Рекомендации по безопасности за 2011 год

[30.12.2011] DSA-2376 ipmitool - insecure PID file
[26.12.2011] DSA-2375 krb5, krb5-appl - buffer overflow
[26.12.2011] DSA-2374 openswan - implementation error
[25.12.2011] DSA-2373 inetutils - buffer overflow
[25.12.2011] DSA-2372 heimdal - buffer overflow
[24.12.2011] DSA-2371 jasper - buffer overflows
[22.12.2011] DSA-2370 unbound - several vulnerabilities
[21.12.2011] DSA-2369 libsoup2.4 - insufficient input sanitization
[20.12.2011] DSA-2368 lighttpd - multiple vulnerabilities
[19.12.2011] DSA-2367 asterisk - several vulnerabilities
[18.12.2011] DSA-2366 mediawiki - multiple vulnerabilities
[18.12.2011] DSA-2365 dtc - several vulnerabilities
[18.12.2011] DSA-2364 xorg - некорректная проверка прав доступа
[16.12.2011] DSA-2363 tor - buffer overflow
[10.12.2011] DSA-2362 acpid - several vulnerabilities
[07.12.2011] DSA-2361 chasen - переполнение буфера
[06.12.2011] DSA-2359 mojarra - инъекция EL
[05.12.2011] DSA-2358 openjdk-6 - several vulnerabilities
[03.12.2011] DSA-2357 evince - several vulnerabilities
[01.12.2011] DSA-2356 openjdk-6 - several vulnerabilities
[30.11.2011] DSA-2355 clearsilver - format string vulnerability
[28.11.2011] DSA-2354 cups - several vulnerabilities
[24.11.2011] DSA-2353 ldns - переполнение буфера
[22.11.2011] DSA-2352 puppet - programming error
[21.11.2011] DSA-2351 wireshark - переполнение буфера
[20.11.2011] DSA-2350 freetype - отсутствие очистки ввода
[19.11.2011] DSA-2349 spip - несколько уязвимостей
[17.11.2011] DSA-2348 systemtap - several vulnerabilities
[16.11.2011] DSA-2347 bind9 - неверное утверждение
[16.11.2011] DSA-2346 proftpd-dfsg - several vulnerabilities
[11.11.2011] DSA-2345 icedove - several vulnerabilities
[11.11.2011] DSA-2344 python-django-piston - deserialization vulnerability
[09.11.2011] DSA-2343 openssl - CA trust revocation
[09.11.2011] DSA-2342 iceape - several vulnerabilities
[09.11.2011] DSA-2341 iceweasel - several vulnerabilities
[07.11.2011] DSA-2340 postgresql-8.3, postgresql-8.4, postgresql-9.0 - weak password hashing
[07.11.2011] DSA-2339 nss - several vulnerabilities
[07.11.2011] DSA-2338 moodle - several vulnerabilities
[06.11.2011] DSA-2337 xen - several vulnerabilities
[07.11.2011] DSA-2336 ffmpeg - several vulnerabilities
[05.11.2011] DSA-2335 man2html - missing input sanitization
[04.11.2011] DSA-2334 mahara - several vulnerabilities
[31.10.2011] DSA-2333 phpldapadmin - several vulnerabilities
[29.10.2011] DSA-2332 python-django - several issues
[28.10.2011] DSA-2331 tor - several vulnerabilities
[27.10.2011] DSA-2330 simplesamlphp - XML encryption weakness
[27.10.2011] DSA-2329 torque - buffer overflow
[24.10.2011] DSA-2328 freetype - missing input sanitising
[24.10.2011] DSA-2327 libfcgi-perl - authentication bypass
[24.10.2011] DSA-2326 pam - several vulnerabilities
[23.10.2011] DSA-2325 kfreebsd-8 - privilege escalation/denial of service
[20.10.2011] DSA-2324 wireshark - programming error
[26.10.2011] DSA-2323 radvd - several vulnerabilities
[10.10.2011] DSA-2322 bugzilla - several vulnerabilities
[10.10.2011] DSA-2321 moin - межсайтовый скриптинг
[08.10.2011] DSA-2320 dokuwiki - исправление регресса
[08.10.2011] DSA-2319 policykit-1 - race condition
[06.10.2011] DSA-2318 cyrus-imapd-2.2 - multiple vulnerabilities
[05.10.2011] DSA-2317 icedove - several vulnerabilities
[05.10.2011] DSA-2316 quagga - several vulnerabilities
