GLSA: sharutils

2002-10-30 Thread Daniel Ahlberg
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - - GENTOO LINUX SECURITY ANNOUNCEMENT 200210-012 - - PACKAGE : sharutils SUMMARY : inadequate checks on

Re: Gimp: Erased sections of images print in some cases

2002-10-30 Thread Robert Bihlmeyer
Clark Mills [EMAIL PROTECTED] writes: http://c-mills.ctru.auckland.ac.nz/transparent.png If you view this image from Linux in Galeon 1.2.6 or Netscape/7.0 all looks fine however if you print the image from within these applications then the _erased_ section prints as if it was never

RE: MDaemon SMTP/POP/IMAP server DoS

2002-10-30 Thread Basil Hussain
The website still offers 6.0.7 (vulnerable) version for download, So apparently no workaround exists except for shutting it down until the patch or newer version is available. I got this in response to my enquiry with AltN about a fix for the problem: This has been fixed in 6.5 which will be

Re: XXE (Xml eXternal Entity) attack

2002-10-30 Thread Miles Sabin
Gregory Steuck wrote, Gregory Steuck security advisory #1, 2002 Excellent stuff ... I've posted a link to the bugtraq archive to xml-dev. Acknowledgments: Even though the issue was discovered and researched independently I cannot claim to be the first one to realize the risks associated

[SECURITY] [DSA 184-1] New krb4 packages fix buffer overflow

2002-10-30 Thread Martin Schulze
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -- Debian Security Advisory DSA 184-1 [EMAIL PROTECTED] http://www.debian.org/security/ Martin Schulze October 30th, 2002

GLSA: pam_ldap

2002-10-30 Thread Daniel Ahlberg
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - - GENTOO LINUX SECURITY ANNOUNCEMENT 200210-013 - - PACKAGE : pam_ldap SUMMARY : format string attack DATE