Advisory: Gentoo Essential and Critical Security Patch Updates - Page 188

Gentoo: KDE multiple vulnerabilities

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

In some instances KDE fails to properly quote parameters of instructions passed to a command shell for execution.

LinuxSecurity.com Team
Dec 22, 2002

Gentoo: wget directory traversal vulnerability

A malicious server could potentially overwrite key files to cause a denial of service or, in some cases, gain privileges by modifying executable files.

LinuxSecurity.com Team
Dec 20, 2002

Gentoo: canna multiple vulnerabilities

A heap overflow vulnerability was discovered in the irw_through function in canna server version 3.6 and earlier.

LinuxSecurity.com Team
Dec 20, 2002

Gentoo: perl broken safe compartment

A security hole has been discovered in Safe.pm. When a Safe compartment has already been used, there's no guarantee that it's safe any longer, because there's a way for code executed within the Safe compartment to alter its operation mask.

LinuxSecurity.com Team
Dec 20, 2002

Gentoo: exim local root vulnerability

There is a format string bug in exim.

LinuxSecurity.com Team
Dec 16, 2002

Gentoo: squirrelmail XSS vulnerability

read_body.php didn't filter out user input for 'filter_dir' and 'mailbox', making a xss attack possible.

LinuxSecurity.com Team
Dec 16, 2002

Gentoo: UPDATE: mysql multiple vulnerabilities

There are multiple vulnerabilities in MySQL.

LinuxSecurity.com Team
Dec 16, 2002

Gentoo: fetchmail buffer overflow vulnerability

This heap overflow can be used by remote attackers to crash it or to execute arbitrary code with the privileges of the user running fetchmail. Depending on the configuration this allows a remote root compromise.