| 396 |
|
|
NOTE: 2.4.17 not present. Did not check newer kernels. |
| 397 |
|
|
[29 Mar 2004] DSA-469 pam-pgsql - missing input sanitising |
| 398 |
|
|
{CAN-2004-0366} |
| 399 |
|
|
- pam-pgsql 0.5.2-7.1 |
| 400 |
|
|
[24 Mar 2004] DSA-468 emil - several vulnerabilities |
| 401 |
|
|
{CAN-2004-0152 CAN-2004-0153} |
| 402 |
|
|
- emil 2.1.0-beta9-14 |
| 403 |
|
|
[23 Mar 2004] DSA-467 ecartis - several vulnerabilities |
| 404 |
|
|
{CAN-2003-0781 CAN-2003-0782} |
| 405 |
|
|
- ecartis 1.0.0+cvs.20030911 |
| 406 |
|
|
[18 Mar 2004] DSA-466 linux-kernel-2.2.10-powerpc-apus - failing function and TLB flush |
| 407 |
|
|
{CAN-2004-0077} |
| 408 |
|
|
NOTE: 2.2.10 not present. Did not check newer kernels. |
| 409 |
|
|
[17 Mar 2004] DSA-465 openssl - several vulnerabilities |
| 410 |
|
|
{CAN-2004-0079 CAN-2004-0081} |
| 411 |
|
|
- openssl 0.9.7d-1 |
| 412 |
|
|
NOTE: CAN-2004-0081 only affects 0.9.6. |
| 413 |
|
|
NOTE: 0.9.7d also fixes CAN-2004-0112 |
| 414 |
|
|
- openssl 0.9.6l |
| 415 |
|
|
[16 Mar 2004] DSA-464 gdk-pixbuf - broken image handling |
| 416 |
|
|
{CAN-2004-0111} |
| 417 |
|
|
- gdk-pixbuf 0.22.0-3 |
| 418 |
|
|
[12 Mar 2004] DSA-463 samba - privilege escalation |
| 419 |
|
|
{CAN-2004-0186} |
| 420 |
|
|
- samba 3.0.2-2 |
| 421 |
|
|
[12 Mar 2004] DSA-462 xitalk - missing privilege release |
| 422 |
|
|
{CAN-2004-0151} |
| 423 |
|
|
- xitalk 1.1.11-11 |
| 424 |
|
|
[11 Mar 2004] DSA-461 calife - buffer overflow |
| 425 |
|
|
{CAN-2004-0188} |
| 426 |
|
|
- calife 2.8.6-1 |
| 427 |
|
|
[10 Mar 2004] DSA-460 sysstat - insecure temporary file |
| 428 |
|
|
{CAN-2004-0108} |
| 429 |
|
|
- sysstat 5.0.2-1 |
| 430 |
|
|
[10 Mar 2004] DSA-459 kdelibs - cookie path traversal |
| 431 |
|
|
{CAN-2003-0592} |
| 432 |
|
|
- kdelibs 4:3.1.3-1 |
| 433 |
|
|
[09 Mar 2004] DSA-458 python2.2 - buffer overflow |
| 434 |
|
|
{CAN-2004-0150} |
| 435 |
|
|
NOTE: not affected according to DSA |
| 436 |
|
|
[08 Mar 2004] DSA-457 wu-ftpd - several vulnerabilities |
| 437 |
|
|
CAN-2004-0148 CAN-2004-0185} |
| 438 |
|
|
- wu-ftpd 2.6.2-17.1 |
| 439 |
|
|
[06 Mar 2004] DSA-456 linux-kernel-2.2.19-arm - failing function and TLB flush |
| 440 |
|
|
{CAN-2004-0077} |
| 441 |
|
|
NOTE: 2.2.19 not present. Did not check newer kernels. |
| 442 |
|
|
[03 Mar 2004] DSA-455 libxml - buffer overflows |
| 443 |
|
|
{CAN-2004-0110} |
| 444 |
|
|
- libxml 1.8.17-5 |
| 445 |
|
|
- libxml2 2.6.6-1 |
| 446 |
|
|
[02 Mar 2004] DSA-454 linux-kernel-2.2.22-alpha - failing function and TLB flush |
| 447 |
|
|
{CAN-2004-0077} |
| 448 |
|
|
NOTE: 2.2.22 not present. Did not check newer kernels. |
| 449 |
|
|
[02 Mar 2004] DSA-453 linux-kernel-2.2.20-i386+m68k+powerpc - failing function and TLB flush |
| 450 |
|
|
{CAN-2004-0077} |
| 451 |
|
|
NOTE: 2.2.20 not present. Did not check newer kernels. |
| 452 |
|
|
[29 Feb 2004] DSA-452 libapache-mod-python - denial of service |
| 453 |
|
|
{CAN-2003-0973} |
| 454 |
|
|
- libapache-mod-python 2:2.7.10-1 |
| 455 |
|
|
[27 Feb 2004] DSA-451 xboing - buffer overflows |
| 456 |
|
|
{CAN-2004-0149} |
| 457 |
|
|
- xboing 2.4-26.1 |
| 458 |
|
|
[27 Feb 2004] DSA-450 linux-kernel-2.4.19-mips - several vulnerabilities |
| 459 |
|
|
{CAN-2003-0961 CAN-2003-0985 CAN-2004-0077} |
| 460 |
|
|
NOTE: 2.4.19 not present. Did not check newer kernels. |
| 461 |
|
|
[24 Feb 2004] DSA-449 metamail - buffer overflow, format string bugs |
| 462 |
|
|
{CAN-2004-0104 CAN-2004-0105} |
| 463 |
|
|
- metamail 2.7-45.2 |
| 464 |
|
|
[22 Feb 2004] DSA-448 pwlib - several vulnerabilities |
| 465 |
|
|
{CAN-2004-0097} |
| 466 |
|
|
- pwlib 1.5.2-4 |
| 467 |
|
|
[22 Feb 2004] DSA-447 hsftp - format string |
| 468 |
|
|
{CAN-2004-0159} |
| 469 |
|
|
! hsftp 1.15-1 |
| 470 |
|
|
[21 Feb 2004] DSA-446 synaesthesia - insecure file creation |
| 471 |
|
|
{CAN-2004-0160} |
| 472 |
|
|
DSA notes not setuid anymore so ok |
| 473 |
|
|
[21 Feb 2004] DSA-445 lbreakout2 - buffer overflow |
| 474 |
|
|
{CAN-2004-0158} |
| 475 |
|
|
- lbreakout2 2.4 |
| 476 |
|
|
[20 Feb 2004] DSA-444 linux-kernel-2.4.17-ia64 - missing function return value check |
| 477 |
|
|
{CAN-2004-0077} |
| 478 |
|
|
NOTE: 2.4.17 not present. Did not check newer kernels. |
| 479 |
|
|
[19 Feb 2004] DSA-443 xfree86 - several vulnerabilities |
| 480 |
|
|
{CAN-2003-0690} |
| 481 |
|
|
- xfree86 4.3.0-0pre1v2 |
| 482 |
|
|
{CAN-2004-0083 CAN-2004-0084 CAN-2004-0106} |
| 483 |
|
|
- xfree86 4.3.0-1 |
| 484 |
|
|
{CAN-2004-0093 CAN-2004-0094} |
| 485 |
|
|
- xfree86 4.2.1-6 |
| 486 |
|
|
[19 Feb 2004] DSA-442 linux-kernel-2.4.17-s390 - several vulnerabilities |
| 487 |
|
|
{CAN-2003-0001 CAN-2003-0244 CAN-2003-0246 CAN-2003-0247 CAN-2003-0248 CAN-2003-0364 CAN-2003-0961 CAN-2003-0985 CAN-2004-0077 CVE-2002-0429} |
| 488 |
|
|
NOTE: 2.4.17 not present. Did not check newer kernels. |
| 489 |
|
|
[18 Feb 2004] DSA-441 linux-kernel-2.4.17-mips+mipsel - missing function return value check |
| 490 |
|
|
{CAN-2004-0077} |
| 491 |
|
|
NOTE: 2.4.17 not present. Did not check newer kernels. |
| 492 |
|
|
[18 Feb 2004] DSA-440 linux-kernel-2.4.17-powerpc-apus - several vulnerabilities |
| 493 |
|
|
{CAN-2003-0961 CAN-2003-0985 CAN-2004-0077} |
| 494 |
|
|
NOTE: 2.4.17 not present. Did not check newer kernels. |
| 495 |
|
|
[18 Feb 2004] DSA-439 linux-kernel-2.4.16-arm - several vulnerabilities |
| 496 |
|
|
{CAN-2003-0961 CAN-2003-0985 CAN-2004-0077} |
| 497 |
|
|
NOTE: 2.4.16 not present. Did not check newer kernels. |
| 498 |
|
|
[18 Feb 2004] DSA-438 linux-kernel-2.4.18-alpha+i386+powerpc - missing function return value check |
| 499 |
|
|
{CAN-2004-0077} |
| 500 |
|
|
NOTE: 2.4.17 not present. Did not check newer kernels. |
| 501 |
|
|
[11 Feb 2004] DSA-437 cgiemail - open mail relay |
| 502 |
|
|
{CAN-2002-1575} |
| 503 |
|
|
- cgiemail 1.6-20 |
| 504 |
|
|
[08 Feb 2004] DSA-436 mailman - several vulnerabilities |
| 505 |
|
|
{CAN-2003-0991} |
| 506 |
joeyh |
68 |
NOTE: apparently specific to mailman 2.0, not 2.1 |
| 507 |
joeyh |
2 |
{CAN-2003-0965} |
| 508 |
|
|
- mailman 2.1.4-1 |
| 509 |
|
|
{CAN-2003-0038} |
| 510 |
|
|
- mailman 2.1.1-1 |
| 511 |
|
|
[06 Feb 2004] DSA-435 mpg123 - heap overflow |
| 512 |
|
|
{CAN-2003-0865} |
| 513 |
|
|
- mpg123 0.59r-15 |
| 514 |
|
|
[05 Feb 2004] DSA-434 gaim - several vulnerabilities |
| 515 |
|
|
{CAN-2004-0005 CAN-2004-0006 CAN-2004-0007 CAN-2004-0008} |
| 516 |
|
|
- gaim 1:0.75-2 |
| 517 |
|
|
[04 Feb 2004] DSA-433 kernel-patch-2.4.17-mips - integer overflow |
| 518 |
|
|
{CAN-2003-0961} |
| 519 |
|
|
NOTE: 2.4.17 not present. Did not check newer kernels. |
| 520 |
|
|
[03 Feb 2004] DSA-432 crawl - buffer overflow |
| 521 |
|
