Fedora Core 5 : firefox-1.5.0.9-1.fc5 (2006-1499)

Mozilla Firefox is an open source Web browser. Several flaws were found in the way Firefox processes certain malformed JavaScript code. A malicious web page could cause the execution of JavaScript code in such a way that could cause Firefox to crash or execute arbitrary code as the user running...

Fedora Core 4 : cyrus-sasl-2.1.20-6 (2006-515)

This update incorporates a fix for a bug which would allow a client which attempted DIGEST-MD5 authentication with a server to cause the DIGEST-MD5 plugin on the server to crash. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

Fedora Core 4 : sendmail-8.13.7-2.fc4.1 (2006-836)

Tue Jul 18 2006 Thomas Woerner 8.13.7-2.fc4.1 - using new syntax for access database 177566 - fixed failure message while shutting down sm-client 119429 resolution: stop sm-client before sendmail - fixed method to specify persistent queue runners 126760 - removed patch backup files from...

Fedora Core 6 : php-5.1.6-3.1.fc6 (2006-1169)

This update fixes a security vulnerability in PHP. The Hardened-PHP Project discovered an overflow in the PHP htmlentities and htmlspecialchars routines. If a PHP script used the vulnerable functions to parse UTF-8 data, a remote attacker sending a carefully crafted request could trigger the...

Fedora Core 5 : firefox-1.5.0.6-2.fc5 (2006-902)

Several security issues have been identified that are fixed in this release. Please refer to http://www.mozilla.org/projects/security/known-vulnerabilities.htmlfi refox1.5.0.5 for details. Users of Firefox are advised to update to this package, which contains version 1.5.0.6 of Firefox and is not...

Fedora Core 5 : httpd-2.2.2-1.2 (2006-863)

This update fixes a security issue in the modrewrite module. Mark Dowd of McAfee Avert Labs reported an off-by-one security problem in the LDAP scheme handling of the modrewrite module. Where RewriteEngine was enabled, and for certain RewriteRules, this could lead to a pointer being written out o...

Fedora Core 5 : thunderbird-1.5.0.2-1.1.fc5 (2006-490)

Updated thunderbird packages that fix various bugs are now available for Fedora Core 4. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. Several bugs were found in the way Thunderbird...

Fedora Core 6 : kernel-2.6.18-1.2868.fc6 (2006-1471)

This update rebases to 2.6.18.6rc2, which fixes the following security bugs : bridge: fix possible overflow in getfdbentries CVE-2006-5751 Bluetooth: Add packet size checks for CAPI messages CVE-2006-6106 In addition, a number of non-security related bugs have been fixed. Complete changelogs are...

Fedora Core 4 : ImageMagick-6.2.2.0-3.fc4.2 (2006-587)

ImageMagick's DisplayImageCommand contains a heap overflow flaw. It is possible to pass an unexpanded glob to ImageMagick which will be expanded by ImageMagick and overflow heap memory. The updated package fixes this problem. Note that Tenable Network Security has extracted the preceding...

Fedora Core 5 : firefox-1.5.0.4-1.2.fc5 (2006-715)

Several security issues have been identified that are fixed in this release. Please refer to http://www.mozilla.org/projects/security/known-vulnerabilities.htmlfi refox1.5.0.4 for details. Users of Firefox are advised to update to this package, which contains version 1.5.0.4 of Firefox and is not...

Fedora Core 5 : thunderbird-1.5.0.5-1.1.fc5 (2006-903)

Several security issues have been identified that are fixed in this release. Please refer to http://www.mozilla.org/projects/security/known-vulnerabilities.htmlth underbird1.5.0.5 for details. Users of Thunderbird are advised to update to this package, which contains version 1.5.0.5 of Thunderbir...

Fedora Core 5 : mono-1.1.13.7-3.fc5.1 (2007-068)

A security problem was found and fixed in mono class libraries that affects the Mono web server implementation. By appending spaces to URLs attackers could download the source code of ASP.net scripts that would normally get executed by the web server. After upgrading the packages you need to...

Fedora Core 5 : thunderbird-1.5.0.8-1.fc5 (2006-1194)

Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the way Thunderbird processes certain malformed JavaScript code. A malicious HTML mail message could cause the execution of JavaScript code in such a way that could cause Thunderbird to crash or execute...

Fedora Core 5 : kernel-2.6.18-1.2239.fc5 (2006-1221)

This updates to the latest upstream stable kernel 2.6.18.2, and also fixes a number of security issues. MOKB-05-11-2006: Linux 2.6.x ISO9660 findgetblockslow denial of service http://projects.info-pull.com/mokb/MOKB-05-11-2006.html CVE-2006-5757 MOKB-07-11-2006: Linux 2.6.x zlibinflate memory...

Fedora Core 5 : krb5-1.4.3-5.1 (2006-905)

This update addresses MITKRB-SA-2006-001. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVE...

Fedora Core 6 : xterm-223-1.fc6 (2007-031)

Mon Jan 8 2007 Miroslav Lichvar 223-1.fc6 - update to 223 - use correct tty group 219048 - spec cleanup Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much...

Fedora Core 5 : mysql-5.0.22-1.FC5.1 (2006-702)

Repairs vulnerability in multibyte string escaping. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora Core 4 : kernel-2.6.17-1.2141_FC4 (2006-769)

An update to the latest upstream stable release 2.6.17.3, which fixes a security issue with SCTP. Further details: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.3 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.2 Note that Tenable Network Security has extracted the...

Fedora Core 5 : postgresql-8.1.4-1.FC5.1 (2006-578)

Mon May 22 2006 Tom Lane 8.1.4-1.FC5.1 - Update to PostgreSQL 8.1.4 includes fixes for CVE-2006-2313, CVE-2006-2314; see bug 192173 - Update to PyGreSQL 3.8 - Update to jdbc driver build 406 - Suppress noise from chcon, per bug 187744 Note that Tenable Network Security has extracted the preceding...

ZDI-07-004: CA BrightStor ARCserve Backup Tape Engine Buffer Overflow Vulnerability

ZDI-07-004: CA BrightStor ARCserve Backup Tape Engine Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-004.html January 11, 2007 -- CVE ID: CVE-2007-0169 -- Affected Vendor: Computer Associates -- Affected Products: BrightStor ARCserve Backup r11.5 BrightStor...