Fedora 7 : Terminal-0.2.6-3.fc7 (2007-1620)

Tue Aug 14 2007 Kevin Fenzi - 0.2.6-3 - Add patch for CVE-2007-3770. - Update License tag Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 7 : sysstat-7.0.4-3.fc7 (2007-1697)

Mon Aug 20 2007 Ivana Varekova - 7.0.4-3 - fix CVE-2007-3852 - sysstat insecure temporary file usage Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 7 : vavoom-1.24-3.fc7 (2007-1977)

Security update fixing various format strings vulnerabilities and a DOS vulnerability in the vavoom server, this fixes: CVE-2007-4533, CVE-2007-4534 & CVE-2007-4535. Also see bugzilla bug 256621. Note that Tenable Network Security has extracted the preceding description block directly from the...

Fedora 7 : util-linux-2.13-0.54.1.fc7 (2007-2462)

Mon Oct 8 2007 Karel Zak 2.13-0.54.1 - fix 320131 - CVE-2007-5191 util-linux umount doesn't drop privileges properly when calling helpers F7 - Wed Aug 8 2007 Karel Zak 2.13-0.54 - backport mount relatime patch - Thu Aug 2 2007 Karel Zak 2.13-0.53 - fix 236848 - mount/fstab.c:lockmtab should open...

Fedora 7 : clamav-0.91.2-2.fc7 (2007-2050)

Sat Aug 25 2007 Enrico Scholz - 0.91.2-2 - fixed an open2 issue - Sat Aug 25 2007 Enrico Scholz - 0.91.2-1 - updated to 0.91.2 SECURITY : - CVE-2007-4510 DOS in RTF parser - DOS in html normalizer - arbitrary command execution by special crafted recipients in clamav-milter's black-hole mode Note...

Fedora 7 : claws-mail-3.0.0-1.fc7 (2007-2009)

Mon Sep 3 2007 Andreas Bierfert - 3.0.0-1 - version upgrade - new license tag upstream switch to GPLv3+ - fix 254121 CVE-2007-2958 - Wed Aug 22 2007 Andreas Bierfert - 2.10.0-4 - new license tag - Wed Jul 18 2007 Andreas Bierfert - 2.10.0-3 - build against libSM 248675 - Mon Jul 16 2007 Andreas...

Fedora 7 : quagga-0.99.9-1.fc7 (2007-2196)

This update should fix CVE-2007-4826 quagga bgpd DoS. For more info see rhbz285691. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 7 : balsa-2.3.17-2.fc7 (2007-1447)

Balsa is not really listed in the list but it also lacked the verification of the server challenge. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 7 : cpio-2.6-28.fc7 (2007-2744)

Fri Nov 2 2007 Radek Brich 2.6-28 - patch for CVE-2007-4476 stack crashing in safernamesuffix Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 7 : xscreensaver-5.03-14.fc7 (2007-2721)

Related to bug 336331, another case is found which causes xscreensaver password dialog crash. This time a patch from upstream developer is applied and this release 'really' fixes this problem. Note that Tenable Network Security has extracted the preceding description block directly from the Fedor...

Fedora 7 : openssl-0.9.8b-14.fc7 (2007-1444)

Fri Aug 3 2007 Tomas Mraz 0.9.8b-14 - use localhost in testsuite, hopefully fixes slow build in koji - CVE-2007-3108 - fix side channel attack on private keys 250577 - make ssl session cache id matching strict 233599 - Wed Jul 25 2007 Tomas Mraz 0.9.8b-13 - allow building on ARM architectures...

RHEL 5 : pcre (RHSA-2007:0967)

Updated pcre packages that correct two security flaws are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. PCRE is a Perl-compatible regular expression library. Multiple flaws were found in the way...

Fedora 7 : tetex-3.0-40.1.fc7 (2007-1547)

Fri Aug 10 2007 Jindrich Novy 3.0-40.1 - backport upstream fix for xpdf integer overflow CVE-2007-3387 251514 - don't mess up file contexts while running texhash 235032 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Fedora 7 : bind-9.4.1-4.fc7 (2007-0300)

236426 - improved zone-finding on server side rndc freeze works better 235809 - fixed race-condition in dbus code 241103 - fixed typo in bind-chroot-admin 239802 - start using deprecated LDAP API 239149 - handle dynamic zone updates CVE-2007-2241 Note that Tenable Network Security has extracted t...

Mandrake Linux Security Advisory : perl (MDKSA-2007:207)

Tavis Ormandy and Will Drewry discovered a flaw in Perl's regular expression engine. Specially crafted input to a regular expression can cause Perl to improperly allocate memory, resulting in the possible execution of arbitrary code with the permissions of the user running Perl. Updated packages...

Fedora 7 : bind-9.4.1-7.P1.fc7 (2007-1247)

CVE-2007-2925 - allow-query-cache/allow-recursion default acls not set - workaround - disable recursion or explicitly set allow-query-cache and allow-recursion acls - CVE-2007-2926 - cryptographically weak query id generator - 1 in 8 chance of guessing the next query id for 50% of the query ids -...

Fedora 7 : kernel-2.6.22.4-65.fc7 (2007-1785)

Update to kernel 2.6.22.2, 2.6.22.3 and 2.6.22.4: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.2 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.3 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.4 - Fix failure to find serial ports on some machines. -...

Fedora 7 : file-4.21-1.fc7 (2007-0836)

Update to new upstream 4.21 should also fix CVE-2007-2799 file integer overflow Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 7 : openoffice.org-2.2.0-14.11 (2007-0410)

This update fixes a possible buffer overrun in hand-crafted rtf files that use the custom /prtdata tag. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much a...

Fedora 7 : pidgin-2.2.1-1.fc7 (2007-2368)

Minor DOS fix and a great many other bug fixes in upstream's 2.2.1 release. http://developer.pidgin.im/wiki/ChangeLog Upstream changelog. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...