The OVAL Repository 5.4 2015-09-03T06:24:34.134-04:00 Debian 4.0 openssh It has been discovered that the signal handler implementing the login timeout in Debian's version of the OpenSSH server uses functions which are not async-signal-safe, leading to a denial of service vulnerability (<a href="http://security-tracker.debian.org/tracker/CVE-2008-4109">CVE-2008-4109</a>). Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Debian 5.0 Debian 4.0 fetchmail It was discovered that fetchmail, a full-featured remote mail retrieval and forwarding utility, is vulnerable to the &quot;Null Prefix Attacks Against SSL/TLS Certificates&quot; recently published at the Blackhat conference. This allows an attacker to perform undetected man-in-the-middle attacks via a crafted ITU-T X.509 certificate with an injected null byte in the subjectAltName or Common Name fields. Note, as a fetchmail user you should always use strict certificate validation through either these option combinations: sslcertck ssl sslproto ssl3 or sslcertck sslproto tls1 For the oldstable distribution , this problem has been fixed in version 6.3.6-1etch2. For the stable distribution , this problem has been fixed in version 6.3.9~rc2-4+lenny1. For the testing distribution , this problem will be fixed soon. For the unstable distribution , this problem has been fixed in version 6.3.9~rc2-6. We recommend that you upgrade your fetchmail packages. SecPod Team DRAFT INTERIM ACCEPTED ACCEPTED Debian 5.0 Debian 4.0 libmodplug Several vulnerabilities have been discovered in libmodplug, the shared libraries for mod music based on ModPlug. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2009-1438 It was discovered that libmodplug is prone to an integer overflow when processing a MED file with a crafted song comment or song name. CVE-2009-1513 It was discovered that libmodplug is prone to a buffer overflow in the PATinst function, when processing a long instrument name. For the stable distribution , these problems have been fixed in version 1:0.8.4-1+lenny1. For the oldstable distribution , these problems have been fixed in version 1:0.7-5.2+etch1. For the testing distribution and the unstable distribution , this problem has been fixed in version 1:0.8.7-1. We recommend that you upgrade your libmodplug packages. SecPod Team DRAFT INTERIM ACCEPTED ACCEPTED Debian 5.0 Debian 4.0 qemu Several vulnerabilities have been discovered in the QEMU processor emulator. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2008-0928 Ian Jackson discovered that range checks of file operations on emulated disk devices were insufficiently enforced. CVE-2008-1945 It was discovered that an error in the format auto detection of removable media could lead to the disclosure of files in the host system. CVE-2008-4539 A buffer overflow has been found in the emulation of the Cirrus graphics adaptor. For the old stable distribution , these problems have been fixed in version 0.8.2-4etch3. For the stable distribution , these problems have been fixed in version 0.9.1-10lenny1. For the unstable distribution , these problems have been fixed in version 0.9.1+svn20081101-1. We recommend that you upgrade your qemu packages. SecPod Team DRAFT INTERIM ACCEPTED ACCEPTED Debian 5.0 Debian 4.0 camlimages Tielei Wang discovered that CamlImages, an open source image processing library, suffers from several integer overflows which may lead to a potentially exploitable heap overflow and result in arbitrary code execution. For the old stable distribution , this problem has been fixed in version 2.20-8+etch1. For the stable distribution , this problem has been fixed in version 2.2.0-4+lenny1. For the unstable distribution , this problem has been fixed in version 3.0.1-2. We recommend that you upgrade your camlimages package. SecPod Team DRAFT INTERIM ACCEPTED ACCEPTED Debian 5.0 Debian 4.0 openexr Several vulnerabilities have been discovered in the OpenEXR image library, which can lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2009-1720 Drew Yao discovered integer overflows in the preview and compression code. CVE-2009-1721 Drew Yao discovered that an uninitialised pointer could be freed in the decompression code. CVE-2009-1722 A buffer overflow was discovered in the compression code. For the old stable distribution , these problems have been fixed in version 1.2.2-4.3+etch2. For the stable distribution , these problems have been fixed in version 1.6.1-3+lenny3. For the unstable distribution , these problems will be fixed soon. We recommend that you upgrade your openexr packages. SecPod Team DRAFT INTERIM ACCEPTED ACCEPTED Debian 5.0 Debian 4.0 camlimages Tielei Wang discovered that CamlImages, an open source image processing library, suffers from several integer overflows which may lead to a potentially exploitable heap overflow and result in arbitrary code execution. This advisory addresses issues with the reading of JPEG and GIF Images, while DSA 1832-1 addressed the issue with PNG images. For the oldstable distribution , this problem has been fixed in version 2.20-8+etch2. For the stable distribution , this problem has been fixed in version 1:2.2.0-4+lenny2. For the unstable distribution , this problem has been fixed in version 1:3.0.1-3. We recommend that you upgrade your camlimages package. SecPod Team DRAFT INTERIM ACCEPTED ACCEPTED Debian 5.0 Debian 4.0 request-tracker3.4/request-tracker3.6 Mikal Gule discovered that request-tracker, an extensible trouble-ticket tracking system, is prone to an attack, where an attacker with access to the same domain can hijack a user"s RT session. For the stable distribution , this problem has been fixed in version 3.6.7-5+lenny3. For the oldstable distribution , this problem has been fixed in version 3.6.1-4+etch1 of request-tracker3.6 and version 3.4.5-2+etch1 of request-tracker3.4. For the testing distribution , this problem will be fixed soon. For the unstable distribution , this problem has been fixed in version 3.6.9-2. We recommend that you upgrade your request-tracker packages. SecPod Team DRAFT INTERIM ACCEPTED ACCEPTED Debian GNU/Linux 5.0 Debian GNU/Linux 5.0 (lenny) is installed SecPod Team DRAFT INTERIM ACCEPTED Preeti Subramanian INTERIM ACCEPTED Chandan S INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Debian GNU/Linux 4.0 Debian GNU/Linux 4.0 (etch) is installed SecPod Team DRAFT INTERIM ACCEPTED Preeti Subramanian INTERIM ACCEPTED Chandan S INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED