Open Source Vulnerabilities

xscreensaver, xscreensaver, xscreensaver

spamassassin, spamassassin, spamassassin

openssh, openssh, openssh

apache2

Reported against the mod_php module for Apache 2.0.x, allowing local users with write access to PHP scripts to signal the server process group and reuse its file descriptors. The PHP developers disputed the report ("The opened file descriptors are opened by Apache. It is the job of Apache to protect them ... Not a bug in PHP"), and Red Hat states it "is not a vulnerability" since mod_php runs with the privileges of the httpd child by design. NVD carries the "disputed" tag. mod_php is not shipped by the apache2 source package and is not used in these images. https://security-tracker.debian.org/tracker/CVE-2003-1307

CVE-2003-0959 does not affect BellSoft software

CVE-2003-0986 does not affect BellSoft software

CVE-2003-0956 does not affect BellSoft software

CVE-2003-0249 does not affect BellSoft software

monit, monit, monit

xsok

xsok - missing privilege release

freeradius, freeradius, freeradius

screen, screen, screen

omega-rpg, omega-rpg, omega-rpg

rsync, rsync, rsync

clamav, clamav, clamav

freeradius, freeradius, freeradius

rsync

rsync - heap overflow

cups, cups, cups

net-snmp, net-snmp, net-snmp

hylafax, hylafax, hylafax

kernel-image-2.4.18-1-alpha, kernel-image-2.4.18-1-i386, kernel-source-2.4.18

kernel-image-2.4.18-1-alpha, kernel-image-2.4.18-1-i386, kernel-source-2.4.18 - local root exploit

monit, monit, monit