Debian: ‘tcsh’ update
Nov10
Proton reported on bugtraq that tcsh did not handle in-here documentscorrectly. The version of tcsh that is distributed with Debian GNU/Linux2.2r0 also suffered from this problem.
Comment
Debian: ‘gnupg’ update
Nov10
The version of gnupg that was distributed in Debian GNU/Linux 2.2 hada logic error in the code that checks for valid signatures which couldcause false positive results:
Redhat: ‘curl’ update
Oct23
Updated curl packages are available for Red Hat Power Tools 6.x and 7.
In versions of the PHP 3 packages before version 3.0.17, several formatstring bugs could allow properly crafted requests to execute code as theuser running PHP scripts on the web server, particularly if error loggingwas enabled.
libpam-smb contains a buffer overflow that can be used to execute arbitrary commands with root privilege.