|
{CAN-2004-0103} |
| 522 |
|
|
- crawl 4.0.0beta26-4 |
| 523 |
|
|
[01 Feb 2004] DSA-431 perl - information leak |
| 524 |
|
|
{CAN-2003-0618} |
| 525 |
|
|
- perl 5.8.3-3 |
| 526 |
|
|
[28 Jan 2004] DSA-430 trr19 - missing privilege release |
| 527 |
|
|
{CAN-2004-0047} |
| 528 |
|
|
- trr19 1.0beta5-17.1 |
| 529 |
|
|
[26 Jan 2004] DSA-429 gnupg - cryptographic weakness |
| 530 |
|
|
{CAN-2003-0971} |
| 531 |
|
|
- gnupg 1.2.4-1 |
| 532 |
|
|
[20 Jan 2004] DSA-428 slocate - buffer overflow |
| 533 |
|
|
{CAN-2003-0848} |
| 534 |
|
|
- slocate 2.7-3 |
| 535 |
|
|
[19 Jan 2004] DSA-427 linux-kernel-2.4.17-mips+mipsel - missing boundary check |
| 536 |
|
|
{CAN-2003-0985} |
| 537 |
|
|
NOTE: 2.4.17 not present. Did not check newer kernels. |
| 538 |
|
|
[18 Jan 2004] DSA-426 netpbm-free - insecure temporary files |
| 539 |
|
|
{CAN-2003-0924} |
| 540 |
|
|
- netpbm-free 2:9.25-9 |
| 541 |
|
|
[16 Jan 2004] DSA-425 tcpdump - multiple vulnerabilities |
| 542 |
|
|
{CAN-2003-1029 CAN-2003-0989 CAN-2004-0055 CAN-2004-0057} |
| 543 |
|
|
HELP: No idea if this is fixed, we have a new upstream version |
| 544 |
|
|
HELP: that came out after these advisories, but neither the debian nor |
| 545 |
|
|
HELP: the upstream changelog seem to mention them. |
| 546 |
|
|
NOTE: Mailed maintainr. |
| 547 |
|
|
[16 Jan 2004] DSA-424 mc - buffer overflow |
| 548 |
|
|
{CAN-2003-1023} |
| 549 |
|
|
- mc 1:4.6.0-4.6.1-pre1-1 |
| 550 |
|
|
[15 Jan 2004] DSA-423 linux-kernel-2.4.17-ia64 - several vulnerabilities |
| 551 |
|
|
{CAN-2003-0001 CAN-2003-0018 CAN-2003-0127 CAN-2003-0461 CAN-2003-0462 CAN-2003-0476 CAN-2003-0501 CAN-2003-0550 CAN-2003-0551 CAN-2003-0552 CAN-2003-0961 CAN-2003-0985} |
| 552 |
|
|
NOTE: 2.4.17 not present. Did not check newer kernels. |
| 553 |
|
|
[13 Jan 2004] DSA-422 cvs - remote vulnerability |
| 554 |
|
|
- cvs 1.11.11 |
| 555 |
|
|
[12 Jan 2004] DSA-421 mod-auth-shadow - password expiration |
| 556 |
|
|
{CAN-2004-0041} |
| 557 |
|
|
- mod-auth-shadow 1.4-1 |
| 558 |
|
|
[12 Jan 2004] DSA-420 jitterbug - improperly sanitised input |
| 559 |
|
|
{CAN-2004-0028} |
| 560 |
|
|
- jitterbug 1.6.2-4.5 |
| 561 |
|
|
[09 Jan 2004] DSA-419 phpgroupware - missing filename sanitising, SQL injection |
| 562 |
|
|
{CAN-2004-0016 CAN-2004-0017} |
| 563 |
|
|
- phpgroupware 0.9.14.007-4 |
| 564 |
|
|
[07 Jan 2004] DSA-418 vbox3 - privilege leak |
| 565 |
|
|
{CAN-2004-0015} |
| 566 |
|
|
- vbox3 0.1.8 |
| 567 |
|
|
[07 Jan 2004] DSA-417 linux-kernel-2.4.18-powerpc+alpha - missing boundary check |
| 568 |
|
|
{CAN-2003-0961 CAN-2003-0985} |
| 569 |
|
|
NOTE: 2.4.18 not present. Did not check newer kernels. |
| 570 |
|
|
[06 Jan 2004] DSA-416 fsp - buffer overflow, directory traversal |
| 571 |
|
|
{CAN-2003-1022, CAN-2004-0011} |
| 572 |
|
|
- fsp 2.81.b18-1 |
| 573 |
|
|
[06 Jan 2004] DSA-415 zebra - denial of service |
| 574 |
|
|
{CAN-2003-0795 CAN-2003-0858} |
| 575 |
|
|
- quagga 0.96.4x-4 |
| 576 |
|
|
[06 Jan 2004] DSA-414 jabber - denial of service |
| 577 |
|
|
{CAN-2004-0013} |
| 578 |
|
|
- jabber 1.4.3-1 |
| 579 |
|
|
[06 Jan 2004] DSA-413 linux-kernel-2.4.18 - missing boundary check |
| 580 |
|
|
{CAN-2003-0985} |
| 581 |
|
|
NOTE: 2.4.18 not present. Did not check newer kernels. |
| 582 |
|
|
[05 Jan 2004] DSA-412 nd - buffer overflows |
| 583 |
|
|
{CAN-2004-0014} |
| 584 |
|
|
- nd 0.8.2-1 |
| 585 |
|
|
[05 Jan 2004] DSA-411 mpg321 - format string vulnerability |
| 586 |
|
|
{CAN-2003-0969} |
| 587 |
|
|
- mpg321 0.2.10.3 |
| 588 |
|
|
[05 Jan 2004] DSA-410 libnids - buffer overflow |
| 589 |
|
|
{CAN-2003-0850} |
| 590 |
|
|
- libnids 1.18-1 |
| 591 |
|
|
[05 Jan 2004] DSA-409 bind - denial of service |
| 592 |
|
|
{CAN-2003-0914} |
| 593 |
|
|
- bind 1:8.4.3-1 |
| 594 |
|
|
[05 Jan 2004] DSA-408 screen - integer overflow |
| 595 |
|
|
{CAN-2003-0972} |
| 596 |
|
|
- screen 4.0.2-0.1 |
| 597 |
|
|
[05 Jan 2004] DSA-407 ethereal - buffer overflows |
| 598 |
|
|
{CAN-2003-0925 CAN-2003-0926 CAN-2003-0927 CAN-2003-1012 CAN-2003-1013 |
| 599 |
|
|
- ethereal 0.10.0-1 |
| 600 |
|
|
[05 Jan 2004] DSA-406 lftp - buffer overflow |
| 601 |
|
|
- lftp 2.6.10-1 |
| 602 |
|
|
[30 Dec 2003] DSA-405 xsok - missing privilege release |
| 603 |
|
|
{CAN-2003-0949} |
| 604 |
|
|
- xsok 1.02-11 |
| 605 |
|
|
[04 Dec 2003] DSA-404 rsync - heap overflow |
| 606 |
|
|
{CAN-2003-0962} |
| 607 |
|
|
- rsync 2.5.6-1.1 |
| 608 |
|
|
[01 Dec 2003] DSA-403 kernel-image-2.4.18-1-alpha, kernel-image-2.4.18-1-i386, kernel-source-2.4.18 - local root exploit |
| 609 |
|
|
{CAN-2003-0961} |
| 610 |
|
|
NOTE: 2.4.18 not present in sarge, did not check newer kernels. |
| 611 |
|
|
[17 Nov 2003] DSA-402 minimalist - unsanitised input |
| 612 |
|
|
{CAN-2003-0902} |
| 613 |
|
|
- minimalist 2.4-1 |
| 614 |
|
|
[17 Nov 2003] DSA-401 hylafax - format strings |
| 615 |
|
|
{CAN-2003-0886} |
| 616 |
|
|
- hylafax 1:4.1.8-1 |
| 617 |
|
|
[11 Nov 2003] DSA-400 omega-rpg - buffer overflow |
| 618 |
|
|
{CAN-2003-0932} |
| 619 |
|
|
- omega-rpg 0.90-pa9-11 |
| 620 |
|
|
[10 Nov 2003] DSA-399 epic4 - buffer overflow |
| 621 |
|
|
{CAN-2003-0328} |
| 622 |
|
|
- epic4 1:1.1.11.20030409-2 |
| 623 |
|
|
[10 Nov 2003] DSA-398 conquest - buffer overflow |
| 624 |
|
|
{CAN-2003-0933} |
| 625 |
|
|
- conquest 7.2-5 |
| 626 |
|
|
[07 Nov 2003] DSA-397 postgresql - buffer overflow |
| 627 |
|
|
{CAN-2003-0901} |
| 628 |
|
|
- postgresql 7.3.4 |
| 629 |
|
|
[29 Oct 2003] DSA-396 thttpd - missing input sanitizing, wrong calculation |
| 630 |
|
|
{CAN-2002-1562 CAN-2003-0899} |
| 631 |
|
|
- thttpd 2.23beta1-2.3 |
| 632 |
|
|
[15 Oct 2003] DSA-395 tomcat4 - incorrect input handling |
| 633 |
|
|
{CAN-2003-0866} |
| 634 |
|
|
! tomcat4 4.1.24-2 |
| 635 |
|
|
NOTE another RC (unreproducible?) bug and missing deps (#263201) |
| 636 |
|
|
NOTE are keeping the fix out of testing |
| 637 |
|
|
[11 Oct 2003] DSA-394 openssl095 - ASN.1 parsing vulnerability |
| 638 |
|
|
{CAN-2003-0543 CAN-2003-0544 CAN-2003-0545} |
| 639 |
|
|
- openssl 0.9.7c |
| 640 |
|
|
- openssl096 0.9.6k |
| 641 |
|
|
[01 Oct 2003] DSA-393 openssl - denial of service |
| 642 |
|
|
{CAN-2003-0543 CAN-2003-0544 CAN-2003-0545} |
| 643 |
|
|
- openssl 0.9.7c |
| 644 |
|
|
- openssl096 0.9.6k |
| 645 |
|
|
[29 Sep 2003] DSA-392 webfs - buffer overflows, file and directory exposure |
| 646 |
|
|
{CAN-2003-0832 CAN-2003-0833} |
| 647 |
|
|
- webfs 1.20 |
| 648 |
|
|
[28 Sep 2003] DSA-391 freesweep - buffer overflow |
| 649 |
|
|
{CAN-2003-0828} |
| 650 |
|
|
- freesweep 0.88-4.1 |
| 651 |
|
|
[26 Sep 2003] DSA-390 marbles - buffer overflow |
| 652 |
|
|
{CAN-2003-0830} |
| 653 |
|
|
