Fedora 9 : bitlbee-1.2.3-1.fc9 (2008-7830)

Upstream released Bitlbee 1.2.3 with the following changes to the former release: - Fixed one more flaw similar to the previous hijacking bug, caused by inconsistent handling of the USTATUSIDENTIFIED state. All code touching these variables was reviewed and should be correct now. Finished 7 Sep...

ipsec security update

CentOS Errata and Security Advisory CESA-2008:0849 An updated ipsec-tools package that fixes two security issues is now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The ipsec-tools package...

CVE-2008-2941

The hpssd message parser in hpssd.py in HP Linux Imaging and Printing HPLIP 1.6.7 allows local users to cause a denial of service process stop via a crafted packet, as demonstrated by sending "msg=0" to TCP port 2207...

CVE-2008-2940

The alert-mailing implementation in HP Linux Imaging and Printing HPLIP 1.6.7 allows local users to gain privileges and send e-mail messages from the root account via vectors related to the setalerts message, and lack of validation of the device URI associated with an event message...

Fedora 9 : thunderbird-2.0.0.16-1.fc9 (2008-6737)

Updated thunderbird packages that fix several security issues are now available for Fedora 9. Several flaws were found in the processing of malformed HTML content. An HTML mail containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code as the user runnin...

mysql security, bug fix, and enhancement update

4.1.22-2 - Back-patch three upstream security fixes from 4.1.23 and 4.1.24 Resolves: 445321 4.1.22-1 - Update to not-so-new-anymore upstream version 4.1.22 Resolves: 278461, 327771, 218009, 201988 - Use default port number if out-of-range port number is specified Resolves: 206067 - Sync mysql.ini...

irb, ruby security update

CentOS Errata and Security Advisory CESA-2008:0561 Updated ruby packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ruby is an interpreted scripting...

Fedora 9 : ruby-1.8.6.230-4.fc9 (2008-6033)

Tue Jul 1 2008 Akira TAGOH - 1.8.6.230-4 - Backported from upstream SVN to fix a segfault issue with Arrayfill. - Mon Jun 30 2008 Akira TAGOH - 1.8.6.230-3 - Backported from upstream SVN to fix a segfault issue. 452825 - Backported from upstream SVN to fix an integer overflow in rbaryfill. - Wed...

Fedora 8 : libetpan-0.54-1.fc8 (2008-5480)

Update to new upstream version 0.54 fixing a crash NULL pointer dereference in the mail message header parser. Note: There is no application in Fedora using libetpan library for which such crash could be considered a security issue. This can only be a security sensitive issue for some 3rd party,...

CVE-2008-2956

Memory leak in Pidgin 2.0.0, and possibly other versions, allows remote attackers to cause a denial of service memory consumption via malformed XML documents. NOTE: this issue has been disputed by the upstream vendor, who states: "I was never able to identify a scenario under which a problem...

CVE-2008-2956

Memory leak in Pidgin 2.0.0, and possibly other versions, allows remote attackers to cause a denial of service memory consumption via malformed XML documents. NOTE: this issue has been disputed by the upstream vendor, who states: "I was never able to identify a scenario under which a problem...

kernel security update

CentOS Errata and Security Advisory CESA-2008:0508 Updated kernel packages that fix several security issues and a bug are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain...

Fedora 8 : ruby-1.8.6.230-1.fc8 (2008-5649)

Tue Jun 24 2008 Akira TAGOH - 1.8.6.230-1 - New upstream release. - Security fixes. 452293 - CVE-2008-1891: WEBrick CGI source disclosure. - CVE-2008-2662: Integer overflow in rbstrbufappend. - CVE-2008-2663: Integer overflow in rbarystore. - CVE-2008-2664: Unsafe use of alloca in rbstrformat. -...

Fedora 8 : gallery2-2.2.5-1.fc8 (2008-5479)

Wed Jun 18 2008 John Berninger - 2.2.5-1 - update to upstream 2.2.5 for security vulns - Thu Mar 20 2008 John Berninger - 2.2.4-3 - revert to SVN snapshot so that config-time integrity checks don't fail - remove embedded copy of smarty and use php-Smarty package - Sat Dec 29 2007 John Berninger...

Fedora 9 : freetype-2.3.5-6.fc9 (2008-5425)

This update backports security fixes from upstream version 2.3.6 - CVE-2008-1806, CVE-2008-1807 and CVE-2008-1808. For further details, see: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=7 15 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=7 16...

Fedora 8 : kvm-60-6.fc8 (2008-4604)

Tue May 27 2008 Glauber Costa - 60-6.fc8 - Fix Cirrus heap overflow vulnerability 448524 - Fri May 23 2008 Daniel P. Berrange - 60-5.fc8 - Put PTY in rawmode - Fri May 16 2008 Glauber Costa - 60-4.fc8 - Fix problem with cirrus device that was breaking vnc connections rhbz 446830 - Wed Feb 27 2008...

Fedora 8 : stunnel-4.24-0.fc8 (2008-4579)

New upstream release 4.24 fixing security issue in certificate verification via OCSP protocol: http://stunnel.mirt.net/pipermail/stunnel- announce/2008-May/000035.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

CVE-2008-2419

Mozilla Firefox 2.0.0.14 allows remote attackers to cause a denial of service heap corruption and application crash or possibly execute arbitrary code by triggering an error condition during certain Iframe operations between a JSframe write and a JSframe close, as demonstrated by an error in...

libxslt security update

CentOS Errata and Security Advisory CESA-2008:0287 Updated libxslt packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. libxslt is a C library, based on libxml, for parsing of XML files into oth...

Fedora 9 : tkimg-1.3-0.10.20080505svn.fc9 (2008-3621)

Mon May 5 2008 Sergio Pascual - 1.3-0.10.20080505svn - New upstream source - Including fooConfig.sh files in -devel - Making symlinks of shared libraries in libdir - Removing file in ld.so.conf.d - Fixing bug 444872 Note that Tenable Network Security has extracted the preceding description block...