LinuxSecurity.com

Red Hat: 2010:0528-01: avahi: Moderate Advisory

13.07.2010 16:43 LinuxSecurity.com: Updated avahi packages that fix two security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate

Red Hat: 2010:0521-01: gfs-kmod: Moderate Advisory

13.07.2010 16:41 LinuxSecurity.com: Updated gfs-kmod packages that fix one security issue are now available for Red Hat Enterprise Linux 5.4 Extended Update Support, kernel release 2.6.18-164.19.1.el5.

Mandriva: 2010:131: iscsitarget

12.07.2010 16:33 LinuxSecurity.com: Multiple format string and buffer overflow vulnerabilities has been found and corrected in iscsitarget . The updated packages have been patched to correct these issues. _______________________________________________________________________

Debian: 2069-1: znc: denial of service

12.07.2010 00:11 LinuxSecurity.com: It was discovered that znc, an IRC bouncer, is vulnerable to denial of service attacks via a NULL pointer dereference when traffic statistics are requested while there is an unauthenticated connection.

Debian: 2068-1: python-cjson: buffer overflow

11.07.2010 06:23 LinuxSecurity.com: Matt Giuca discovered a buffer overflow in python-cjson, a fast JSON encoder/decoder for Python. This allows a remote attacker to cause a denial of service

SuSE: 2010-030: Mozilla Firefox

09.07.2010 10:56 LinuxSecurity.com: Mozilla Firefox was updated to version 3.5.10, fixing various bugs and security issues. MFSA 2010-33 / CVE-2008-5913: Security researcher Amit Klein reported that it was possible to reverse engineer the value used to seed Math.random . Since the pseudo-random

Red Hat: 2010:0520-01: libtiff: Important Advisory

08.07.2010 14:43 LinuxSecurity.com: Updated libtiff packages that fix two security issues are now available for Red Hat Enterprise Linux 3. The Red Hat Security Response Team has rated this update as having

Red Hat: 2010:0519-01: libtiff: Important Advisory

08.07.2010 14:28 LinuxSecurity.com: Updated libtiff packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having

Red Hat: 2010:0518-01: scsi-target-utils: Important Advisory

08.07.2010 14:28 LinuxSecurity.com: An updated scsi-target-utils package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having

Ubuntu: 960-1: libpng vulnerabilities

08.07.2010 11:41 LinuxSecurity.com: It was discovered that libpng did not properly handle certain malformed PNGimages. If a user or automated system were tricked into opening a craftedPNG file, an attacker could cause a denial of service or possibly executearbitrary code with the privileges of the user invoking the program.

Pardus: 2010-97: Avahi: Denial of Service

08.07.2010 09:08 LinuxSecurity.com: A denial of service vulnerability has been fixed in Avahi, which can be used by malicious people to crash the server.

Mandriva: 2010:130: heimdal

07.07.2010 14:27 LinuxSecurity.com: A vulnerability has been found and corrected in heimdal: Certain invalid GSS-API tokens can cause a GSS-API acceptor to crash due to a null pointer dereference in the GSS-API library .

Mandriva: 2010:129: heimdal

07.07.2010 14:12 LinuxSecurity.com: Multiple vulnerabilities has been found and corrected in heimdal: The krshd and v4rcp applications in MIT Kerberos 5 up to 1.5, and 1.4.x before 1.4.4, when running on Linux and AIX, and Heimdal 0.7.2 and earlier, do not check return codes for setuid

Mandriva: 2010:128: lftp

06.07.2010 19:39 LinuxSecurity.com: A vulnerability has been found and corrected in lftp: The get1 command, as used by lftpget, in LFTP before 4.0.6 does not properly validate a server-provided filename before determining the destination filename of a download, which allows remote servers to

SuSE: 2010-028: IBM Java 5

06.07.2010 13:28 LinuxSecurity.com: This update of IBM Java 1.5.0 to SR11 FP2 brings various bug and lots of security fixes. Following security issues were fixed: CVE-2010-0084: Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6