NOTE not present in sid, sarge |
| 654 |
|
|
[20 Sep 2003] DSA-389 ipmasq - insecure packet filtering rules |
| 655 |
|
|
{CAN-2003-0785} |
| 656 |
|
|
- ipmasq 3.5.12 |
| 657 |
|
|
[19 Sep 2003] DSA-388 kdebase - several vulnerabilities |
| 658 |
|
|
{CAN-2003-0690 CAN-2003-0692} |
| 659 |
|
|
- kdebase 4:3.2 |
| 660 |
|
|
[18 Sep 2003] DSA-387 gopher - buffer overflows |
| 661 |
|
|
{CAN-2003-0805} |
| 662 |
|
|
- gopher 3.0.6 |
| 663 |
|
|
[18 Sep 2003] DSA-386 libmailtools-perl - input validation bug |
| 664 |
|
|
{CAN-2002-1271} |
| 665 |
|
|
- libmailtools-perl 1.51 |
| 666 |
|
|
[18 Sep 2003] DSA-385 hztty - buffer overflows |
| 667 |
|
|
{CAN-2003-0783} |
| 668 |
|
|
- hztty 2.0-6 |
| 669 |
|
|
[17 Sep 2003] DSA-384 sendmail - buffer overflows |
| 670 |
|
|
{CAN-2003-0681 CAN-2003-0694} |
| 671 |
|
|
- sendmail 8.12.10-1 |
| 672 |
|
|
[17 Sep 2003] DSA-383 ssh-krb5 - possible remote vulnerability |
| 673 |
|
|
{CAN-2003-0693} |
| 674 |
|
|
{CAN-2003-0695} |
| 675 |
|
|
{CAN-2003-0682} |
| 676 |
|
|
HELP: Screwy changelog does not make sense. Filed bug. |
| 677 |
|
|
[16 Sep 2003] DSA-382 ssh - possible remote vulnerability |
| 678 |
|
|
{CAN-2003-0693} |
| 679 |
|
|
- openssh 1:3.6.1p2-6.0 |
| 680 |
|
|
{CAN-2003-0695} |
| 681 |
|
|
- openssh 1:3.7.1 |
| 682 |
|
|
{CAN-2003-0682} |
| 683 |
|
|
- openssh 1:3.6.1p2-9 |
| 684 |
|
|
[13 Sep 2003] DSA-381 mysql - buffer overflow |
| 685 |
|
|
{CAN-2003-0780} |
| 686 |
|
|
- mysql-dfsg 4.0.15-1 |
| 687 |
|
|
[12 Sep 2003] DSA-380 xfree86 - buffer overflows, denial of service |
| 688 |
|
|
{CAN-2003-0063} |
| 689 |
|
|
- xfree86 4.2.1-11 |
| 690 |
|
|
{CAN-2003-0071} |
| 691 |
|
|
- xfree86 4.2.1-11 |
| 692 |
|
|
{CAN-2002-0164} |
| 693 |
|
|
- xfree86 4.2.1-11 |
| 694 |
|
|
{CAN-2003-0730} |
| 695 |
|
|
- xfree86 4.2.1-12 |
| 696 |
|
|
[11 Sep 2003] DSA-379 sane-backends - several vulnerabilities |
| 697 |
|
|
{CAN-2003-0773 CAN-2003-0774 CAN-2003-0775 CAN-2003-0776 CAN-2003-0777 CAN-2003-0778} |
| 698 |
|
|
- sane-backends 1.0.11-1 |
| 699 |
|
|
[07 Sep 2003] DSA-378 mah-jong - buffer overflows, denial of service |
| 700 |
|
|
{CAN-2003-0705 CAN-2003-0706} |
| 701 |
|
|
- mah-jong 1.5.6-2 |
| 702 |
|
|
[04 Sep 2003] DSA-377 wu-ftpd - insecure program execution |
| 703 |
|
|
{CVE-1999-0997} |
| 704 |
|
|
- wu-ftpd 2.6.2-15 |
| 705 |
|
|
[04 Sep 2003] DSA-376 exim - buffer overflow |
| 706 |
|
|
{CAN-2003-0743} |
| 707 |
|
|
- exim 3.36-8 |
| 708 |
|
|
[29 Aug 2003] DSA-375 node - buffer overflow, format string |
| 709 |
|
|
{CAN-2003-0707 CAN-2003-0708} |
| 710 |
|
|
- node 0.3.2-1 |
| 711 |
|
|
[26 Aug 2003] DSA-374 libpam-smb - buffer overflow |
| 712 |
|
|
{CAN-2003-0686} |
| 713 |
|
|
NOTE: not in sid/sarge |
| 714 |
|
|
[16 Aug 2003] DSA-373 autorespond - buffer overflow |
| 715 |
|
|
{CAN-2003-0654} |
| 716 |
|
|
- autorespond 2.0.4-1 |
| 717 |
|
|
[16 Aug 2003] DSA-372 netris - buffer overflow |
| 718 |
|
|
{CAN-2003-0685} |
| 719 |
|
|
- netris 0.52-1 |
| 720 |
|
|
[11 Aug 2003] DSA-371 perl - cross-site scripting |
| 721 |
|
|
{CAN-2003-0615} |
| 722 |
|
|
- perl 5.8.0-19 |
| 723 |
|
|
[08 Aug 2003] DSA-370 pam-pgsql - format string |
| 724 |
|
|
{CAN-2003-0672} |
| 725 |
|
|
- pam-pgsql 0.5.2-7 |
| 726 |
|
|
[08 Aug 2003] DSA-369 zblast - buffer overflow |
| 727 |
|
|
{CAN-2003-0613} |
| 728 |
|
|
- zblast 1.2.1-7 |
| 729 |
|
|
[08 Aug 2003] DSA-368 xpcd - buffer overflow |
| 730 |
|
|
{CAN-2003-0649} |
| 731 |
|
|
- xpcd 2.08-9 |
| 732 |
|
|
[08 Aug 2003] DSA-367 xtokkaetama - buffer overflow |
| 733 |
|
|
{CAN-2003-0652} |
| 734 |
|
|
- xtokkaetama 1.0b-9 |
| 735 |
|
|
[05 Aug 2003] DSA-366 eroaster - insecure temporary file |
| 736 |
|
|
{CAN-2003-0656} |
| 737 |
|
|
- eroaster 2.2.0-0.5-1 |
| 738 |
|
|
[05 Aug 2003] DSA-365 phpgroupware - several vulnerabilities |
| 739 |
|
|
{CAN-2003-0504 CAN-2003-0599 CAN-2003-0657} |
| 740 |
|
|
- phpgroupware 0.9.14.007-1) |
| 741 |
|
|
[04 Aug 2003] DSA-364 man-db - buffer overflows, arbitrary command execution |
| 742 |
|
|
{CAN-2003-0620 CAN-2003-0645} |
| 743 |
|
|
- man-db 2.4.1-13 |
| 744 |
|
|
[03 Aug 2003] DSA-363 postfix - denial of service, bounce-scanning |
| 745 |
|
|
{CAN-2003-0468 CAN-2003-0540} |
| 746 |
|
|
- postfix 1.1.12 |
| 747 |
|
|
[02 Aug 2003] DSA-362 mindi - insecure temporary file |
| 748 |
|
|
{CAN-2003-0617} |
| 749 |
|
|
- mindi 0.86-1 |
| 750 |
|
|
[01 Aug 2003] DSA-361 kdelibs, kdelibs-crypto - several vulnerabilities |
| 751 |
|
|
{CAN-2003-0459 CAN-2003-0370} |
| 752 |
|
|
- kdelibs 4:3.1.3-1 |
| 753 |
|
|
[01 Aug 2003] DSA-360 xfstt - several vulnerabilities |
| 754 |
|
|
{CAN-2003-0581} |
| 755 |
|
|
- xfstt 1.5-1 |
| 756 |
|
|
{CAN-2003-0625} |
| 757 |
|
|
- xfstt 1.5.1-1 |
| 758 |
|
|
[31 Jul 2003] DSA-359 atari800 - buffer overflows |
| 759 |
|
|
{CAN-2003-0630} |
| 760 |
|
|
- atari800 1.3.1-2 |
| 761 |
|
|
[31 Jul 2003] DSA-358 linux-kernel-2.4.18 - several vulnerabilities |
| 762 |
|
|
{CAN-2003-0461 CAN-2003-0462 CAN-2003-0476 CAN-2003-0501 CAN-2003-0550 CAN-2003-0551 CAN-2003-0552 CAN-2003-0018 CAN-2003-0619 CAN-2003-0643} |
| 763 |
|
|
NOTE: 2.4.18/2.4.20 not in unstable/testing. Did not check newer ones. |
| 764 |
|
|
[31 Jul 2003] DSA-357 wu-ftpd - remote root exploit |
| 765 |
|
|
- wu-ftpd 2.6.2-12 |
| 766 |
|
|
[30 Jul 2003] DSA-356 xtokkaetama - buffer overflows |
| 767 |
|
|
{CAN-2003-0611} |
| 768 |
|
|
- xtokkaetama 1.0b-8 |
| 769 |
|
|
[30 Jul 2003] DSA-355 gallery - cross-site scripting |
| 770 |
|
|
{CAN-2003-0614} |
| 771 |
|
|
- gallery 1.3.4-3 |
| 772 |
|
|
[29 Jul 2003] DSA-354 xconq - buffer overflows |
| 773 |
|
|
{CAN-2003-0607} |
| 774 |
|
|
- xconq 7.4.1-2.1 |
| 775 |
|
|
[29 Jul 2003] DSA-353 sup - insecure temporary file |
| 776 |
|
|
{CAN-2003-0606} |
| 777 |
|
|
- sup 1.8-9 |
| 778 |
|
|
[22 Jul 2003] DSA-352 fdclone - insecure temporary directory |
| 779 |
|
|
{CAN-2003-0596} |
| 780 |
|
|
- fdclone 2.04-1 |
| 781 |
|
|
[16 Jul 2003] DSA-351 php4 - cross-site scripting |
| 782 |
|
|
{CAN-2003-0442} |
| 783 |
|
|
- php4 4:4.3.2+rc3-1 |
| 784 |
|
|
[15 Jul 2003] DSA-350 falconseye - buffer overflow |
| 785 |
|
|
{CAN-2003-0358} |
| 786 |
|
|
NOTE: not in testing, fixed in unstable |
| 787 |
|
|
- falconseye 1.9.3-9 |
| 788 |
|
|
[14 Jul 2003] DSA-349 nfs-utils - buffer overflow |
| 789 |
|
|
{CAN-2003-0252} |
| 790 |
|
|
- nfs-utils 1:1.0.3-2 |
| 791 |
|
|
[11 Jul 2003] DSA-348 traceroute-nanog - integer overflow, buffer overflow |
| 792 |
|
|
{CAN-2003-0453} |
| 793 |
|
|
- traceroute-nanog 6.1.1-1.3 |
| 794 |
|
|
[08 Jul 2003] DSA-347 teapop - SQL injection |
| 795 |
|
|
{CAN-2003-0515} |
| 796 |
|
|
- teapop 0.3.5-2 |
| 797 |
|
|
