Alerts This Week
Warning Icon 1 923
Alerts This Week
Warning Icon 1 923

Fedora 10: 2009-9957 Critical: Newt Buffer Overflow Exploit

fedora
Calendar Grey September 25, 2009
Dist Fedora Esm H88
Important Fedora 10 patch for libnewt addresses buffer overflow vulnerability enabling potential code execution.
Fixes a buffer overflow in textbox, which could be exploited to execute arbitrary code.

Summary

Newt is a programming library for color text mode, widget based user

interfaces. Newt can be used to add stacked windows, entry widgets,

checkboxes, radio buttons, labels, plain text fields, scrollbars,

etc., to text mode user interfaces. This package also contains the

shared library needed by programs built with newt, as well as a

/usr/bin/dialog replacement called whiptail. Newt is based on the

slang library.

Update Information:

Fixes a buffer overflow in textbox, which could be exploited to execute arbitrary code.

Topics%20covered

Topics Covered

security advisory fedora buffer overflow critical software fix arbitrary code newt library

Change Log

* Thu Sep 24 2009 Miroslav Lichvar - 0.52.10-2 - fix buffer overflow in textbox when reflowing (#523955, CVE-2009-2905)

References


[ 1 ] Bug #523955 - CVE-2009-2905 newt: heap-overflow in textbox when text reflowing https://bugzilla.redhat.com/show_bug.cgi?id=523955

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update newt' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: newt
Product: Fedora 10
Version: 0.52.10
Release: 2.fc10
URL: https://pagure.io/newt
Summary: A library for text mode user interfaces

Topics%20covered

Topics Covered

security advisory fedora buffer overflow critical software fix arbitrary code newt library

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here