Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -7 articles for you...
200
security advisorymoderateupdateExploring Research System Operating Systems: May 15, 2022 Highlights
Moderate: ed security update. Date: Tue, 14 Oct 2008 16:16:19 -0500 Reply-To: Troy Dawson Sender: Security Errata for Scientific Linux From: Troy Dawson Subject: Re: Security ERRATA for thunderbird on SL4.x, SL5.x i386/x86_64 Comments: To: "scientific-linux-errata@fnal.gov" In-Reply-To: We had a compiling problem on the SL4 x86_64 rpms. The compiling problem has been fixed and is working now. Both the x86_64 and i386 rpm's have been rebuilt with the new name to keep consistency. No code has been changed. The rpm's were only recompiled. SL 4.x SRPMS: thunderbird-1.5.0.12-16.el4.sl.src.rpm i386: thunderbird-1.5.0.12-16.el4.sl.i386.rpm x86_64: thunderbird-1.5.0.12-16.el4.sl.x86_64.rpm Troy Dawson Troy J Dawson wrote: > Synopsis: Moderate: thunderbird security update > Issue date: 2008-10-01 > CVE Names: CVE-2008-0016 CVE-2008-3835 CVE-2008-4058 > CVE-2008-4059 CVE-2008-4060 CVE-2008-4061 > CVE-2008-4062 CVE-2008-4065 CVE-2008-4066 > CVE-2008-4067 CVE-2008-4068 CVE-2008-4070 > > > Several flaws were found in the processing of malformed HTML mail content. > An HTML mail message containing malicious content could cause Thunderbird > to crash or, potentially, execute arbitrary code as the user running > Thunderbird. (CVE-2008-0016, CVE-2008-4058, CVE-2008-4059, CVE-2008-4060, > CVE-2008-4061, CVE-2008-4062) > > Several flaws were found in the way malformed HTML mail content was > displayed. An HTML mail message containing specially crafted content could > potentially trick a Thunderbird user into surrendering sensitive > information. (CVE-2008-3835, CVE-2008-4067, CVE-2008-4068) > > A flaw was found in Thunderbird that caused certain characters to be > stripped from JavaScript code. This flaw could allow malicious JavaScript > to bypass or evade script filters. (CVE-2008-4065, CVE-2008-4066) > > Note: JavaScript support is disabled by default in Thunderbird; the above > issue is not exploitable unless JavaScript is enabled. > > A heap based buffer overflow flaw was foundin the handling of cancelled > newsgroup messages. If the user cancels a specially crafted newsgroup > message it could cause Thunderbird to crash or, potentially, execute > arbitrary code as the user running Thunderbird. (CVE-2008-4070) > > Note2: On SL4 this updates fixes the bug that when a URL link is clicked, > firefox wouldn't start. Firefox now starts when a URL link is clicked. > > SL 4.x > > SRPMS: > thunderbird-1.5.0.12-16.el4.src.rpm > i386: > thunderbird-1.5.0.12-16.el4.i386.rpm > x86_64: > thunderbird-1.5.0.12-16.el4.x86_64.rpm > > SL 5.x > > SRPMS: > thunderbird-2.0.0.17-1.el5.src.rpm > i386: > thunderbird-2.0.0.17-1.el5.i386.rpm > x86_64: > thunderbird-2.0.0.17-1.el5.x86_64.rpm > > -Connie Sieh > -Troy Dawson > > > -- __________________________________________________ Troy Dawson dawson@fnal.gov (630)840-6468 Fermilab ComputingDivision/LCSI/CSI DSS Group __________________________________________________ Date: Tue, 14 Oct 2008 16:16:21 -0500 Reply-To: Troy Dawson Sender: Security Errata for Scientific Linux From: Troy Dawson Subject: Re: Security ERRATA for cups on SL3.x, SL4.x, SL5.x i386/x86_64 Comments: To: "scientific-linux-errata@fnal.gov" In-Reply-To: We had