[08 Jul 2003] DSA-346 phpsysinfo - directory traversal |
| 798 |
|
|
{CAN-2003-0536} |
| 799 |
|
|
- phpsysinfo 2.1-1 |
| 800 |
|
|
[08 Jul 2003] DSA-345 xbl - buffer overflow |
| 801 |
|
|
{CAN-2003-0535} |
| 802 |
|
|
- xbl 1.0k-6 |
| 803 |
|
|
[08 Jul 2003] DSA-344 unzip - directory traversal |
| 804 |
joeyh |
84 |
{CAN-2003-0282} |
| 805 |
joeyh |
2 |
- unzip 5.50-3 |
| 806 |
|
|
[08 Jul 2003] DSA-343 skk, ddskk - insecure temporary file |
| 807 |
|
|
{CAN-2003-0539} |
| 808 |
|
|
- skk 10.62a-6 |
| 809 |
|
|
- ddskk 12.1.cvs.20030622-1 |
| 810 |
|
|
[07 Jul 2003] DSA-342 mozart - unsafe mailcap configuration |
| 811 |
|
|
{CAN-2003-0538} |
| 812 |
|
|
NOTE: mozart is not in sarge |
| 813 |
|
|
- mozart 1.2.5.20030212-2 |
| 814 |
|
|
[07 Jul 2003] DSA-341 liece - insecure temporary file |
| 815 |
|
|
{CAN-2003-0537} |
| 816 |
|
|
- liece 2.0+0.20030527cvs-1 |
| 817 |
|
|
[06 Jul 2003] DSA-340 x-face-el - insecure temporary file |
| 818 |
|
|
- x-face-el 1.3.6.23-1 |
| 819 |
|
|
[06 Jul 2003] DSA-339 semi - insecure temporary file |
| 820 |
|
|
{CAN-2003-0440} |
| 821 |
|
|
- semi 1.14.5+20030609-1 |
| 822 |
|
|
[29 Jun 2003] DSA-338 proftpd - SQL injection |
| 823 |
|
|
{CAN-2003-0500} |
| 824 |
|
|
- proftpd 1.2.8-8 |
| 825 |
|
|
[29 Jun 2003] DSA-337 gtksee - buffer overflow |
| 826 |
|
|
{CAN-2003-0444} |
| 827 |
|
|
! gtksee 0.5.6-1 |
| 828 |
|
|
[29 Jun 2003] DSA-336 linux-kernel-2.2.20 - several vulnerabilities |
| 829 |
|
|
{CAN-2002-1380 CVE-2002-0429 CAN-2003-0001 CAN-2003-0127 CAN-2003-0364 CAN-2003-0246 CAN-2003-0244 CAN-2003-0247 CAN-2003-0248} |
| 830 |
|
|
- kernel-source-2.2.25 2.2.25-3 |
| 831 |
|
|
NOTE: did not check newer kernels |
| 832 |
|
|
[28 Jun 2003] DSA-335 mantis - incorrect permissions |
| 833 |
|
|
{CAN-2003-0499} |
| 834 |
|
|
- mantis 0.17.5-6 |
| 835 |
|
|
[28 Jun 2003] DSA-334 xgalaga - buffer overflows |
| 836 |
|
|
{CAN-2003-0454} |
| 837 |
|
|
- xgalaga 2.0.34-22 |
| 838 |
|
|
[27 Jun 2003] DSA-333 acm - integer overflow |
| 839 |
|
|
{CVE-2002-0391} |
| 840 |
|
|
- acm 5.0-10 |
| 841 |
|
|
[27 Jun 2003] DSA-332 linux-kernel-2.4.17 - several vulnerabilities |
| 842 |
|
|
{CVE-2002-0429 CAN-2003-0001 CAN-2003-0127 CAN-2003-0244 CAN-2003-0246 CAN-2003-0247 CAN-2003-0248 CAN-2003-0364} |
| 843 |
|
|
NOTE: note in the archive, and did not check newer kernels |
| 844 |
|
|
[27 Jun 2003] DSA-331 imagemagick - insecure temporary file |
| 845 |
|
|
{CAN-2003-0455} |
| 846 |
|
|
- imagemagick 4:5.5.7-1 |
| 847 |
|
|
[23 Jun 2003] DSA-330 tcptraceroute - failure to drop root privileges |
| 848 |
|
|
{CAN-2003-0489} |
| 849 |
|
|
- tcptraceroute 1.4-4 |
| 850 |
|
|
[20 Jun 2003] DSA-329 osh - buffer overflows |
| 851 |
|
|
{CAN-2003-0452} |
| 852 |
|
|
- osh 1.7-12 |
| 853 |
|
|
[19 Jun 2003] DSA-328 webfs - buffer overflow |
| 854 |
|
|
{CAN-2003-0445} |
| 855 |
|
|
- webfs 1.20 |
| 856 |
|
|
[19 Jun 2003] DSA-327 xbl - buffer overflows |
| 857 |
|
|
{CAN-2003-0451} |
| 858 |
|
|
- xbl 1.0k-5 |
| 859 |
|
|
[19 Jun 2003] DSA-326 orville-write - buffer overflows |
| 860 |
|
|
{CAN-2003-0441} |
| 861 |
|
|
- orville-write 2.54-1 |
| 862 |
|
|
[19 Jun 2003] DSA-325 eldav - insecure temporary file |
| 863 |
|
|
{CAN-2003-0438} |
| 864 |
|
|
- eldav 0.7.2-1 |
| 865 |
|
|
[18 Jun 2003] DSA-324 ethereal - several vulnerabilities |
| 866 |
|
|
{CAN-2003-0428 CAN-2003-0429 CAN-2003-0431 CAN-2003-0432} |
| 867 |
|
|
- ethereal 0.9.13-1. |
| 868 |
|
|
[16 Jun 2003] DSA-323 noweb - insecure temporary files |
| 869 |
|
|
{CAN-2003-0381} |
| 870 |
|
|
- noweb 2.10c-2 |
| 871 |
|
|
[16 Jun 2003] DSA-322 typespeed - buffer overflow |
| 872 |
|
|
{CAN-2003-0435} |
| 873 |
|
|
- typespeed 0.4.4 |
| 874 |
|
|
[13 Jun 2003] DSA-321 radiusd-cistron - buffer overflow |
| 875 |
|
|
{CAN-2003-0450} |
| 876 |
|
|
- radiusd-cistron 1.6.6-2 |
| 877 |
|
|
[13 Jun 2003] DSA-320 mikmod - buffer overflow |
| 878 |
|
|
{CAN-2003-0427} |
| 879 |
|
|
- mikmod 3.1.6-6 |
| 880 |
|
|
[12 Jun 2003] DSA-319 webmin - session ID spoofing |
| 881 |
|
|
{CAN-2003-0101} |
| 882 |
|
|
- webmin 1.070-1 |
| 883 |
|
|
[12 Jun 2003] DSA-318 lyskom-server - denial of service |
| 884 |
|
|
{CAN-2003-0366} |
| 885 |
|
|
- lyskom-server 2.0.7-2 |
| 886 |
|
|
[11 Jun 2003] DSA-317 cupsys - denial of service |
| 887 |
|
|
{CAN-2003-0195} |
| 888 |
|
|
- cupsys 1.1.19final-1 |
| 889 |
|
|
[11 Jun 2003] DSA-316 nethack - buffer overflow, incorrect permissions |
| 890 |
|
|
{CAN-2003-0358 CAN-2003-0359} |
| 891 |
|
|
- nethack 3.4.1-1 |
| 892 |
|
|
- slashem 0.0.6E4F8-6 |
| 893 |
|
|
- jnethack 1.1.5-15 |
| 894 |
|
|
NOTE: DSA contains some strange non-nethack version numbers |
| 895 |
|
|
[11 Jun 2003] DSA-315 gnocatan - buffer overflows, denial of service |
| 896 |
|
|
{CAN-2003-0433} |
| 897 |
|
|
HELP: no mention of any security fixes in debian changelog, |
| 898 |
|
|
HELP: upstream changelog. Mailed maintainer. |
| 899 |
|
|
[11 Jun 2003] DSA-314 atftp - buffer overflow |
| 900 |
|
|
{CAN-2003-0380} |
| 901 |
|
|
- atftp 0.6.2 |
| 902 |
|
|
[11 Jun 2003] DSA-313 ethereal - buffer overflows, integer overflows |
| 903 |
|
|
{CAN-2003-0356 CAN-2003-0357} |
| 904 |
|
|
- ethereal 0.9.12-1 |
| 905 |
|
|
[09 Jun 2003] DSA-312 kernel-patch-2.4.18-powerpc - several vulnerabilities |
| 906 |
|
|
{CVE-2002-0429 CAN-2003-0001 CAN-2003-0127 CAN-2003-0244 CAN-2003-0246 CAN-2003-0247 CAN-2003-0248} |
| 907 |
|
|
NOTE: not in unstable/testing. Did not check other versions. |
| 908 |
|
|
[08 Jun 2003] DSA-311 linux-kernel-2.4.18 - several vulnerabilities |
| 909 |
|
|
{CVE-2002-0429 CAN-2003-0001 CAN-2003-0127 CAN-2003-0244 CAN-2003-0246 CAN-2003-0247 CAN-2003-0248 CAN-2003-0364} |
| 910 |
|
|
NOTE: not in unstable/testing. Did not check other versions. |
| 911 |
|
|
[08 Jun 2003] DSA-310 xaos - improper setuid-root execution |
| 912 |
|
|
{CAN-2003-0385} |
| 913 |
|
|
- xaos 3.1r-4 |
| 914 |
|
|
[06 Jun 2003] DSA-309 eterm - buffer overflow |
| 915 |
|
|
{CAN-2003-0382} |
| 916 |
|
|
- eterm 0.9.2-1 |
| 917 |
|
|
[06 Jun 2003] DSA-308 gzip - insecure temporary files |
| 918 |
|
|
{CVE-1999-1332 CAN-2003-0367} |
| 919 |
|
|
- gzip 1.3.5-6 |
| 920 |
|
|
[27 May 2003] DSA-307 gps - multiple vulnerabilities |
| 921 |
|
|
{CAN-2003-0361 CAN-2003-0360 CAN-2003-0362} |
| 922 |
|
|
- gps 1.1.0-1 |
| 923 |
|
|
[19 May 2003] DSA-306 ircii-pana - buffer overflows, integer overflow |
| 924 |
|
|
{CAN-2003-0321 CAN-2003-0322 CAN-2003-0328} |
| 925 |
|
|
- ircii-pana 1:1.0-0c19-8 |
| 926 |
|
|
[15 May 2003] DSA-305 sendmail - insecure temporary files |
| 927 |
|
|
{CAN-2003-0308} |
| 928 |
|
|
- sendmail 8.12.9-2 |
| 929 |
|
|
[15 May 2003] DSA-304 lv - privilege escalation |
