(Jan 17) The fix for CVE-2013-4969 contained a regression affecting the default file mode if none is specified on a file resource. The oldstable distribution (squeeze) is not affected by this regression. [More…]
Debian: 2845-1: mysql-5.1: Multiple vulnerabilities
(Jan 17) This DSA updates the MySQL 5.1 database to 5.1.73. This fixes multiple unspecified security problems in MySQL: http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html [More…]
Ubuntu: 2084-1: devscripts vulnerability
(Jan 21) devscripts could be made to run programs if it opened a specially craftedfile.
Debian: 2847-1: drupal7: Multiple vulnerabilities
(Jan 20) Multiple vulnerabilities have been discovered in Drupal, a fully-featured content management framework. The Common Vulnerabilities and Exposures project identifies the following issues: [More…]
Debian: 2846-1: libvirt: Multiple vulnerabilities
(Jan 17) Multiple security issues have been found in Libvirt, a virtualisation abstraction library: CVE-2013-6458 [More…]