[SECURITY] Fedora 8 Update: gnome-python2-extras-2.19.1-15.fc8

The gnome-python-extra package contains the source packages for additional Python bindings for GNOME. It should be used together with gnome-python...

[SECURITY] Fedora 8 Update: yelp-2.20.0-10.fc8

Yelp is the Gnome 2 help/documentation browser. It is designed to help you browse all the documentation on your system in one central tool...

[SECURITY] Fedora 8 Update: epiphany-2.20.3-5.fc8

epiphany is a simple GNOME web browser based on the Mozilla rendering engine...

[SECURITY] Fedora 8 Update: gnome-web-photo-0.3-11.fc8

gnome-web-photo contains a thumbnailer that will be used by GNOME applicati ons, including the file manager, to generate screenshots of web pages...

[SECURITY] Fedora 8 Update: devhelp-0.16.1-8.fc8

An API document browser for GNOME 2...

[SECURITY] Fedora 8 Update: glib2-2.14.6-2.fc8

GLib is the low-level core library that forms the basis for projects such as GTK+ and GNOME. It provides data structure handling for C, portability wrappers, and interfaces for such runtime functionality as an event loop, threads, dynamic loading, and an object system. This package provides versi...

GNOME Rhythmbox畸形播放列表文件拒绝服务漏洞

BUGTRAQ ID: 29958 Rhythmbox是GNOME桌面环境中默认的音乐播放及管理软件。 Rhythmbox处理畸形格式的播放列表文件时存在漏洞，如果用户使用Rhythmbox加载了畸形的播放列表文件（pls）的话，就会导致播放器出现段访问错误而崩溃。 GNOME Rhythmbox 0.11.5 GNOME ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.gnome.org/ playlist X-GNOME-Title= Title= A 1475 NumberOfEntries=0...

Gnome Evolution html_engine_get_view_width()拒绝服务漏洞

BUGTRAQ ID: 29961 Evolution是个人和工作组信息管理解决方案，可使用在Linux和Unix操作系统下，集成Email、日历、会议安排、联系人管理等功能。 Evolution的htmlenginegetviewwidth函数没有正确地解析HTML编码的邮件消息，如果远程攻击者向Evolution发送了特制的邮件消息的话，就会导致客户端崩溃。 GNOME Evolution 2.22.2 GNOME ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

evolution security update

CentOS Errata and Security Advisory CESA-2008:0514 Updated evolution packages that fix two buffer overflow vulnerabilities are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Evolution is the...

GNOME Evolution 2.22.2 - html_engine_get_view_width() Denial of Service

GNOME Evolution 2.22.2 - htmlenginegetviewwidth Denial of Service source: https://www.securityfocus.com/bid/29961/info GNOME Evolution is prone to a denial-of-service vulnerability when handling email messages that contain specially crafted HTML. Successful attacks will crash the application...

GNOME Rhythmbox 0.11.5 - .Playlist File Denial of Service

GNOME Rhythmbox 0.11.5 - .Playlist File Denial of Service source: https://www.securityfocus.com/bid/29958/info GNOME Rhythmbox is prone to a remote denial-of-service vulnerability because it fails to handle specially crafted input. Exploiting this issue allows remote attackers to crash the...

Gnome / Evolution HTML parsing memory corruption

Memory corruption on HTML parsing, including HTML messages in Evolution...

openSUSE 10 Security Update : gnome-screensaver (gnome-screensaver-5172)

An attacker could log in without a valid password if the NIS server is down. CVE-2008-0887 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update gnome-screensaver-5172. The text description of this...

GNOME Rhythmbox 0.11.5 - '.Playlist' File Denial of Service

source: https://www.securityfocus.com/bid/29958/info GNOME Rhythmbox is prone to a remote denial-of-service vulnerability because it fails to handle specially crafted input. Exploiting this issue allows remote attackers to crash the application and trigger denial-of-service conditions, denying...

GNOME Evolution 2.22.2 - 'html_engine_get_view_width()' Denial of Service

source: https://www.securityfocus.com/bid/29961/info GNOME Evolution is prone to a denial-of-service vulnerability when handling email messages that contain specially crafted HTML. Successful attacks will crash the application. Evolution 2.22.2 is vulnerable; other versions may also be affected...

SuSE 10 Security Update : gnome-screensaver (ZYPP Patch Number 5179)

An attacker could log in without a valid password if the NIS server is down. CVE-2008-0887 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid33251;...

Unfixed XSS vulnerability at www.gnome-look.org

Security researcher C1c4Tr1Z, has submitted on 20/06/2008 a cross-site-scripting XSS vulnerability affecting www.gnome-look.org, which at the time of submission ranked 41515 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2008. It is...

openSUSE 10 Security Update : gnome-screensaver (gnome-screensaver-5175)

An attacker could log in without a valid password if the NIS server is down. CVE-2008-0887 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update gnome-screensaver-5175. The text description of this...

Evolution: User-assisted execution of arbitrary code

Background Evolution is the mail client of the GNOME desktop environment. Description Alin Rad Pop Secunia Research reported two vulnerabilities in Evolution: A boundary error exists when parsing overly long timezone strings contained within iCalendar attachments and when the ITip formatter is...

openSUSE 10 Security Update : xorg-x11-Xvnc (xorg-x11-Xvnc-5317)

This update fixes multiple vulnerabilities reported by iDefense : - CVE-2008-2360 - RENDER Extension heap buffer overflow - CVE-2008-2361 - RENDER Extension crash - CVE-2008-2362 - RENDER Extension memory corruption - CVE-2008-1379 - MIT-SHM arbitrary memory read - CVE-2008-1377 - RECORD and...