| 930 |
|
|
{CAN-2003-0188} |
| 931 |
|
|
- lv 4.49.5-2 |
| 932 |
|
|
[15 May 2003] DSA-303 mysql - privilege escalation |
| 933 |
|
|
{CAN-2003-0073} |
| 934 |
|
|
- mysql-dfsg 4.0.12-2 |
| 935 |
|
|
{CAN-2003-0150} |
| 936 |
|
|
HELP: not sure if this is fixed |
| 937 |
|
|
[07 May 2003] DSA-302 fuzz - privilege escalation |
| 938 |
|
|
{CAN-2003-0261} |
| 939 |
|
|
- fuzz 0.6-7.1 |
| 940 |
|
|
[07 May 2003] DSA-301 libgtop - buffer overflow |
| 941 |
|
|
{CAN-2001-0928} |
| 942 |
|
|
- libgtop 1.0.13-4 |
| 943 |
|
|
[06 May 2003] DSA-300 balsa - buffer overflow |
| 944 |
|
|
{CAN-2003-0167} |
| 945 |
|
|
- balse 2.0.10 |
| 946 |
|
|
[06 May 2003] DSA-299 leksbot - improper setuid-root execution |
| 947 |
|
|
{CAN-2003-0262} |
| 948 |
|
|
- lexbot 1.2-5 |
| 949 |
|
|
[02 May 2003] DSA-298 epic4 - buffer overflows |
| 950 |
|
|
{CAN-2003-0323} |
| 951 |
|
|
- epic4 1:1.1.11.20030409-1 |
| 952 |
|
|
[01 May 2003] DSA-297 snort - integer overflow, buffer overflow |
| 953 |
|
|
{CAN-2003-0033 CAN-2003-0209} |
| 954 |
|
|
- snort 2.0.0-1 |
| 955 |
|
|
[30 Apr 2003] DSA-296 kdebase - insecure execution |
| 956 |
|
|
{CAN-2003-0204} |
| 957 |
|
|
- kdebase 4:3.1.0-1 |
| 958 |
|
|
[30 Apr 2003] DSA-295 pptpd - buffer overflow |
| 959 |
|
|
{CAN-2003-0213} |
| 960 |
|
|
- pptpd 1.1.4-0.b3.2 |
| 961 |
|
|
[23 Apr 2003] DSA-294 gkrellm-newsticker - missing quoting, incomplete parser |
| 962 |
|
|
{CAN-2003-0205 CAN-2003-0206} |
| 963 |
|
|
NOTE: not in unstable/testing |
| 964 |
|
|
[23 Apr 2003] DSA-293 kdelibs - insecure execution |
| 965 |
|
|
{CAN-2003-0204} |
| 966 |
|
|
- kdebase 4:3.1.0-1 |
| 967 |
|
|
[22 Apr 2003] DSA-292 mime-support - insecure temporary file creation |
| 968 |
|
|
{CAN-2003-0214} |
| 969 |
|
|
- mime-support 3.23-1 |
| 970 |
|
|
[22 Apr 2003] DSA-291 ircii - buffer overflows |
| 971 |
|
|
{CAN-2003-0323} |
| 972 |
|
|
- ircii 20030315-1 |
| 973 |
|
|
[17 Apr 2003] DSA-290 sendmail-wide - char-to-int conversion |
| 974 |
|
|
{CAN-2003-0161} |
| 975 |
|
|
- sendmail-wide 8.12.9+3.5Wbeta-1 |
| 976 |
|
|
[17 Apr 2003] DSA-289 rinetd - incorrect memory resizing |
| 977 |
|
|
{CAN-2003-0212} |
| 978 |
|
|
- rinetd 0.61-2 |
| 979 |
|
|
[17 Apr 2003] DSA-288 openssl - several vulnerabilities |
| 980 |
|
|
{CAN-2003-0147 CAN-2003-0131} |
| 981 |
|
|
- openssl 0.9.7b-1 |
| 982 |
|
|
- openssl096 0.9.6j-1 |
| 983 |
|
|
[15 Apr 2003] DSA-287 epic - buffer overflows |
| 984 |
|
|
{CAN-2003-0324} |
| 985 |
|
|
- epic4 1:1.1.11.20030409-1 |
| 986 |
|
|
[14 Apr 2003] DSA-286 gs-common - insecure temporary file |
| 987 |
|
|
{CAN-2003-0207} |
| 988 |
|
|
- gs-common 0.3.3.1 |
| 989 |
|
|
[14 Apr 2003] DSA-285 lprng - insecure temporary file |
| 990 |
|
|
{CAN-2003-0136} |
| 991 |
|
|
- lprng 3.8.20-4. |
| 992 |
|
|
[12 Apr 2003] DSA-284 kdegraphics - insecure execution |
| 993 |
|
|
{CAN-2003-0204} |
| 994 |
|
|
- kdegraphics 4:3.1.0-1 |
| 995 |
|
|
[11 Apr 2003] DSA-283 xfsdump - insecure file creation |
| 996 |
|
|
{CAN-2003-0173} |
| 997 |
|
|
- xfsdump 2.2.8-1 |
| 998 |
|
|
[09 Apr 2003] DSA-282 glibc - integer overflow |
| 999 |
|
|
{CAN-2003-0028} |
| 1000 |
|
|
- glibc 2.3.1-16 |
| 1001 |
|
|
[08 Apr 2003] DSA-281 moxftp - buffer overflow |
| 1002 |
|
|
{CAN-2003-0203} |
| 1003 |
|
|
- moxftp 2.2-18.20 |
| 1004 |
|
|
[07 Apr 2003] DSA-280 samba - buffer overflow |
| 1005 |
|
|
{CAN-2003-0201 CAN-2003-0196} |
| 1006 |
|
|
- samba 3.0 |
| 1007 |
|
|
[07 Apr 2003] DSA-279 metrics - insecure temporary file creation |
| 1008 |
|
|
{CAN-2003-0202} |
| 1009 |
|
|
NOTE: note in unstable/testing |
| 1010 |
|
|
[04 Apr 2003] DSA-278 sendmail - char-to-int conversion |
| 1011 |
|
|
{CAN-2003-0161} |
| 1012 |
|
|
- sendmail 8.12.9-1 |
| 1013 |
|
|
[03 Apr 2003] DSA-277 apcupsd - buffer overflows, format string |
| 1014 |
|
|
{CAN-2003-0098 CAN-2003-0099} |
| 1015 |
|
|
- apcupsd 3.8.5-1.2 |
| 1016 |
|
|
[03 Apr 2003] DSA-276 linux-kernel-s390 - local privilege escalation |
| 1017 |
|
|
{CAN-2003-0127} |
| 1018 |
|
|
NOTE: this version is not in sarge, did not check others |
| 1019 |
|
|
[02 Apr 2003] DSA-275 lpr-ppd - buffer overflow |
| 1020 |
|
|
{CAN-2003-0144} |
| 1021 |
|
|
- lpr-ppd 1:0.72-3 |
| 1022 |
|
|
[28 Mar 2003] DSA-274 mutt - buffer overflow |
| 1023 |
|
|
{CAN-2003-0167} |
| 1024 |
|
|
- mutt 1.4.0 |
| 1025 |
|
|
[28 Mar 2003] DSA-273 krb4 - Cryptographic weakness |
| 1026 |
|
|
{CAN-2003-0138 CAN-2003-0139} |
| 1027 |
|
|
- krb4 1.2.2-1 |
| 1028 |
|
|
[28 Mar 2003] DSA-272 dietlibc - integer overflow |
| 1029 |
|
|
{CAN-2003-0028} |
| 1030 |
|
|
- dietlibc 0.22-2 |
| 1031 |
|
|
[27 Mar 2003] DSA-271 ecartis - unauthorized password change |
| 1032 |
|
|
{CAN-2003-0162} |
| 1033 |
|
|
- ecartis 1.0.0+cvs.20030321-1 |
| 1034 |
|
|
[27 Mar 2003] DSA-270 linux-kernel-mips - local privilege escalation |
| 1035 |
|
|
{CAN-2003-0127} |
| 1036 |
|
|
NOTE: not in unstable/testing, did not check other versions |
| 1037 |
|
|
[26 Mar 2003] DSA-269 heimdal - Cryptographic weakness |
| 1038 |
|
|
{CAN-2003-0138} |
| 1039 |
|
|
- heimdal 0.5.2-1 |
| 1040 |
|
|
[25 Mar 2003] DSA-268 mutt - buffer overflow |
| 1041 |
|
|
{CAN-2003-0140} |
| 1042 |
|
|
- mutt 1.5.4-1 |
| 1043 |
|
|
[24 Mar 2003] DSA-267 lpr - buffer overflow |
| 1044 |
|
|
{CAN-2003-0144} |
| 1045 |
|
|
- lpr 1:2000.05.07-4.20 |
| 1046 |
|
|
[24 Mar 2003] DSA-266 krb5 - several vulnerabilities |
| 1047 |
|
|
{CAN-2003-0028} |
| 1048 |
|
|
- krb5 1.3.3-2 |
| 1049 |
|
|
NOTE: changelog does not mention this one, verified patch from |
| 1050 |
|
|
NOTE: Tom Yu was applied to this version. |
| 1051 |
|
|
{CAN-2003-0072} |
| 1052 |
|
|
- krb5 1.2.7-3 |
| 1053 |
|
|
NOTE: changelog does not mention this one, verified patch from |
| 1054 |
|
|
NOTE: upstream was applied to this version. |
| 1055 |
|
|
{CAN-2003-0082} |
| 1056 |
|
|
- krb5 1.3.3-2 |
| 1057 |
|
|
{CAN-2003-0138 VU#623217} |
| 1058 |
|
|
- krb5 1.2.7-3 |
| 1059 |
|
|
{CAN-2003-0139 VU#442569} |
| 1060 |
|
|
- krb5 1.2.7-3 |
| 1061 |
|
|
[21 Mar 2003] DSA-265 bonsai - several vulnerabilities |
| 1062 |
|
|
{CAN-2003-0152 CAN-2003-0153 CAN-2003-0154 CAN-2003-0155} |
| 1063 |
|
|
- bonsai 1.3+cvs20030317-1 |
| 1064 |
|
|
[19 Mar 2003] DSA-264 lxr - missing filename sanitizing |
| 1065 |
|
|
{CAN-2003-0156} |
| 1066 |
|
|
- lxr 0.3-4 |
| 1067 |
|
|
[17 Mar 2003] DSA-263 netpbm-free - math overflow errors |
| 1068 |
|
|
{CAN-2003-0146} |
| 1069 |
|
|
- netpbm-free 2:9.20-9 |
| 1070 |
|
|
[15 Mar 2003] DSA-262 samba - remote exploit |
| 1071 |
|
|
{CAN-2003-0085 CAN-2003-0086} |
| 1072 |
|
|
- samba 2.2.8 |
| 1073 |
|
|
[14 Mar 2003] DSA-261 tcpdump - infinite loop |
| 1074 |
|
|
