Wed Oct 15 2008 23:03:23 +0000

185 bugs found.
ID Sev Pri OS Assignee Status Resolution Summary
241830 nor P2 Linu kde@gentoo.org NEW kio_http dies randomly when accessing an SSL-enabled webs...
180159 enh P2 Linu security@gentoo.org NEW www-client/mozilla-firefox-2.0.0.3 Out-of-bounds memory a...
194151 maj P2 Linu security@gentoo.org NEW games-sports/racer-bin UDP message buffer overflow (CVE-2...
204067 nor P2 Linu security@gentoo.org NEW games-fps/{doom3,quake4} * - remote exploitable format st...
204068 nor P2 Linu security@gentoo.org NEW games-fps/unreal* - remote DoS
207261 nor P2 Linu security@gentoo.org NEW www-client/mozilla-firefox(-bin)Dialog Spoofing Vulnerabi...
212211 nor P2 All security@gentoo.org NEW dev-lang/php < 5.2.6_rc1-r1: Multiple crash issues, CVE-2...
212247 enh P2 Linu security@gentoo.org NEW www-apps/moregroupware security status
212351 nor P2 Linu security@gentoo.org NEW app-emulation/qemu-softmmu <= 0.9.1-r1 insufficient block...
213318 nor P2 Linu security@gentoo.org NEW dev-php/PEAR-PhpDocumentor: bundled smarty lib vulnerable...
213322 nor P2 Linu security@gentoo.org NEW www-apps/gallery: <=2.2.5 affected by bundled smarty (CVE...
215614 enh P2 Linu security@gentoo.org NEW Java Security Status (Tracker)
217139 nor P2 All security@gentoo.org NEW dev-lang/php: mod_php can overtake apache file handles (C...
219085 min P2 Linu security@gentoo.org NEW dev-lang/ruby NTFS/FAT file disclosure (CVE-2008-1891)
223363 nor P2 Linu security@gentoo.org NEW www-client/mozilla-firefox JSframe Heap Corruption (CVE-2...
224835 min P2 Linu security@gentoo.org NEW net-misc/asterisk <1.2.29 SIP channel remote crash (CVE-2...
225483 nor P2 Linu security@gentoo.org NEW app-text/acroread "2008-HI2.pdf" Crash / Code execution? ...
230575 nor P2 All security@gentoo.org NEW dev-lang/php <5.2.6-r2: safe_mode bypass, code execution,...
231830 nor P2 Linu security@gentoo.org NEW www-client/opera "Cross-Site Cooking" Session Hijacking (...
231831 nor P2 Linu security@gentoo.org NEW media-video/ffmpeg <0.4.9_p20070616-r3 libavformat/psxstr...
231834 nor P2 Linu security@gentoo.org NEW media-plugins/gst-plugins-ffmpeg FFmpeg psxstr.c Buffer o...
232005 nor P2 Linu security@gentoo.org NEW dev-util/yacc skeleton.c rule reduction stack error (CVE-...
232665 nor P2 Linu security@gentoo.org NEW app-antivirus/f-prot <6.0.2 Multiple DoS issues (CVE-2008...
232698 nor P2 Linu security@gentoo.org NEW <net-misc/asterisk-1.2.30 IAX 'POKE' resource exhaustion ...
232999 nor P2 Linu security@gentoo.org NEW media-libs/win32codecs -multiple vulnerabilities in real ...
233928 min P2 Linu security@gentoo.org NEW app-antivirus/f-prot infinite loop via a malformed ZIP (C...
233929 nor P2 Linu security@gentoo.org NEW games-simulation/openttd <0.6.2 TruncateString() Buffer O...
234652 maj P2 Linu security@gentoo.org NEW app-editors/vim arbitrary command execution when handling...
234806 nor P2 Linu security@gentoo.org NEW dev-lang/ruby regex.c infinite loop (CVE-2008-3443)
235225 nor P2 Linu security@gentoo.org NEW net-www/awstats <6.9 awstats.pl Cross-site scripting (CVE...
