The following three security updates has been released for Debian GNU/Linux: [SECURITY] [DSA 2435-1] gnash security update, [SECURITY] [DSA 2434-1] nginx security update, and [SECURITY] [DSA 2436-1] libapache2-mod-fcgid security update



[SECURITY] [DSA 2435-1] gnash security update

- - -------------------------------------------------------------------------
Debian Security Advisory DSA-2435-1 security@debian.org
http://www.debian.org/security/ Gabriele Giacone
March 19, 2012 http://www.debian.org/security/faq
- - -------------------------------------------------------------------------

Package : gnash
Vulnerability : several
Problem type : local / local (remote)
Debian-specific: no
CVE ID : CVE-2010-4337 CVE-2011-4328 CVE-2012-1175
Debian Bug : 605419 649384 664023

Several vulnerabilities have been identified in Gnash, the GNU Flash
player.

CVE-2012-1175

Tielei Wang from Georgia Tech Information Security Center discovered a
vulnerability in GNU Gnash which is caused due to an integer overflow
error and can be exploited to cause a heap-based buffer overflow by
tricking a user into opening a specially crafted SWF file.

CVE-2011-4328

Alexander Kurtz discovered an unsafe management of HTTP cookies. Cookie
files are stored under /tmp and have predictable names, vulnerability
that allows a local attacker to overwrite arbitrary files the users has
write permissions for, and are also world-readable which may cause
information leak.

CVE-2010-4337

Jakub Wilk discovered an unsafe management of temporary files during the
build process. Files are stored under /tmp and have predictable names,
vulnerability that allows a local attacker to overwrite arbitrary files
the users has write permissions for.

For the stable distribution (squeeze), this problem has been fixed in
version 0.8.8-5+squeeze1.

For the unstable distribution (sid), this problem has been fixed in
version 0.8.10-5.

We recommend that you upgrade your gnash packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/

[SECURITY] [DSA 2434-1] nginx security update

- -------------------------------------------------------------------------
Debian Security Advisory DSA-2434-1 security@debian.org
http://www.debian.org/security/ Luciano Bello
March 19, 2012 http://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : nginx
Vulnerability : sensitive information leak
Problem type : remote
Debian-specific: no
CVE ID : CVE-2012-1180
Debian Bug : 664137

Matthew Daley discovered a memory disclosure vulnerability in nginx. In
previous versions of this web server, an attacker can receive the content of
previously freed memory if an upstream server returned a specially crafted HTTP
response, potentially exposing sensitive information.

For the stable distribution (squeeze), this problem has been fixed in
version 0.7.67-3+squeeze2.

For the unstable distribution (sid), this problem has been fixed in
version 1.1.17-1.

We recommend that you upgrade your nginx packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/

[SECURITY] [DSA 2436-1] libapache2-mod-fcgid security update

- -------------------------------------------------------------------------
Debian Security Advisory DSA-2436-1 security@debian.org
http://www.debian.org/security/ Thijs Kinkhorst
March 19, 2012 http://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : libapache2-mod-fcgid
Vulnerability : inactive resource limits
Problem type : remote
Debian-specific: no
CVE ID : CVE-2012-1181
Debian Bug : 615814

It was discovered that the Apache FCGID module, a FastCGI implementation,
did not properly enforce the FcgidMaxProcessesPerClass resource limit,
rendering this control ineffective and potentially allowing a virtual
host to consume excessive resources.

For the stable distribution (squeeze), this problem has been fixed in
version 1:2.3.6-1+squeeze1.

For the testing distribution (wheezy), this problem will be fixed soon.

For the unstable distribution (sid), this problem has been fixed in
version 1:2.3.6-1.1.

We recommend that you upgrade your libapache2-mod-fcgid packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/