{CAN-2003-0093 CAN-2003-0145} |
| 1075 |
|
|
NOTE: DSA reports sid was not affected, sarge has sid version |
| 1076 |
|
|
[13 Mar 2003] DSA-260 file - buffer overflow |
| 1077 |
|
|
{CAN-2003-0102} |
| 1078 |
|
|
- file 3.40-1.1 |
| 1079 |
|
|
[12 Mar 2003] DSA-259 qpopper - mail user privilege escalation |
| 1080 |
|
|
{CAN-2003-0143} |
| 1081 |
|
|
- qpopper 4.0.4-9 |
| 1082 |
|
|
[10 Mar 2003] DSA-258 ethereal - format string vulnerability |
| 1083 |
|
|
{CAN-2003-0081} |
| 1084 |
|
|
- ethereal 0.9.9-2 |
| 1085 |
|
|
[04 Mar 2003] DSA-257 sendmail - remote exploit |
| 1086 |
|
|
{CAN-2002-1337} |
| 1087 |
|
|
- sendmail 8.12.8 |
| 1088 |
|
|
[28 Feb 2003] DSA-256 mhc - insecure temporary file |
| 1089 |
|
|
{CAN-2003-0120} |
| 1090 |
|
|
- mhc 0.25+20030224-1 |
| 1091 |
|
|
[27 Feb 2003] DSA-255 tcpdump - infinite loop |
| 1092 |
|
|
{CAN-2003-0108 CAN-2002-0380} |
| 1093 |
|
|
- tcpdump 3.7.1-1.2 |
| 1094 |
|
|
[27 Feb 2003] DSA-254 traceroute-nanog - buffer overflow |
| 1095 |
|
|
{CAN-2002-1051 CAN-2002-1364 CAN-2002-1386 CAN-2002-1387} |
| 1096 |
|
|
- traceroute-nanog 6.3.0-1 |
| 1097 |
|
|
[24 Feb 2003] DSA-253 openssl - information leak |
| 1098 |
|
|
{CAN-2003-0078} |
| 1099 |
|
|
- openssl 0.9.7a-1 |
| 1100 |
|
|
[21 Feb 2003] DSA-252 slocate - buffer overflow |
| 1101 |
|
|
{CAN-2003-0056} |
| 1102 |
|
|
- slocate 2.7-1 |
| 1103 |
|
|
[14 Feb 2003] DSA-251 w3m - missing HTML quoting |
| 1104 |
|
|
{CAN-2002-1335 CAN-2002-1348} |
| 1105 |
|
|
- w3m 0.3.2.2-1 |
| 1106 |
|
|
[12 Feb 2003] DSA-250 w3mmee-ssl - missing HTML quoting |
| 1107 |
|
|
{CAN-2002-1335 CAN-2002-1348} |
| 1108 |
|
|
NOTE: not in sid/sarge |
| 1109 |
|
|
[11 Feb 2003] DSA-249 w3mmee - missing HTML quoting |
| 1110 |
|
|
{CAN-2002-1335 CAN-2002-1348} |
| 1111 |
|
|
- w3mmee 0.3.p24.17-3 |
| 1112 |
|
|
[31 Jan 2003] DSA-248 hypermail - buffer overflows |
| 1113 |
|
|
{CAN-2003-0057} |
| 1114 |
|
|
- hypermail 2.1.6-1 |
| 1115 |
|
|
[30 Jan 2003] DSA-247 courier-ssl - missing input sanitizing |
| 1116 |
|
|
{CAN-2003-0040} |
| 1117 |
|
|
- courier 0.40.2-3 |
| 1118 |
|
|
[29 Jan 2003] DSA-246 tomcat - information exposure, cross site scripting |
| 1119 |
|
|
{CAN-2003-0042 CAN-2003-0043 CAN-2003-0044} |
| 1120 |
|
|
NOTE: tomcat not in sid/sarge |
| 1121 |
|
|
NOTE: tomcat4 not affected |
| 1122 |
|
|
[28 Jan 2003] DSA-245 dhcp3 - ignored counter boundary |
| 1123 |
|
|
{CAN-2003-0039} |
| 1124 |
|
|
- dhcp3 1.1.2-1 |
| 1125 |
|
|
[27 Jan 2003] DSA-244 noffle - buffer overflows |
| 1126 |
|
|
{CAN-2003-0037} |
| 1127 |
|
|
- noffle 1.1.2-1 |
| 1128 |
|
|
[24 Jan 2003] DSA-243 kdemultimedia - several vulnerabilities |
| 1129 |
|
|
{CAN-2002-1393} |
| 1130 |
|
|
- kdemultimedia 4:3.1 |
| 1131 |
|
|
[24 Jan 2003] DSA-242 kdebase - several vulnerabilities |
| 1132 |
|
|
{CAN-2002-1393} |
| 1133 |
|
|
- kdebase 4:3.1 |
| 1134 |
|
|
[24 Jan 2003] DSA-241 kdeutils - several vulnerabilities |
| 1135 |
|
|
{CAN-2002-1393} |
| 1136 |
|
|
- kdeutils 4:3.1 |
| 1137 |
|
|
[23 Jan 2003] DSA-240 kdegames - several vulnerabilities |
| 1138 |
|
|
{CAN-2002-1393} |
| 1139 |
|
|
- kdegames 4:3.1 |
| 1140 |
|
|
[23 Jan 2003] DSA-239 kdesdk - several vulnerabilities |
| 1141 |
|
|
{CAN-2002-1393} |
| 1142 |
|
|
- kdesdk 4:3.1 |
| 1143 |
|
|
[23 Jan 2003] DSA-238 kdepim - several vulnerabilities |
| 1144 |
|
|
{CAN-2002-1393} |
| 1145 |
|
|
- kdepim 4:3.1 |
| 1146 |
|
|
[22 Jan 2003] DSA-237 kdenetwork - several vulnerabilities |
| 1147 |
|
|
{CAN-2002-1393} |
| 1148 |
|
|
- kdenetwork 4:3.1 |
| 1149 |
|
|
[22 Jan 2003] DSA-236 kdelibs - several vulnerabilities |
| 1150 |
|
|
{CAN-2002-1393} |
| 1151 |
|
|
- kdelibs 4:3.1 |
| 1152 |
|
|
[22 Jan 2003] DSA-235 kdegraphics - several vulnerabilities |
| 1153 |
|
|
{CAN-2002-1393} |
| 1154 |
|
|
- kdegraphics 4:3.1 |
| 1155 |
|
|
[22 Jan 2003] DSA-234 kdeadmin - several vulnerabilities |
| 1156 |
|
|
{CAN-2002-1393} |
| 1157 |
|
|
- kdeadmin 4:3.1 |
| 1158 |
|
|
[21 Jan 2003] DSA-233 cvs - doubly freed memory |
| 1159 |
|
|
{CAN-2003-0015} |
| 1160 |
|
|
- cvs 1.11.2-5.1 |
| 1161 |
|
|
[20 Jan 2003] DSA-232 cupsys - several vulnerabilities |
| 1162 |
|
|
{CAN-2002-1366 CAN-2002-1367 CAN-2002-1368 CAN-2002-1369 CAN-2002-1371 CAN-2002-1372 CAN-2002-1383 CAN-2002-1384} |
| 1163 |
|
|
- cupsys 1.1.18-1 |
| 1164 |
|
|
[17 Jan 2003] DSA-231 dhcp3 - stack overflows |
| 1165 |
|
|
{CAN-2003-0026} |
| 1166 |
|
|
- dhcp3 3.0+3.0.1rc11-1 |
| 1167 |
|
|
[16 Jan 2003] DSA-230 bugzilla - insecure permissions, spurious backup files |
| 1168 |
|
|
NOTE: not in testing due to 3 newer security holes |
| 1169 |
|
|
{CAN-2003-0012} |
| 1170 |
|
|
- bugzilla 2.16.2 |
| 1171 |
|
|
{CAN-2003-0013} |
| 1172 |
|
|
- bugzilla 2.16.2 |
| 1173 |
|
|
[15 Jan 2003] DSA-229 imp - SQL injection |
| 1174 |
|
|
{CAN-2003-0025} |
| 1175 |
|
|
NOTE: I think imp3 is ok. |
| 1176 |
|
|
[14 Jan 2003] DSA-228 libmcrypt - buffer overflows and memory leak |
| 1177 |
|
|
{CAN-2003-0031 CAN-2003-0032} |
| 1178 |
|
|
- libmcrypt 2.5.5-1 |
| 1179 |
|
|
[13 Jan 2003] DSA-227 openldap2 - buffer overflows and other bugs |
| 1180 |
|
|
{CAN-2002-1378 CAN-2002-1379 CAN-2002-1508} |
| 1181 |
|
|
- openldap2 2.0.27-3 |
| 1182 |
|
|
[10 Jan 2003] DSA-226 xpdf-i - integer overflow |
| 1183 |
|
|
{CAN-2002-1384} |
| 1184 |
|
|
- xpdf 2.01-2 |
| 1185 |
|
|
[09 Jan 2003] DSA-225 tomcat4 - source disclosure |
| 1186 |
|
|
{CAN-2002-1394} |
| 1187 |
|
|
! tomcat4 4.1.16-1 |
| 1188 |
|
|
NOTE another RC (unreproducible?) bug and missing deps (#263201) |
| 1189 |
|
|
NOTE are keeping the fix out of testing |
| 1190 |
|
|
NOTE this is the second unfixed security hole in tomcat4 in testing.. |
| 1191 |
|
|
[08 Jan 2003] DSA-224 canna - buffer overflow and more |
| 1192 |
|
|
{CAN-2002-1158 CAN-2002-1159} |
| 1193 |
|
|
- canna 3.6p1-1 |
| 1194 |
|
|
[07 Jan 2003] DSA-223 geneweb - information exposure |
| 1195 |
|
|
{CAN-2002-1390} |
| 1196 |
|
|
- geneweb 4.09-1 |
| 1197 |
|
|
[06 Jan 2003] DSA-222 xpdf - integer overflow |
| 1198 |
|
|
{CAN-2002-1384} |
| 1199 |
|
|
- xpdf 2.01-2 |
| 1200 |
|
|
[03 Jan 2003] DSA-221 mhonarc - cross site scripting |
| 1201 |
|
|
{CAN-2002-1388} |
| 1202 |
|
|
- mhonarc 2.5.14-1 |
| 1203 |
|
|
[02 Jan 2003] DSA-220 squirrelmail - cross site scripting |
| 1204 |
|
|
{CAN-2002-1341} |
| 1205 |
|
|
- squirrelmail 1:1.3.2-2 |
| 1206 |
|
|
|
| 1207 |
|
|
------- These processed by Djoumé SALVETTI <salvetti@crans.org> ----- |
| 1208 |
|
|
|
| 1209 |
|
|
[31 Dec 2002] DSA-219 dhcpcd - remote command execution |
| 1210 |
|
|
{CAN-2002-1403} |
| 1211 |
|
|
- dhcpcd 1.3.22pl2-2 |
| 1212 |
|
|
[30 Dec 2002] DSA-218 bugzilla - cross site scripting |
