[SECURITY] Fedora 7 Update: orage-4.4.2-1.fc7

Time-managing application for Xfce4...

Fedora 7 : ruby-gnome2-0.16.0-18.fc7 (2007-4229)

Fix CVE-2007-6183, format string vulnerability Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 7 : tetex-3.0-40.3.fc7 (2007-3390)

fix t1lib flaw CVE-2007-4033 352271 - fix CVE-2007-4352 CVE-2007-5392 CVE-2007-5393, various xpdf flaws 345121 - xdvi won't segfault if DVI file contains character which is not present in font 243630 - fix dvips -z buffer overflow with long href CVE-2007-5935 368591 - fix insecure usage of...

[SECURITY] Fedora 7 Update: link-grammar-4.2.5-1.fc7

A library that can perform grammar checking...

[SECURITY] Fedora 7 Update: arts-1.5.8-4.fc7

arts analog real-time synthesizer is the sound system of KDE 3. The principle of arts is to create/process sound using small modules which do certain tasks. These may be create a waveform oscillators, play samples, filter data, add signals, perform effects like delay/flanger/chorus, or output the...

[SECURITY] Fedora 7 Update: kde-i18n-3.5.8-1.fc7

Internationalization support for KDE...

Fedora 7 : kernel-2.6.21-1.3228.fc7 (2007-0409)

Rebase to upstream 2.6.21.5, including several security fixes See CVEs for details. Upstream changelog: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.21.3 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.21.4 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.21.5 Fedo...

Fedora 7 : bind-9.4.1-7.P1.fc7 (2007-1247)

CVE-2007-2925 - allow-query-cache/allow-recursion default acls not set - workaround - disable recursion or explicitly set allow-query-cache and allow-recursion acls - CVE-2007-2926 - cryptographically weak query id generator - 1 in 8 chance of guessing the next query id for 50% of the query ids -...

Fedora 7 : krb5-1.6.1-3.fc7 (2007-2017)

This update incorporates fixes for a stack overflow in the rpcsecgss implementation in libgssrpc CVE-2007-3999 and a potential write through an uninitialized pointer in kadmind CVE-2007-4000. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora 7 : openvrml-0.16.6-3.fc7 (2007-2686)

Wed Oct 24 2007 Braden McDaniel - 0.16.6-3 - Updated firefox dependency to 2.0.0.8. - Thu Jun 7 2007 Braden McDaniel - 0.16.6-2 - Updated firefox dependency to 2.0.0.5. - Thu Jun 7 2007 Braden McDaniel - 0.16.6-1 - Updated to 0.16.6. - Thu Jun 7 2007 Braden McDaniel - 0.16.5-1 - Updated to...

Fedora 7 : tar-1.15.1-28.fc7 (2007-2673)

Wed Oct 24 2007 Radek Brich 2:1.15.1-28 - backported upstream patch for CVE-2007-4476 tar stack crashing in safernamesuffix - Tue Aug 28 2007 Radek Brich 2:1.15.1-27 - fixed CVE-2007-4131 tar directory traversal vulnerability 253684 Note that Tenable Network Security has extracted the preceding...

Fedora 7 : star-1.5a84-2.fc7 (2007-1852)

Mon Aug 27 2007 Peter Vrabec 1.5a84-2 - fix segfault of data-change-warn option 255261, patch from dkopecek at redhat.com - Fri Aug 24 2007 Peter Vrabec 1.5a84-1 - new upstream release with CVE-2007-4134 fix - Sun Jun 24 2007 Peter Vrabec 1.5a76-3 - build star on ARM platforms 245465 Note that...

Fedora 7 : mediawiki-1.9.3-34.0.2.fc7 (2007-1442)

This update fixes the following vulnerability : 'Cross-site scripting XSS vulnerability in the AJAX features in index.php in MediaWiki 1.6.x through 1.9.2, when $wgUseAjax is enabled, allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded value of the rs parameter, whi...

Fedora 7 : openssl-0.9.8b-14.fc7 (2007-1444)

Fri Aug 3 2007 Tomas Mraz 0.9.8b-14 - use localhost in testsuite, hopefully fixes slow build in koji - CVE-2007-3108 - fix side channel attack on private keys 250577 - make ssl session cache id matching strict 233599 - Wed Jul 25 2007 Tomas Mraz 0.9.8b-13 - allow building on ARM architectures...

Fedora 7 : krb5-1.6.1-4.fc7 (2007-2066)

The originally-used patch for CVE-2007-3999 didn't completely fix the bug. This update includes the revised patch. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format i...

Fedora 7 : chmsee-1.0.0-1.25.fc7 (2007-2679)

Wed Oct 24 2007 bbbush - 1.0.0-1.25 - build for firefox-2.0.0.8 - Sat Aug 11 2007 bbbush - 1.0.0-1.23 - update to 1.0.0 - update License field to GPLv2 - Sat Jul 21 2007 bbbush - 1.0.0-0.22.beta2 - fix desktop file Note that Tenable Network Security has extracted the preceding description block...

Fedora 7 : firestarter-1.0.3-16.fc7 (2007-0700)

Tue Jun 26 2007 Damien Durand - 1.0.3-16 - Fix BR - Fix active connections status - Sun Jun 17 2007 Damien Durand - 1.0.3-15 - Remove old doc - Fix pam configuration Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Fedora 7 : dovecot-1.0.3-14.fc7 (2007-1485)

A new upstream version fixing a few bugs. The quota-warning patch was added as well. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 7 : po4a-0.32-4.fc7 (2007-1763)

This update fixes a potential security problem information leak due to use of predictable name in /tmp. There is no CVE assignment yet Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automaticall...

Fedora 7 : dar-2.3.4-1.fc7 (2007-0904)

Adding CVE reference Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...