Fedora Core 6 : freetype-2.2.1-17.fc6 (2007-561)

This update fixes a bug in FreeType font rasterization engine that could cause a carefully crafted TrueType font to crash applications trying to use it. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempt...

Fedora Core 4 : ImageMagick-6.2.2.0-3.fc4.2 (2006-587)

ImageMagick's DisplayImageCommand contains a heap overflow flaw. It is possible to pass an unexpanded glob to ImageMagick which will be expanded by ImageMagick and overflow heap memory. The updated package fixes this problem. Note that Tenable Network Security has extracted the preceding...

Fedora Core 3 : samba-3.0.10-1.fc3 (2004-562)

Fri Dec 17 2004 Jay Fenlason 3.0.10-1.fc3 - New upstream release that closes CVE-2004-1154 bz142544 - Include the -64bit patch from Nalin. This closes bz142873 - Update the -logfiles patch to work with 3.0.10 - Create /var/run/winbindd and make it part of the -common rpm to close bz142242 Note...

Fedora Core 2 : foomatic-3.0.1-3.1 (2004-303)

Sebastian Krahmer reported a bug in the cupsomatic and foomatic-rip print filters, used by the CUPS print spooler. An attacker who has printing access could send a carefully named file to the print server causing arbitrary commands to be executed as root. The Common Vulnerabilities and Exposures...

Fedora Core 2 : ipsec-tools-0.2.5-4 (2004-197)

When configured to use X.509 certificates to authenticate remote hosts, ipsec-tools versions 0.3.3 and earlier will attempt to verify that host certificate, but will not abort the key exchange if the verification fails. Users of ipsec-tools should upgrade to this updated package which contains a...

Fedora Core 1 : openssl-0.9.7a-33.10 (2004-095)

This update includes OpenSSL packages to fix two security issues affecting OpenSSL 0.9.7a which allow denial of service attacks; CVE-2004-0079 and CVE-2003-0851. Also included are updates for the OpenSSL 0.9.6 and 0.9.6b compatibility libraries included in Fedora Core 1, fixing a separate issue...

Fedora Core 1 : lha-1.14i-12.1 (2004-119)

Ulf Harnhammar discovered two stack-based buffer overflows and two directory traversal flaws in LHA. An attacker could exploit the buffer overflows by creating a carefully crafted LHA archive in such a way that arbitrary code would be executed when the archive is tested or extracted by a victim...