| 1213 |
|
|
NOTE: not in testing, fixed in unstable (bugzilla 2.16.2-1). |
| 1214 |
|
|
[27 Dec 2002] DSA-217 typespeed - buffer overflow |
| 1215 |
|
|
{CAN-2002-1389} |
| 1216 |
|
|
- typespeed 0.4.2-2 |
| 1217 |
|
|
[24 Dec 2002] DSA-216 fetchmail - buffer overflow |
| 1218 |
|
|
{CAN-2002-1365} |
| 1219 |
|
|
- fetchmail 6.2.0-1 |
| 1220 |
|
|
[23 Dec 2002] DSA-215 cyrus-imapd - buffer overflow |
| 1221 |
|
|
{CAN-2002-1580} |
| 1222 |
|
|
- cyrus-imapd 1.5.19-9.10 |
| 1223 |
|
|
[20 Dec 2002] DSA-214 kdnetwork - buffer overflows |
| 1224 |
|
|
{CAN-2002-1306} |
| 1225 |
|
|
- kdenetwork 2.2.2-14.20 |
| 1226 |
|
|
NOTE: there is a typo in the DSA, the name of the package is kdenetwork. |
| 1227 |
|
|
[19 Dec 2002] DSA-213 libpng - buffer overflow |
| 1228 |
|
|
{CAN-2002-1363} |
| 1229 |
|
|
- libpng 1.0.12-7 |
| 1230 |
|
|
- libpng3 1.2.5-8 |
| 1231 |
|
|
[17 Dec 2002] DSA-212 mysql - multiple problems |
| 1232 |
|
|
{CAN-2002-1373 CAN-2002-1374 CAN-2002-1375 CAN-2002-1376} |
| 1233 |
|
|
- mysql-dfsg 4.0.7.gamma-1 |
| 1234 |
|
|
[13 Dec 2002] DSA-211 micq - denial of service |
| 1235 |
|
|
{CAN-2002-1362} |
| 1236 |
|
|
NOTE: not in testing nor unstable (was fixed in 0.4.9.4-1) |
| 1237 |
|
|
[13 Dec 2002] DSA-210 lynx - CRLF injection |
| 1238 |
|
|
{CAN-2002-1405} |
| 1239 |
|
|
- lynx 2.8.4.1b-4 |
| 1240 |
|
|
NOTE: lynx-ssl not in testing nor unstable. |
| 1241 |
|
|
[12 Dec 2002] DSA-209 wget - directory traversal |
| 1242 |
|
|
{CAN-2002-1344} |
| 1243 |
|
|
- wget 1.8.2-8 |
| 1244 |
|
|
[12 Dec 2002] DSA-208 perl - broken safe compartment |
| 1245 |
|
|
{CAN-2002-1323} |
| 1246 |
|
|
- perl 5.8.0-14 |
| 1247 |
|
|
[11 Dec 2002] DSA-207 tetex-bin - arbitrary command execution |
| 1248 |
|
|
{CAN-2002-0836} |
| 1249 |
|
|
- tetex-bin 1.0.7+20021025-4 |
| 1250 |
|
|
[10 Dec 2002] DSA-206 tcpdump - denial of service |
| 1251 |
|
|
{CAN-2002-1350} |
| 1252 |
|
|
- tcpdump 3.7.2-1 |
| 1253 |
|
|
[10 Dec 2002] DSA-205 gtetrinet - buffer overflow |
| 1254 |
|
|
- gtetrinet 0.4.4-1 |
| 1255 |
|
|
NOTE: no CAN not CVE for this one |
| 1256 |
|
|
[05 Dec 2002] DSA-204 kdelibs - arbitrary program execution |
| 1257 |
|
|
{CAN-2002-1281 CAN-2002-1282} |
| 1258 |
|
|
- kdelibs 4:3.1.0-1 |
| 1259 |
|
|
[04 Dec 2002] DSA-203 smb2www - arbitrary command execution |
| 1260 |
|
|
{CAN-2002-1342} |
| 1261 |
|
|
- smb2www 980804-17 |
| 1262 |
|
|
[03 Dec 2002] DSA-202 im - insecure temporary files |
| 1263 |
|
|
{CAN-2002-1395} |
| 1264 |
|
|
- im 141-20 |
| 1265 |
|
|
[02 Dec 2002] DSA-201 freeswan - denial of service |
| 1266 |
|
|
{CAN-2002-0666 VU#459371} |
| 1267 |
|
|
- freeswan 1.99-1 |
| 1268 |
|
|
[22 Nov 2002] DSA-200 samba - remote exploit |
| 1269 |
|
|
{CAN-2002-1318} |
| 1270 |
|
|
- samba 2.99.cvs.20020713-1 |
| 1271 |
|
|
[19 Nov 2002] DSA-199 mhonarc - cross site scripting |
| 1272 |
|
|
{CAN-2002-1307} |
| 1273 |
|
|
- mhonarc 2.5.13-1 |
| 1274 |
|
|
[18 Nov 2002] DSA-198 nullmailer - denial of service |
| 1275 |
|
|
{CAN-2002-1313} |
| 1276 |
|
|
- nullmailer 1.00RC5-17 |
| 1277 |
|
|
[15 Nov 2002] DSA-197 courier - buffer overflow |
| 1278 |
|
|
{CAN-2002-1311} |
| 1279 |
|
|
- courier 0.40.0-1 |
| 1280 |
|
|
[14 Nov 2002] DSA-196 bind - several vulnerabilities |
| 1281 |
|
|
{CAN-2002-0029 CAN-2002-1219 CAN-2002-1220 CAN-2002-1221} |
| 1282 |
|
|
- bind 8.3.3-3 |
| 1283 |
|
|
[13 Nov 2002] DSA-195 apache-perl - several vulnerabilities |
| 1284 |
|
|
{CAN-2002-0839 CAN-2002-0840 CAN-2002-0843 CAN-2001-0131 CAN-2002-1233} |
| 1285 |
|
|
- apache-perl 1.3.26-1.1-1.27-3-1 |
| 1286 |
|
|
[12 Nov 2002] DSA-194 masqmail - buffer overflows |
| 1287 |
|
|
{CAN-2002-1279} |
| 1288 |
|
|
- masqmail 0.2.15-1 |
| 1289 |
|
|
[11 Nov 2002] DSA-193 kdenetwork - buffer overflow |
| 1290 |
|
|
{CAN-2002-1247} |
| 1291 |
|
|
- kdenetwok 2.2.2-14.3 |
| 1292 |
|
|
[08 Nov 2002] DSA-192 html2ps - arbitrary code execution |
| 1293 |
|
|
{CAN-2002-1275} |
| 1294 |
|
|
- html2ps 1.0b3-2 |
| 1295 |
|
|
[07 Nov 2002] DSA-191 squirrelmail - cross site scripting |
| 1296 |
|
|
{CAN-2002-1131 CAN-2002-1132 CAN-2002-1276} |
| 1297 |
|
|
- squirrelmail 1.2.8-1.1 |
| 1298 |
|
|
[07 Nov 2002] DSA-190 wmaker - buffer overflow |
| 1299 |
|
|
{CAN-2002-1277} |
| 1300 |
|
|
- wmaker 0.80.1-4 |
| 1301 |
|
|
[06 Nov 2002] DSA-189 luxman - local root exploit |
| 1302 |
|
|
{CAN-2002-1245} |
| 1303 |
|
|
- luxman 0.41-19 |
| 1304 |
|
|
[05 Nov 2002] DSA-188 apache-ssl - several vulnerabilities |
| 1305 |
|
|
{CAN-2002-0839 CAN-2002-0840 CAN-2002-0843} |
| 1306 |
|
|
- apache 1.3.27-0.1 |
| 1307 |
|
|
{CAN-2001-0131 CAN-2002-1233} |
| 1308 |
|
|
- apache 1.3.27-1 |
| 1309 |
|
|
HELP: note sure about this |
| 1310 |
|
|
NOTE: I have mailed maintainers |
| 1311 |
|
|
{NO-CAN Several buffer overflows in ApacheBench} |
| 1312 |
|
|
HELP: I don't know about this |
| 1313 |
|
|
NOTE: I have mailed maintainers |
| 1314 |
|
|
[04 Nov 2002] DSA-187 apache - several vulnerabilities |
| 1315 |
|
|
{CAN-2002-0839 CAN-2002-0840 CAN-2002-0843} |
| 1316 |
|
|
- apache 1.3.27-0.1 |
| 1317 |
|
|
{CAN-2001-0131 CAN-2002-1233} |
| 1318 |
|
|
- apache 1.3.27-1 |
| 1319 |
|
|
HELP: note sure about this |
| 1320 |
|
|
NOTE: I have mailed maintainers |
| 1321 |
|
|
{NO-CAN Several buffer overflows in ApacheBench} |
| 1322 |
|
|
HELP: I don't know about this |
| 1323 |
|
|
NOTE: I have mailed maintainers |
| 1324 |
|
|
[01 Nov 2002] DSA-186 log2mail - buffer overflow |
| 1325 |
|
|
{CAN-2002-1251} |
| 1326 |
|
|
- log2mail 0.2.6-1 |
| 1327 |
|
|
[31 Oct 2002] DSA-185 heimdal - buffer overflow |
| 1328 |
|
|
{CAN-2002-1235} |
| 1329 |
|
|
- heimdal 0.4e-22 |
| 1330 |
|
|
[30 Oct 2002] DSA-184 krb4 - buffer overflow |
| 1331 |
|
|
{CAN-2002-1235} |
| 1332 |
|
|
- krb4 1.1-11-8 |
| 1333 |
|
|
[29 Oct 2002] DSA-183 krb5 - buffer overflow |
| 1334 |
|
|
{CAN-2002-1235} |
| 1335 |
|
|
- krb5 1.2.6-2 |
| 1336 |
|
|
[28 Oct 2002] DSA-182 kdegraphics - buffer overflow |
| 1337 |
|
|
{CAN-2002-0838} |
| 1338 |
|
|
- kdegraphics 2.2.2-6.9 |
| 1339 |
|
|
[22 Oct 2002] DSA-181 libapache-mod-ssl - cross site scripting |
| 1340 |
|
|
{CAN-2002-1157} |
| 1341 |
|
|
- libapache-mod-ssl 2.8.9-2.3 |
| 1342 |
|
|
[21 Oct 2002] DSA-180 nis - information leak |
| 1343 |
|
|
{CAN-2002-1232} |
| 1344 |
|
|
- nis 3.9-6.2 |
| 1345 |
|
|
[18 Oct 2002] DSA-179 gnome-gv - buffer overflow |
| 1346 |
|
|
{CAN-2002-0838} |
| 1347 |
|
|
- gnome-gv 1.99.7-9 |
| 1348 |
|
|
[17 Oct 2002] DSA-178 heimdal - remote command execution |
| 1349 |
|
|
{CAN-2002-1225, CAN-2002-1226} |
| 1350 |
|
|
- heimdal 0.4e-21 |
| 1351 |
|
|
[17 Oct 2002] DSA-177 pam - serious security violation |
| 1352 |
|
|
