[slackware-security] samba

New samba packages are available for Slackware 10.0, 10.1, 10.2, 11.0, and -current to fix security issues. More details about the issues may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2007-2444 https://vulners.com/cve/CVE-2007-2446...

Security fix for the ALT Linux 5 package samba version 3.0.25-alt1

May 14, 2007 Alexander Bokovoy 3.0.25-alt1 - New release - Security fixes for CVE-2007-2444, CVE-2007-2446, and CVE-2007-2447: + CVE-2007-2444 Versions: Samba 3.0.23d - 3.0.25pre2 Local SID/Name translation bug can result in user privilege elevation + CVE-2007-2446 Versions: Samba 3.0.0 - 3.0.24...

Microsoft Exchange Base64 MIME Message Remote Code Execution Vulnerability

Description Microsoft Exchange is prone to a remote code-execution vulnerability because the application fails to properly decode specially crafted email messages. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the vulnerable application,...

CentOS 5 : Kernel (CESA-2007:0169)

Updated kernel packages that fix security issues and bugs in the Red Hat Enterprise Linux 5 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system. These n...

tomcat -- multiple vulnerabilities

Apache Project reports: The Apache Tomcat team is proud to announce the immediate availability of Tomcat 4.1.36 stable. This build contains numerous library updates, A small number of bug fixes and two important security fixes...

Security | Oracle Critical Patch Update - April 2007

A Critical Patch Update is a collection of patches for multiple security vulnerabilities. It also includes non-security fixes that are required because of interdependencies by those security patches. Due to the threat posed by a successful attack, Oracle strongly recommends that fixes are applied...

Fedora Core 6 : kernel-2.6.19-1.2911.6.4.fc6 (2007-291)

Updated to kernel 2.6.19.5 plus additional fixes : http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.19.4 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.19.5 CVE-2007-0772: Summary: The Linux kernel before 2.6.20.1 allows remote attackers to cause a denial of service oops via a...

Fedora Core 5 : kernel-2.6.19-1.2288.2.1.fc5 (2007-277)

Updated to kernel 2.6.19.5-rc1 plus additional fixes : http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.19.4 2.6.19.5-rc1: 4 V4L fixes 3 usbaudio fixes 3 wireless driver fixes 2 IDE driver cable detection fixes NFS bugfix various other fixes CVE-2007-0772: Summary: The Linux kernel befor...

Security | Oracle Critical Patch Update - January 2007

A Critical Patch Update is a collection of patches for multiple security vulnerabilities. It also includes non-security fixes that are required because of interdependencies by those security patches. This Critical Patch Update contains 51 new security fixes across all products...

Fedora Core 5 : devhelp-0.11-6.fc5 / epiphany-2.14.3-4.fc5 / seamonkey-1.0.8-0.5.1.fc5 / etc (2007-289)

The remote Fedora Core host is missing one or more security updates : yelp-2.14.3-4.fc5 : - Fri Feb 16 2007 Martin Stransky - 2.14.3-4 - Rebuild against SeaMonkey - Fri Dec 22 2006 Martin Stransky - 2.14.3-3 - Rebuild against SeaMonkey - Tue Nov 14 2006 Martin Stransky - 2.14.3-2 - Rebuild agains...

Trend Micro ServerProtect SPNTSVC.EXE Multiple Stack Buffer Overflow Vulnerabilities

Description Trend Micro ServerProtect is prone to multiple remote stack-based buffer-overflow vulnerabilities because the application fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. Exploiting these issues allows attackers to execute...

SUSE-SA:2007:011: acroread

The remote host is missing the patch for the advisory SUSE-SA:2007:011 acroread. The Adobe Acrobat Reader has been updated to version 7.0.9. This update also includes following security fixes: CVE-2006-5857: A memory corruption problem was fixed in Adobe Acrobat Reader can potentially lead to cod...

Moderate: fetchmail security update

6.2.5-6.el4.5 - Fix a KPOP support regression Related: 221985 223661 6.2.5-6.el4.4 - Fix V2,V3,V4 of CAN-2006-5867 Resolves: 221985 6.2.5-6.el4.3 - Fix CAN-2005-4348 176266 - Add BuildRequires: gettext-devel 164351 6.2.5-6.el4.1 - Fix CAN-2005-2335 163816, patch by Ludwig Nussel...

Fedora Core 5 : kernel-2.6.16-1.2107_FC5 (2006-499)

An update to the latest upstream -stable snapshot 2.6.16.13 Among quite a few bug-fixes, are two security related fixes : Don't allow a backslash in a path component CVE-2006-1863 NETFILTER: SCTP conntrack: fix infinite loop CVE-2006-1527 Detailed changelogs of the last few point releases can be...

Fedora Core 4 : ruby-1.8.4-3.fc4 (2006-842)

Thu Jul 20 2006 Akira TAGOH - 1.8.4-3 - security fixes CVE-2006-3694 - ruby-1.8.4-fix-insecure-dir-operation.patch : - ruby-1.8.4-fix-insecure-regexp-modification.patch: fixed the insecure operations in the certain safe-level restrictions. 199538 - ruby-1.8.4-fix-alias-safe-level.patch: fixed to...

Fedora Core 5 : ruby-1.8.4-8.fc5 (2006-849)

Thu Jul 20 2006 Akira TAGOH - 1.8.4-8 - security fixes CVE-2006-3694 - ruby-1.8.4-fix-insecure-dir-operation.patch : - ruby-1.8.4-fix-insecure-regexp-modification.patch: fixed the insecure operations in the certain safe-level restrictions. 199538 - ruby-1.8.4-fix-alias-safe-level.patch: fixed to...

Fedora Core 5 : wireshark-0.99.4-1.fc5 (2006-1141)

Wed Nov 1 2006 Radek Vokal 0.99.4-1.fc5 - upgrade to 0.99.4, fixes multiple security issues - use dist tag - CVE-2006-5468 - The HTTP dissector could dereference a NULL pointer. - CVE-2006-5469 - The WBXML dissector could crash. - CVE-2006-5470 - The LDAP dissector and possibly others could...

Fedora Core 4 : kernel-2.6.16-1.2111_FC4 (2006-573)

This update rebases to the latest upstream -stable release 2.6.16.17, where a number of security problems have been fixed, notably : SCTP: Validate the parameter length in HB-ACK chunk CVE-2006-1857 SCTP: Respect the real chunk length when walking parameters CVE-2006-1858 fs/locks.c: Fix leaseini...

Fedora Core 4 : kernel-2.6.16-1.2107_FC4 (2006-500)

An update to the latest upstream -stable snapshot 2.6.16.13 Among quite a few bug-fixes, are two security related fixes : Don't allow a backslash in a path component CVE-2006-1863 NETFILTER: SCTP conntrack: fix infinite loop CVE-2006-1527 Detailed changelogs of the last few point releases can be...

Fedora Core 5 : kernel-2.6.16-1.2122_FC5 (2006-572)

This update rebases to the latest upstream -stable release 2.6.16.17, where a number of security problems have been fixed, notably : SCTP: Validate the parameter length in HB-ACK chunk CVE-2006-1857 SCTP: Respect the real chunk length when walking parameters CVE-2006-1858 fs/locks.c: Fix leaseini...