[SECURITY-L] Vulnerabildades de seguranca

CSIRT - UNICAMP security em unicamp.br
Qua Ago 25 10:16:24 -03 2004


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Srs. Usuarios,

Atualizamos o site do CSIRT (Computer Security Incident Response Team)
da Unicamp com os seguintes boletins de vulnerabilidades:


Debian Security Advisory:
- -------------------------
24/08/2004 - DSA 541-1
Assunto: vulnerabilidade de seguranca no pacote icecast-server. 
http://www.security.unicamp.br/docs/bugs/2004/08/v85.txt


Fedora Update Notification:
- ---------------------------
23/08/2004 - FEDORA-2004-271
Assunto: Fedora Core 2: qt. 
http://www.security.unicamp.br/docs/bugs/2004/08/v78.txt

23/08/2004 - FEDORA-2004-270
Assunto: Fedora Core 1: qt. 
http://www.security.unicamp.br/docs/bugs/2004/08/v77.txt


Gentoo Linux Security Advisory:
- -------------------------------
24/08/2004 - GLSA 200408-23
Assunto: kdelibs: Cross-domain cookie injection vulnerability. 
http://www.security.unicamp.br/docs/bugs/2004/08/v86.txt

23/08/2004 - ERRATA: GLSA 200408-21
Assunto: Cacti: SQL injection vulnerability. 
http://www.security.unicamp.br/docs/bugs/2004/08/v83.txt

23/08/2004 - ERRATA: GLSA 200406-14
Assunto: aspell: Buffer overflow in word-list-compress. 
http://www.security.unicamp.br/docs/bugs/2004/08/v82.txt

23/08/2004 - GLSA 200408-22
Assunto: Mozilla, Firefox, Thunderbird: New releases fix vulnerabilities. 
http://www.security.unicamp.br/docs/bugs/2004/08/v81.txt

23/08/2004 - GLSA 200408-21
Assunto: Cacti: SQL injection vulnerability. 
http://www.security.unicamp.br/docs/bugs/2004/08/v80.txt

22/08/2004 - GLSA 200408-20
Assunto: Qt: Image loader overflows. 
http://www.security.unicamp.br/docs/bugs/2004/08/v76.txt

19/08/2004 - GLSA 200408-19
Assunto: courier-imap: Remote Format String Vulnerability. 
http://www.security.unicamp.br/docs/bugs/2004/08/v74.txt


KDE Security Advisories:
- ------------------------
23/08/2004
Assunto: Konqueror Cross-Domain Cookie Injection. 
http://www.security.unicamp.br/docs/bugs/2004/08/v79.txt


Mandrakelinux Security Update Advisory:
- ---------------------------------------
20/08/2004 - MDKSA-2004:086
Assunto: vulnerabilidade de seguranca no pacote kdelibs/kdebase. 
http://www.security.unicamp.br/docs/bugs/2004/08/v75.txt


NetBSD Security Advisory:
- -------------------------
17/08/2004 - 2004-009
Assunto: ftpd root escalation. 
http://www.security.unicamp.br/docs/bugs/2004/08/v73.txt


Slackware Security Advisory:
- ----------------------------
23/08/2004 - SSA:2004-236-01
Assunto: vulnerabilidade de seguranca no pacote Qt. 
http://www.security.unicamp.br/docs/bugs/2004/08/v84.txt


- --
Computer Security Incident Response Team - CSIRT
Universidade Estadual de Campinas - UNICAMP
mailto:security at unicamp.br
http://www.security.unicamp.br
GnuPG Public Key: http://www.security.unicamp.br/security.asc
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (FreeBSD)

iD8DBQFBLJDl/UMb1l3gm8IRAthNAJ4unWzP3/vsZhx9Da4nhkCfbqFg4gCeOS5l
8v56WcNrogGXeBbLlj6m+xI=
=fBKV
-----END PGP SIGNATURE-----



Mais detalhes sobre a lista de discussão SECURITY-L