[SECURITY] Fedora Core 6 Update: evolution-2.8.3-2.fc6

Evolution is the GNOME mailer, calendar, contact manager and communications tool. The tools which make up Evolution will be tightly integrated with one another and act as a seamless personal information-management tool...

Gnome Evolution格式串漏洞

Gnome Evolution是一款开放源代码的邮件客户端。 Gnome Evolution包含的"writehtml"函数存在格式串问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 问题存在于calendar/gui/e-cal-component-memo-preview.c中的"writehtml"函数中，当显示memo的目录时存在格式串错误，目标用户如果在邮箱中打开共享的MEMO，并点接收，在"Memo"标签下查看MEMO可触发漏洞。 GNOME Evolution 2.8.2.1 目前没有解决方案提供： http://www.gnome.org/...

Gnome Evolution calendar format string vulnerability

Format string vulnerability on shared memo parsing...

[SECURITY] Fedora Core 6 Update: gnome-python2-extras-2.14.2-9.fc6

The gnome-python-extra package contains the source packages for additional Python bindings for GNOME. It should be used together with gnome-python...

[SECURITY] Fedora Core 6 Update: epiphany-2.16.3-2.fc6

epiphany is a simple GNOME web browser based on the Mozilla rendering engine...

[SECURITY] Fedora Core 6 Update: devhelp-0.12-10.fc6

An API document browser for GNOME 2...

[SECURITY] Fedora Core 6 Update: yelp-2.16.0-12.fc6

Yelp is the Gnome 2 help/documentation browser. It is designed to help you browse all the documentation on your system in one central tool...

MDKA-2007:016 : gnome-terminal

A bug was causing incorrect window resizing when switching between multiple tabs in GNOME-Terminal. This bug, as well as memory leaks, has been fixed with this update. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabl...

[SECURITY] Fedora Core 5 Update: devhelp-0.11-6.fc5

An API document browser for GNOME 2...

[SECURITY] Fedora Core 5 Update: yelp-2.14.3-4.fc5

Yelp is the Gnome 2 help/documentation browser. It is designed to help you browse all the documentation on your system in one central tool...

Solaris 10 (x86) : 123939-05 (deprecated)

GNOME 2.6.0x86: GNU Transport Layer Security Library Patch. Date this patch was last updated by Sun : Oct/17/16 This plugin has been deprecated and either replaced with individual 123939 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

MDKA-2006:025 : gstreamer-plugins

The gnome-cd program would hang on certain audio CDs due to a regression in gstreamer-cdparanoia. Updated packages have been patched to correct this issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on...

Mandrake Linux Security Advisory : gdm (MDKSA-2006:231)

Local exploitation of a format string vulnerability in GNOME Foundation's GNOME Display Manager host chooser window gdmchooser could allow an unauthenticated attacker to execute arbitrary code on the affected system. The updated packages have been patched to correct this issue. %NASLMINLEVEL 7030...

Mandrake Linux Security Advisory : gtk+2.0 (MDKSA-2007:039)

The GdkPixbufLoader function in GIMP ToolKit GTK+ in GTK 2 gtk2 allows context-dependent attackers to cause a denial of service crash via a malformed image file. CVE-2007-0010 The version of libgtk+2.0 shipped with Mandriva Linux 2007 fails various portions of the lsb-test-desktop test suite, par...

DSA-1255-1 libgtop2

Bulletin has no description...

libgtop: Privilege escalation

Background libgtop facilitates the libgtopdaemon, which is used by GNOME to obtain information about remote systems. Description Liu Qishuai discovered that glibtopgetprocmaps in sysdeps/linux/procmap.c does not properly allocate memory for storing a filename, allowing certain filenames to cause...

RHEL 3 / 4 : libgsf (RHSA-2007:0011)

Updated libgsf packages that fix a buffer overflow flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GNOME Structured File Library is a utility library for reading and writing structured file formats. A heap based buff...

Libgtop2库本地栈溢出漏洞

Libgtop2是GNOME中的一个函数库，用于获取有关CPU、内存和磁盘使用方面的信息。 Libgtop2超长进程名时存在缓冲区溢出漏洞，本地攻击者可能利用此漏洞提升权限。 Libgtop2的sysdeps/linux/procmap.c文件的glibtopgetprocmaps函数中存在栈溢出漏洞： 155 char line1024; ... 164 char filename GLIBTOPMAPFILENAMELEN+1; 165 166 glibtopmapentry entry; 167 168 if !fgetsline, sizeof line, maps 169...

CentOS 3 / 4 : libgsf (CESA-2007:0011)

Updated libgsf packages that fix a buffer overflow flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GNOME Structured File Library is a utility library for reading and writing structured file formats. A heap based buff...

Stack overflow

Stack-based buffer overflow in the glibtopgetprocmaps function in libgtop before 2.14.6 libgtop2 allows local users to cause a denial of service crash and possibly execute arbitrary code via a process with a long filename that is mapped in its address space, which triggers the overflow in...