Fedora 8 : squid-2.6.STABLE17-1.fc8 (2007-4170)

Thu Dec 6 2007 Martin Nagy - 2.6.STABLE17-1 - upgrade to latest upstream 2.6.STABLE17 - Mon Nov 12 2007 Martin Bacovsky - 7:2.6.STABLE16-3 - squid is compiled wirh arp acls support --enable-arp-acl Note that Tenable Network Security has extracted the preceding description block directly from the...

autofs5 security update

CentOS Errata and Security Advisory CESA-2007:1129 Updated Red Hat Enterprise Linux 4 Technology Preview autofs5 packages are now available to fix a security flaw. This update has been rated as having important security impact by the Red Hat Security Response Team. The autofs utility controls the...

Fedora 8 : nagios-2.10-5.fc8 (2007-4145)

Thu Nov 29 2007 Mike McGrath 2.10-5 - Upstream released 2.10 - Renamed cfg-sample configs to just .cfg - Added BR of perl-devel, libjpeg-devel, libpng-devel - Wed Sep 26 2007 Mike McGrath 2.9-5 - rebuild for koji test - Sat Sep 8 2007 Mike McGrath 2.9-4 - rebuild Note that Tenable Network...

CVE-2007-5902

Integer overflow in the svcauthgssgetprincipal function in lib/rpc/svcauthgss.c in MIT Kerberos 5 krb5 allows remote attackers to have an unknown impact via a large length value for a GSS client name in an RPC request...

Fedora 7 : phpMyAdmin-2.11.2.1-1.fc7 (2007-3627)

Tue Nov 20 2007 Mike McGrath 2.11.2.1-1 - Upstream released new version - Mon Oct 29 2007 Mike McGrath 2.11.2-1 - upstream released new version - Mon Oct 22 2007 Mike McGrath 2.11.1.2-1 - upstream released new version - Thu Sep 6 2007 Mike McGrath 2.11.0-1 - Upstream released new version -...

mailman security update

CentOS Errata and Security Advisory CESA-2007:0779 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2007-November/076585.html Affected packages: mailman Upstream details at: https://access.redhat.com/errata/RHSA-2007:0775...

pcre security update

CentOS Errata and Security Advisory CESA-2007:0967 Updated pcre packages that correct two security flaws are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. PCRE is a Perl-compatible regular...

Fedora 8 : glib2-2.14.3-1.fc8 (2007-2944)

The latest stable upstream release of GLib includes a new version of PCRE, which fixes several vulnerabilities. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it a...

Fedora 7 : kernel-2.6.21-1.3228.fc7 (2007-0409)

Rebase to upstream 2.6.21.5, including several security fixes See CVEs for details. Upstream changelog: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.21.3 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.21.4 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.21.5 Fedo...

Fedora 7 : perl-Net-DNS-0.60-1.fc7 (2007-0668)

This brings F-7 up to date with the latest changes to Net::DNS. See the project page here : http://search.cpan.org/olaf/Net-DNS-0.60/ The change for this upstream issue is included : http://rt.cpan.org/Public/Bug/Display.html?id=23961 Since this fix has security implications making DNS spoofing...

Fedora 7 : pidgin-2.2.1-1.fc7 (2007-2368)

Minor DOS fix and a great many other bug fixes in upstream's 2.2.1 release. http://developer.pidgin.im/wiki/ChangeLog Upstream changelog. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

pcre security update

CentOS Errata and Security Advisory CESA-2007:0968 Updated pcre packages that correct two security flaws are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. PCRE is a Perl-compatible regular...

openSUSE 10 Security Update : awstats (awstats-1612)

This update fixes remote code execution vulnerabilities in awstats. Since backporting awstats fixes is error prone we have upgraded it to upstream version 6.6, which also includes new features. Security issues fixed: - CVE-2006-2237: missing sanitizing of the 'migrate' parameter. 173041 -...

krb5 security update

CentOS Errata and Security Advisory CESA-2007:0858 Updated krb5 packages that fix two security flaws are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 07 Sep 2007 The initial fix for...

cyrus security update

CentOS Errata and Security Advisory CESA-2007:0878 Updated cyrus-sasl packages that correct a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The cyrus-sasl package contains the...

Moderate: aide security update

0.13.1-2.0.4 - Added the correct new config file Related: rhbz252331 0.13.1-2.0.3 - Fixed file permissions to please release criteria Related: rhbz252331 0.13.1-2.0.2 - Removed saved copies of patched scripts Related: rhbz252331 0.13.1-2 - Fixed a typo Related: rhbz252331 0.13.1-1 - Rebased to...

cman security update

CentOS Errata and Security Advisory CESA-2007:0559 Updated cman packages that correct a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. cman is the Red Hat Cluster Manager. A fla...

CVE-2007-3154

Unspecified vulnerability in Walter Zorn wztooltip.js aka wztooltips before 4.01, as used by eGroupWare before 1.2.107-2 and other packages, has unknown impact and remote attack vectors...

cpp, gcc, libf2c, libgcc, libgcj, libgnat, libobjc, libstdc++ security update

CentOS Errata and Security Advisory CESA-2007:0473 Updated gcc packages that fix a security issue and another bug are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gcc packages include C, C++, Java, Fortran 77, Objective C,...

Security fix for the ALT Linux 6 package libpng version 1.2.13-alt3

May 16, 2007 Dmitry V. Levin 1.2.13-alt3 - Imported upstream fix for pnghandletRNS bug CVE-2007-2445: a grayscale PNG image with a malformed tRNS chunk may crash some libpng applications...