Bollettini della sicurezza del 2005
[27 dic 2005] DSA-928 dhis-tools-dns - insecure temporary file[27 dic 2005] DSA-927 tkdiff - insecure temporary file
[23 dic 2005] DSA-926 ketm - buffer overflow
[22 dic 2005] DSA-925 phpbb2 - several vulnerabilities
[21 dic 2005] DSA-924 nbd - buffer overflow
[19 dic 2005] DSA-923 dropbear - buffer overflow
[14 dic 2005] DSA-922 kernel-source-2.6.8 - several vulnerabilities
[14 dic 2005] DSA-921 kernel-source-2.4.27 - several vulnerabilities
[13 dic 2005] DSA-920 ethereal - buffer overflow
[12 dic 2005] DSA-919 curl - buffer overflow
[09 dic 2005] DSA-918 osh - programming error
[08 dic 2005] DSA-917 courier - programming error
[07 dic 2005] DSA-916 inkscape - buffer overflow
[02 dic 2005] DSA-915 helix-player - buffer overflow
[01 dic 2005] DSA-914 horde2 - missing input sanitising
[01 dic 2005] DSA-913 gdk-pixbuf - several vulnerabilities
[30 nov 2005] DSA-912 centericq - denial of service
[29 nov 2005] DSA-911 gtk+2.0 - several vulnerabilities
[24 nov 2005] DSA-910 zope.2.7 - design error
[23 nov 2005] DSA-909 horde3 - missing input sanitising
[23 nov 2005] DSA-908 sylpheed-claws - buffer overflows
[23 nov 2005] DSA-907 ipmenu - insecure temporary file
[22 nov 2005] DSA-906 sylpheed - buffer overflows
[22 nov 2005] DSA-905 mantis - several vulnerabilities
[21 nov 2005] DSA-904 netpbm-free - buffer overflows
[21 nov 2005] DSA-903 unzip - race condition
[21 nov 2005] DSA-902 xmail - buffer overflow
[19 nov 2005] DSA-901 gnump3d - programming error
[18 nov 2005] DSA-900 fetchmail - programming error
[17 nov 2005] DSA-899 egroupware - programming errors
[17 nov 2005] DSA-898 phpgroupware - programming errors
[15 nov 2005] DSA-897 phpsysinfo - programming errors
[15 nov 2005] DSA-896 linux-ftpd-ssl - buffer overflow
[14 nov 2005] DSA-895 uim - programming error
[14 nov 2005] DSA-894 abiword - buffer overflows
[14 nov 2005] DSA-893 acidlab - missing input sanitising
[10 nov 2005] DSA-892 awstats - missing input sanitising
[09 nov 2005] DSA-891 gpsdrive - format string
[09 nov 2005] DSA-890 libungif4 - several vulnerabilities
[08 nov 2005] DSA-889 enigmail - programming error
[07 nov 2005] DSA-888 openssl - cryptographic weakness
[07 nov 2005] DSA-887 clamav - several vulnerabilities
[07 nov 2005] DSA-886 chmlib - several vulnerabilities
[07 nov 2005] DSA-885 openvpn - several vulnerabilities
[07 nov 2005] DSA-884 horde3 - design error
[04 nov 2005] DSA-883 thttpd - insecure temporary file
[04 nov 2005] DSA-882 openssl095 - cryptographic weakness
[04 nov 2005] DSA-881 openssl096 - cryptographic weakness
[02 nov 2005] DSA-880 phpmyadmin - several vulnerabilities
[02 nov 2005] DSA-879 gallery - programming error
[28 ott 2005] DSA-878 netpbm-free - buffer overflow
[28 ott 2005] DSA-877 gnump3d - cross-site scripting, directory traversal
[27 ott 2005] DSA-876 lynx-ssl - buffer overflow
[27 ott 2005] DSA-875 openssl094 - cryptographic weakness
[27 ott 2005] DSA-874 lynx - buffer overflow
[26 ott 2005] DSA-873 net-snmp - programming error
[26 ott 2005] DSA-872 koffice - buffer overflow
[25 ott 2005] DSA-871 libgda2 - format string
[25 ott 2005] DSA-870 sudo - missing input sanitising
[21 ott 2005] DSA-869 eric - missing input sanitising
[20 ott 2005] DSA-868 mozilla-thunderbird - several vulnerabilities
[20 ott 2005] DSA-867 module-assistant - insecure temporary file