[05.10.2011] DSA-2315 openoffice.org - multiple vulnerabilities
[03.10.2011] DSA-2314 puppet - multiple vulnerabilities
[29.09.2011] DSA-2313 iceweasel - several vulnerabilities
[29.09.2011] DSA-2312 iceape - several vulnerabilities
[27.09.2011] DSA-2311 openjdk-6 - several vulnerabilities
[22.09.2011] DSA-2310 linux-2.6 - privilege escalation/denial of service/information leak
[13.09.2011] DSA-2309 openssl - compromised certificate authority
[12.09.2011] DSA-2308 mantis - several vulnerabilities
[11.09.2011] DSA-2307 chromium-browser - several vulnerabilities
[11.09.2011] DSA-2306 ffmpeg - several vulnerabilities
[19.09.2011] DSA-2305 vsftpd - denial of service
[11.09.2011] DSA-2304 squid3 - buffer overflow
[10.09.2011] DSA-2303 linux-2.6 - privilege escalation/denial of service/information leak
[07.09.2011] DSA-2302 bcfg2 - missing input sanitization
[23.01.2012] DSA-2301 rails - several vulnerabilities
[05.09.2011] DSA-2300 nss - compromised certificate authority
[31.08.2011] DSA-2299 ca-certificates - compromised certificate authority
[05.09.2011] DSA-2298 apache2 - denial of service
[21.08.2011] DSA-2297 icedove - several vulnerabilities
[17.08.2011] DSA-2296 iceweasel - several vulnerabilities
[17.08.2011] DSA-2295 iceape - several vulnerabilities
[14.08.2011] DSA-2294 freetype - отсутствие очистки ввода
[12.08.2011] DSA-2293 libxfont - переполнение буфера
[11.08.2011] DSA-2292 isc-dhcp - denial of service
[08.08.2011] DSA-2291 squirrelmail - various vulnerabilities
[07.08.2011] DSA-2290 samba - cross-site scripting
[07.08.2011] DSA-2289 typo3-src - several vulnerabilities
[28.07.2011] DSA-2288 libsndfile - integer overflow
[28.07.2011] DSA-2287 libpng - several vulnerabilities
[26.07.2011] DSA-2286 phpmyadmin - several vulnerabilities
[26.07.2011] DSA-2285 mapserver - several vulnerabilities
[25.07.2011] DSA-2284 opensaml2 - implementation error
[25.07.2011] DSA-2283 krb5-appl - ошибка программирования
[25.07.2011] DSA-2282 qemu-kvm - several vulnerabilities
[21.07.2011] DSA-2281 opie - several vulnerabilities
[19.07.2011] DSA-2280 libvirt - several vulnerabilities
[19.07.2011] DSA-2279 libapache2-mod-authnz-external - SQL injection
[16.07.2011] DSA-2278 horde3 - several vulnerabilities
[10.07.2011] DSA-2277 xml-security-c - stack-based buffer overflow
[10.07.2011] DSA-2276 asterisk - multiple denial of service
[07.07.2011] DSA-2275 openoffice.org - stack-based buffer overflow
[07.07.2011] DSA-2274 wireshark - several vulnerabilities
[06.07.2011] DSA-2273 icedove - several vulnerabilities
[05.07.2011] DSA-2272 bind9 - denial of service
[02.07.2011] DSA-2271 curl - improper delegation of client credentials
[01.07.2011] DSA-2270 qemu-kvm - programming error
[01.07.2011] DSA-2269 iceape - several vulnerabilities
[01.07.2011] DSA-2268 iceweasel - several vulnerabilities
[01.07.2011] DSA-2267 perl - restriction bypass
[29.06.2011] DSA-2266 php5 - several vulnerabilities
[20.06.2011] DSA-2265 perl - lack of tainted flag propagation
[18.06.2011] DSA-2264 linux-2.6 - privilege escalation/denial of service/information leak
[16.06.2011] DSA-2263 movabletype-opensource - several vulnerabilities
[15.06.2011] DSA-2262 moodle - several vulnerabilities
[15.06.2011] DSA-2261 redmine - several vulnerabilities
[14.06.2011] DSA-2260 rails - several vulnerabilities
[12.06.2011] DSA-2259 fex - authentication bypass
[11.06.2011] DSA-2258 kolab-cyrus-imapd - implementation error
[10.06.2011] DSA-2257 vlc - heap-based buffer overflow
