[SECURITY-L] Vulnerabilidades de Seguranca

[CSIRT - UNICAMP]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Srs. Assinantes,

Atualizamos o site do CSIRT (Computer Security Incident Response Team) da Unicamp
com os seguintes boletins de vulnerabilidades:


CAIS-Alerta:
============
20/04/2006 - CAIS-Alerta
Assunto: Multiplas vulnerabilidades em produtos Oracle 
http://www.security.unicamp.br/docs/bugs/2006/04/v089.txt

20/04/2006 - CAIS-Alerta
Assunto: Multiplas vulnerabilidades em produtos Mozilla 
http://www.security.unicamp.br/docs/bugs/2006/04/v088.txt

Debian Security Advisory:
=========================
24/04/2006 - DSA 1040-1
Assunto: gdm 
http://www.security.unicamp.br/docs/bugs/2006/04/v100.txt

24/04/2006 - DSA 1039-1
Assunto: blender 
http://www.security.unicamp.br/docs/bugs/2006/04/v101.txt

22/04/2006 - DSA 1038-1 
Assunto: xzgv 
http://www.security.unicamp.br/docs/bugs/2006/04/v096.txt

21/04/2006 - DSA 1037-1 
Assunto: zgv 
http://www.security.unicamp.br/docs/bugs/2006/04/v095.txt

Fedora Legacy Update Advisory:
==============================
21/04/2006 - FEDORA-2006-440 
Assunto: Fedora Core 5: beagle 
http://www.security.unicamp.br/docs/bugs/2006/04/v092.txt

Fedora Update Notification:
===========================
25/04/2006 - FEDORA-2006-456 
Assunto: Fedora Core 5: ethereal 
http://www.security.unicamp.br/docs/bugs/2006/04/v106.txt

Gentoo Linux Security Advisory:
===============================
23/04/2006 - GLSA 200604-14 
Assunto: Dia: Arbitrary code execution through XFig import 
http://www.security.unicamp.br/docs/bugs/2006/04/v102.txt

23/04/2006 - GLSA 200604-13 
Assunto: fbida: Insecure temporary file creation 
http://www.security.unicamp.br/docs/bugs/2006/04/v103.txt

23/04/2006 - GLSA 200604-12 
Assunto: Mozilla Firefox: Multiple vulnerabilities 
http://www.security.unicamp.br/docs/bugs/2006/04/v104.txt

22/04/2006 - GLSA 200604-11 
Assunto: Crossfire server: Denial of Service and potential arbitrary code execution 
http://www.security.unicamp.br/docs/bugs/2006/04/v097.txt

21/04/2006 - GLSA 200604-10 
Assunto: zgv, xzgv: Heap overflow 
http://www.security.unicamp.br/docs/bugs/2006/04/v094.txt

21/04/2006 - GLSA 200604-09 
Assunto: Cyrus-SASL: DIGEST-MD5 Pre-Authentication Denial of Service 
http://www.security.unicamp.br/docs/bugs/2006/04/v093.txt

HP Security Bulletin:
=====================
20/04/2006 - HPSBST02112 SSRT061129 rev.1 
Assunto: HP StorageWorks Secure Path for Windows Remote Denial of Service (DoS) 
http://www.security.unicamp.br/docs/bugs/2006/04/v091.txt

20/04/2006 - HPSBTU02095 SSRT051007 rev.3 
Assunto: HP Tru64 UNIX Running DNS BIND4/BIND8 as Forwarders: Remote Unauthorized Privileged Access
http://www.security.unicamp.br/docs/bugs/2006/04/v090.txt

Mandriva Linux Security Update Advisory:
========================================
24/04/2006 - MDKSA-2006:074 
Assunto: php 
http://www.security.unicamp.br/docs/bugs/2006/04/v107.txt

24/04/2006 - MDKSA-2006:073
Assunto: cyrus-sasl 
http://www.security.unicamp.br/docs/bugs/2006/04/v108.txt

Slackware Security Advisory:
============================
24/04/2006 - SSA:2006-114-01
Assunto: mozilla security/EOL 
http://www.security.unicamp.br/docs/bugs/2006/04/v105.txt

Ubuntu Security Notice:
=======================
24/04/2006 - USN-273-1 
Assunto: ruby1.8 vulnerability 
http://www.security.unicamp.br/docs/bugs/2006/04/v099.txt

24/04/2006 - USN-272-1 
Assunto: cyrus-sasl2 vulnerability 
http://www.security.unicamp.br/docs/bugs/2006/04/v098.txt

- --
Computer Security Incident Response Team - CSIRT
Universidade Estadual de Campinas - UNICAMP
mailto:security at unicamp.br
http://www.security.unicamp.br
GnuPG Public Key: http://www.security.unicamp.br/security.asc

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (FreeBSD)

iD8DBQFETnqa/UMb1l3gm8IRAtPOAJ9h81WVWj7nAJ1wpESpA6W7eYDt+wCcDIxJ
fyEnQQJIOHsk8JUYMwnndOc=
=6hZh
-----END PGP SIGNATURE-----