Stay Secure with the Latest Linux Advisories

security advisoryfedoracritical

CentOS 5: CENTOS-2007-2056 High: Mono Unsecure File Handling

The Mono runtime implements a JIT engine for the ECMA CLI virtual machine (as well as a byte code interpreter, the class loader, the garbage collector, threading system and metadata access libraries. This advisory covers CVEID: CVE-2006-5072 Mono insecure temporary file usage. ---------------------------------------------------------------------Fedora Update Notification FEDORA-2006-1012 2006-10-06 ---------------------------------------------------------------------Product : Fedora Core 5 Name : mono Version : 1.1.13.7 Release : 2.fc5.1 Summary : a .NET runtime environment Description : The Mono runtime implements a JIT engine for the ECMA CLI virtual machine (as well as a byte code interpreter, the class loader, the garbage collector, threading system and metadata access libraries. ---------------------------------------------------------------------Update Information: CVE-2006-5072 Mono insecure temporary file usage ---------------------------------------------------------------------* Fri Oct 6 2006 Caolan McNamara - 1.1.13.7-2.fc5.1 - CVE-2006-5072 ---------------------------------------------------------------------This update can be downloaded from: df9e1ba65f385c528ed37852c54a12c388ab0a24 SRPMS/mono-1.1.13.7-2.fc5.1.src.rpm df9e1ba65f385c528ed37852c54a12c388ab0a24 noarch/mono-1.1.13.7-2.fc5.1.src.rpm 217c15b29c20b2107445c70c37f9c233a9b973a2 ppc/mono-web-1.1.13.7-2.fc5.1.ppc.rpm 67ebd9aadeb18e2e2cf3af4d8f32227518b72839 ppc/mono-data-sybase-1.1.13.7-2.fc5.1.ppc.rpm d1146d35f6fd8e22116c69384f2f83f1082594ce ppc/bytefx-data-mysql-1.1.13.7-2.fc5.1.ppc.rpm 4d61d3063289c8dfb2c45546d3348af8e04d669c ppc/mono-core-1.1.13.7-2.fc5.1.ppc.rpm 55ab8d9a081fc3a3028ec80731ea77b407f077a2 ppc/mono-devel-1.1.13.7-2.fc5.1.ppc.rpm cd29b353c5224cc60f777f6f2b9e01045a204895 ppc/mono-nunit-1.1.13.7-2.fc5.1.ppc.rpm 7abbd2e981ea61f8eb2fbd38f6e64226b817aecf ppc/ibm-data-db2-1.1.13.7-2.fc5.1.ppc.rpm 531636a6f13e82f53e48d0f7788cc43799915a8d ppc/mono-data-sqlite-1.1.13.7-2.fc5.1.ppc.rpm 31d3c9132c0a7c525a515b5e0226fd31de289384 ppc/mono-data-oracle-1.1.13.7-2.fc5.1.ppc.rpm 5337989d530fe33b75bbf2781cf626958b162691 ppc/mono-data-postgresql-1.1.13.7-2.fc5.1.ppc.rpm fb43b1dbe9cac23193ee930f49f87c424252d4b4 ppc/mono-basic-1.1.13.7-2.fc5.1.ppc.rpm d98face7d3879023886c80f702ebc432a252ed93 ppc/mono-data-1.1.13.7-2.fc5.1.ppc.rpm d209c321f83309e632c4fc8f08371cd82b662345 ppc/mono-extras-1.1.13.7-2.fc5.1.ppc.rpm 66db2b0e57c728a3a7a87196c4e77c7fec1389b1 ppc/mono-data-firebird-1.1.13.7-2.fc5.1.ppc.rpm f205b8995f3276b1c6d6f85b838a1070b7f7a238 ppc/debug/mono-debuginfo-1.1.13.7-2.fc5.1.ppc.rpm 2cb1c608983b74e3b5f43223b0c10ac49bd64bdb ppc/mono-locale-extras-1.1.13.7-2.fc5.1.ppc.rpm 89bb1b0ee6cdc44f8c1206fcb1360eb8a22e6f9d ppc/mono-jscript-1.1.13.7-2.fc5.1.ppc.rpm b607930ee0b97fb0c13183c8340ca86c242adaa9 ppc/mono-winforms-1.1.13.7-2.fc5.1.ppc.rpm cdf5fef63d9f7a0df30a5d1caf36a014132b662d x86_64/mono-data-1.1.13.7-2.fc5.1.x86_64.rpm 7b873fafe8ad9c687c8f8df12a591c460546c2c3 x86_64/ibm-data-db2-1.1.13.7-2.fc5.1.x86_64.rpm 84b2e2315599c8de15a4be3a673b7bed5b212f5b x86_64/mono-jscript-1.1.13.7-2.fc5.1.x86_64.rpm 1de58ded5df78cabff9f903edb0c66f1ab352fd1 x86_64/mono-extras-1.1.13.7-2.fc5.1.x86_64.rpm 