235227 min P2 All security@gentoo.org NEW net-mail/uw-imap: possible exposure of SSL keys (missing ...
236167 maj P2 Linu security@gentoo.org NEW app-emulation/vmware-* multiple vulnerabilities (CVE-2007...
236205 tri P2 Linu security@gentoo.org NEW games-server/crossfire-server 1.11.0: Insecure temporary ...
237166 nor P2 Linu security@gentoo.org NEW dev-db/mysql <5.0.66 b'' Server DoS (CVE-2008-3963)
237385 nor P2 Linu security@gentoo.org NEW dev-ruby/rails <2.1.1 :limit and :offset SQL injection (C...
237476 nor P2 Linu security@gentoo.org NEW net-misc/asterisk username disclosure (CVE-2008-3903)
238117 min P2 Linu security@gentoo.org NEW dev-db/mysql DATA / INDEX DIRECTORY symlink attack (CVE-2...
238118 tri P2 Linu security@gentoo.org NEW dev-python/pydns Insufficient randomness in transaction I...
238120 nor P2 Linu security@gentoo.org NEW app-editors/vim <7.2.010 control-k command execution (CVE...
238535 nor P2 Linu security@gentoo.org NEW Mozilla Firefox, Thunderbird, Seamonkey, Xulrunner: ".17"...
238571 nor P2 Linu security@gentoo.org NEW www-apps/drupal Insecure cookie session hijacking (CVE-20...
238574 nor P2 Linu security@gentoo.org NEW net-misc/openswan livetest Insecure temporary file creati...
238575 nor P2 Linu security@gentoo.org NEW app-accessibility/emacspeak extract-table.pl Insecure tem...
238762 min P2 Linu security@gentoo.org NEW net-ftp/proftpd Cross-Site Request Forgery Vulnerability ...
238976 maj P2 Linu security@gentoo.org NEW net-print/cups <1.3.8-r2 Multiple buffer overflows (CVE-2...
239047 nor P2 Linu security@gentoo.org NEW net-ftp/netkit-ftpd Cross-Site Request Forgery Vulnerabil...
239054 min P2 Linu security@gentoo.org NEW mail-client/squirrelmail <1.4.16 Insecure cookie session ...
239538 nor P2 Linu security@gentoo.org NEW dev-libs/icu<r23572 and dev-java/icu4j<r23606 XSS (CVE-20...
239543 min P2 Linu security@gentoo.org NEW net-www/netscape-flash <10.0.12.36 clipboard and clickjac...
239547 min P2 Linu security@gentoo.org NEW sys-boot/grub<=0.97 authentication passwords problem (CVE...
239557 min P2 Linu security@gentoo.org NEW <=games-fps/ut2004-3369 DOS & NULL pointer dereference (C...
239565 nor P2 Linu security@gentoo.org NEW <=kde-base/konqueror-3.5.10 DOS via Javascript (CVE-2008-...
240407 min P2 Linu security@gentoo.org NEW dev-db/mysql: XSS in command line client of MySQL 5.0.{26...
240576 min P2 Linu security@gentoo.org NEW sys-cluster/fence-2.02.00-r1 symlink vulnerability
241146 min P2 Linu security@gentoo.org NEW app-emulation/libvirt priviledge escalation (CVE-2008-4405)
241150 nor P2 Linu security@gentoo.org NEW app-emulation/vmware-* privilege escalation from guest (C...
240592 tri P4 Linu security@gentoo.org NEW www-client/mozilla-firefox<=3.0.3 user interface event di...
241112 min P4 Linu security@gentoo.org NEW kde-base/konqueror-3.5.9 HTML parser DOS (CVE-2008-4514)
149062 cri P1 Linu security@gentoo.org ASSI sys-apps/portage does not set sticky bit on $PORTAGE_TMPDIR
168196 maj P1 Linu security@gentoo.org ASSI net-mail/courier-imap remote execution vulnerability
81958 maj P2 All security@gentoo.org ASSI app-arch/unace: buffer overflows and directory traversal
122407 enh P2 Linu security@gentoo.org ASSI games-arcade/xkobo: insecure file creation
125902 enh P2 Linu security@gentoo.org ASSI games-roguelike/nethack: local privilege escalation and i...
