pidgin security and bug fix update

2.5.2-6 - Automatically detect booleans to enable build features from dist tag - Unify RHEL4 and RHEL5 spec with Fedora to make both easier to maintain 2.5.2-2 - Upstream backports: 100: sametime-redirect-null crash 101: NetworkManager-improvement 102: no-password-in-dialog-if-not-remembering 103...

Fedora 7 : libpng10-1.0.37-1.fc7 (2008-3979)

This update fixes the way that libpng10 handles unknown zero-length chunks, which in previous versions could result in writing to attacker controlled addresses, depending on how the libpng api is used. To be affected, an application would have to call pngsetkeepunknownchunks, which tells libpng n...

Fedora 8 : libpng10-1.0.37-1.fc8 (2008-3937)

This update fixes the way that libpng10 handles unknown zero-length chunks, which in previous versions could result in writing to attacker controlled addresses, depending on how the libpng api is used. To be affected, an application would have to call pngsetkeepunknownchunks, which tells libpng n...

Fedora 7 : ruby-1.8.6.114-1.fc7 (2008-2458)

Tue Mar 4 2008 Akira TAGOH - 1.8.6.114-1 - Security fix for CVE-2008-1145. - Improve a spec file. 226381 - Correct License tag. - Fix a timestamp issue. - Own a arch-specific directory. - Tue Feb 19 2008 Fedora Release Engineering - 1.8.6.111-9 - Autorebuild for GCC 4.3 - Tue Feb 19 2008 Akira...

Fedora 8 : ruby-1.8.6.114-1.fc8 (2008-2443)

Tue Mar 4 2008 Akira TAGOH - 1.8.6.114-1 - Security fix for CVE-2008-1145. - Improve a spec file. 226381 - Correct License tag. - Fix a timestamp issue. - Own a arch-specific directory. - Tue Feb 19 2008 Fedora Release Engineering - 1.8.6.111-9 - Autorebuild for GCC 4.3 - Tue Feb 19 2008 Akira...

Fedora 7 : emacs-22.1-5.fc7 (2007-3056)

Tue Nov 6 2007 Chip Coldwell - 22.1-5 - fix insufficient safe-mode checks Resolves: bz367581 - Update rpm-spec-mode to the current upstream, drop compat patch bz306841 - Wed Sep 12 2007 Chip Coldwell - 22.1-4 - require xorg-x11-fonts-ISO8859-1-100dpi instead of 75dpi Resolves: bz281861 - drop...

Security fix for the ALT Linux 5 package samba version 3.0.27-alt1

Nov. 15, 2007 Alexander Bokovoy 3.0.27-alt1 - Security release 3.0.27: + CVS-2007-4572 Stack buffer overflow in nmbd's logon request processing. + CVE-2007-5398 Remote code execution in Samba's WINS server daemon nmbd when processing name registration followed name query requests. - Updated set o...

Fedora Core 6 : rpm-4.4.2.1-1.fc6 (2007-668)

Summary of changes : - update to 4.4.2.1 fixing 247749 and countless others - avoid unnecessary .rpmsave / .rpmnew files 29470, 128622 - stricter docdir checking 246819 - allow checking for pending signals from python 181434 - add hook to python for cleaning up on unclean exit 245389 - resurrect...

CVE-2007-4452

CVE-2007-4452 affects the Toribash client (2.71 and earlier). The vulnerability arises in handling long inputs for the emote and SPEC commands, allowing remote attackers to cause a denial-of-service (disconnection). The connected documents confirm the affected product/version and the input-based ...

Fedora Core 5 : xterm-223-1.fc5 (2007-024)

Mon Jan 8 2007 Miroslav Lichvar - 223-1.fc5 - update to 223 - use correct tty group 219048 - spec cleanup - Thu Nov 23 2006 Miroslav Lichvar - 213-2.fc5 - fix segfault when /etc/termcap is missing 201246 - Wed May 31 2006 Jason Vas Dias - 213-1 - Upgrade to upstream version 213 fixes bug 192627 -...

Security fix for the ALT Linux 6 package lha version 2:1.14i-alt1

May 8, 2004 Michael Shigorin 2:1.14i-alt1 - security fixes for CAN-2004-0234, CAN-2004-0235 patch taken from RH - symlink patch from the same source - spec cleanup little modification by inger...

security flaw

The dochangecipherspec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service crash via a crafted SSL/TLS handshake that triggers a null dereference...

PT-2004-1028 · Openssl +1 · Openssl +1

Name of the Vulnerable Software and Affected Versions: OpenSSL versions 0.9.6c through 0.9.6k OpenSSL versions 0.9.7a through 0.9.7c Description: The issue is related to a flaw in the do change cipher spec function that allows remote attackers to cause a denial of service via a crafted SSL/TLS...

Trustix security advisory - apache-ssl

Hi Due to a typo in the rpm spec file for apache-ssl, /usr/sbin/httpsd on a Trustix system will be installed with mode 756 instead of 755, making a binary file that will be run by root world writable. It should not be necessary to explain why this is an extremely bad thing. How this bug slipped...