----------------------------------------------------------------------



Secunia integrated with Microsoft WSUS 
http://secunia.com/blog/71/



----------------------------------------------------------------------

TITLE:
Debian update for lintian

SECUNIA ADVISORY ID:
SA38375

VERIFY ADVISORY:
http://secunia.com/advisories/38375/

DESCRIPTION:
Debian has issued an update for lintian. This fixes multiple
vulnerabilities, which can be exploited by malicious people to
compromise a vulnerable system, disclose system information, and
manipulate certain data.

1) Input passed via control field names and values is not properly
sanitised before being used in certain operations. This can be
exploited to overwrite arbitrary files via directory traversal
attacks.

2) Format string errors in multiple check scripts and the
Lintian::Schedule module can be exploited via specially crafted input
containing format specifiers.

3) Input passed via file names is not properly sanitised before being
used as arguments to certain commands. This can be exploited to
execute arbitrary shell commands.

SOLUTION:
Apply updated packages.

-- Debian GNU/Linux 4.0 (etch) --

Source:
http://security.debian.org/pool/updates/main/l/lintian/lintian_1.23.28+etch1.tar.gz
http://security.debian.org/pool/updates/main/l/lintian/lintian_1.23.28+etch1.dsc
Architecture-independent component:
http://security.debian.org/pool/updates/main/l/lintian/lintian_1.23.28+etch1_all.deb


-- Debian GNU/Linux 5.0 (lenny) --

Source:
http://security.debian.org/pool/updates/main/l/lintian/lintian_1.24.2.1+lenny1.tar.gz
http://security.debian.org/pool/updates/main/l/lintian/lintian_1.24.2.1+lenny1.dsc
Architecture-independent component:
http://security.debian.org/pool/updates/main/l/lintian/lintian_1.24.2.1+lenny1_all.deb

ORIGINAL ADVISORY:
DSA-1979-1:
http://www.debian.org/security/2010/dsa-1979

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
private users keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------