[Full-disclosure] [PLSA 2008-71] clamAV: off-by-one buffer overflow

2008-11-14 Thread Pınar Yanardağ
Pardus Linux Security Advisory 2008-71[EMAIL PROTECTED] Date: 2008-11-14 Severity: 2 Type: Remote

[Full-disclosure] [PLSA 2008-70] GnuTLS: Security Bypass

2008-11-14 Thread Pınar Yanardağ
Pardus Linux Security Advisory 2008-70[EMAIL PROTECTED] Date: 2008-11-14 Severity: 3 Type: Remote

[Full-disclosure] [PLSA 2008-69] libpng: Denial of Service

2008-11-10 Thread Pınar Yanardağ
Pardus Linux Security Advisory 2008-69[EMAIL PROTECTED] Date: 2008-11-11 Severity: 1 Type: Remote

[Full-disclosure] [PLSA 2008-67] libcdaudio: Buffer Overflow

2008-11-06 Thread Pınar Yanardağ
Pardus Linux Security Advisory 2008-67[EMAIL PROTECTED] Date: 2008-11-07 Severity: 2 Type: Remote

[Full-disclosure] PLSA 2008-63] imlib2: Multiple Vulnerabilities

2008-11-06 Thread Pınar Yanardağ
Pardus Linux Security Advisory 2008-63[EMAIL PROTECTED] Date: 2008-11-07 Severity: 3 Type: Remote

[Full-disclosure] [PLSA 2008-66] Blender: Arbitrary Code Execution

2008-11-06 Thread Pınar Yanardağ
Pardus Linux Security Advisory 2008-66[EMAIL PROTECTED] Date: 2008-11-07 Severity: 2 Type: Local

[Full-disclosure] [PLSA 2008-64] Dovecot: Multiple Vulnerabilities

2008-11-06 Thread Pınar Yanardağ
Pardus Linux Security Advisory 2008-64[EMAIL PROTECTED] Date: 2008-11-07 Severity: 2 Type: Remote Summary === The

[Full-disclosure] [PLSA 2008-65] net-snmp: Denial of Service

2008-11-04 Thread Pınar Yanardağ
Pardus Linux Security Advisory 2008-65[EMAIL PROTECTED] Date: 2008-11-05 Severity: 2 Type: Remote

[Full-disclosure] [PLSA 2008-62] Smarty: Security Bypass

2008-11-04 Thread Pınar Yanardağ
Pardus Linux Security Advisory 2008-62[EMAIL PROTECTED] Date: 2008-11-05 Severity: 1 Type: Remote

[Full-disclosure] [PLSA 2008-61] Ktorrent: Security Bypass

2008-11-04 Thread Pınar Yanardağ
Pardus Linux Security Advisory 2008-61[EMAIL PROTECTED] Date: 2008-11-05 Severity: 1 Type: Remote

[Full-disclosure] [PLSA 2008-38] Wireshark: Denial of Service

2008-09-05 Thread Pınar Yanardağ
== * http://bugs.pardus.org.tr/show_bug.cgi?id=8119 * http://www.wireshark.org/security/wnpa-sec-2008-05.html * http://secunia.com/advisories/31674 -- Pınar Yanardağ Pardus Security Team http

[Full-disclosure] [PLSA 2008-37] Django: Cross Site Scripting

2008-09-05 Thread Pınar Yanardağ
References == * http://bugs.pardus.org.tr/show_bug.cgi?id=8116 * http://www.djangoproject.com/weblog/2008/sep/02/security * http://secunia.com/advisories/31729 -- Pınar Yanardağ Pardus Security Team http

[Full-disclosure] [PLSA 2008-39] Clamav: Multiple Vulnerabilities

2008-09-05 Thread Pınar Yanardağ
-- Pınar Yanardağ Pardus Security Team http://security.pardus.org.tr ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http

[Full-disclosure] [PLSA 2008-40] Postfix: Denial of Service

2008-09-05 Thread Pınar Yanardağ
/ -- Pınar Yanardağ Pardus Security Team http://security.pardus.org.tr ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted

[Full-disclosure] [PLSA 2008-41] Emacs: Malicious code execution

2008-09-05 Thread Pınar Yanardağ
://lists.gnu.org/archive/html/emacs-devel/2008-09/msg00215.html * http://www.opensubscriber.com/message/[EMAIL PROTECTED]/9983157.html -- Pınar Yanardağ Pardus Security Team http://security.pardus.org.tr

