cyrus, perl security update

CentOS Errata and Security Advisory CESA-2011:1508 Updated cyrus-imapd packages that fix two security issues are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System...

Fedora 14 : cherokee-1.2.101-1.fc14 (2011-14660)

Latest 1.2.x upstream release Resolves bz 746532 - put some deps back: GeoIP-devel openldap-devel Latest 1.2.x upstream release .spec corrections for optional build for systemd Resolves bz 710474 Resolves bz 713307 Resolves bz 680691 Note that Tenable Network Security has extracted the preceding...

CVE-2011-3883

Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to counters...

CVE-2011-3890

Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to video source handling...

CVE-2011-3233

WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1...

CVE-2011-2338

WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1...

CVE-2011-3236

WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1...

CVE-2011-3244

WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1...

CVE-2011-2352

WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1...

CVE-2011-3602

Directory traversal vulnerability in device-linux.c in the router advertisement daemon radvd before 1.8.2 allows local users to overwrite arbitrary files, and remote attackers to overwrite certain files, via a .. dot dot in an interface name. NOTE: this can be leveraged with a symlink to overwrit...

Fedora 16 : zabbix-1.8.7-2.fc16 (2011-12457)

move the zabbix user home directory to the common zabbix package - fix https://support.zabbix.com/browse/ZBX-4099 - update to 1.8.7 - upstream changelog at http://www.zabbix.com/rn1.8.7.php - update to 1.8.7 - upstream changelog at http://www.zabbix.com/rn1.8.7.php - update to 1.8.7 - upstream...

Fedora 15 : perl-FCGI-0.74-1.fc15 (2011-13230)

This update to the latest upstream version resolves CVE-2011-2766 - stop leaking information across requests when using the deprecated and undocumented old FCGI interface. This update resolves CVE-2011-2766 and includes several additional fixes. See the upstream changelog for further details. Not...

Fedora 14 : perl-FCGI-0.74-1.fc14 (2011-13236)

This update to the latest upstream version resolves CVE-2011-2766 - stop leaking information across requests when using the deprecated and undocumented old FCGI interface. This update resolves CVE-2011-2766 and includes several additional fixes. See the upstream changelog for further details. Not...

CVE-2011-3744

HTML Purifier 4.2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tests/PHPT/Reporter/SimpleTest.php and certain other files...

CentOS 5 : rsync (CESA-2011:0999)

An updated rsync package that fixes one security issue, several bugs, and adds enhancements is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which...

Fedora 15 : zabbix-1.8.7-2.fc15 (2011-12485)

move the zabbix user home directory to the common zabbix package - fix https://support.zabbix.com/browse/ZBX-4099 - update to 1.8.7 - upstream changelog at http://www.zabbix.com/rn1.8.7.php - update to 1.8.7 - upstream changelog at http://www.zabbix.com/rn1.8.7.php - update to 1.8.7 - upstream...

Fedora 14 : zabbix-1.8.7-2.fc14 (2011-12489)

move the zabbix user home directory to the common zabbix package - fix https://support.zabbix.com/browse/ZBX-4099 - update to 1.8.7 - upstream changelog at http://www.zabbix.com/rn1.8.7.php - update to 1.8.7 - upstream changelog at http://www.zabbix.com/rn1.8.7.php - update to 1.8.7 - upstream...

CVE-2011-3421

Multiple unspecified vulnerabilities in Google Chrome before 14.0.835.125 on the Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms have unknown impact and attack vectors...

Fedora 14 : mongoose-3.0-2.fc14 (2011-11825)

Add upstream patch to fix CVE-2011-2900 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

httpd security update

2.2.15-9.0.1.el61.2 - replace index.html with Oracle's index page - update vstring in specfile 2.2.15-9.2, - updated patch for CVE-2011-3192 from upstream 733062 2.2.15-9.1 - fix 733062 - backported CVE-2011-3192 fix from httpd trunk...