Fedora 8 : ipa-1.1.0-4.fc8 (2008-7987)

Security update to address Kerberos master password disclosure flaw CVE-2008-3274. A simple update is not sufficient to resolve the security issue. Please carefully follow the upgrade instructions at: http://freeipa.org/page/CVE-2008-3274 Note that Tenable Network Security has extracted the...

[SECURITY] Fedora 8 Update: libHX-1.23-1.fc8

A library for: - rbtree with key-value pair extension - deques double-ended queues Stacks LIFO / Queues FIFOs - platform independent opendir-style directory access - platform independent dlopen-style shared library access - auto-storage strings with direct access - command line option argv parser...

[SECURITY] Fedora 8 Update: libxml2-2.6.32-2.fc8

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...

Fedora 8 : amarok-1.4.10-1.fc8 (2008-7719)

Amarok 1.4.10 has been released to fix a security problem. For more information please see http://amarok.kde.org/en/node/535/ Please update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

[SECURITY] Fedora 8 Update: xastir-1.9.2-8.fc8

Xastir is a graphical application that interfaces HAM radio and internet access to realtime mapping software. Install XASTIR if you are interested in APRStm and HAM radio software...

Fedora 8 : httpd-2.2.9-1.fc8 (2008-6314)

This update includes the latest release of httpd 2.2. A security issue is fixed in this update: A flaw was found in the handling of excessive interim responses from an origin server when using modproxyhttp. In a forward proxy configuration, if a user of the proxy could be tricked into visiting a...

Fedora 8 : pdns-2.9.21.1-1.fc8 (2008-7083)

Wed Aug 6 2008 Ruben Kerkhof 2.9.21.1-1 - CVE-2008-3337 - Sat Feb 9 2008 Ruben Kerkhof 2.9.21-4 - GCC 4.3 fixes - Wed Dec 5 2007 Ruben Kerkhof 2.9.21-3 - Rebuild to pick up new openldap Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora 8 : trac-0.10.5-1.fc8 (2008-6830)

Update to 0.10.5 to fix two non-critical security issues: CVE-2008-2951: Open redirect vulnerability in the search script in Trac before 0.10.5 allows remote attackers to redirect users to arbitrary websites and conduct phishing attacks via a URL in the q parameter. CVE-2008-3328: Cross-site...

Fedora 8 : pcre-7.3-4.fc8 (2008-6111)

Fri Jul 4 2008 Tomas Hoger - 7.3-4 - Apply Tavis Ormandy's patch for CVE-2008-2371. - Tue Feb 12 2008 Tomas Hoger - 7.3-3 - Backport patch from upstream pcre 7.6 to address buffer overflow caused by 'a character class containing a very large number of characters with codepoints greater than 255...

Fedora 8 : libetpan-0.54-1.fc8 (2008-5480)

Update to new upstream version 0.54 fixing a crash NULL pointer dereference in the mail message header parser. Note: There is no application in Fedora using libetpan library for which such crash could be considered a security issue. This can only be a security sensitive issue for some 3rd party,...

Fedora 8 : net-snmp-5.4.1-7.fc8 (2008-5218)

Tue Jun 10 2008 Jan Safranek 5.4.1-7 - fix various flaws CVE-2008-2292 CVE-2008-0960 - Thu Feb 14 2008 Jan Safranek 5.4.1-6 - fixing ipNetToMediaNetAddress to show IP address 432780 - Thu Nov 15 2007 Jan Safranek 5.4.1-5 - added procps to build dependencies 380321 - fix crash on reading xen...

[SECURITY] Fedora 8 Update: net-snmp-5.4.1-7.fc8

SNMP Simple Network Management Protocol is a protocol used for network management. The NET-SNMP project includes various SNMP tools: an extensible agent, an SNMP library, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the...

Fedora 8 : evolution-2.12.3-5.fc8 (2008-5016)

Fix two buffer overflows in iCalendar .ics file fromat support discovered and reported by Alin Rad Pop of the Secunia Research: CVE-2008-1108, CVE-2008-1109, SA30298 See referenced bugzilla bugs or Secunia advisories for further details: http://secunia.com/advisories/30298...

Fedora 8 : snort-2.8.1-3.fc8 (2008-5001)

update for CVE-2008-1804 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora 8 : libpng-1.2.29-1.fc8 (2008-4847)

Update to new upstream version 1.2.29. Among other bug fixes, this introduces a minor security fix in the handling of unknown chunks - CVE-2008-1382: http://libpng.sourceforge.net/Advisory-1.2.26.txt http://www.ocert.org/advisories/ocert-2008-003.html Note that Tenable Network Security has...

[SECURITY] Fedora 8 Update: gnutls-1.6.3-3.fc8

GnuTLS is a project that aims to develop a library which provides a secure layer, over a reliable transport layer. Currently the GnuTLS library implem ents the proposed standards by the IETF's TLS working group...

Fedora 8 : libvorbis-1.2.0-2.fc8 (2008-3934)

Will Drewry of the Google Security Team reported several flaws in the way libvorbis processed audio data. An attacker could create a carefully crafted OGG audio file in such a way that it could cause an application linked with libvorbis to crash, or execute arbitrary code when it was opened...

Fedora 8 : cups-1.3.7-2.fc8 (2008-3586)

Fri May 9 2008 Tim Waugh 1:1.3.7-2 - Applied patch to fix CVE-2008-1722 integer overflow in image filter, bug 441692, STR 2790. - Fri May 2 2008 Tim Waugh - Include the hostname in the charset error part of bug 441719. - Thu Apr 10 2008 Tim Waugh - Log an error when a client requests a charset...

Fedora 8 : clamav-0.92.1-2.fc8 (2008-3420)

Security update - backport security fixes from 0.93: CVE-2008-1100 442360: Upack Processing Buffer Overflow Vulnerability CVE-2008-1387 442525: Endless loop / hang with crafted arj CVE-2008-0314 442740: PeSpin Heap Overflow Vulnerability CVE-2008-1833 442741: PE WWPack Heap Overflow Vulnerability...

Fedora 8 : moin-1.5.9-1.fc8 (2008-3301)

This update fixes various security issues present in moin 1.5.8. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing addition...