Fedora Essential and Critical Security Patch Updates - Page 802

Fedora Core 6 Update: mod_perl-2.0.2-6.2.fc6

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

This update fixes a security issue in mod_perl. An issue was found in the "namespace_from_uri" method of the ModPerl::RegistryCooker class. If a server implemented a mod_perl registry module using this method, a remote attacker requesting a carefully crafted URI can cause resource consumption, which could lead to a denial of service. (CVE-2007-1349)

LinuxSecurity.com Team
Jun 11, 2007

Fedora Core 6 Update: libexif-0.6.15-1.fc6

This update to the latest upstream release fixes a number of bugs, among them a possible integer overflow in the exif_data_load_data_entry function (CVE-2007-2645), which allows user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted EXIF data.

LinuxSecurity.com Team
Jun 11, 2007

Fedora Core 5 Update: samba-3.0.24-7.fc5

Bugfixes against the recent security updates for Fedora Core 5 samba-3.0.24-7.fc5 package. Also this update fixes a samba denial of service vulnerability.

LinuxSecurity.com Team
Jun 06, 2007

Fedora Core 5 Update: seamonkey-1.0.9-1.fc5

Updated seamonkey packages that fix several security bugs are now available for Fedora Core 5. This update has been rated as having critical security impact by the Fedora Security Response Team. SeaMonkey is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. Several flaws were found in the way SeaMonkey processed certain malformed JavaScript code. A web page containing malicious JavaScript code could cause SeaMonkey to crash or potentially execute arbitrary code as the user running SeaMonkey

LinuxSecurity.com Team
May 31, 2007

Fedora Core 6 Update: thunderbird-1.5.0.12-1.fc6

Updated thunderbird packages that fix several security bugs are now available for Fedora Core. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the way Thunderbird processed certain malformed JavaScript code. A web page containing malicious JavaScript code could cause Thunderbird to crash or potentially execute arbitrary code as the user running Thunderbird.

LinuxSecurity.com Team
May 31, 2007

Fedora Core 5 Update: thunderbird-1.5.0.12-1.fc5

LinuxSecurity.com Team
May 31, 2007

Fedora Core 5 Update: devhelp-0.11-7.fc5

LinuxSecurity.com Team
May 31, 2007

Fedora Core 5 Update: yelp-2.14.3-5.fc5

LinuxSecurity.com Team
May 31, 2007

Fedora Core 5 Update: epiphany-2.14.3-6.fc5

LinuxSecurity.com Team
May 31, 2007

Fedora Core 5 Update: firefox-1.5.0.12-1.fc5

Updated firefox packages that fix several security bugs are now available for Fedora Core 5. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla Firefox is an open source Web browser. Several flaws were found in the way Firefox processed certain malformed JavaScript code. A web page containing malicious JavaScript code could cause Firefox to crash or potentially execute arbitrary code as the user running Firefox.

LinuxSecurity.com Team
May 31, 2007

Fedora Core 6 Update: firefox-1.5.0.12-1.fc6

Updated firefox packages that fix several security bugs are now available Fedora Core 6. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla Firefox is an open source Web browser. Several flaws were found in the way Firefox processed certain malformed JavaScript code. A web page containing malicious JavaScript code could cause Firefox to crash or potentially execute arbitrary code as the user running Firefox.

LinuxSecurity.com Team
May 31, 2007

Fedora Core 6 Update: epiphany-2.16.3-5.fc6

LinuxSecurity.com Team
May 31, 2007

Fedora Core 6 Update: devhelp-0.12-11.fc6

LinuxSecurity.com Team
May 31, 2007

Fedora Core 6 Update: yelp-2.16.0-13.fc6

LinuxSecurity.com Team
May 31, 2007

Fedora Core 6 Update: mutt-1.4.2.3-1.fc6

The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle (MITM) attacks that use crafted message IDs and MD5 collisions. Also, a Buffer overflow in Mutt 1.4.2 might allow local users to execute arbitrary code via "&" characters in the GECOS field, which triggers the overflow during alias expansion.

LinuxSecurity.com Team
May 30, 2007

Fedora Core 5 Update: mutt-1.4.2.1-8.fc5

The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle (MITM) attacks that use crafted message IDs and MD5 collisions. Buffer overflow in Mutt 1.4.2 might allow local users to execute arbitrary code via "&" characters in the GECOS field, which triggers the overflow during alias expansion.

LinuxSecurity.com Team
May 30, 2007

Fedora Core 6 Update: selinux-policy-2.4.6-72.fc6

This Updates Fedora Core 6 SELinux policy. One change is Allow prelink sys_resource, Add transition rule to allow apps to run java in different context. Another is Allow netlable to read etc and work with init terminals and changes the file context to have all of policy at SystemLow.

LinuxSecurity.com Team
May 30, 2007

Fedora Core 5 Update: php-5.1.6-1.6

This update fixes a number of security issues in PHP. A heap buffer overflow flaw was found in the PHP 'xmlrpc' extension. A PHP script which implements an XML-RPC server using this extension could allow a remote attacker to execute arbitrary code as the 'apache' user.

LinuxSecurity.com Team
May 24, 2007

Fedora Core 5 Update: samba-3.0.24-6.fc5

Security bugs where found in samba-3.0.24-6.fc5. This update fixes nmbd segfault in some rare conditions. Also fixes a bug introduced with CVE-2007-2444 in some configurations. fixes CVE-2007-0452 Samba smbd denial of service

LinuxSecurity.com Team
May 21, 2007

Fedora Core 6 Update: tomcat5-5.5.23-0jpp.2.fc6

Several security issues were reported to be fixed in releases prior to tomcat5.5.23. Tomcat was found to accept multiple content-length headers in a request. This could allow attackers to poison a web-cache, bypass web application firewall protection, or conduct cross-site scripting attacks.

LinuxSecurity.com Team
May 21, 2007