Re: [SECURITY] [DSA 1481-1] New Linux 2.6.18 packages fix several vulnerabilities

2007-12-11 Thread Moritz Muehlenhoff
On 2007-12-11, Jan Hetges <[EMAIL PROTECTED]> wrote: > > --6TrnltStXW4iwmi0 > Content-Type: text/plain; charset=us-ascii > Content-Disposition: inline > Content-Transfer-Encoding: quoted-printable > > Hi > On Mon, Dec 10, 2007 at 10:51:52PM -0700, dann frazier wrote: >> -BEGIN PGP SIGNED MESSAG

Re: [SECURITY] [DSA 1430-1] New libnss-ldap packages fix denial of service

2007-12-11 Thread Dominic Hargreaves
On Tue, Dec 11, 2007 at 10:22:13PM +, Steve Kemp wrote: > Package: libnss-ldap > Vulnerability : denial of service > Problem type : local > Debian-specific: no > CVE Id(s) : CVE-2007-5794 > Debian Bug : 453868 > > It was reported that a race condition exists in libnss-ldap

Re: [SECURITY] [DSA 1481-1] New Linux 2.6.18 packages fix several vulnerabilities

2007-12-11 Thread Nico Golde
Hi Jan, * Jan Hetges <[EMAIL PROTECTED]> [2007-12-11 16:23]: > On Mon, Dec 10, 2007 at 10:51:52PM -0700, dann frazier wrote: [...] > > Package: linux-2.6 > > Vulnerability : several > > Problem-Type : local/remote > > Debian-specific: no > > CVE ID : CVE-2007-3104 CVE-2007-4997

Re: [SECURITY] [DSA 1481-1] New Linux 2.6.18 packages fix several vulnerabilities

2007-12-11 Thread Jan Hetges
Hi On Mon, Dec 10, 2007 at 10:51:52PM -0700, dann frazier wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > - -- > Debian Security Advisory DSA 1428-1[EMAIL PROTECTED] > http://www.debian.org/sec