[SECURITY] Fedora 8 Update: turba-2.1.7-1.fc8

Turba is the Horde contact management application, which allows access to and storage of personal contacts including name, email address, phone number, and other easily customizable fields. Turba integrates with IMP Horde's webmail application as its address book. The Horde Project writes web...

Fedora 8 : qemu-0.9.0-6.fc8 (2008-1995)

Ian Jackson discovered that accesses beyond end of qemu emulated disk devices can result in accesses to emulator's virtual memory space accesses and thus can allow user with sufficient privilege in guest root, as this would need modification to kernel's driver to break out of VM...

Fedora 8 : moin-1.5.8-4.fc8 (2008-1905)

Wed Feb 20 2008 Lubomir Kundrak 1.5.8-4 - Fix CVE-2008-0780 XSS in login action 2f952fa361c7 - Fix CVE-2008-0781 multiple XSS in AttachFile action db212dfc58ef - Fri Feb 8 2008 Matthias Saou 1.5.8-3 - Include e69a16b6e630 1.5 changeset as cookieidfix 432017. Note that Tenable Network Security has...

[SECURITY] Fedora 8 Update: httpd-2.2.8-1.fc8

The Apache HTTP Server is a powerful, efficient, and extensible web server...

Fedora 8 : glib2-2.14.6-1.fc8 (2008-1533)

PCRE 7.6 fixed following bug: A character class containing a very large number of characters with codepoints greater than 255 in UTF-8 mode, of course caused a buffer overflow. The GLib release 2.14.6 updates the included copy of PCRE to version 7.6. Note that Tenable Network Security has extract...

Fedora 8 : xine-lib-1.1.10.1-1.fc8 (2008-1543)

Fri Feb 8 2008 Ville Skytta - 1.1.10.1-1 - 1.1.10.1 security update, 431541. Sun Jan 27 2008 Ville Skytta - 1.1.10-2 - Include spu, spucc, and spucmml decoders 213597. Upstream release notes: http://sourceforge.net/project/shownotes.php?groupid=96 55&releaseid=574735 Note that Tenable Network...

[SECURITY] Fedora 8 Update: kernel-xen-2.6-2.6.21-2957.fc8

The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating system: memory allocation, process allocation, device input and output, etc...

Fedora 8 : SDL_image-1.2.6-5.fc8 (2008-1208)

Tue Jan 29 2008 Brian Pepple - 1.2.6-5 - Add patch to fix ILBM image buffer overflow. 430693 - Thu Jan 24 2008 Brian Pepple - 1.2.6-4 - Add patch to fix buffer-overflow. 430100 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

Fedora 8 : rb_libtorrent-0.12-3.fc8 (2008-1198)

A potential remote exploit was found in the bdecoderecursive routine that could trigger a stack overflow when passed malformed message data. This release adds a fix for this issue from the upstream subversion repository that limits the maximum recursive depth of this function. Note that Tenable...

[SECURITY] Fedora 8 Update: kdebase-3.5.8-31.fc8

Core applications for the K Desktop Environment. Included are: kdm replacement for xdm, kwin window manager, konqueror filemanager, web browser, ftp client, ..., konsole xterm replacement, kpanel application starter and desktop pager, kaudio audio server, kdehelp viewer for kde help files, info a...

Fedora 8 : pulseaudio-0.9.8-5.fc8 (2008-0963)

Wed Jan 23 2008 Lubomir Kundrak 0.9.8-5 - Fix CVE-2008-0008 security issue 425481 - Sun Jan 13 2008 Lubomir Kundrak 0.9.8-4.1 - Actually add content to pulseaudio-0.9.8-create-dot-pulse.patch - Make the Source0 tag point to URL instead of a local file - Drop the nochown patch; it's not applied at...

Fedora 8 : bind-9.5.0-23.b1.fc8 (2008-0903)

CVE-2008-0122, libbind.so off-by-one buffer overflow, very low severity Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 8 : kernel-2.6.23.14-107.fc8 (2008-0748)

Update to Linux kernel 2.6.23.14: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.14 CVE-2008-0001: Use access mode instead of open flags to determine needed permissions. Additional fixes: Enable CONFIGNL80211. Wireless driver updates. Firewire updates. LIRC updates. Note that Tenabl...

[SECURITY] Fedora 8 Update: xorg-x11-server-1.3.0.0-39.fc8

X.Org X11 X server...

Fedora 8 : moodle-1.8.4-1.fc8 (2008-0610)

Upgrade to 1.8.4, fix CVE-2008-0123. Added Tamil Sri Lanka support. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

[SECURITY] Fedora 8 Update: xine-lib-1.1.9.1-1.fc8

This package contains the Xine library. Xine is a free multimedia player. It can play back various media. It also decodes multimedia files from local disk drives, and displays multimedia streamed over the Internet. It interprets many of the most common multimedia formats available - and some of t...

Fedora 8 : postgresql-8.2.6-1.fc8 (2008-0478)

Mon Jan 7 2008 Tom Lane 8.2.6-1 - Update to PostgreSQL 8.2.6 to fix CVE-2007-4769, CVE-2007-4772, CVE-2007-6067, CVE-2007-6600, CVE-2007-6601 - Make initscript and pam config files be installed unconditionally; seems new buildroots don't necessarily have those directories in place Note that...

Fedora 8 : qt4-4.3.3-1.fc8 (2007-4285)

An update to the latest upstream release. Includes fix for security issue CVE-2007-5965 rhbz411751. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

[SECURITY] Fedora 8 Update: libcdio-0.78.2-4.fc8

This library provides an interface for CD-ROM access. It can be used by applications that need OS- and device-independent access to CD-ROM devices...

Fedora 8 : bind-9.5.0-20.b1.fc8 (2007-4655)

bind-chroot-admin called restorecon on /proc filesystem 405281 - 9.5.0b1 release 405281, 392491 - stop with initscript will fail if rndc was disabled 417431 - fixed IDN support in dig and host utilities 412241 - added dst/gssapi.h to -devel subpackage 419091 - CVE-2007-6283 - /etc/rndc.key file...