[20 ott 2005] DSA-866 mozilla - several vulnerabilities
[13 ott 2005] DSA-865 hylafax - insecure temporary files
[13 ott 2005] DSA-864 ruby1.8 - programming error
[12 ott 2005] DSA-863 xine-lib - format string vulnerability
[11 ott 2005] DSA-862 ruby1.6 - programming error
[11 ott 2005] DSA-861 uw-imap - buffer overflow
[11 ott 2005] DSA-860 ruby - programming error
[10 ott 2005] DSA-859 xli - buffer overflows
[10 ott 2005] DSA-858 xloadimage - buffer overflows
[10 ott 2005] DSA-857 graphviz - insecure temporary file
[10 ott 2005] DSA-856 py2play - design error
[10 ott 2005] DSA-855 weex - format string vulnerability
[09 ott 2005] DSA-854 tcpdump - infinite loop
[09 ott 2005] DSA-853 ethereal - several vulnerabilities
[09 ott 2005] DSA-852 up-imapproxy - format string vulnerabilities
[09 ott 2005] DSA-851 openvpn - programming errors
[09 ott 2005] DSA-850 tcpdump - infinite loop
[08 ott 2005] DSA-849 shorewall - programming error
[08 ott 2005] DSA-848 masqmail - several vulnerabilities
[08 ott 2005] DSA-847 dia - missing input sanitising
[07 ott 2005] DSA-846 cpio - several vulnerabilities
[06 ott 2005] DSA-845 mason - programming error
[05 ott 2005] DSA-844 mod-auth-shadow - programming error
[05 ott 2005] DSA-843 arc - insecure temporary file
[04 ott 2005] DSA-842 egroupware - missing input sanitising
[04 ott 2005] DSA-841 mailutils - format string vulnerability
[04 ott 2005] DSA-840 drupal - missing input sanitising
[04 ott 2005] DSA-839 apachetop - insecure temporary file
[02 ott 2005] DSA-838 mozilla-firefox - multiple vulnerabilities
[02 ott 2005] DSA-837 mozilla-firefox - buffer overflow
[01 ott 2005] DSA-836 cfengine2 - insecure temporary files
[01 ott 2005] DSA-835 cfengine - insecure temporary files
[01 ott 2005] DSA-834 prozilla - buffer overflow
[01 ott 2005] DSA-833 mysql-dfsg-4.1 - buffer overflow
[30 set 2005] DSA-832 gopher - buffer overflows
[30 set 2005] DSA-831 mysql-dfsg - buffer overflow
[30 set 2005] DSA-830 ntlmaps - wrong permissions
[30 set 2005] DSA-829 mysql - buffer overflow
[30 set 2005] DSA-828 squid - authentication handling
[29 set 2005] DSA-827 backupninja - insecure temporary file
[29 set 2005] DSA-826 helix-player - multiple vulnerabilities
[29 set 2005] DSA-825 loop-aes-utils - privilege escalation
[29 set 2005] DSA-824 clamav - infinite loop, buffer overflow
[29 set 2005] DSA-823 util-linux - privilege escalation
[29 set 2005] DSA-822 gtkdiskfree - insecure temporary file creation
[28 set 2005] DSA-821 python2.3 - integer overflow
[24 set 2005] DSA-820 courier - missing input sanitising
[23 set 2005] DSA-819 python2.1 - integer overflow
[22 set 2005] DSA-818 kdeedu - insecure temporary files
[22 set 2005] DSA-817 python2.2 - integer overflow
[19 set 2005] DSA-816 xfree86 - integer overflow
[16 set 2005] DSA-815 kdebase - programming error
[15 set 2005] DSA-814 lm-sensors - insecure temporary file
[15 set 2005] DSA-813 centericq - several vulnerabilities
[15 set 2005] DSA-812 turqstat - buffer overflow
[14 set 2005] DSA-811 common-lisp-controller - design error
[13 set 2005] DSA-810 mozilla - several vulnerabilities
[13 set 2005] DSA-809 squid - several vulnerabilities
[12 set 2005] DSA-808 tdiary - design error
[12 set 2005] DSA-807 libapache-mod-ssl - acl restriction bypass
[09 set 2005] DSA-806 gcvs - insecure temporary files
[08 set 2005] DSA-805 apache2 - several vulnerabilities
