[SECURITY-L] Vulnerabilidades de seguranca

CSIRT - UNICAMP security em unicamp.br
Ter Jan 25 10:13:55 -02 2005


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Srs. Assinantes,

Atualizamos o site do CSIRT (Computer Security Incident Response Team) da Unicamp
com os seguintes boletins de vulnerabilidades:


Debian Security Advisory:
- -------------------------
21/01/2005 - DSA 654-1
Assunto: vulnerabilidade de seguranca no pacote enscript. 
http://www.security.unicamp.br/docs/bugs/2005/01/v110.txt

21/01/2005 - DSA 653-1
Assunto: vulnerabilidade de seguranca no pacote ethereal. 
http://www.security.unicamp.br/docs/bugs/2005/01/v109.txt

21/01/2005 - DSA 652-1
Assunto: vulnerabilidade de seguranca no pacote unarj. 
http://www.security.unicamp.br/docs/bugs/2005/01/v108.txt


Gentoo Linux Security Advisory:
- -------------------------------
24/01/2005 - GLSA 200501-35
Assunto: Evolution: Integer overflow in camel-lock-helper. 
http://www.security.unicamp.br/docs/bugs/2005/01/v118.txt

23/01/2005 - GLSA 200501-33
Assunto: MySQL: Insecure temporary file creation. 
http://www.security.unicamp.br/docs/bugs/2005/01/v113.txt

23/01/2005 - GLSA 200501-32
Assunto: KPdf, KOffice: Stack overflow in included Xpdf code. 
http://www.security.unicamp.br/docs/bugs/2005/01/v112.txt

22/01/2005 - GLSA 200501-30
Assunto: CUPS: Stack overflow in included Xpdf code.
http://www.security.unicamp.br/docs/bugs/2005/01/v106.txt

22/01/2005 - GLSA 200501-29
Assunto: Mailman: Cross-site scripting vulnerability. 
http://www.security.unicamp.br/docs/bugs/2005/01/v105.txt

21/01/2005 - GLSA 200501-28
Assunto: Xpdf, GPdf: Stack overflow in Decrypt::makeFileKey2. 
http://www.security.unicamp.br/docs/bugs/2005/01/v104.txt

20/01/2005 - GLSA 200501-27
Assunto: Ethereal: Multiple vulnerabilities. 
http://www.security.unicamp.br/docs/bugs/2005/01/v103.txt


KDE Security Advisories:
- ------------------------
21/01/2005
Assunto: Multiple vulnerabilities in Konversation. 
http://www.security.unicamp.br/docs/bugs/2005/01/v102.txt

20/01/2005
Assunto: KOffice PDF Import Filter Vulnerability. 
http://www.security.unicamp.br/docs/bugs/2005/01/v101.txt

19/01/2005
Assunto: kpdf Buffer Overflow Vulnerability. 
http://www.security.unicamp.br/docs/bugs/2005/01/v114.txt


Mandrakelinux Security Update Advisory:
- ---------------------------------------
24/01/2005 - MDKSA-2005:012
Assunto: vulnerabilidade de seguranca no pacote zhcon. 
http://www.security.unicamp.br/docs/bugs/2005/01/v116.txt 


SCO Security Advisory:
- ----------------------
20/01/2005 - SCOSA-2005.7
Assunto: UnixWare 7.1.3 UnixWare 7.1.1 : OpenSSL Multiple Vulnerabilities.
http://www.security.unicamp.br/docs/bugs/2005/01/v107.txt 


SUSE Security Announcement:
- ---------------------------
24/01/2005 - SUSE-SA:2005:004
Assunto: vulnerabilidade de seguranca no realplayer 8. 
http://www.security.unicamp.br/docs/bugs/2005/01/v115.txt 

21/01/2005 - SUSE-SA:2005:003
Assunto: vulnerabilidade de seguranca no kernel. 
http://www.security.unicamp.br/docs/bugs/2005/01/v111.txt 


- --
Computer Security Incident Response Team - CSIRT
Universidade Estadual de Campinas - UNICAMP
mailto:security at unicamp.br
http://www.security.unicamp.br
GnuPG Public Key: http://www.security.unicamp.br/security.asc

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (FreeBSD)

iD8DBQFB9jfj/UMb1l3gm8IRAu8dAJ944f5xNr9r5iClHqiUdoe7WH8E1gCeN3ZC
DcmK5owdagRpH66Op08nYHo=
=Ex/N
-----END PGP SIGNATURE-----



Mais detalhes sobre a lista de discussão SECURITY-L