The following two security updates has been released for Debian: [SECURITY] [DSA 2320-1] dokuwiki regression fix, and [SECURITY] [DSA 2319-1] policykit-1 security update



[SECURITY] [DSA 2320-1] dokuwiki regression fix

- -------------------------------------------------------------------------
Debian Security Advisory DSA-2320-1 security@debian.org
http://www.debian.org/security/ Thijs Kinkhorst
October 8, 2011 http://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : dokuwiki
Vulnerability : regression fix
Problem type : remote
Debian-specific: no
CVE ID : CVE-2011-2510
Debian Bug : 644145

The dokuwiki update included in Debian Lenny 5.0.9 to address a cross
site scripting issue (CVE-2011-2510) had a regression rendering links
to external websites broken. This update corrects that regression.

For the oldstable distribution (lenny), this problem has been fixed in
version 0.0.20080505-4+lenny4.

We recommend that you upgrade your dokuwiki packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/

[SECURITY] [DSA 2319-1] policykit-1 security update

- -------------------------------------------------------------------------
Debian Security Advisory DSA-2319-1 security@debian.org
http://www.debian.org/security/ Thijs Kinkhorst
October 8, 2011 http://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : policykit-1
Vulnerability : race condition
Problem type : local
Debian-specific: no
CVE ID : CVE-2011-1485
Debian Bug : 644500

Neel Mehta discovered that a race condition in Policykit, a framework
for managing administrative policies and privileges, allowed local
users to elevate privileges by executing a setuid program from pkexec.

The oldstable distribution (lenny) does not contain the policykit-1
package.

For the stable distribution (squeeze), this problem has been fixed in
version 0.96-4+squeeze1.

For the testing distribution (wheezy) and unstable distribution (sid),
this problem has been fixed in version 0.101-4.

We recommend that you upgrade your policykit-1 packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/