[08 set 2005] DSA-804 kdelibs - insecure permissions
[08 set 2005] DSA-803 apache - programming error
[07 set 2005] DSA-802 cvs - insecure temporary files
[05 set 2005] DSA-801 ntp - programming error
[02 set 2005] DSA-800 pcre3 - integer overflow
[02 set 2005] DSA-799 webcalendar - remote code execution
[02 set 2005] DSA-798 phpgroupware - several vulnerabilities
[01 set 2005] DSA-797 zsync - denial of service
[01 set 2005] DSA-796 affix - remote command execution
[01 set 2005] DSA-795 proftpd - potential code execution
[01 set 2005] DSA-794 polygen - programming error
[01 set 2005] DSA-793 courier - missing input sanitising
[31 ago 2005] DSA-792 pstotext - missing input sanitising
[30 ago 2005] DSA-791 maildrop - missing privilege release
[30 ago 2005] DSA-790 phpldapadmin - programming error
[29 ago 2005] DSA-789 php4 - several vulnerabilities
[29 ago 2005] DSA-788 kismet - several vulnerabilities
[26 ago 2005] DSA-787 backup-manager - insecure permissions and tempfile
[26 ago 2005] DSA-786 simpleproxy - format string vulnerability
[25 ago 2005] DSA-785 libpam-ldap - authentication bypass
[25 ago 2005] DSA-784 courier - programming error
[24 ago 2005] DSA-783 mysql-dfsg-4.1 - insecure temporary file
[23 ago 2005] DSA-782 bluez-utils - missing input sanitising
[23 ago 2005] DSA-781 mozilla-thunderbird - several vulnerabilities
[22 ago 2005] DSA-780 kdegraphics - wrong input sanitising
[20 ago 2005] DSA-779 mozilla-firefox - several vulnerabilities
[19 ago 2005] DSA-778 mantis - missing input sanitising
[17 ago 2005] DSA-777 mozilla - frame injection spoofing
[16 ago 2005] DSA-776 clamav - integer overflows, infinite loop
[15 ago 2005] DSA-775 mozilla-firefox - frame injection spoofing
[12 ago 2005] DSA-774 fetchmail - buffer overflow
[11 ago 2005] DSA-773 amd64 - several vulnerabilities
[03 ago 2005] DSA-772 apt-cacher - missing input sanitising
[01 ago 2005] DSA-771 pdns - several vulnerabilities
[29 lug 2005] DSA-770 gopher - insecure tmpfile creating
[29 lug 2005] DSA-769 gaim - memory alignment bug
[27 lug 2005] DSA-768 phpbb2 - missing input validation
[27 lug 2005] DSA-767 ekg - integer overflows
[26 lug 2005] DSA-766 webcalendar - authorisation failure
[22 lug 2005] DSA-765 heimdal - buffer overflow
[21 lug 2005] DSA-764 cacti - several vulnerabilities
[20 lug 2005] DSA-763 zlib - remote DoS
[19 lug 2005] DSA-762 affix - several vulnerabilities
[19 lug 2005] DSA-761 heartbeat - insecure temporary files
[18 lug 2005] DSA-760 ekg - several vulnerabilities
[18 lug 2005] DSA-759 phppgadmin - missing input sanitising
[18 lug 2005] DSA-758 heimdal - buffer overflow
[17 lug 2005] DSA-757 krb5 - buffer overflow, double-free memory
[13 lug 2005] DSA-756 squirrelmail - several vulnerabilities
[13 lug 2005] DSA-755 tiff - buffer overflow
[13 lug 2005] DSA-754 centericq - insecure temporary file
[12 lug 2005] DSA-753 gedit - format string
[11 lug 2005] DSA-752 gzip - several vulnerabilities
[11 lug 2005] DSA-751 squid - IP spoofing
[11 lug 2005] DSA-750 dhcpcd - out-of-bound memory access
[10 lug 2005] DSA-749 ettercap - format string error
[10 lug 2005] DSA-748 ruby1.8 - bad default value
[10 lug 2005] DSA-747 egroupware - input validation error
[13 lug 2005] DSA-746 phpgroupware - input validation error
[10 lug 2005] DSA-745 drupal - input validation errors