127167 enh P2 Linu security@gentoo.org ASSI games-roguelike/slashem: insecure save game creation and ...
127319 enh P2 Linu security@gentoo.org ASSI games-roguelike/falconseye: local privilege escalation
135645 nor P2 Linu security@gentoo.org ASSI games-fps/quake3-*, rtcw, enemy-territory, maybe more: Qu...
142392 enh P2 Linu security@gentoo.org ASSI games-strategy/ufo2000 - multiple issues (CVE-2006-{3788,...
154995 enh P2 Linu security@gentoo.org ASSI net-misc/xsupplicant "eap_do_notify()" Buffer Overflow Vu...
159556 min P2 Linu security@gentoo.org ASSI sys-block/partimage: insecure temporary file creation
168529 enh P2 Linu security@gentoo.org ASSI www-apps/wordpress security status
168584 enh P2 Linu security@gentoo.org ASSI net-misc/ssh: SFTP restriction evasion (CVE-2006-0705)
169563 nor P2 Linu security@gentoo.org ASSI games-fps/enemy-territory: security update for Enemy Terr...
172525 enh P2 Linu security@gentoo.org ASSI www-apps/xoops security status
178575 nor P2 Linu security@gentoo.org ASSI dev-java/sun-jdk-1.6.0* and dev-java/sun-jre-bin-1.6.0* i...
179162 nor P2 Linu security@gentoo.org ASSI app-emulation/emul-linux-x86-java-1.6*: internal copy of ...
181361 enh P2 Linu security@gentoo.org ASSI www-client/mozilla-firefox{,bin} - multiple vulnerabilities
182824 nor P2 Linu security@gentoo.org ASSI dev-java/blackdown-{jdk|jre} probably affected by GLSA 20...
190835 enh P2 Linu security@gentoo.org ASSI games-fps/doomsday < 1.9.0-beta5.2 Multiple Vulnerabiliti...
192989 min P2 Linu security@gentoo.org ASSI dev-perl/Archive-Tar < 1.38 Directory traversal flaws (CV...
194607 maj P2 Linu security@gentoo.org ASSI games-fps/{doom3,quake4}* Engine Format String Vulnerabil...
195386 min P2 Linu security@gentoo.org ASSI www-client/opera Remote DNS rebinding attack vulnerabilit...
195978 min P2 Linu security@gentoo.org ASSI www-client/mozilla-firefox[-bin] CSS Vulnerabilty (CVE-20...
196865 maj P2 Linu security@gentoo.org ASSI app-emulation/emul-linux-x86-baselibs: Multiple issues
198988 tri P2 Linu security@gentoo.org ASSI dev-db/mysql < 5.0.44-r2 dev-db/mysql-community InnoDB "C...
199207 min P2 Linu security@gentoo.org ASSI app-crypt/heimdal ftpd uninitialized vulnerability (CVE-2...
200159 nor P2 All security@gentoo.org ASSI dev-ruby/rails < 1.2.6 Session fixation vulnerability (CV...
201434 min P2 Linu security@gentoo.org ASSI app-emulation/qemu TranslationBlock (code_gen_buffer) buf...
203084 enh P2 Linu security@gentoo.org ASSI www-apps/mambo security status
203532 enh P2 Linu security@gentoo.org ASSI media-video/nemesi Multiple buffer overflows with remote ...
203536 enh P2 Linu security@gentoo.org ASSI media-video/fenice Multiple vulnerabilities (CVE-2007-{66...
204063 min P2 Linu security@gentoo.org ASSI media-sound/mt-daapd <= 0.2.4.1 remote DoS
204335 enh P2 Linu security@gentoo.org ASSI www-apps/joomla security status
206847 nor P2 Linu security@gentoo.org ASSI net-dns/bind-* libbind "inet_network()" Off-By-One Vulner...
