Fedora 7 : thunderbird-2.0.0.14-1.fc7 (2008-3519)

Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of some malformed HTML mail content. An HTML mail message containing such malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code as the user running...

Fedora 7 : perl-5.8.8-29.fc7 (2008-3399)

Tue Apr 29 2008 Marcela Maslanova - 4:5.8.8-29 - CVE-2008-1927 buffer overflow, when unicode character is used. - Thu Jan 31 2008 Tom 'spot' Callaway - 4:5.8.8-28 - create /usr/lib/perl5/vendorperl/5.8.8/auto and own it in base perl resolves bugzilla 214580 - Mon Nov 26 2007 Tom 'spot' Callaway -...

Fedora 7 : dbmail-2.2.9-1.fc7 (2008-3371)

Fix possible authentication bypass in authldap authentication module when dbmail is used with LDAP servers allowing anonymous logins - CVE-2007-6714 443019. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

[SECURITY] Fedora 7 Update: lighttpd-1.4.19-4.fc7

Secure, fast, compliant and very flexible web-server which has been optimiz ed for high-performance environments. It has a very low memory footprint compa red to other webservers and takes care of cpu-load. Its advanced feature-set FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many mo...

Fedora 7 : seamonkey-1.1.9-2.fc7 (2008-3231)

Security update: fix memory corrupting crash and possibly code execution in JavaScript garbage collection CVE-2008-1380, 440518. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clea...

Fedora 7 : otrs-2.1.5-4.fc7 (2008-3100)

Security update: Add upstream patch for CVE-2008-1515 / OSA-2008-01 Vulnerability in OTRS SOAP interface allowing remote access without valid SOAP user - http://otrs.org/advisory/OSA-2008-01-en/ Note that Tenable Network Security has extracted the preceding description block directly from the...

Fedora 7 : rsync-2.6.9-6.fc7 (2008-3060)

Tue Apr 8 2008 Simo Sorce 2.6.9-6.fc7 - Security release: http://rsync.samba.org/security.htmls302 - Wed Sep 5 2007 Simo Sorce 2.6.9-3.fc7 - Add patch to fix crash bug with hardlinks and ACLs patches Note that Tenable Network Security has extracted the preceding description block directly from...

Fedora 7 : gallery2-2.2.4-3.fc7 (2008-2587)

Thu Mar 20 2008 John Berninger - 2.2.4-3 - revert to SVN snapshot so that config-time integrity checks don't fail - remove embedded copy of smarty and use php-Smarty package - Sat Dec 29 2007 John Berninger 2.2.4-1 - A christmas present -- critical security update to 2.2.4 - Fri Aug 31 2007 John...

Fedora 7 : phpMyAdmin-2.11.5.1-1.fc7 (2008-2874)

This update addresses PMASA-2008-2 / CVE-2008-1567: phpMyAdmin upstream received an advisory from Jim Hermann: It saves sensitive information like the MySQL username and password and the Blowfish secret key in session data, which might be unprotected on a shared host...

Fedora 7 : krb5-1.6.1-9.fc7 (2008-2637)

This update incorporates fixes included in MITKRB5-SA-2008-001 use of uninitialized pointer / double-free in the KDC when v4 compatibility is enabled and MITKRB5-SA-2008-002 incorrect handling of high-numbered descriptors in the RPC library. This update also incorporates less-critical fixes for a...

[SECURITY] Fedora 7 Update: libsilc-1.0.2-6.fc7

SILC Client Library libraries for SILC clients...

Fedora 7 : pcre-7.3-3.fc7 (2008-1842)

This update re-based pcre to version 7.3 as used in Fedora 8 to address multiple security issues that cause memory corruption, leading to application crash or possible execution of arbitrary code. CVE-2007-1659 315871, CVE-2007-1661 392931, CVE-2007-1662 392921, CVE-2007-4766 392891, CVE-2007-476...

Fedora 7 : phpMyAdmin-2.11.5-1.fc7 (2008-2229)

This is a bugfix-only version containing a security fix: Remove cookies from $REQUEST for better coexistence with other applications, thanks to Richard Cunningham. See PMASA-2008-1. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

Fedora 7 : lighttpd-1.4.18-3.fc7 (2008-2262)

Tue Mar 4 2008 Matthias Saou 1.4.18-3 - Include patch for CVE-2008-0983 crash when low on file descriptors. - Include patch for CVE-2008-1111 cgi source disclosure. - Tue Oct 16 2007 Matthias Saou 1.4.18-2 - Include modgeoip additional source, make it an optional sub-package. - Reorder...

Fedora 7 : viewvc-1.0.5-1.fc7 (2008-2143)

These security issues have been fixed: - omit commits of all-forbidden files from query results - disallow direct URL navigation to hidden CVSROOT folder - strip forbidden paths from revision view - don't traverse log history thru forbidden locations - honor forbiddenness via diff view path...

Fedora 7 : dbus-1.0.2-7.fc7 (2008-2043)

Wed Feb 27 2008 David Zeuthen - 1.0.2-7.fc7 - CVE-2008-0595 - Fri Jun 22 2007 Matthias Clasen - 1.0.2-6 - Don't require libxml-python needlessly 245300 - Sun Jun 17 2007 Matthias Clasen - 1.0.2-5 - Require pkgconfig in -devel, not in -x11 244385 Note that Tenable Network Security has extracted...

Fedora 7 : wyrd-1.4.3b-1.fc7 (2008-1963)

Bug 433719 - CVE-2008-0806 Wyrd uses insecure temporary file Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 7 : qemu-0.9.0-4.fc7 (2008-2001)

Ian Jackson discovered that accesses beyond end of qemu emulated disk devices can result in accesses to emulator's virtual memory space accesses and thus can allow user with sufficient privilege in guest root, as this would need modification to kernel's driver to break out of VM...

Fedora 7 : kvm-36-8.fc7 (2008-1973)

Ian Jackson discovered that accesses beyond end of qemu emulated disk devices can result in accesses to emulator's virtual memory space accesses and thus can allow user with sufficient privilege in guest root, as this would need modification to kernel's driver to break out of VM...

Fedora 7 : moin-1.5.8-4.fc7 (2008-1880)

Wed Feb 20 2008 Lubomir Kundrak 1.5.8-4 - Fix CVE-2008-0780 XSS in login action 2f952fa361c7 - Fix CVE-2008-0781 multiple XSS in AttachFile action db212dfc58ef - Fri Feb 8 2008 Matthias Saou 1.5.8-3 - Include e69a16b6e630 1.5 changeset as cookieidfix 432017. - Sun Aug 5 2007 Matthias Saou 1.5.8-2...