Fedora Essential and Critical Security Patch Updates - Page 865
Find the information you need for your favorite open source distribution .
Find the information you need for your favorite open source distribution .
During a security audit, Chris Evans discovered a heap overflow in the BMPimage decoder in Qt versions prior to 3.3.3.
This update backports a security fix to a path-sanitizing flaw that affects rsync when it is used in daemon mode without also using chroot.
A local unprivileged user could make use of these flaws to access large portions of kernel memory.
This patch fixes numerous buffer overflow and pointer dereference vulnerabilities that a security audit turned up in libpng 1.2.x
Multiple libpng vulnerabilities are backpatched to the old 1.0.x libpng libraries.
This update kernel for Fedora Core 2 contains the security fixes as found byPaul Starzetz from isec.pl.
Exploiting this, an attacker could embed arbitrary code in a calicious WAV file which would execute when it is played.
This patch resolves two different php vulnerabilities, one of which allows arbitrary code execution on the local machine, the other XSS (Cross Site Scripting).
Vulnerability allows reading of part of a repository when a user can write to another.
Updated libxml2 packages that fix an overflow when parsing remote resources are now available.
This patch fixes a remotely triggerable memory leak and a buffer overflow vulnerability.
Patches resolve three different ways to crash ethereal.
The im-switch that is included in the Fedora Core iiimf-x package has been fixed to take appropriate precautions when generating temporary files.
This posting gives the correct md5 sums for the previous kernel update.
A writing, non-chrooted rsync daemon could write outside of a module's path.
Mailman subscriber passwords could be retrieved by a remote attacker.
During an audit of the Linux kernel, SUSE discovered a flaw in the Linux kernel that inappropriately allows an unprivileged user to change the group ID of a file to his/her own group ID.
When configured to use X.509 certificates to authenticate remote hosts, ipsec-tools versions 0.3.3 and earlier will not abort the key exchange if the verification fails.
This patch fixes a large number of bugs, including the famous evil.c kernel crash.