Scientific Linux: Moderate CVE-2009-0583 NetworkManager Info Leak Issue

Date: Wed, 25 Mar 2009 15:48:48 -0500
Reply-To: Troy Dawson 
Sender: Security Errata for Scientific Linux
 
From: Troy Dawson 
Subject: Re: Security ERRATA Moderate: ghostscript on SL3.x, SL4.x,
 SL5.x i386/x86_64
Comments: To: "This email address is being protected from spambots. You need JavaScript enabled to view it."
 
In-Reply-To: <49C404AD.6050005@fnal.gov>

There was an error with some compile-time dependencies with the
ghostscript packages for SL 309, causing ghostscript to not run.
These dependancies have been fixed, and the packages recompiled correctly.
Nothing has been changed in the rpm other than the release number was
changed so that the new packages would install correctly.

SL 3.0.x

 SRPMS:
ghostscript-7.05-32.1.17.sl3.1.src.rpm
 i386:
ghostscript-7.05-32.1.17.sl3.1.i386.rpm
ghostscript-devel-7.05-32.1.17.sl3.1.i386.rpm
hpijs-1.3-32.1.17.sl3.1.i386.rpm
 x86_64:
ghostscript-7.05-32.1.17.sl3.1.i386.rpm
ghostscript-7.05-32.1.17.sl3.1.x86_64.rpm
ghostscript-devel-7.05-32.1.17.sl3.1.x86_64.rpm
hpijs-1.3-32.1.17.sl3.1.x86_64.rpm

My apologies
Troy Dawson

Troy J Dawson wrote:
> Synopsis:	Moderate: ghostscript security update
> Issue date:	2009-03-19
> CVE Names:	CVE-2009-0583 CVE-2009-0584
>
> Multiple integer overflow flaws which could lead to heap-based buffer
> overflows, as well as multiple insufficient input validation flaws, were
> found in Ghostscript's International Color Consortium Format library
> (icclib). Using specially-crafted ICC profiles, an attacker could create
> a malicious PostScript or PDF file with embedded images which could
> cause Ghostscript to crash, or, potentially, execute arbitrary code when
> opened by the victim. (CVE-2009-0583, CVE-2009-0584)
>
> SL 3.0.x
>
> SRPMS:
> ghostscript-7.05-32.1.17.src.rpm
> i386:
> ghostscript-7.05-32.1.17.i386.rpm
> ghostscript-devel-7.05-32.1.17.i386.rpm
> hpijs-1.3-32.1.17.i386.rpm
> x86_64:
> ghostscript-7.05-32.1.17.i386.rpm
> ghostscript-7.05-32.1.17.x86_64.rpm
> ghostscript-devel-7.05-32.1.17.x86_64.rpm
> hpijs-1.3-32.1.17.x86_64.rpm
>
> SL 4.x
>
> SRPMS:
> ghostscript-7.07-33.2.el4_7.5.src.rpm
> i386:
> ghostscript-7.07-33.2.el4_7.5.i386.rpm
> ghostscript-devel-7.07-33.2.el4_7.5.i386.rpm
> ghostscript-gtk-7.07-33.2.el4_7.5.i386.rpm
> x86_64:
> ghostscript-7.07-33.2.el4_7.5.i386.rpm
> ghostscript-7.07-33.2.el4_7.5.x86_64.rpm
> ghostscript-devel-7.07-33.2.el4_7.5.x86_64.rpm
> ghostscript-gtk-7.07-33.2.el4_7.5.x86_64.rpm
>
> SL 5.x
>
> SRPMS:
> ghostscript-8.15.2-9.4.el5_3.4.src.rpm
> i386:
> ghostscript-8.15.2-9.4.el5_3.4.i386.rpm
> ghostscript-devel-8.15.2-9.4.el5_3.4.i386.rpm
> ghostscript-gtk-8.15.2-9.4.el5_3.4.i386.rpm
> x86_64:
> ghostscript-8.15.2-9.4.el5_3.4.i386.rpm
> ghostscript-8.15.2-9.4.el5_3.4.x86_64.rpm
> ghostscript-devel-8.15.2-9.4.el5_3.4.i386.rpm
> ghostscript-devel-8.15.2-9.4.el5_3.4.x86_64.rpm
> ghostscript-gtk-8.15.2-9.4.el5_3.4.x86_64.rpm
>
> -Connie Sieh
> -Troy Dawson
>
>
>
>

--
__________________________________________________
Troy Dawson This email address is being protected from spambots. You need JavaScript enabled to view it. (630)840-6468
Fermilab ComputingDivision/LCSI/CSI LMSS Group
__________________________________________________
Date: Wed, 25 Mar 2009 15:50:37 -0500
Reply-To: Troy Dawson 
Sender: Security Errata for Scientific Linux
 
From: Troy Dawson 
Subject: FASTBUGS for SL 5.x i386/x86_64
Comments: To: "This email address is being protected from spambots. You need JavaScript enabled to view it."
 

