Fedora 7 : bind-9.4.1-7.P1.fc7 (2007-1247)

CVE-2007-2925 - allow-query-cache/allow-recursion default acls not set - workaround - disable recursion or explicitly set allow-query-cache and allow-recursion acls - CVE-2007-2926 - cryptographically weak query id generator - 1 in 8 chance of guessing the next query id for 50% of the query ids -...

iDefense Security Advisory 11.05.07: Apple QuickTime Panorama Sample Atom Heap Buffer Overflow Vulnerability

iDefense Security Advisory 11.05.07 http://labs.idefense.com/intelligence/vulnerabilities/ Nov 05, 2007 I. BACKGROUND QuickTime is Apple's media player product used to render video and other media. For more information visit http://www.apple.com/quicktime/ QuickTime VR virtual reality is a type o...

Fedora 7 : pidgin-2.2.1-1.fc7 (2007-2368)

Minor DOS fix and a great many other bug fixes in upstream's 2.2.1 release. http://developer.pidgin.im/wiki/ChangeLog Upstream changelog. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora Core 6 : cpio-2.6-22.fc6 (2007-742)

Fri Nov 2 2007 Radek Brich 2.6-22 - patch for CVE-2007-4476 stack crashing in safernamesuffix Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Debian DSA-1399-1 : pcre3 - several vulnerabilities

Tavis Ormandy of the Google Security Team has discovered several security issues in PCRE, the Perl-Compatible Regular Expression library, which potentially allow attackers to execute arbitrary code by compiling specially crafted regular expressions. Version 7.0 of the PCRE library featured a majo...

openSUSE 10 Security Update : emacs (emacs-4620)

The setting ':safe' of 'enable-local-variables' could be bypassed by specially crafted files CVE-2007-5795. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update emacs-4620. The text description of...

Mandrake Linux Security Advisory : perl (MDKSA-2007:207)

Tavis Ormandy and Will Drewry discovered a flaw in Perl's regular expression engine. Specially crafted input to a regular expression can cause Perl to improperly allocate memory, resulting in the possible execution of arbitrary code with the permissions of the user running Perl. Updated packages...

Fedora 7 : openoffice.org-2.2.1-18.2.fc7 (2007-2372)

This security updates addresses CVE-2007-2834 a flaw in how openoffice.org handles corrupt TIFF graphic format file headers Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

Fedora 7 : Terminal-0.2.6-3.fc7 (2007-1620)

Tue Aug 14 2007 Kevin Fenzi - 0.2.6-3 - Add patch for CVE-2007-3770. - Update License tag Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 7 : phpPgAdmin-4.1.2-1.fc7 (2007-0469)

This release includes a high-level security fix. All users must upgrade as soon as possible : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-2865 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 7 : kdebase-3.5.7-13.fc7 (2007-1700)

This update primarily addresses security issues around URL spoofing. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 7 : qt-3.3.8-7.fc7 (2007-2216)

Mon Sep 17 2007 Than Ngo - 1:3.3.8-7 - bz292941, CVE-2007-4137 - Wed Aug 29 2007 Than Ngo - 1:3.3.8-6.fc7.1 - cleanup security patch - Tue Aug 28 2007 Than Ngo - 1:3.3.8-6.fc7 - CVE-2007-3388 qt3 format string flaw - Thu Jun 14 2007 Than Ngo - 1:3.3.8-5.fc7.1 - backport to fix bz243722, bz244148,...

Fedora 7 : qtpfsgui-1.8.12-1.fc7 (2007-1581)

Sun Aug 12 2007 Douglas E. Warner 1.8.12-1 - update to version 1.8.12 - fixes CVE-2007-2956; bug251674 - Thu Aug 2 2007 Douglas E. Warner 1.8.11-2 - updated License from GPL to GPLv2+ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora Core 6 : xen-3.0.3-13.fc6 (2007-737)

Fri Oct 26 2007 Daniel P. Berrange - 3.1.0-13.fc6 - Fixed xenbaked tmpfile flaw CVE-2007-3919 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 7 : openvrml-0.16.6-3.fc7 (2007-2686)

Wed Oct 24 2007 Braden McDaniel - 0.16.6-3 - Updated firefox dependency to 2.0.0.8. - Thu Jun 7 2007 Braden McDaniel - 0.16.6-2 - Updated firefox dependency to 2.0.0.5. - Thu Jun 7 2007 Braden McDaniel - 0.16.6-1 - Updated to 0.16.6. - Thu Jun 7 2007 Braden McDaniel - 0.16.5-1 - Updated to...

Fedora 7 : dar-2.3.4-1.fc7 (2007-0904)

Adding CVE reference Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora 7 : kernel-2.6.22.1-27.fc7 (2007-1130)

Rebase kernel to 2.6.22.1: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.1 Includes the CFS scheduler from upstream kernel 2.6.23. Users should update to the latest autofs package with this kernel or autofs will use...

Fedora 7 : kdebase-3.5.7-13.1.fc7 (2007-2361)

Tue Oct 2 2007 Than Ngo - 6:3.5.7-13.1 - rh299731, CVE-2007-4569 - Wed Aug 15 2007 Rex Dieter 6:3.5.7-13 - CVE-2007-3820, CVE-2007-4224, CVE-2007-4225 - License: GPLv2 - Requires: kdelibs3-devel - Fri Jul 20 2007 Rex Dieter - 6:3.5.7-12 - fix unpackaged files - Fri Jul 20 2007 Rex Dieter -...

Fedora 7 : firefox-2.0.0.5-1.fc7 (2007-1142)

Mozilla Firefox is an open source web browser, designed for standards compliance, performance and portability. Several flaws were found in the way Firefox processed certain malformed JavaScript code. A web page containing malicious JavaScript code could cause Firefox to crash or potentially execu...

Fedora 7 : star-1.5a84-2.fc7 (2007-1852)

Mon Aug 27 2007 Peter Vrabec 1.5a84-2 - fix segfault of data-change-warn option 255261, patch from dkopecek at redhat.com - Fri Aug 24 2007 Peter Vrabec 1.5a84-1 - new upstream release with CVE-2007-4134 fix - Sun Jun 24 2007 Peter Vrabec 1.5a76-3 - build star on ARM platforms 245465 Note that...