[SECURITY-L] Vulnerabilidades de seguranca

CSIRT - UNICAMP security em unicamp.br
Ter Out 25 16:40:15 -02 2005


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Srs. Assinantes,

Atualizamos o site do CSIRT (Computer Security Incident Response Team) da Unicamp
com os seguintes boletins de vulnerabilidades:


Fedora Update Notification:
===========================
20/10/2005 - FEDORA-2005-1013
Assunto: Fedora Core 4: kernel. 
http://www.security.unicamp.br/docs/bugs/2005/10/v159.txt

20/10/2005 - FEDORA-2005-1011
Assunto: Fedora Core 4: ethereal. 
http://www.security.unicamp.br/docs/bugs/2005/10/v158.txt

20/10/2005 - FEDORA-2005-1010
Assunto: Fedora Core 3: squid. 
http://www.security.unicamp.br/docs/bugs/2005/10/v157.txt

20/10/2005 - FEDORA-2005-1009
Assunto: Fedora Core 4: squid. 
http://www.security.unicamp.br/docs/bugs/2005/10/v156.txt

20/10/2005 - FEDORA-2005-1008
Assunto: Fedora Core 3: ethereal. 
http://www.security.unicamp.br/docs/bugs/2005/10/v155.txt

20/10/2005 - FEDORA-2005-1007
Assunto: Fedora Core 3: kernel. 
http://www.security.unicamp.br/docs/bugs/2005/10/v154.txt

18/10/2005 - FEDORA-2005-1000
Assunto: Fedora Core 3: curl. 
http://www.security.unicamp.br/docs/bugs/2005/10/v153.txt


FreeBSD Security Advisory:
==========================
11/10/2005 - FreeBSD-SA-05:21
Assunto: Potential SSL 2.0 rollback.
http://www.security.unicamp.br/docs/bugs/2005/10/v138.txt


Gentoo Linux Security Advisory:
===============================
20/10/2005 - GLSA 200510-18
Assunto: Netpbm: Buffer overflow in pnmtopng. 
http://www.security.unicamp.br/docs/bugs/2005/10/v147.txt

20/10/2005 - GLSA 200510-17
Assunto: AbiWord: New RTF import buffer overflows. 
http://www.security.unicamp.br/docs/bugs/2005/10/v148.txt

17/10/2005 - GLSA 200510-16
Assunto: phpMyAdmin: Local file inclusion vulnerability. 
http://www.security.unicamp.br/docs/bugs/2005/10/v146.txt

17/10/2005 - GLSA 200510-15
Assunto: Lynx: Buffer overflow in NNTP processing.
http://www.security.unicamp.br/docs/bugs/2005/10/v145.txt

17/10/2005 - GLSA 200510-14
Assunto: Perl, Qt-UnixODBC, CMake: RUNPATH issues. 
http://www.security.unicamp.br/docs/bugs/2005/10/v144.txt


HP Security Bulletin:
=====================
21/10/2005 - HPSBMA01235 - REVISION: 0 - SSRT051055 rev.0
Assunto: HP Oracle for OpenView (OfO) Critical Patch Update October 2005. 
http://www.security.unicamp.br/docs/bugs/2005/10/v143.txt

19/10/2005 - HPSBMA01234 - REVISION: 0 - SSRT051052 rev.0
Assunto: HP OpenView Operations and OpenView VantagePoint Java Runtime
Environment (JRE) Remote Privileged Access. 
http://www.security.unicamp.br/docs/bugs/2005/10/v142.txt

13/10/2005 - HPSBUX01233 - REVISION: 0 - SSRT5975
Assunto: HP-UX Running on Itanium Platforms Local Denial of Service (DoS). 
http://www.security.unicamp.br/docs/bugs/2005/10/v141.txt

13/10/2005 - HPSBUX01231 - REVISION: 1 - SSRT051041 rev.1
Assunto: HP-UX Mozilla Remote Unauthorized Execution of Privileged
Code or Denial of Service (DoS). 
http://www.security.unicamp.br/docs/bugs/2005/10/v140.txt


KDE Security Advisories:
========================
11/10/2005
Assunto: KWord RTF import buffer overflow.
http://www.security.unicamp.br/docs/bugs/2005/10/v139.txt


OpenPKG Security Advisory:
==========================
17/10/2005 - OpenPKG-SA-2005.022
Assunto: openssl.
http://www.security.unicamp.br/docs/bugs/2005/10/v149.txt


SUSE Security Announcement:
===========================
24/10/2005 - SUSE-SA:2005:062
Assunto: permissions. 
http://www.security.unicamp.br/docs/bugs/2005/10/v152.txt

19/10/2005 - SUSE-SA:2005:061
Assunto: openssl. 
http://www.security.unicamp.br/docs/bugs/2005/10/v151.txt

17/10/2005 - SUSE-SA:2005:060
Assunto: OpenWBEM.
http://www.security.unicamp.br/docs/bugs/2005/10/v150.txt


- --
Computer Security Incident Response Team - CSIRT
Universidade Estadual de Campinas - UNICAMP
mailto:security at unicamp.br
http://www.security.unicamp.br
GnuPG Public Key: http://www.security.unicamp.br/security.asc

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (FreeBSD)

iD8DBQFDXnvm/UMb1l3gm8IRAjI4AKCbIfoXWaB6jUNDsy/60BU7ElPYMQCgnWDk
GRkyw/cK2oeNyJc8ytiGhT0=
=vebX
-----END PGP SIGNATURE-----



Mais detalhes sobre a lista de discussão SECURITY-L