Important: Red Hat Security Advisory: libpng security update

Updated libpng packages are available which fix a buffer overflow vulnerability. Updated 06 Feb 2003 Added fixed packages for Advanced Workstation 2.1 The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. PNG is a...

Moderate: Red Hat Security Advisory: krb5 security update

Updated packages fix a vulnerability found in the Kerberos FTP client distributed with the Red Hat Linux Advanced Server krb5 packages. Updated 06 Feb 2003 Added fixed packages for Advanced Workstation 2.1. For Advanced Workstation 2.1 these packages also fix CAN-2002-1235 as described in...

Important: Red Hat Security Advisory: postgresql security update

Updated PostgreSQL packages are available which correct several minor security vulnerabilities. Updated 06 Feb 2003 Added fixed packages for Advanced Workstation 2.1 PostgreSQL is an advanced Object-Relational database management system DBMS. Red Hat Linux Advanced Server 2.1 shipped with...

Critical: Red Hat Security Advisory: : : : Updated CVS packages available

Updated cvs packages are now available for Red Hat Linux 6.2, 7, 7.1, 7.2, 7.3, and 8.0. These updates close a vulnerability which would permit arbitrary command execution on servers configured to allow anonymous read-only access. Updated 16 April 2003 Added packages for Red Hat Linux on IBM...

Important: Red Hat Security Advisory: : : : Updated vim packages fix modeline vulnerability

Updated vim packages are now available for Red Hat Linux. These updates resolve a security issue when opening a specially crafted text file. Updated 16 April 2003 Added packages for Red Hat Linux on IBM iSeries and pSeries systems. VIM Vi IMproved is a version of the vi editor. VIM allows a user ...

Important: Red Hat Security Advisory: : Updated MySQL packages fix various security issues

Updated MySQL packages are available for Red Hat Linux 7, 7.1, 7.2, 7.3, and 8.0 which fix security vulnerabilities found in the MySQL server. MySQL is a multi-user, multi-threaded SQL database server. While auditing MySQL, Stefan Esser found security vulnerabilities that can be used to crash the...

Critical: Red Hat Security Advisory: openldap security update

Updated OpenLDAP packages are available which fix a number of local and remote buffer overflows in libldap as well as the slapd and slurpd daemons. Additionally, potential issues stemming from using user-specified LDAP configuration files have been addressed. Updated 06 Feb 2003 Added fixed...

Important: Red Hat Security Advisory: : Updated PostgreSQL packages fix security issues and bugs

Updated PostgreSQL packages are available for Red Hat Linux 7.3 and 8.0. These packages correct several security and other bugs. A separate advisory deals with updated PostgreSQL packages for Red Hat Linux 6.2, 7, 7.1, and 7.2. PostgreSQL is an advanced Object-Relational database management syste...

Important: Red Hat Security Advisory: : Updated CUPS packages fix various vulnerabilities

Updated CUPS packages are available for Red Hat Linux 7.3 and 8.0 which fix various security issues. The Common UNIX Printing System CUPS provides a portable printing layer. A number of vulnerabilities have been discovered in CUPS. CUPS was distributed with Red Hat Linux 7.3 and 8.0 but is not...

Important: Red Hat Security Advisory: : : : Updated libpng packages fix buffer overflow

Updated libpng packages are available that fix a buffer overflow vulnerability. Updated 15 Jan 2003 Advisory updated to include libpng10 packages for Red Hat Linux 8.0. libpng10 contains compatibility libraries used to run binaries that were linked dynamically with libpng 1.0.x. The libpng packag...

Important: Red Hat Security Advisory: apache security update

Updated apache and httpd packages are available which fix a number of security issues for Red Hat Linux Advanced Server 2.1. Updated 06 Feb 2003 Added fixed packages for Advanced Workstation 2.1 The Apache HTTP server is a powerful, full-featured, efficient, and freely-available Web server. Buffe...

Moderate: Red Hat Security Advisory: : : : Updated pine packages available

A vulnerability in Pine version 4.44 and earlier releases can cause Pine to crash when sent a carefully crafted email. Updated 04 July 2003 Added packages for Red Hat Linux on IBM iSeries and pSeries systems. Pine, developed at the University of Washington, is a tool for reading, sending, and...

Moderate: Red Hat Security Advisory: pine security update

A vulnerability in Pine version 4.44 and earlier releases can cause Pine to crash when sent a carefully crafted email. Updated 06 Feb 2003 Added fixed packages for Advanced Workstation 2.1 Pine, developed at the University of Washington, is a tool for reading, sending, and managing electronic...

CVE-2002-1890

rhmask 1.0-9 in Red Hat Linux 7.1 allows local users to overwrite arbitrary files via a symlink attack on the mask file...

Moderate: Red Hat Security Advisory: : : : Updated wget packages fix directory traversal bug

The wget packages shipped with Red Hat Linux 6.2 through 8.0 contain a security bug which, under certain circumstances, can cause local files to be written outside the download directory. Updated 10 July 2003 Added packages for Red Hat Linux on IBM iSeries and pSeries systems Versions of wget pri...

Important: Red Hat Security Advisory: Canna security update

The Canna server, used for Japanese character input, has two security vulnerabilities including an exploitable buffer overflow that allows a local user to gain 'bin' user privileges. Updated packages for Red Hat Linux Advanced Server are available. Updated 13 Jan 2003 Added fixed packages for the...

Moderate: Red Hat Security Advisory: : Updated Webalizer packages fix vulnerability

Updated Webalizer packages which fix an obscure buffer overflow bug in the DNS resolver code are available for Red Hat Linux 7.2. The Webalizer is a Web server log file analysis program which produces detailed usage reports in HTML format. A buffer overflow in Webalizer versions prior to 2.01-10,...

Important: Red Hat Security Advisory: kernel security update

The kernel in Red Hat Linux Advanced Server 2.1 is vulnerable to a local denial of service attack. Updated packages are available which address this vulnerability. Updated 28 August 2003 Added CAN-2003-0461 to the list of security issues that were fixed by this advisory there are no changes to th...

iDEFENSE Security Advisory 11.08.02a: File Disclosure Vulnerability in Simple Web Server

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 11.08.02a: http://www.idefense.com/advisory/11.08.02a.txt File Disclosure Vulnerability in Simple Web Server November 8, 2002 I. BACKGROUND As its name suggests, Peter Sandvik's Simple Web Server is a Linux-based web server...

Critical: Red Hat Security Advisory: : Updated kerberos packages available

A remotely exploitable stack buffer overflow has been found in the Kerberos v4 compatibility administration daemon distributed with the Red Hat Linux krb5 packages. Kerberos is a network authentication system. A stack buffer overflow has been found in the implementation of the Kerberos v4...