9765a98e607bca74af9416e166778659eda08c23 x86_64/mono-basic-1.1.13.7-2.fc5.1.x86_64.rpm 7801b70a095bab0b3c4d52617bca6044023bbdc1 x86_64/debug/mono-debuginfo-1.1.13.7-2.fc5.1.x86_64.rpm fe780c587a8744731381878f1dd610a122960ced x86_64/mono-locale-extras-1.1.13.7-2.fc5.1.x86_64.rpm 1061188ea4a173a85dc882b8b64582d347f4a0a0 x86_64/mono-data-sqlite-1.1.13.7-2.fc5.1.x86_64.rpm 8ac5718880de62bfd3db9cc13ed5a9346925a001 x86_64/mono-web-1.1.13.7-2.fc5.1.x86_64.rpm fd35d6b21836c60243b87dba26d5fda9c29eb4e0 x86_64/mono-data-oracle-1.1.13.7-2.fc5.1.x86_64.rpm 4705908ecbd3da560f2dfd7722f36f612c3cb819 x86_64/mono-core-1.1.13.7-2.fc5.1.x86_64.rpm d664286c337b63e7ceb28e7f216008aa304697e4 x86_64/bytefx-data-mysql-1.1.13.7-2.fc5.1.x86_64.rpm 23037381c18e97b86e49226e5c95d42dfd5d356b x86_64/mono-data-sybase-1.1.13.7-2.fc5.1.x86_64.rpm d7147249b166f84a4b69f4c00c49e7b8b50e8b26 x86_64/mono-nunit-1.1.13.7-2.fc5.1.x86_64.rpm ffb608702c3fbc65853988be685a5ec4f1c7f82e x86_64/mono-data-postgresql-1.1.13.7-2.fc5.1.x86_64.rpm a1d63be0726a65583c5e30dc3a93974ba9af7bf8 x86_64/mono-winforms-1.1.13.7-2.fc5.1.x86_64.rpm e14eb1f6dae6ca593529757e67ab58c2357369d4 x86_64/mono-devel-1.1.13.7-2.fc5.1.x86_64.rpm c07b3a65bd2004ad5771350dee4c417c4a28d9dd x86_64/mono-data-firebird-1.1.13.7-2.fc5.1.x86_64.rpm 060f3c115b2b2b057817481b416fc1f63984e6d7 i386/mono-devel-1.1.13.7-2.fc5.1.i386.rpm 2e4fd13573e4bec3f403f0eb37a076cd767779eb i386/ibm-data-db2-1.1.13.7-2.fc5.1.i386.rpm c935f203124963af6a2f163104e4451f9b26632f i386/mono-data-sybase-1.1.13.7-2.fc5.1.i386.rpm cb9a0e898fb92dd94451b35b56748f5e18dbd06f i386/debug/mono-debuginfo-1.1.13.7-2.fc5.1.i386.rpm 1a51e85624e5db4aab7c523a67baec370d0d17f1 i386/bytefx-data-mysql-1.1.13.7-2.fc5.1.i386.rpm f9e08e9c56a66b187a41ae277e1ce367faaf3c20 i386/mono-data-1.1.13.7-2.fc5.1.i386.rpm b820d3c379ee86a3776eaa364c7a57303c090bbd i386/mono-core-1.1.13.7-2.fc5.1.i386.rpm 0dc5064cf254e1d45ae2210eaf5ad4f93d64bcfc i386/mono-data-firebird-1.1.13.7-2.fc5.1.i386.rpm 9ebcc896ac8238b84f879bedfeae5cf0668afe53 i386/mono-winforms-1.1.13.7-2.fc5.1.i386.rpm ecc415926ccaf7d08b903dcd39d739047ad1cfb3 i386/mono-extras-1.1.13.7-2.fc5.1.i386.rpm 4c9fd536d3803e1d2cc3072dfcddcb7a7091952f i386/mono-jscript-1.1.13.7-2.fc5.1.i386.rpm 44541e50490e54d1c2b42f6d7e10ef256f6e922f i386/mono-data-sqlite-1.1.13.7-2.fc5.1.i386.rpm 9d571658dc8b9089350e2ccb0d450bf611975f08 i386/mono-nunit-1.1.13.7-2.fc5.1.i386.rpm 636e0ed556b0eb4ccd1076d0b2e492186bea0a63 i386/mono-data-postgresql-1.1.13.7-2.fc5.1.i386.rpm e4aee1707cd131f743af8a84773167c500e8994a i386/mono-locale-extras-1.1.13.7-2.fc5.1.i386.rpm bff2af1d1c35caff0096b08ea352bde726de3bca i386/mono-data-oracle-1.1.13.7-2.fc5.1.i386.rpm cdf662e39644e9c2ffb7f93d33abe5888638d826 i386/mono-basic-1.1.13.7-2.fc5.1.i386.rpm a0e3fe6db21a639be848b2a899382549473a2d95 i386/mono-web-1.1.13.7-2.fc5.1.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at . ---------------------------------------------------------------------_______________________________________________ Fedora-package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . The Mono update for Fedora Core 5 resolves vulnerabilities related to temporary file handling, as detailed in advisory FEDORA-2006-1012.. Fedora Core, Mono Update, Software Security, Runtime Environment. . LinuxSecurity.com Team

Oct 06, 2006 Fedora