[08 lug 2005] DSA-744 fuse - programming error
[08 lug 2005] DSA-743 ht - buffer overflows, integer overflows
[07 lug 2005] DSA-742 cvs - buffer overflow
[07 lug 2005] DSA-741 bzip2 - infinite loop
[06 lug 2005] DSA-740 zlib - remote denial of service
[06 lug 2005] DSA-739 trac - missing input sanitising
[05 lug 2005] DSA-738 razor - remote denial of service
[05 lug 2005] DSA-737 clamav - remote denial of service
[01 lug 2005] DSA-736 spamassassin - remote denial of service
[01 lug 2005] DSA-735 sudo - pathname validation race
[05 lug 2005] DSA-734 gaim - denial of service
[30 giu 2005] DSA-733 crip - insecure temporary files
[03 giu 2005] DSA-732 mailutils - several vulnerabilities
[02 giu 2005] DSA-731 krb4 - buffer overflows
[27 mag 2005] DSA-730 bzip2 - race condition
[26 mag 2005] DSA-729 php4 - missing input sanitising
[26 mag 2005] DSA-728 qpopper - missing privilege release
[20 mag 2005] DSA-727 libconvert-uulib-perl - buffer overflow
[20 mag 2005] DSA-726 oops - format string vulnerability
[19 mag 2005] DSA-725 ppxp - missing privilege release
[18 mag 2005] DSA-724 phpsysinfo - design flaw
[09 mag 2005] DSA-723 xfree86 - buffer overflow
[09 mag 2005] DSA-722 smail - buffer overflow
[06 mag 2005] DSA-721 squid - design flaw
[03 mag 2005] DSA-720 smartlist - wrong input processing
[28 apr 2005] DSA-719 prozilla - format string problems
[28 apr 2005] DSA-718 ethereal - buffer overflow
[27 apr 2005] DSA-717 lsh-utils - buffer overflow, typo
[27 apr 2005] DSA-716 gaim - denial of service
[27 apr 2005] DSA-715 cvs - several vulnerabilities
[26 apr 2005] DSA-714 kdelibs - several vulnerabilities
[21 apr 2005] DSA-713 junkbuster - several vulnerabilities
[19 apr 2005] DSA-712 geneweb - insecure file operations
[19 apr 2005] DSA-711 info2www - missing input sanitising
[18 apr 2005] DSA-710 gtkhtml - null pointer dereference
[15 apr 2005] DSA-709 libexif - buffer overflow
[15 apr 2005] DSA-708 php3 - missing input sanitising
[13 apr 2005] DSA-707 mysql - several vulnerabilities
[13 apr 2005] DSA-706 axel - buffer overflow
[04 apr 2005] DSA-705 wu-ftpd - missing input sanitising
[04 apr 2005] DSA-704 remstats - tempfile, missing input sanitising
[01 apr 2005] DSA-703 krb5 - buffer overflows
[01 apr 2005] DSA-702 imagemagick - several vulnerabilities
[21 apr 2005] DSA-701 samba - integer overflows
[30 mar 2005] DSA-700 mailreader - missing input sanitising
[29 mar 2005] DSA-699 netkit-telnet-ssl - buffer overflow
[29 mar 2005] DSA-698 mc - buffer overflow
[29 mar 2005] DSA-697 netkit-telnet - buffer overflow
[22 mar 2005] DSA-696 perl - design flaw
[21 mar 2005] DSA-695 xli - buffer overflow, input sanitising, integer overflow
[21 mar 2005] DSA-694 xloadimage - missing input sanitising, integer overflow
[14 mar 2005] DSA-693 luxman - buffer overflow
[08 mar 2005] DSA-692 kdenetwork - design flaw
[07 mar 2005] DSA-691 abuse - several vulnerabilities
[25 feb 2005] DSA-690 bsmtpd - missing input sanitising
[23 feb 2005] DSA-689 libapache-mod-python - missing input sanitizing
[23 feb 2005] DSA-688 squid - missing input sanitising
[18 feb 2005] DSA-687 bidwatcher - format string
[17 feb 2005] DSA-686 gftp - missing input sanitising
[17 feb 2005] DSA-685 emacs21 - format string
[16 feb 2005] DSA-684 typespeed - format string
[15 feb 2005] DSA-683 postgresql - buffer overflows
[15 feb 2005] DSA-682 awstats - missing input sanitizing