[Full-disclosure] [PLSA 2008-35] Ruby: Denial of Service

2008-08-31 Thread Pınar Yanardağ
* http://secunia.com/advisories/31602 -- Pınar Yanardağ Pardus Security Team http://security.pardus.org.tr ___ Full-Disclosure - We believe in it. Charter: http

[Full-disclosure] [PLSA 2008-32] Mono: Cross Site Scripting

2008-08-30 Thread Pınar Yanardağ
://secunia.com/advisories/31643/ -- Pınar Yanardağ Pardus Security Team http://security.pardus.org.tr ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure

[Full-disclosure] [PLSA 2008-33] [UPDATED] Opensc: Security Bypass

2008-08-30 Thread Pınar Yanardağ
://secunia.com/advisories/31330 -- Pınar Yanardağ Pardus Security Team http://security.pardus.org.tr ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full

[Full-disclosure] [PLSA 2008-28] [Update] Libxml2: Denial of Service

2008-08-27 Thread Pınar Yanardağ
* http://mail.gnome.org/archives/xml/2008-August/msg00034.html -- Pınar Yanardağ Pardus Security Team http://security.pardus.org.tr ___ Full-Disclosure - We believe

[Full-disclosure] [PLSA 2008-31] Tiff: Denial of Service

2008-08-26 Thread Pınar Yanardağ
-tracker.debian.net/tracker/CVE-2008-2327 * http://secunia.com/advisories/31610 * http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-2327 -- Pınar Yanardağ Pardus Security Team http://security.pardus.org.tr

[Full-disclosure] [PLSA 2008-28] Libxml2: Denial of Service

2008-08-24 Thread Pınar Yanardağ
-2008-3281 * http://secunia.com/advisories/31558/ * https://rhn.redhat.com/errata/RHSA-2008-0836.html * http://mail.gnome.org/archives/xml/2008-August/msg00034.html -- Pınar Yanardağ Pardus Security Team http

[Full-disclosure] [PLSA 2008-29] Vlc: Multiple Vulnerabilities

2008-08-24 Thread Pınar Yanardağ
/vlc-devel/2008-August/048504.html -- Pınar Yanardağ Pardus Security Team http://security.pardus.org.tr ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk

[Full-disclosure] [PLSA 2008-30] Vim: Arbitrary code execution

2008-08-24 Thread Pınar Yanardağ
/browse_thread/thread/1434d0812b5c817e/6ad2d5b50a96668e -- Pınar Yanardağ Pardus Security Team http://security.pardus.org.tr ___ Full-Disclosure - We believe in it. Charter: http

[Full-disclosure] [PLSA 2008-25] Postfix: Local privilege escalation

2008-08-15 Thread Pınar Yanardağ
Pardus Linux Security Advisory 2008-25[EMAIL PROTECTED] Date: 2008-08-16 Severity: 2 Type: Local

[Full-disclosure] [PLSA 2008-24] Amarok: Privilege escalation

2008-08-14 Thread Pınar Yanardağ
Pardus Linux Security Advisory 2008-24[EMAIL PROTECTED] Date: 2008-08-15 Severity: 2 Type: Local

[Full-disclosure] [PLSA 2008-21] Ruby: Multiple Vulnerabilities

2008-08-11 Thread Pınar Yanardağ
/ -- Pınar Yanardağ http://pinguar.org ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/

[Full-disclosure] [PLSA 2008-22] Php: Multiple Overflows

2008-08-11 Thread Pınar Yanardağ
-- Pınar Yanardağ http://pinguar.org ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/

[Full-disclosure] [PLSA 2008-18] Pidgin: Spoofing Vulnerability

2008-08-06 Thread Pınar Yanardağ
/ * http://developer.pidgin.im/ticket/6500 -- Pınar Yanardağ http://pinguar.org ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure

[Full-disclosure] [PLSA 2008-19] Git: Multiple Buffer Overflows

2008-08-06 Thread Pınar Yanardağ
References == * http://www.kernel.org/pub/software/scm/git/docs/RelNotes-1.5.6.4.txt * http://kerneltrap.org/mailarchive/git/2008/7/16/2529284 * http://secunia.com/advisories/31347/ -- Pınar Yanardağ http