[09.06.2011] DSA-2256 tiff - buffer overflow
[06.06.2011] DSA-2255 libxml2 - buffer overflow
[03.06.2011] DSA-2254 oprofile - command injection
[03.06.2011] DSA-2253 fontforge - buffer overflow
[02.06.2011] DSA-2252 dovecot - ошибка программирования
[02.06.2011] DSA-2251 subversion - several vulnerabilities
[31.03.2011] DSA-2250 citadel - denial of service
[31.03.2011] DSA-2249 jabberd14 - denial of service
[31.03.2011] DSA-2248 ejabberd - denial of service
[31.05.2011] DSA-2247 rails - several vulnerabilities
[29.05.2011] DSA-2246 mahara - several vulnerabilities
[29.05.2011] DSA-2245 chromium-browser - several vulnerabilities
[27.05.2011] DSA-2244 bind9 - incorrect boundary condition
[27.05.2011] DSA-2243 unbound - design flaw
[25.05.2011] DSA-2242 cyrus-imapd-2.2 - implementation error
[24.05.2011] DSA-2241 qemu-kvm - ошибка реализации
[24.05.2011] DSA-2240 linux-2.6 - privilege escalation/denial of service/information leak
[24.05.2011] DSA-2239 libmojolicious-perl - several vulnerabilities
[19.05.2011] DSA-2238 vino - несколько уязвимостей
[15.05.2011] DSA-2237 apr - denial of service
[12.05.2011] DSA-2236 exim4 - command injection
[10.05.2011] DSA-2235 icedove - several vulnerabilities
[10.05.2011] DSA-2234 zodb - several vulnerabilities
[10.05.2011] DSA-2233 postfix - several vulnerabilities
[06.05.2011] DSA-2232 exim4 - format string vulnerability
[06.05.2011] DSA-2231 otrs2 - cross-site scripting
[01.05.2011] DSA-2230 qemu-kvm - several vulnerabilities
[01.05.2011] DSA-2229 spip - ошибка программирования
[01.05.2011] DSA-2228 iceweasel - several vulnerabilities
[30.04.2011] DSA-2227 iceape - several vulnerabilities
[26.04.2011] DSA-2226 libmodplug - buffer overflow
[25.04.2011] DSA-2225 asterisk - several vulnerabilities
[20.04.2011] DSA-2224 openjdk-6 - several vulnerabilities
[20.04.2011] DSA-2223 doctrine - SQL-инъекция
[20.04.2011] DSA-2222 tinyproxy - некорректная обработка ACL
[19.04.2011] DSA-2221 libmojolicious-perl - изменение каталога
[19.04.2011] DSA-2220 request-tracker3.6, request-tracker3.8 - several vulnerabilities
[18.04.2011] DSA-2219 xmlsec1 - arbitrary file overwrite
[12.04.2011] DSA-2218 vlc - heap-based buffer overflow
[10.04.2011] DSA-2217 dhcp3 - missing input sanitization
[10.04.2011] DSA-2216 isc-dhcp - missing input sanitization
[09.04.2011] DSA-2215 gitolite - directory traversal
[08.04.2011] DSA-2214 ikiwiki - missing input validation
[08.04.2011] DSA-2213 x11-xserver-utils - missing input sanitization
[07.04.2011] DSA-2212 tmux - privilege escalation
[06.04.2011] DSA-2211 vlc - missing input sanitising
[03.04.2011] DSA-2210 tiff - several vulnerabilities
[02.04.2011] DSA-2209 tgt - двойное освобождение
[30.03.2011] DSA-2208 bind9 - denial of service
[30.03.2011] DSA-2207 tomcat5.5 - several vulnerabilities
[29.03.2011] DSA-2206 mahara - several vulnerabilities
[28.03.2011] DSA-2205 gdm3 - privilege escalation
[27.03.2011] DSA-2204 imp4 - insufficient input sanitising
[26.03.2011] DSA-2203 nss - обновление чёрного списка сертификатов ssl
[23.03.2011] DSA-2202 apache2 - failure to drop root privileges
[23.03.2011] DSA-2201 wireshark - several vulnerabilities
[23.03.2011] DSA-2200 iceweasel - ssl certificate blacklist update
[23.03.2011] DSA-2199 iceape - ssl certificate blacklist update
[22.03.2011] DSA-2198 tex-common - insufficient input sanitization
[21.03.2011] DSA-2197 quagga - denial of service
