RHEL 4 : util-linux (RHSA-2009:0981)

An updated util-linux package that fixes one security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The util-linux package contains a collection of basic system utilities, such as fdisk and mount. A log...

RHEL 4 : kernel (RHSA-2009:1024)

Updated kernel packages are now available as part of the ongoing support and maintenance of Red Hat Enterprise Linux version 4. This is the eighth regular update. These updated packages fix two security issues, hundreds of bugs, and add numerous enhancements. Space precludes a detailed descriptio...

Low: Red Hat Security Advisory: util-linux security and bug fix update

An updated util-linux package that fixes one security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The util-linux package contains a collection of basic system utilities, such as fdisk and mount. A log...

Patch Tuesday barrage: A bad case of amnesia

Yesterday was a perfect example of the lack of communication between software vendors and their customers about security. Three vendors released major patches for serious bugs, all within hours of each other. You would think that customers would be a high priority for all vendors, especially in...

What's the cost of fixing an application vulnerability?

From DarkReading Kelly Jackson Higgins The cleanup cost for fixing a bug in a homegrown Web application ranges anywhere from $400 to $4,000 to repair, depending on the vulnerability and the way it’s fixed. Security experts traditionally have been hesitant to calculate the actual cost associated...

kernel security update

CentOS Errata and Security Advisory CESA-2009:0459 Updated kernel packages that fix several security issues and various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix several security issues and various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

[SECURITY] Fedora 10 Update: Miro-2.0.3-4.fc10

Miro is a free application that turns your computer into an internet TV video player. This release is still a beta version, which means that there are some bugs, but we're moving quickly to fix them and will be releasing bug fixes on a regular basis...

[SECURITY] Fedora 9 Update: Miro-2.0.3-4.fc9

Miro is a free application that turns your computer into an internet TV video player. This release is still a beta version, which means that there are some bugs, but we're moving quickly to fix them and will be releasing bug fixes on a regular basis...

MDVA-2008:186-1 : evolution

Outgoing mails sent through the Evolution Exchange plugin were not always sent properly. Spell checking was not working properly when two different languages were enabled, causing all words to be detected as mistyped. Those bugs are fixed by this package updates, as well as massive performance...

MDVA-2009:004 : rpmdrake

This update fixes several minor issues with rpmdrake: - it stops running with debuging perl pragmas, which should speed up some things - it makes edit-urpm-sources not drop the 'ignore' flag when updating a medium bug 44930 - it makes edit-urpm-sources display the right type of altered mirrorlist...

MDVA-2009:031 : drakx-net

This update several minor issues with Mandriva Network tools drakx-net. - drakroam would crash if no wireless interface is present on the system. - Cancel button of Interactive Firewall configuration screen of drakfirewall was not handled correctly bug 46256 - Interactive Firewall settings were n...

MDKA-2007:091 : drakx-net

Drakroam could erroneusly detect and reset the wireless mode to Master, instead of Managed. bug 30303 Draksambashare would check shares' names for partial matches, preventing the use of a share name partially equal to another. bug 30099 Draknfs and draksambashare were using the wrong translation...

Fedora 10 : xine-lib-1.1.16-1.fc10 (2009-0483)

This updates xine-lib to the upstream 1.1.16 release. This fixes several bugs, including the security issues CVE-2008-5234 vector 1, CVE-2008-5236, CVE-2008-5237, CVE-2008-5239, CVE-2008-5240 vectors 3 & 4 and CVE-2008-5243. See http://sourceforge.net/project/shownotes.php?releaseid=652075&groupi...

Mandriva Linux Security Advisory : php (MDVSA-2009:045)

A number of vulnerabilities have been found and corrected in PHP : improve mbflfiltconvhtmldecflush error handling in ext/mbstring/libmbfl/filters/mbfilterhtmlent.c CVE-2008-5557. Additionally on Mandriva Linux 2009.0 and up the php-mbstring module is linked against a separate shared libmbfl...

Mandriva Linux Security Advisory : cups (MDVSA-2008:211)

A buffer overflow in the SGI image format decoding routines used by the CUPS image converting filter imagetops was discovered. An attacker could create malicious SGI image files that could possibly execute arbitrary code if the file was printed CVE-2008-3639. An integer overflow flaw leading to a...

Fedora 10 : git-1.6.0.6-1.fc10 (2008-11678)

This update fixes a local privilege escalation bug in gitweb. For details: http://article.gmane.org/gmane.comp.version-control.git/103624 There are also a number of bugs fixed upstream. For details, see the upstream release notes: http://www.kernel.org/pub/software/scm/git/docs/RelNotes-1.6.0.6.t...

Mandriva Linux Security Advisory : kernel (MDVSA-2008:104)

A race condition in the directory notification subsystem dnotify in Linux kernel 2.6.x before 2.6.24.6, and 2.6.25 before 2.6.25.1, allows local users to cause a denial of service OOPS and possibly gain privileges via unspecified vectors. CVE-2008-1375 The Linux kernel before 2.6.25.2 does not...

Fedora 10 : java-1.6.0-openjdk-1.6.0.0-9.b14.fc10 (2009-1373)

This fixes a default security policy, that allowed unsigned applets to access the gnome-java-bridge, allowing a privilege escalation 474431. There are also several bug fixes included in this update. Note that Tenable Network Security has extracted the preceding description block directly from the...

MDVA-2008:198 : openoffice.org

This update is the Mandriva OpenOffice.org 3.0 stable official release on Mandriva Linux 2009.0 and it holds some of following explained bug fixes related to openoffice.org-3.0-0.rc2.1mdv2009 packages: OpenOffice.org crashes on start up when the user interface is changed to the Greek language, th...