3
Ubuntu: 927-7: nspr updateview story

http://www.linuxsecurity.com – LinuxSecurity.com: USN-927-4 fixed vulnerabilities in NSS. This update provides the NSPRneeded to use the new NSS. [More...] (Security)

3
Ubuntu: 940-2: Kerberos vulnerabilityview story

http://www.linuxsecurity.com – LinuxSecurity.com: USN-940-1 fixed vulnerabilities in Kerberos. This update provides thecorresponding updates for Ubuntu 10.04. [More...] (Security)

6
Debian: 2074-1: ncompress: integer underflowview story

http://www.linuxsecurity.com – LinuxSecurity.com: Aki Helin discovered an integer underflow in ncompress, the original Lempel-Ziv compress/uncompress programs. This could lead to the execution of arbitrary code when trying to decompress a crafted LZW compressed gzip archive. [More...] (Security)

5
SuSE: 2010-031: Linux kernelview story

http://www.linuxsecurity.com – LinuxSecurity.com: The SUSE Linux Enterprise 11 GA Kernel was updated to 2.6.27.48 fixing various bugs and security issues. CVE-2010-1641: The do_gfs2_set_flags function in fs/gfs2/file.c in the Linux kernel does not verify the ownership of a file, which allows local users to bypass intended access restrictions via a SETFLAGS [More...] (Security)

9
Debian: 2072-1: libpng: Multiple vulnerabilitiesview story

http://www.linuxsecurity.com – LinuxSecurity.com: Several vulnerabilities have been discovered in libpng, a library for reading and writing PNG files. The Common Vulnerabilities and Exposures project identifies the following problems: [More...] (Security)

5
Mandriva: 2010:131: iscsitargetview story

http://www.linuxsecurity.com – LinuxSecurity.com: Multiple format string and buffer overflow vulnerabilities has been found and corrected in iscsitarget (CVE-2010-0743, CVE-2010-2221). The updated packages have been patched to correct these issues. [More...] _______________________________________________________________________ (Security)

3
Debian: 2069-1: znc: denial of serviceview story

http://www.linuxsecurity.com – LinuxSecurity.com: It was discovered that znc, an IRC bouncer, is vulnerable to denial of service attacks via a NULL pointer dereference when traffic statistics are requested while there is an unauthenticated connection. [More...] (Security)

6
SuSE: 2010-030: Mozilla Firefoxview story

http://www.linuxsecurity.com – LinuxSecurity.com: Mozilla Firefox was updated to version 3.5.10, fixing various bugs and security issues. MFSA 2010-33 / CVE-2008-5913: Security researcher Amit Klein reported that it was possible to reverse engineer the value used to seed Math.random(). Since the pseudo-random [More...] (Security)

3
Mandriva: 2010:128: lftpview story

http://www.linuxsecurity.com – LinuxSecurity.com: A vulnerability has been found and corrected in lftp: The get1 command, as used by lftpget, in LFTP before 4.0.6 does not properly validate a server-provided filename before determining the destination filename of a download, which allows remote servers to [More...] (Security)

3
SuSE: 2010-028: IBM Java 5view story

http://www.linuxsecurity.com – LinuxSecurity.com: This update of IBM Java 1.5.0 to SR11 FP2 brings various bug and lots of security fixes. Following security issues were fixed: CVE-2010-0084: Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 [More...] (Security)

4
Ubuntu: 943-1: Thunderbird vulnerabilitiesview story

http://www.linuxsecurity.com – LinuxSecurity.com: Martin Barbella discovered an integer overflow in an XSLT node sortingroutine. An attacker could exploit this to overflow a buffer and cause adenial of service or possibly execute arbitrary code with the privileges ofthe user invoking the program. (CVE-2010-1199) [More...] (Security)

6
SuSE: 2010-025: Sambaview story

http://www.linuxsecurity.com – LinuxSecurity.com: The Samba server was updated to fix security issues and bugs. Following security issues were fixed: CVE-2010-2063: A buffer overrun was possible in chain_reply code in 3.3.x and below, which could be used to crash the samba server or potentially execute code. [More...] (Security)