[19.03.2011] DSA-2196 maradns - buffer overflow
[19.03.2011] DSA-2195 php5 - several vulnerabilities
[18.03.2011] DSA-2194 libvirt - insufficient checks
[16.03.2011] DSA-2193 libcgroup - several vulnerabilities
[15.03.2011] DSA-2192 chromium-browser - several vulnerabilities
[14.03.2011] DSA-2191 proftpd-dfsg - several vulnerabilities
[11.03.2011] DSA-2190 wordpress - several vulnerabilities
[10.03.2011] DSA-2189 chromium-browser - several vulnerabilities
[10.03.2011] DSA-2188 webkit - several vulnerabilities
[09.03.2011] DSA-2187 icedove - several vulnerabilities
[09.03.2011] DSA-2186 iceweasel - several vulnerabilities
[07.03.2011] DSA-2185 proftpd-dfsg - переполнение целых чисел
[05.03.2011] DSA-2184 isc-dhcp - отказ в обслуживании
[04.03.2011] DSA-2183 nbd - переполнение буфера
[04.03.2011] DSA-2182 logwatch - внедрение команды интерпретатора командной строки
[04.03.2011] DSA-2181 subversion - отказ в обслуживании
[03.03.2011] DSA-2180 iceape - несколько уязвимостей
[02.03.2011] DSA-2179 dtc - SQL-инъекция
[02.03.2011] DSA-2178 pango1.0 - разыменование нулевого указателя
[02.03.2011] DSA-2177 pywebdav - внедрение SQL-кода
[02.03.2011] DSA-2176 cups - некоторые уязвимости
[28.02.2011] DSA-2175 samba - отсутствие проверки ввода
[26.02.2011] DSA-2174 avahi - отказ в обслуживании
[26.02.2011] DSA-2173 pam-pgsql - переполнение буфера
[22.02.2011] DSA-2172 moodle - некоторые уязвимости
[21.02.2011] DSA-2171 asterisk - переполнение буфера
[18.02.2011] DSA-2170 mailman - некоторые уязвимости
[16.02.2011] DSA-2169 telepathy-gabble - недостаточная проверка вводимых данных
[16.02.2011] DSA-2168 openafs - несколько уязвимостей
[16.02.2011] DSA-2167 phpmyadmin - внедрение SQL-кода
[16.02.2011] DSA-2166 chromium-browser - несколько уязвимостей
[16.02.2011] DSA-2165 ffmpeg-debian - переполнение буфера
[16.02.2011] DSA-2164 shadow - нeдocтaтoчнaя oбpaбoткa вxoдныx дaнныx
[14.02.2011] DSA-2163 python-django - несколько уязвимостей
[14.02.2011] DSA-2162 openssl - доступ к недопустимой области памяти
[13.02.2011] DSA-2161 openjdk-6 - отказ в обслуживании
[13.02.2011] DSA-2160 tomcat6 - различные уязвимости
[10.02.2011] DSA-2159 vlc - missing input sanitising
[09.02.2011] DSA-2158 cgiirc - межсайтовый скриптинг
[03.02.2011] DSA-2157 postgresql-8.3, postgresql-8.4, postgresql-9.0 - buffer overflow
[31.01.2011] DSA-2156 pcscd - переполнение буфера
[30.01.2011] DSA-2155 freetype - несколько уязвимостей
[30.01.2011] DSA-2154 exim4 - privilege escalation
[30.01.2011] DSA-2153 linux-2.6 - privilege escalation/denial of service/information leak
[27.01.2011] DSA-2152 hplip - buffer overflow
[26.01.2011] DSA-2151 openoffice.org - several vulnerabilities
[22.01.2011] DSA-2150 request-tracker3.6 - unsalted password hashing
[20.01.2011] DSA-2149 dbus - denial of service
[17.01.2011] DSA-2148 tor - several vulnerabilities
[16.01.2011] DSA-2147 pimd - insecure temporary files
[16.01.2011] DSA-2146 mydms - directory traversal
[16.01.2011] DSA-2145 libsmi - buffer overflow
[15.01.2011] DSA-2144 wireshark - buffer overflow
[14.01.2011] DSA-2143 mysql-dfsg-5.0 - several vulnerabilities
[06.01.2011] DSA-2142 dpkg - directory traversal
[06.01.2011] DSA-2141 openssl - SSL/TLS insecure renegotiation protocol design flaw
[05.01.2011] DSA-2140 libapache2-mod-fcgid - stack overflow

Вы можете получать последние анонсы о безопасности в Debian, подписавшись на список рассылки debian-security-announce. Архив списка рассылки доступен здесь.