208464 nor P2 Linu security@gentoo.org ASSI dev-lang/tk, dev-util/sourcenav, dev-util/insight, dev-pe...
209148 nor P2 All security@gentoo.org ASSI dev-lang/php < 5.2.5_p20080206: vulnerable pcre, several ...
209903 maj P2 Linu security@gentoo.org ASSI games-mud/tintin <1.98.0 add_line_buffer Buffer Overflow ...
212147 maj P2 Linu security@gentoo.org ASSI dev-php/smarty < 2.6.19 Remote arbitrary PHP function cal...
212368 enh P2 Linu security@gentoo.org ASSI www-apps/net2ftp security status
212429 tri P2 Linu security@gentoo.org ASSI app-emulation/xen Qemu: insufficient block device address...
213320 nor P2 Linu security@gentoo.org ASSI www-apps/tikiwiki: < 2.0 affected by bundled smarty and o...
ID Sev Pri OS Assignee Status Resolution Summary
213548 nor P2 Linu security@gentoo.org ASSI app-emulation/vmware-workstation +server +player Multiple...
213770 min P2 Linu security@gentoo.org ASSI app-pda/synce-dccm <0.10.1 vdccm Multiple vulnerabilities...
213823 nor P2 Linu security@gentoo.org ASSI <app-emulation/emul-linux-x86-baselibs-20080316; <net-nds...
215266 nor P2 Linu security@gentoo.org ASSI dev-lang/php < 5.2.6_rc4: multiple vulnerabilities (CVE-2...
215699 enh P2 Linu security@gentoo.org ASSI net-misc/ltsp-4 Multiple vulnerabilities
215701 tri P2 Linu security@gentoo.org ASSI sys-auth/policykit <0.8 Format String Vulnerability (CVE-...
216319 nor P2 Linu security@gentoo.org ASSI net-proxy/squid <2.6.18 arrayShrink assert Denial of Serv...
217986 nor P2 Linu security@gentoo.org ASSI media-sound/mt-daapd <0.2.4.2 ws_getpostvars() Integer ov...
218064 nor P2 Linu security@gentoo.org ASSI app-arch/unrar-gpl <0.0.1_p20080417 : rar overflow (CVE-2...
218966 nor P2 Linu security@gentoo.org ASSI <net-misc/asterisk-1.2.28 IAX2 vulnerability (CVE-2008-1897)
221197 nor P2 All security@gentoo.org ASSI app-editors/emacs <=21.4-r16 fast-lock-mode arbitrary lis...
221943 min P2 Linu security@gentoo.org ASSI app-emulation/qemu-softmmu < 0.9.1-r3 "drive_init()" secu...
222119 maj P2 All security@gentoo.org ASSI games-fps/tremulous < svn rev 778: Q3 Engine "remapShader...
222121 nor P2 Linu security@gentoo.org ASSI net-analyzer/sarg Multiple stack-based buffer overflows (...
222649 min P2 Linu security@gentoo.org ASSI www-apps/mantisbt <1.2.0a1? Remote code execution, CSRF, ...
222819 nor P2 Linu security@gentoo.org ASSI media-libs/jasper <1.900.1-r2 multiple vulnerabilities (C...
223217 min P2 Linu security@gentoo.org ASSI net-analyzer/snort <2.8.1 Snort IP Fragment TTL Evasion V...
223649 nor P2 All security@gentoo.org ASSI app-emulation/qemu-softmmu: vulnerable to CVE-2007-1320 (...
224637 nor P2 Linu security@gentoo.org ASSI VMware Multiple vulnerabilities (CVE-2007-5671,CVE-2008-{...
224949 min P2 Linu security@gentoo.org ASSI net-misc/asterisk-addons < 1.2.9 Remote crash vulnerabili...
225465 maj P2 Linu security@gentoo.org ASSI dev-lang/ruby <1.8.6_p287 Multiple vulnerabilities (CVE-2...
225477 min P2 Linu security@gentoo.org ASSI www-servers/tomcat <5.5.27 <6.0.18 Information disclosure...