a compiling problem on the SL4 x86_64 rpms. The compiling problem has been fixed and is working now. Both the x86_64 and i386 rpm's have been rebuilt with the new name to keep consistency. No code has been changed. The rpm's were only recompiled. SL 4.x SRPMS: cups-1.1.22-0.rc1.9.27.el4_7.1.sl.src.rpm i386: cups-1.1.22-0.rc1.9.27.el4_7.1.sl.i386.rpm cups-devel-1.1.22-0.rc1.9.27.el4_7.1.sl.i386.rpm cups-libs-1.1.22-0.rc1.9.27.el4_7.1.sl.i386.rpm x86_64: cups-1.1.22-0.rc1.9.27.el4_7.1.sl.x86_64.rpm cups-devel-1.1.22-0.rc1.9.27.el4_7.1.sl.x86_64.rpm cups-libs-1.1.22-0.rc1.9.27.el4_7.1.sl.i386.rpm cups-libs-1.1.22-0.rc1.9.27.el4_7.1.sl.x86_64.rpm Troy Dawson Troy J Dawson wrote: > Synopsis: Important: cups security update > Issue date: 2008-10-10 > CVE Names: CVE-2008-3639 CVE-2008-3640CVE-2008-3641 > > A buffer overflow flaw was discovered in the SGI image format decoding > routines used by the CUPS image converting filter "imagetops". An attacker > could create a malicious SGI image file that could, possibly, execute > arbitrary code as the "lp" user if the file was printed. (CVE-2008-3639) > > An integer overflow flaw leading to a heap buffer overflow was discovered > in the Text-to-PostScript "texttops" filter. An attacker could create a > malicious text file that could, possibly, execute arbitrary code as the > "lp" user if the file was printed. (CVE-2008-3640) > > An insufficient buffer bounds checking flaw was discovered in the > HP-GL/2-to-PostScript "hpgltops" filter. An attacker could create a > malicious HP-GL/2 file that could, possibly, execute arbitrary code as the > "lp" user if the file was printed. (CVE-2008-3641) > > SL 3.0.x > > SRPMS: > cups-1.1.17-13.3.54.src.rpm > i386: > cups-1.1.17-13.3.54.i386.rpm > cups-devel-1.1.17-13.3.54.i386.rpm > cups-libs-1.1.17-13.3.54.i386.rpm > x86_64: > cups-1.1.17-13.3.54.x86_64.rpm > cups-devel-1.1.17-13.3.54.x86_64.rpm > cups-libs-1.1.17-13.3.54.i386.rpm > cups-libs-1.1.17-13.3.54.x86_64.rpm > > SL 4.x > > SRPMS: > cups-1.1.22-0.rc1.9.27.el4_7.1.src.rpm > i386: > cups-1.1.22-0.rc1.9.27.el4_7.1.i386.rpm > cups-devel-1.1.22-0.rc1.9.27.el4_7.1.i386.rpm > cups-libs-1.1.22-0.rc1.9.27.el4_7.1.i386.rpm > x86_64: > cups-1.1.22-0.rc1.9.27.el4_7.1.x86_64.rpm > cups-devel-1.1.22-0.rc1.9.27.el4_7.1.x86_64.rpm > cups-libs-1.1.22-0.rc1.9.27.el4_7.1.i386.rpm > cups-libs-1.1.22-0.rc1.9.27.el4_7.1.x86_64.rpm > > SL 5.x > > SRPMS: > cups-1.2.4-11.18.el5_2.2.src.rpm > i386: > cups-1.2.4-11.18.el5_2.2.i386.rpm > cups-devel-1.2.4-11.18.el5_2.2.i386.rpm > cups-libs-1.2.4-11.18.el5_2.2.i386.rpm > cups-lpd-1.2.4-11.18.el5_2.2.i386.rpm > x86_64: > cups-1.2.4-11.18.el5_2.2.x86_64.rpm > cups-devel-1.2.4-11.18.el5_2.2.i386.rpm > cups-devel-1.2.4-11.18.el5_2.2.x86_64.rpm > cups-libs-1.2.4-11.18.el5_2.2.i386.rpm > cups-libs-1.2.4-11.18.el5_2.2.x86_64.rpm > cups-lpd-1.2.4-11.18.el5_2.2.x86_64.rpm > > -Connie Sieh > -Troy Dawson > > > -- __________________________________________________ Troy Dawson
Oct 22, 2008
Scientific Linux
87
security advisorymoderateupdateDebian 2.2: 001-1 Moderate Advisory: Ed Symlink Attack Resolved
Alan Cox discovered that GNU ed (a classed line editor tool)created temporary files unsafely.. - ------------------------------------------------------------------------ Debian Security Advisory 001-1
Nov 28, 2000
Debian
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!