[14 feb 2005] DSA-681 synaesthesia - privilege escalation
[14 feb 2005] DSA-680 htdig - unsanitised input
[14 feb 2005] DSA-679 toolchain-source - insecure temporary files
[11 feb 2005] DSA-678 netkit-rwho - missing input validation
[11 feb 2005] DSA-677 sympa - buffer overflow
[11 feb 2005] DSA-676 xpcd - buffer overflow
[10 feb 2005] DSA-675 hztty - privilege escalation
[21 feb 2005] DSA-674 mailman - cross-site scripting, directory traversal
[10 feb 2005] DSA-673 evolution - integer overflow
[09 feb 2005] DSA-672 xview - buffer overflows
[08 feb 2005] DSA-671 xemacs21 - format string
[08 feb 2005] DSA-670 emacs20 - format string
[07 feb 2005] DSA-669 php3 - several vulnerabilities
[04 feb 2005] DSA-668 postgresql - privilege escalation
[04 feb 2005] DSA-667 squid - several vulnerabilities
[04 feb 2005] DSA-666 python2.2 - design flaw
[04 feb 2005] DSA-665 ncpfs - missing privilege release
[02 feb 2005] DSA-664 cpio - broken file permissions
[01 feb 2005] DSA-663 prozilla - buffer overflows
[14 mar 2005] DSA-662 squirrelmail - several vulnerabilities
[20 apr 2005] DSA-661 f2c - insecure temporary files
[26 gen 2005] DSA-660 kdebase - missing return value check
[26 gen 2005] DSA-659 libpam-radius-auth - information leak, integer underflow
[25 gen 2005] DSA-658 libdbi-perl - insecure temporary file
[25 gen 2005] DSA-657 xine-lib - buffer overflow
[25 gen 2005] DSA-656 vdr - insecure file access
[25 gen 2005] DSA-655 zhcon - missing privilege release
[21 gen 2005] DSA-654 enscript - several vulnerabilities
[21 gen 2005] DSA-653 ethereal - buffer overflow
[21 gen 2005] DSA-652 unarj - several vulnerabilities
[20 gen 2005] DSA-651 squid - buffer overflow, integer overflow
[20 gen 2005] DSA-650 sword - missing input sanitising
[20 gen 2005] DSA-649 xtrlock - buffer overflow
[19 gen 2005] DSA-648 xpdf - buffer overflow
[19 gen 2005] DSA-647 mysql - insecure temporary files
[19 gen 2005] DSA-646 imagemagick - buffer overflow
[19 gen 2005] DSA-645 cupsys - buffer overflow
[18 gen 2005] DSA-644 chbg - buffer overflow
[18 gen 2005] DSA-643 queue - buffer overflows
[17 gen 2005] DSA-642 gallery - several vulnerabilities
[17 gen 2005] DSA-641 playmidi - buffer overflow
[17 gen 2005] DSA-640 gatos - buffer overflow
[14 gen 2005] DSA-639 mc - several vulnerabilities
[13 gen 2005] DSA-638 gopher - several vulnerabilities
[13 gen 2005] DSA-637 exim-tls - buffer overflow
[12 gen 2005] DSA-636 glibc - insecure temporary files
[12 gen 2005] DSA-635 exim - buffer overflow
[11 gen 2005] DSA-634 hylafax - weak hostname and username validation
[11 gen 2005] DSA-633 bmv - insecure temporary file
[10 gen 2005] DSA-632 linpopup - buffer overflow
[10 gen 2005] DSA-631 kdelibs - unsanitised input
[10 gen 2005] DSA-630 lintian - insecure temporary directory
[07 gen 2005] DSA-629 krb5 - buffer overflow
[06 gen 2005] DSA-628 imlib2 - integer overflows
[06 gen 2005] DSA-627 namazu2 - unsanitised input
[06 gen 2005] DSA-626 tiff - unsanitised input
[05 gen 2005] DSA-625 pcal - buffer overflows
[05 gen 2005] DSA-624 zip - buffer overflow
[04 gen 2005] DSA-623 nasm - buffer overflow
[03 gen 2005] DSA-622 htmlheadline - insecure temporary files
Si possono ricevere gli ultimi bollettini della sicurezza Debian iscrivendosi alla lista di messaggi debian-security-announce. È anche possibile sfogliare gli archivi della lista.