Expat 2.0.1 - UTF-8 Character XML Parsing Remote Denial of Service

Expat 2.0.1 - UTF-8 Character XML Parsing Remote Denial of Service Bugtraq ID: 36097 Class: Input Validation Error Published: Jan 17 2009 12:00AM Updated: Nov 12 2009 08:06PM Credit: Peter Valchev Vulnerable: SuSE openSUSE 11.0 SuSE openSUSE 10.3 SuSE Linux 9 SuSE Linux 11 SuSE Linux 10.0 RedHat...

Expat 2.0.1 - UTF-8 Character XML Parsing Remote Denial of Service

Bugtraq ID: 36097 Class: Input Validation Error Published: Jan 17 2009 12:00AM Updated: Nov 12 2009 08:06PM Credit: Peter Valchev Vulnerable: SuSE openSUSE 11.0 SuSE openSUSE 10.3 SuSE Linux 9 SuSE Linux 11 SuSE Linux 10.0 RedHat Fedora 11 RedHat Fedora 10 RedHat Enterprise Linux WS 4 RedHat...

LibTIFF 'LZWDecodeCompat()' Remote Buffer Underflow Vulnerability

No description provided by source. Bugtraq ID: 35451 Class: Boundary Condition Error Published: Jun 21 2009 12:00AM Updated: Nov 12 2009 06:46PM Credit: wololo Vulnerable: Ubuntu Ubuntu Linux 9.04 sparc Ubuntu Ubuntu Linux 9.04 powerpc Ubuntu Ubuntu Linux 9.04 lpia Ubuntu Ubuntu Linux 9.04 i386...

Fedora 10 : ocaml-postgresql-1.12.3-1.fc10.2 (2009-10595)

New upstream version 1.12.3. - This contains a SECURITY fix for: https://bugzilla.redhat.com/showbug.cgi?id=529325 CVE-2009-2943 ocaml- postgresql: Missing escape function DSA-1909-1 HOWEVER you are not protected until you change your code to use the new connectionescapestring method. Note that...

Fedora 10 : wordpress-mu-2.8.5.2-1.fc10 (2009-11292)

Security and bugfix updates based upon the WordPress 2.8.5 release Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

[SECURITY] Fedora 10 Update: ocaml-postgresql-1.12.3-1.fc10.2

This OCaml-library provides an interface to PostgreSQL, an efficient and reliable, open source, relational database. Almost all functionality available through the C-API libpq is replicated in a type-safe way. This library uses objects for representing database connections and results of queries...

[SECURITY] Fedora 10 Update: wordpress-mu-2.8.5.2-1.fc10

WordPress-MU is a derivative of the WordPress blogging codebase, to allow one instance to serve multiple users...

[SECURITY] Fedora 10 Update: ocaml-camlimages-3.0.1-3.fc10.3

CamlImages is an image processing library for Objective CAML, which provide s: basic functions for image processing and loading/saving, various image file formats hence providing a translation facility from format to format, and an interface with the Caml graphics library allows to display images...

[SECURITY] Fedora 10 Update: libvorbis-1.2.0-7.fc10

Ogg Vorbis is a fully open, non-proprietary, patent- and royalty-free, general-purpose compressed audio format for audio and music at fixed and variable bitrates from 16 to 128 kbps/channel. The libvorbis package contains runtime libraries for use in programs that support Ogg Vorbis...

[SECURITY] Fedora 10 Update: alienarena-7.32-1.fc10

Alien Arena 2009 is an online deathmatch game with over 30 levels, seven mo des of play, loads of mutators, built-in bots, multiple player characters and w eapons with alt-fire modes...

[SECURITY] Fedora 10 Update: alienarena-data-20091102-1.fc10

Data files audio, maps, etc for Alien Arena 2009...

[SECURITY] Fedora 10 Update: kernel-2.6.27.38-170.2.113.fc10

The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating system: memory allocation, process allocation, device input and output, etc...

Fedora 10 : alienarena-7.32-1.fc10 / alienarena-data-20091102-1.fc10 (2009-11066)

Update to 7.32, fixes CVE-2009-3637. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 703...

Fedora 10 : kernel-2.6.27.38-170.2.113.fc10 (2009-11038)

Update to kernel 2.6.27.38: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.38 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 10 : expat-2.0.1-5.fc10.1 (2009-11029)

This update fixes a security vulnerability: A buffer over-read flaw was found in the way Expat handles malformed UTF-8 sequences when processing XML files. A specially crafted XML file could cause applications using Expat to crash while parsing the file. CVE-2009-3720 Note that Tenable Network...

Fedora 10 : PyXML-0.8.4-12.fc10 (2009-10949)

Switched to using system expat library. Updated expat packages are needed to fully resolve this flaw. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 10 : squidGuard-1.4-8.fc10 (2009-10743)

Fixes language file issue, but more importantly. . . --------------- squidGuard upstream has released patches fixing quoting from upstream advisories: a, This patch fixes one buffer overflow problem in sgLog.c when overlong URLs are requested. SquidGuard will then go into emergency mode were no...

Fedora 10 : Miro-2.0.5-5.fc10 / blam-1.8.5-15.fc10 / epiphany-2.24.3-11.fc10 / etc (2009-10981)

Update to new upstream Firefox version 3.0.15, fixing multiple security issues detailed in the upstream advisories: http://www.mozilla.org/security/known- vulnerabilities/firefox30.htmlfirefox3.0.15 Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox /...

Fedora 10 : rt3-3.8.2-11.fc10 (2009-10426)

Tue Oct 13 2009 Ralf Corsepius - 3.8.2-11 - Update rt-3.8.2-rh-bz526870.diff. - Mon Oct 12 2009 Ralf Corsepius - 3.8.2-10 - Add rt-3.8.2-rh-bz526870.diff BZ 526870. - Wed Jun 24 2009 Ralf Corsepius - 3.8.2-9 - Add R: perlData::ICal, R: perlData::ICal::Entry::Event BZ 507965. - Fri Jun 19 2009...

[SECURITY] Fedora 10 Update: expat-2.0.1-5.fc10.1

This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...