security [ARCHIVED] November 2006

security@lists.fedoraproject.org

4 participants
24 discussions

[Bug 212355] New: CVE-2006-5453, CVE-2006-5454, CVE-2006-5455 bugzilla vulnerabilities

by Red Hat Bugzilla

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report. https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=212355 Summary: CVE-2006-5453, CVE-2006-5454, CVE-2006-5455 bugzilla vulnerabilities Product: Fedora Extras Version: fc6 Platform: All OS/Version: Linux Status: NEW Severity: normal Priority: normal Component: bugzilla AssignedTo: jwb(a)redhat.com ReportedBy: ville.skytta(a)iki.fi QAContact: extras-qa(a)fedoraproject.org CC: extras-qa(a)fedoraproject.org,fedora-security- list(a)redhat.com According to CVE descriptions, Bugzilla in FE-4 and later is vulnerable to: CVE-2006-5453 (unauthorized write access) CVE-2006-5454 (unauthorized information access) CVE-2006-5455 (unauthorized write access) -- Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

17 years, 5 months

1
7
0 / 0

Re: Disturbing lack of FE security updates announcements!

by Thorsten Leemhuis

https://www.redhat.com/archives/fedora-extras-list/2006-November/msg00148... Hans de Goede schrieb: > This morning I've been working on fixing several security flaws in imlib2. > When I was done with fixing and building these, I started writing a > security update notification mail to send to fedora-package-announce(a)redhat.com > In the usual format for updates send to this list. > [...] > FESco, can you please mandate sending a mail to fedora-package-announce(a)redhat.com for > security related updates? I agree with the idea. Hans, can you or maybe someone else (from the Security SIG, sorry, Response Team?) work out a proposal an integrate it into http://www.fedoraproject.org/wiki/Extras/Schedule/SecurityAnnoucements (that will be later moved to http://www.fedoraproject.org/wiki/Extras/Policy ) In an ideal world it would look a bit like http://www.fedoraproject.org/wiki/Extras/Policy/WhoIsAllowedToModifyWhich... e.g. a *short* section in the beginning that allows new contributors to get an idea of our processes and rules without wasting to much time reading details. Then a more detailed section witch describes the thing (Why? How?) in detail. thx CU thl

17 years, 5 months

1
0
0 / 0

[Bug 214676] New: CVE-2006-480[6-9] imlib2 multiple vulnerabilities

by Red Hat Bugzilla

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report. https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=214676 Summary: CVE-2006-480[6-9] imlib2 multiple vulnerabilities Product: Fedora Extras Version: fc6 Platform: All OS/Version: Linux Status: NEW Severity: normal Priority: normal Component: imlib2 AssignedTo: j.w.r.degoede(a)hhs.nl ReportedBy: ville.skytta(a)iki.fi QAContact: extras-qa(a)fedoraproject.org CC: extras-qa(a)fedoraproject.org,fedora-security- list(a)redhat.com Multiple vulnerabilities in imlib2: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-4806 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-4807 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-4808 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-4809 Some of the reports mention "before 1.2.1", but at least some of the issues seem to be present in 1.2.2 and 1.3.0 too. FreeBSD's patches (apparently originally from Ubuntu) for these issues are available at http://www.freebsd.org/cgi/cvsweb.cgi/ports/graphics/imlib2/files/ -- Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

17 years, 5 months

1
1
0 / 0

[Bug 201688] Clam AntiVirus Win32-UPX Heap Overflow

by Red Hat Bugzilla

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report. Summary: Clam AntiVirus Win32-UPX Heap Overflow https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=201688 dnehring(a)gmx.net changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution| |CURRENTRELEASE Fixed In Version| |0.88.5-1 -- Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

17 years, 5 months

1
0
0 / 0

← Newer
1
2
3
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

security [ARCHIVED] November 2006