[SECURITY-L] Vulnerabilidades de Seguranca

CSIRT - UNICAMP security em unicamp.br
Qui Jun 8 16:45:50 -03 2006


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Srs. Assinantes,

Atualizamos o site do CSIRT (Computer Security Incident Response Team) da Unicamp
com os seguintes boletins de vulnerabilidades:


Anúncio de Segurança do Conectiva Linux:
========================================
08/06/2006 - CLA-2006:1080 
Assunto: mod_auth_pgsql 
http://www.security.unicamp.br/docs/bugs/2006/06/v039.txt

08/06/2006 - CLA-2006:1079 
Assunto: xscreansaver 
http://www.security.unicamp.br/docs/bugs/2006/06/v038.txt

08/06/2006 - CLA-2006:1078 
Assunto: bogofilter 
http://www.security.unicamp.br/docs/bugs/2006/06/v037.txt

08/06/2006 - CLA-2006:1077 
Assunto: w3c-libwww 
http://www.security.unicamp.br/docs/bugs/2006/06/v036.txt

08/06/2006 - CLA-2006:1076 
Assunto: Mplayer 
http://www.security.unicamp.br/docs/bugs/2006/06/v035.txt

CAIS-Alerta:
============
07/06/2006 - CAIS-Alerta
Assunto: Vulnerabilidade de execucao remota de codigo no SpamAssassin 
http://www.security.unicamp.br/docs/bugs/2006/06/v021.txt

Fedora Legacy Update Advisory:
==============================
07/06/2006 - FLSA:190941 
Assunto: Updated ipesec-tools packages fixes security issue 
http://www.security.unicamp.br/docs/bugs/2006/06/v028.txt

07/06/2006 - FLSA:189137-1 
Assunto: Updated mozilla packages fix security issues
http://www.security.unicamp.br/docs/bugs/2006/06/v026.txt

06/06/2006 - FLSA:190884
Assunto: Updated squirrelmail package fixes security issues 
http://www.security.unicamp.br/docs/bugs/2006/06/v029.txt

06/06/2006 - FLSA:190777
Assunto: Updated X.org packages fix security issue
http://www.security.unicamp.br/docs/bugs/2006/06/v027.txt

06/06/2006 - FLSA:189137-2 
Assunto: Updated firefox package fixes security issues
http://www.security.unicamp.br/docs/bugs/2006/06/v030.txt

Gentoo Linux Security Advisory:
===============================
07/06/2006 - GLSA 200606-06 
Assunto: AWStats: Remote execution of arbitrary 
http://www.security.unicamp.br/docs/bugs/2006/06/v034.txt

07/06/2006 - GLSA 200606-05 
Assunto: Pound: HTTP request smuggling 
http://www.security.unicamp.br/docs/bugs/2006/06/v024.txt

07/06/2006 - GLSA 200606-04 
Assuntp: Tor Several vulnerabilities 
http://www.security.unicamp.br/docs/bugs/2006/06/v023.txt

07/06/2006 - GLSA 200606-03 
Assunto: Dia Format string vulnerabilities 
http://www.security.unicamp.br/docs/bugs/2006/06/v022.txt

07/06/2006 - GLSA 200606-02 
Assunto: shadow: Privilege escalation
http://www.security.unicamp.br/docs/bugs/2006/06/v020.txt

07/06/2006 - GLSA 200606-01 
Assunto: Opera Buffer overflow
http://www.security.unicamp.br/docs/bugs/2006/06/v025.txt

Mandriva Linux Security Update Advisory:
========================================
07/06/2006 - MDKSA-2006:098 
Assunto: Postgresql 
http://www.security.unicamp.br/docs/bugs/2006/06/v033.txt

07/06/2006 - MDKSA-2006:097 
Assunto: MySQL 
http://www.security.unicamp.br/docs/bugs/2006/06/v032.txt

07/06/2006 - MDKSA-2006:096 
Assunto: openldap 
http://www.security.unicamp.br/docs/bugs/2006/06/v031.txt

- --
Computer Security Incident Response Team - CSIRT
Universidade Estadual de Campinas - UNICAMP
mailto:security at unicamp.br
http://www.security.unicamp.br
GnuPG Public Key: http://www.security.unicamp.br/security.asc

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (FreeBSD)

iD8DBQFEiH4x/UMb1l3gm8IRAqyyAJ9HPoc+rgnWAoJWSdKfuEGexCV8YwCghSJA
hAt8MoMIE7YJYN1fKiFXsS4=
=Ue08
-----END PGP SIGNATURE-----



Mais detalhes sobre a lista de discussão SECURITY-L