[SECURITY] [DSA-262-1] samba security fix

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - Debian Security Advisory DSA-262-1 [EMAIL PROTECTED] http://www.debian.org/security/ Wichert Akkerman March 15, 2003

[SECURITY] [DSA-257-1] sendmail remote exploit

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - Debian Security Advisory DSA-257-1 [EMAIL PROTECTED] http://www.debian.org/security/ Wichert Akkerman March 4, 2003

[SECURITY] [DSA-212-1] Multiple MySQL vulnerabilities

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - Debian Security Advisory DSA-212-1 [EMAIL PROTECTED] http://www.debian.org/security/ Wichert Akkerman December 17, 2002

[SECURITY] [DSA-209-1] two wget problems

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - Debian Security Advisory DSA-209-1 [EMAIL PROTECTED] http://www.debian.org/security/ Wichert Akkerman December 12, 2002

[SECURITY] [DSA-210-1] lynx CRLF injection

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - Debian Security Advisory DSA-210-1 [EMAIL PROTECTED] http://www.debian.org/security/ Wichert Akkerman December 13, 2002

[SECURITY] [DSA-206-1] tcpdump BGP decoding error

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - Debian Security Advisory DSA-206-1 [EMAIL PROTECTED] http://www.debian.org/security/ Wichert Akkerman December 10, 2002

[SECURITY] [DSA-205-1] gtetrinet buffer overflows

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - Debian Security Advisory DSA-205-1 [EMAIL PROTECTED] http://www.debian.org/security/ Wichert Akkerman December 10, 2002

[SECURITY] [DSA-190-1] buffer overflow in Window Maker

-BEGIN PGP SIGNED MESSAGE- - Debian Security Advisory DSA-190-1 [EMAIL PROTECTED] http://www.debian.org/security/ Wichert Akkerman November 7, 2002

[SECURITY] [DSA-138-1] Remote execution exploit in gallery

-BEGIN PGP SIGNED MESSAGE- - Debian Security Advisory DSA-138-1 [EMAIL PROTECTED] http://www.debian.org/security/ Wichert Akkerman August 1, 2002

[SECURITY] [DSA-128-1] sudo buffer overflow

-BEGIN PGP SIGNED MESSAGE- - Debian Security Advisory DSA-128-1 [EMAIL PROTECTED] http://www.debian.org/security/ Wichert Akkerman April 26, 2002

[SECURITY] [DSA-126-1] Horde and IMP cross-site scripting attack

-BEGIN PGP SIGNED MESSAGE- - Debian Security Advisory DSA-126-1 [EMAIL PROTECTED] http://www.debian.org/security/ Wichert Akkerman April 16, 2002

[SECURITY] [DSA-127-1] buffer overflow in xpilot-server

-BEGIN PGP SIGNED MESSAGE- - Debian Security Advisory DSA-127-1 [EMAIL PROTECTED] http://www.debian.org/security/ Wichert Akkerman April 17, 2002

[SECURITY] [DSA-066-1] cfingerd remote exploit

-BEGIN PGP SIGNED MESSAGE- - Debian Security Advisory DSA-066-1 [EMAIL PROTECTED] http://www.debian.org/security/ Wichert Akkerman July 11, 2001

Re: smbd remote file creation vulnerability

Previously Pavol Luptak wrote: Linux kernels with openwall patch (with restricted links in /tmp) are imunne to this type of attack (following symlinks does not work, link owner does not match with file's owner). If symlink don't work you can still use a hardlink though. Wichert. --

[SECURITY] [DSA-065-1] samba remote file append/creation problem

-BEGIN PGP SIGNED MESSAGE- - Debian Security Advisory DSA-065-1 [EMAIL PROTECTED] http://www.debian.org/security/ Wichert Akkerman June 23, 2001

[SECURITY] [DSA-063-1] two xinetd problems

-BEGIN PGP SIGNED MESSAGE- - Debian Security Advisory DSA-063-1 [EMAIL PROTECTED] http://www.debian.org/security/ Wichert Akkerman June 17, 2001

Re: Rxvt vulnerability

Previously Samuel Dralet wrote: RXVT Vulnerability Date : 2001/06/05 Vulnerable system : rxvt 2.6.2 on Debian Linux 2.2 [.. snip snip ..] Status vendor : contacted two weeks ago but no response. I'm curious who you contacted; from what I can see you did not contact Debian

[SECURITY] [DSA-060-1] fetchmail buffer overflow

-BEGIN PGP SIGNED MESSAGE- - Debian Security Advisory DSA-060-1 [EMAIL PROTECTED] http://www.debian.org/security/ Wichert Akkerman June 16, 2001

[SECURITY] [DSA-061-1] multiple gnupg problems

-BEGIN PGP SIGNED MESSAGE- - Debian Security Advisory DSA-061-1 [EMAIL PROTECTED] http://www.debian.org/security/ Wichert Akkerman June 16, 2001

[SECURITY] [DSA-059-1] man-db symlink attack

-BEGIN PGP SIGNED MESSAGE- - Debian Security Advisory DSA-059-1 [EMAIL PROTECTED] http://www.debian.org/security/ Wichert Akkerman June 12, 2001

Re: Network Solutions Crypt-PW Authentication-Scheme vulnerability

Previously Peter van Dijk wrote: crypt() passwords are never more than 8 characters - anything beyond 8 characters is discarded. That highly depends on the crypt implementation. The original crypt only used 8 characters, but modern implementations can use different schemes (md5 for example).

[SECURITY] [DSA-058-1] exim printf format attack

-BEGIN PGP SIGNED MESSAGE- - Debian Security Advisory DSA-058-1 [EMAIL PROTECTED] http://www.debian.org/security/ Wichert Akkerman June 10, 2001

Re: Vixie cron vulnerability

Previously Kris Kennaway wrote: I think this is a Linux-specific enhancement to vixie cron; nothing remotely similar to the affected code seems to be in the FreeBSD version, and I thought we were using the most recent vendor version. As the Debian advisory mentioned, this was the result of a