The following FASTBUGS have been uploaded to

 i386:
db4-4.3.29-10.el5.i386.rpm
db4-devel-4.3.29-10.el5.i386.rpm
db4-java-4.3.29-10.el5.i386.rpm
db4-tcl-4.3.29-10.el5.i386.rpm
db4-utils-4.3.29-10.el5.i386.rpm
luci-0.12.1-7.3.el5_3.i386.rpm
numactl-0.9.8-8.el5.i386.rpm
numactl-devel-0.9.8-8.el5.i386.rpm
ricci-0.12.1-7.3.el5_3.i386.rpm
 x86_64:
db4-4.3.29-10.el5.i386.rpm
db4-4.3.29-10.el5.x86_64.rpm
db4-devel-4.3.29-10.el5.i386.rpm
db4-devel-4.3.29-10.el5.x86_64.rpm
db4-java-4.3.29-10.el5.x86_64.rpm
db4-tcl-4.3.29-10.el5.x86_64.rpm
db4-utils-4.3.29-10.el5.x86_64.rpm
luci-0.12.1-7.3.el5_3.x86_64.rpm
numactl-0.9.8-8.el5.i386.rpm
numactl-0.9.8-8.el5.x86_64.rpm
numactl-devel-0.9.8-8.el5.i386.rpm
numactl-devel-0.9.8-8.el5.x86_64.rpm
ricci-0.12.1-7.3.el5_3.x86_64.rpm

-Connie Sieh
-Troy Dawson
Date: Wed, 25 Mar 2009 16:34:27 -0500
Reply-To: Troy Dawson 
Sender: Security Errata for Scientific Linux
 
From: Troy Dawson 
Subject: Security ERRATA Moderate: NetworkManager on SL4.x,
 SL5.x i386/x86_64
Comments: To: "This email address is being protected from spambots. You need JavaScript enabled to view it."
 

Synopsis:	Moderate: NetworkManager security update
Issue date:	2009-03-25
CVE Names:	CVE-2009-0365 CVE-2009-0578

An information disclosure flaw was found in NetworkManager's D-Bus
interface. A local attacker could leverage this flaw to discover
sensitive information, such as network connection passwords and
pre-shared keys. (CVE-2009-0365)

A potential denial of service flaw was found in NetworkManager's D-Bus
interface. A local user could leverage this flaw to modify local
connection settings, preventing the system's network connection from
functioning properly. (CVE-2009-0578)

SL 4.x

 SRPMS:
NetworkManager-0.3.1-5.el4.src.rpm
 i386:
NetworkManager-0.3.1-5.el4.i386.rpm
NetworkManager-gnome-0.3.1-5.el4.i386.rpm
 x86_64:
NetworkManager-0.3.1-5.el4.x86_64.rpm
NetworkManager-gnome-0.3.1-5.el4.x86_64.rpm

SL 5.x

 SRPMS:
NetworkManager-0.7.0-4.el5_3.src.rpm
 i386:
NetworkManager-0.7.0-4.el5_3.i386.rpm
NetworkManager-devel-0.7.0-4.el5_3.i386.rpm
NetworkManager-glib-0.7.0-4.el5_3.i386.rpm
NetworkManager-glib-devel-0.7.0-4.el5_3.i386.rpm
NetworkManager-gnome-0.7.0-4.el5_3.i386.rpm
 x86_64:
NetworkManager-0.7.0-4.el5_3.i386.rpm
NetworkManager-0.7.0-4.el5_3.x86_64.rpm
NetworkManager-devel-0.7.0-4.el5_3.i386.rpm
NetworkManager-devel-0.7.0-4.el5_3.x86_64.rpm
NetworkManager-glib-0.7.0-4.el5_3.i386.rpm
NetworkManager-glib-0.7.0-4.el5_3.x86_64.rpm
NetworkManager-glib-devel-0.7.0-4.el5_3.i386.rpm
NetworkManager-glib-devel-0.7.0-4.el5_3.x86_64.rpm
NetworkManager-gnome-0.7.0-4.el5_3.x86_64.rpm

-Connie Sieh
-Troy Dawson