{CAN-2002-1227} |
| 1353 |
|
|
- pam 0.76-6 |
| 1354 |
|
|
[16 Oct 2002] DSA-176 gv - buffer overflow |
| 1355 |
|
|
{CAN-2002-0838} |
| 1356 |
|
|
- gv 3.5.8-27 |
| 1357 |
|
|
[15 Oct 2002] DSA-175 syslog-ng - buffer overflow |
| 1358 |
|
|
{CAN-2002-1200} |
| 1359 |
|
|
- syslog-ng 1.5.21-1 |
| 1360 |
|
|
[14 Oct 2002] DSA-174 heartbeat - buffer overflow |
| 1361 |
|
|
{CAN-2002-1215} |
| 1362 |
|
|
- heartbeat 0.4.9.2-1 |
| 1363 |
|
|
[09 Oct 2002] DSA-173 bugzilla - privilege escalation |
| 1364 |
|
|
{CAN-2002-1196} |
| 1365 |
|
|
NOTE: not in testing, fixed in unstable (bugzilla 2.16.0-2.1) |
| 1366 |
|
|
[08 Oct 2002] DSA-172 tkmail - insecure temporary files |
| 1367 |
|
|
{CAN-2002-1193} |
| 1368 |
|
|
NOTE: not in testing nor unstable (was fixed in 4.0beta9-9) |
| 1369 |
|
|
[07 Oct 2002] DSA-171 fetchmail - buffer overflows |
| 1370 |
|
|
{CAN-2002-1175, CAN-2002-1174} |
| 1371 |
|
|
- fetchmail 6.1.0-1 |
| 1372 |
|
|
NOTE: fetchmail-ssl not in testing, fixed in unstable (fetchmail-ssl 6.1.0-1) |
| 1373 |
|
|
[04 Oct 2002] DSA-170 tomcat4 - source code disclosure |
| 1374 |
|
|
{CAN-2002-1148} |
| 1375 |
|
|
! tomcat4 4.1.12-1 |
| 1376 |
|
|
NOTE: only 4.0.4-4 in testing (which seems to be vulnerable) |
| 1377 |
|
|
[25 Sep 2002] DSA-169 htcheck - cross site scripting |
| 1378 |
|
|
{CAN-2002-1195} |
| 1379 |
|
|
- htcheck 1.1-1.2 |
| 1380 |
|
|
[18 Sep 2002] DSA-168 php - bypassing safe_mode, CRLF injection |
| 1381 |
|
|
{CAN-2002-0985 CAN-2002-0986} |
| 1382 |
|
|
- php3 3.0.18-23.2 |
| 1383 |
|
|
- php4 4.2.3-3 |
| 1384 |
|
|
NOTE: php3 is not in testing, it seems to be wait for tiff and gcc transition |
| 1385 |
|
|
NOTE: and is out of date on alpha and arm |
| 1386 |
|
|
[16 Sep 2002] DSA-167 kdelibs - cross site scripting |
| 1387 |
|
|
{CAN-2002-1151} |
| 1388 |
|
|
- kdelibs 2.2.2-14 |
| 1389 |
|
|
NOTE: there is a typo in the DSA that mentionned Konquerer instead of kdelibs |
| 1390 |
|
|
[13 Sep 2002] DSA-166 purity - buffer overflows |
| 1391 |
|
|
{CAN-2002-1124} |
| 1392 |
|
|
- purity 1-16 |
| 1393 |
|
|
[12 Sep 2002] DSA-165 postgresql - buffer overflows |
| 1394 |
|
|
{CAN-2002-0972 CAN-2002-1398 CAN-2002-1400 CAN-2002-1401 CVE-2002-1402} |
| 1395 |
|
|
- postgresql 7.2.2-2 |
| 1396 |
|
|
[10 Sep 2002] DSA-164 cacti - arbitrary code execution |
| 1397 |
|
|
{CAN-2002-1477 CAN-2002-1478} |
| 1398 |
|
|
- cacti 0.6.8a-2 |
| 1399 |
|
|
[09 Sep 2002] DSA-163 mhonarc - cross site scripting |
| 1400 |
|
|
{CVE-2002-0738} |
| 1401 |
|
|
- mhonarc 2.5.11-1 |
| 1402 |
|
|
[06 Sep 2002] DSA-162 ethereal - buffer overflow |
| 1403 |
|
|
{CAN-2002-0834} |
| 1404 |
|
|
- ethereal 0.9.6-1 |
| 1405 |
|
|
[04 Sep 2002] DSA-161 mantis - privilege escalation |
| 1406 |
|
|
{CAN-2002-1115 CAN-2002-1116} |
| 1407 |
|
|
- mantis 0.17.5-2 |
| 1408 |
|
|
[03 Sep 2002] DSA-160 scrollkeeper - insecure temporary file creation |
| 1409 |
|
|
{CAN-2002-0662} |
| 1410 |
|
|
- scrollkeeper 0.3.11-2 |
| 1411 |
|
|
[28 Aug 2002] DSA-159 python - insecure temporary files |
| 1412 |
|
|
{CAN-2002-1119} |
| 1413 |
|
|
- python2.1 2.1.3-6a |
| 1414 |
|
|
- python2.2 2.2.1-8 |
| 1415 |
|
|
NOTE: python1.5 not in testing nor unstable (was fixed in 1.5.2-24) |
| 1416 |
|
|
NOTE: python2.3 is not vulnerable |
| 1417 |
|
|
[27 Aug 2002] DSA-158 gaim - arbitrary program execution |
| 1418 |
|
|
{CVE-2002-0989} |
| 1419 |
|
|
- gaim 0.59.1-2 |
| 1420 |
|
|
[23 Aug 2002] DSA-157 irssi-text - denial of service |
| 1421 |
|
|
{CAN-2002-0983} |
| 1422 |
|
|
- irssi-text 0.8.5-2 |
| 1423 |
|
|
[22 Aug 2002] DSA-156 epic4-script-light - arbitrary script execution |
| 1424 |
|
|
{CVE-2002-0984} |
| 1425 |
|
|
- epic4-script-light 2.7.30p5-2 |
| 1426 |
|
|
[17 Aug 2002] DSA-155 kdelibs - privacy escalation with Konqueror |
| 1427 |
|
|
{CAN-2002-0970} |
| 1428 |
|
|
- kdelibs 4:2.2.2-14 |
| 1429 |
|
|
[15 Aug 2002] DSA-154 fam - privilege escalation |
| 1430 |
|
|
{CVE-2002-0875} |
| 1431 |
|
|
- fam 2.6.8-1 |
| 1432 |
|
|
[14 Aug 2002] DSA-153 mantis - cross site code execution and privilege escalation |
| 1433 |
|
|
{CAN-2002-1114 CAN-2002-1113 CAN-2002-1112 CAN-2002-1111 CAN-2002-1110} |
| 1434 |
|
|
- mantis 0.17.4a-2 |
| 1435 |
|
|
[13 Aug 2002] DSA-152 l2tpd - missing random seed |
| 1436 |
|
|
{CVE-2002-0872 CVE-2002-0873} |
| 1437 |
|
|
NOTE: not in testing (was fixed in unstable 0.68-1) |
| 1438 |
|
|
[13 Aug 2002] DSA-151 xinetd - pipe exposure |
| 1439 |
|
|
{CVE-2002-0871} |
| 1440 |
|
|
- xinetd 2.3.7-1 |
| 1441 |
|
|
[13 Aug 2002] DSA-150 interchange - illegal file exposition |
| 1442 |
|
|
{CAN-2002-0874} |
| 1443 |
|
|
- interchange 4.8.6-1 |
| 1444 |
|
|
[13 Aug 2002] DSA-149 glibc - integer overflow |
| 1445 |
|
|
{CVE-2002-0391} |
| 1446 |
|
|
- glibc 2.2.5-13 |
| 1447 |
|
|
[12 Aug 2002] DSA-148 hylafax - buffer overflows and format string vulnerabilities |
| 1448 |
|
|
{CVE-2002-1049 CVE-2002-1050 CAN-2001-1034} |
| 1449 |
|
|
- hylafax 4.1.2-2.1 |
| 1450 |
|
|
[08 Aug 2002] DSA-147 mailman - cross-site scripting |
| 1451 |
|
|
{CAN-2002-0388 CAN-2002-0855} |
| 1452 |
|
|
- mailman 2.0.12-1 |
| 1453 |
|
|
[08 Aug 2002] DSA-146 dietlibc - integer overflow |
| 1454 |
|
|
{CVE-2002-0391} |
| 1455 |
|
|
- dietlibc 0.20-0cvs20020808 |
| 1456 |
|
|
[07 Aug 2002] DSA-145 tinyproxy - doubly freed memory |
| 1457 |
|
|
{CVE-2002-0847} |
| 1458 |
|
|
- tinyproxy 1.4.3-3 |
| 1459 |
|
|
[06 Aug 2002] DSA-144 wwwoffle - improper input handling |
| 1460 |
|
|
{CVE-2002-0818} |
| 1461 |
|
|
- wwwoffle 2.7d-1 |
| 1462 |
|
|
[05 Aug 2002] DSA-143 krb5 - integer overflow |
| 1463 |
|
|
{CVE-2002-0391} |
| 1464 |
|
|
- krb5 1.2.5-2 |
| 1465 |
|
|
[05 Aug 2002] DSA-142 openafs - integer overflow |
| 1466 |
|
|
{CVE-2002-0391} |
| 1467 |
|
|
- openafs 1.2.6-1 |
| 1468 |
|
|
[01 Aug 2002] DSA-141 mpack - buffer overflow |
| 1469 |
|
|
{CAN-2002-1425} |
| 1470 |
|
|
- mpack 1.5-9 |
| 1471 |
|
|
[05 Aug 2002] DSA-140 libpng - buffer overflow |
| 1472 |
|
|
{CAN-2002-0660 CAN-2002-0728} |
| 1473 |
|
|
- libpng 1.0.12-4 |
| 1474 |
|
|
- libpng3 1.2.1-2 |
| 1475 |
|
|
[01 Aug 2002] DSA-139 super - format string vulnerability |
| 1476 |
|
|
{CVE-2002-0817} |
| 1477 |
|
|
- super 3.18.0-3 |
| 1478 |
|
|
[01 Aug 2002] DSA-138 gallery - remote exploit |
| 1479 |
|
|
{CAN-2002-1412} |
| 1480 |
|
|
- gallery 1.3-3 |
| 1481 |
|
|
[30 Jul 2002] DSA-137 mm - insecure temporary files |
| 1482 |
|
|
{CVE-2002-0658} |
| 1483 |
|
|
- mm 1.1.3-7 |
| 1484 |
|
|
[30 Jul 2002] DSA-136 openssl - multiple remote exploits |
| 1485 |
|
|
{CAN-2002-0655 CAN-2002-0656 CAN-2002-0657 CAN-2002-0659} |
| 1486 |
|
|
- openssl 0.9.6e-1 |
Parent Directory
| 
Revision Log