The Debian Hack Shop

In DSA-1603-1, Debian released an update to the BIND 9 domain name
server, which introduced UDP source port randomization to mitigate
the threat of DNS cache poisoning attacks (identified by the Common
Vulnerabilities and Exposures project as CVE-2008-1447).
The fix, while correct, was incompatible with the version of SELinux Reference
Policy shipped with Debian Etch, which did not permit a process running in the
named_t domain to bind sockets to UDP ports other than the standard ‘domain’
port (53).
The incompatibility affects both the ‘targeted’ and ’strict’ policy packages
supplied by this version of refpolicy.

Read the full story: DSA-1617 refpolicy - incompatible policy: http://www.debian.org/security/2008/dsa-1617

An update to the massively popular Dope Wars script - Booster

Q. What is Booster?
A. Booster is an easy to install extension for the well known cross-platform browser Firefox

Booster Features include :-

• automatic buying/selling of ST8 Drop(use your time to spend money, instead of making it)
• custom buy/sell limits(you set the profit)
• custom timer settings(make the tool undetectable and seem human-like)

(more…)

The recently announced vulnerability in Debian’s openssl package
( DSA-1571-1, CVE-2008-0166) indirectly affects OpenSSH. As a result,
all user and host keys generated using broken versions of the openssl
package must be considered untrustworthy, even after the openssl update
has been applied.

Read the full story: DSA-1576 openssh - predictable random number generator: http://www.debian.org/security/2008/dsa-1576