LinuxSecurity.com

Ubuntu: 1351-1: AccountsService vulnerability

31.01.2012 09:55 LinuxSecurity.com: AccountsService could be made to overwrite files as the administrator.

Debian: 2399-1: php5: Multiple vulnerabilities

31.01.2012 03:23 LinuxSecurity.com: Several vulnerabilities have been discovered in PHP, the web scripting language. The Common Vulnerabilities and Exposures project identifies the following issues:

Debian: 2398-1: curl: Multiple vulnerabilities

30.01.2012 16:06 LinuxSecurity.com: Several vulnerabilities have been discovered in Curl, an URL transfer library. The Common Vulnerabilities and Exposures project identifies the following problems:

Gentoo: 201201-19: Adobe Reader: Multiple vulnerabilities

30.01.2012 08:45 LinuxSecurity.com: Multiple vulnerabilities in Adobe Reader might allow remote attackersto execute arbitrary code or conduct various other attacks.

Gentoo: 201201-18: bip: Multiple vulnerabilities

30.01.2012 08:45 LinuxSecurity.com: Multiple vulnerabilities in bip might allow remote unauthenticatedattackers to cause a Denial of Service or possibly execute arbitrarycode.

Mandriva: 2012:011: openssl

29.01.2012 15:27 LinuxSecurity.com: A vulnerability has been found and corrected in openssl: OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote attackers to cause a denial of service via unspecified vectors. NOTE: this vulnerability exists because of an

Debian: 2397-1: icu: buffer underflow

29.01.2012 08:56 LinuxSecurity.com: It was discovered that a buffer overflow in the Unicode libraray ICU could lead to the execution of arbitrary code. For the oldstable distribution , this problem has been fixed in

Gentoo: 201201-17: Chromium: Multiple vulnerabilities

27.01.2012 23:56 LinuxSecurity.com: Multiple vulnerabilities have been reported in Chromium, some of whichmay allow execution of arbitrary code.

Gentoo: 201201-16: X.Org X Server/X Keyboard Configuration Database: Screen lock bypass

27.01.2012 17:59 LinuxSecurity.com: A debugging functionality in the X.Org X Server that is bound to ahotkey by default can be used by local attackers to circumvent screenlocking utilities.

Debian: 2396-1: qemu-kvm: buffer underflow

27.01.2012 14:53 LinuxSecurity.com: Nicolae Mogoraenu discovered a heap overflow in the emulated e1000e network interface card of KVM, a solution for full virtualization on x86 hardware, which could result in denial of service or privilege escalation.

Debian: 2395-1: wireshark: buffer underflow

27.01.2012 14:27 LinuxSecurity.com: Laurent Butti discovered a buffer underflow in the LANalyzer dissector of the Wireshark network traffic analyzer, which could lead to the execution of arbitrary code

Gentoo: 201201-15: ktsuss: Privilege escalation

27.01.2012 11:05 LinuxSecurity.com: Two vulnerabilities have been found in ktsuss, allowing local attackersto gain escalated privileges.

Debian: 2394-1: libxml2: Multiple vulnerabilities

26.01.2012 19:05 LinuxSecurity.com: Many security problems had been fixed in libxml2, a popular library to handle XML data files. CVE-2011-3919:

Ubuntu: 1349-1: X.Org vulnerability

26.01.2012 14:43 LinuxSecurity.com: X could be made to start by a user who lacked appropriate permissions.

Ubuntu: 1348-1: ICU vulnerability

26.01.2012 10:53 LinuxSecurity.com: ICU could be made to crash or run programs as your login if itopened specially crafted data.