Debian.org - Debian Security Advisories

DSA-2404 xen-qemu-dm-4.0 - buffer overflow

05.02.2012 23:00 Nicolae Mogoraenu discovered a heap overflow in the emulated e1000e network interface card of QEMU, which is used in the xen-qemu-dm-4.0 packages. This vulnerability might enable to malicious guest systems to crash the host system or escalate their privileges.

DSA-2402 iceape - several vulnerabilities

03.02.2012 02:45 Several vulnerabilities have been found in the Iceape internet suite, an unbranded version of Seamonkey:

DSA-2401 tomcat6 - several vulnerabilities

03.02.2012 02:45 Several vulnerabilities have been found in Tomcat, a servlet and JSP engine:

DSA-2400 iceweasel - several vulnerabilities

03.02.2012 02:45 Several vulnerabilities have been discovered in Iceweasel, a web browser based on Firefox. The included XULRunner library provides rendering services for several other applications included in Debian.

DSA-2403 php5 - code injection

03.02.2012 02:45 Stefan Esser discovered that the implementation of the max_input_vars configuration variable in a recent PHP security update was flawed such that it allows remote attackers to crash PHP or potentially execute code.