227453 maj P2 Linu security@gentoo.org ASSI app-editors/vim-core <7.1.319 Shell Command Injection Vul...
227913 enh P2 Linu security@gentoo.org ASSI net-misc/quagga 0.99.10 version bump - security fixes
228369 nor P2 Linu security@gentoo.org ASSI dev-lang/php <5.2.6-r3: safe_mode bypass (CVE-2008-{2665,...
228505 min P2 Linu security@gentoo.org ASSI www-apps/horde-turba < 2.2.1 XSS vulnerability in contact...
229157 nor P2 Linu security@gentoo.org ASSI net-im/tmsnc <0.3.2-r1 UBX Stack-based buffer overflow (C...
229329 min P2 All security@gentoo.org ASSI dev-db/mysql <= 5.0.60-r1: GRANT statement DoS
230045 nor P2 Linu security@gentoo.org ASSI net-im/pidgin File transfer filename vulnerability, DoS (...
230591 maj P2 Linu security@gentoo.org ASSI net-wireless/bluez-libs < 3.36 SDP payload processing vul...
231283 enh P2 Linu security@gentoo.org ASSI net-dns/posadis affected by cache poisoning issue VU#8001...
231285 min P2 Linu security@gentoo.org ASSI net-dns/pdnsd < 1.2.7 cache poisoning issue + DoS (CVE-20...
231292 nor P2 Linu security@gentoo.org ASSI net-misc/openssh do_authloop() Format String Privilege Es...
231337 maj P2 Linu security@gentoo.org ASSI dev-java/sun-{jdk,jre-bin}|app-emulation/emul-linux-x86-j...
231616 nor P2 Linu security@gentoo.org ASSI www-client/mozilla-firefox(-bin) lol-firefox.gif crash (C...
231836 nor P2 Linu security@gentoo.org ASSI media-video/mplayer < 1.0_rc2_p27725 FFmpeg psxstr.c Buff...
232831 nor P2 Linu security@gentoo.org ASSI net-firewall/ipsec-tools <0.7.1 racoon DoS (CVE-2008-3651...
232890 cri P2 Linu security@gentoo.org ASSI app-editors/vim < 7.2 configure.in Makefile-conf temporar...
233543 min P2 Linu security@gentoo.org ASSI dev-libs/opensc <0.11.6 CardOS initialization with improp...
233562 min P2 Linu security@gentoo.org ASSI dev-lang/mono ASP.net XSS, Sys.Web Header injection (CVE-...
233652 nor P2 Linu security@gentoo.org ASSI dev-java/ibm-jdk-bin and ibm-jre-bin: multiple vulnerabil...
233959 min P2 Linu security@gentoo.org ASSI net-print/hplip <2.8.5 DoS (CVE-2008-2940,CVE-2008-2941)
234032 min P2 Linu security@gentoo.org ASSI net-dns/pdns <2.9.21.1 Ignoring invalid DNS queries eases...
234099 nor P2 Linu security@gentoo.org ASSI dev-libs/libxml2 <2.7.0 xmlStringLenDecodeEntities() Deni...
234102 maj P2 All security@gentoo.org ASSI dev-lang/php < 5.2.6-r6: arbitrary code execution, DoS, s...
234135 nor P2 Linu security@gentoo.org ASSI net-im/pidgin < 2.5.1 Failure to verify SSL certificate (...
234137 min P2 Linu security@gentoo.org ASSI www-apps/gallery <1.5.8 Multiple vulnerabilities (CVE-200...
234777 maj P2 Linu security@gentoo.org ASSI media-libs/xine-lib <1.1.15-r1 Multiple issues (CVE-2008-...
234819 min P2 Linu security@gentoo.org ASSI media-sound/ventrilo-server-bin decryption NULL reference...
235052 maj P2 All security@gentoo.org ASSI www-apps/phpcollab: SQL / shell command / PHP code inject...
235053 nor P2 Linu security@gentoo.org ASSI www-apps/online-bookmarks <0.6.28 Login bypass, XSS, SQL ...
235219 </