|
Find the information you need for your favorite open source distribution
 To browse through our weekly Linux Advisory Watch newsletters,
click here.
|
|
|
A flaw has been found in previous versions of firefox's JavaScript garbage
collector. This issue is known to cause a Denial-of-Service via
maliciously-crafted web pages, and is suspected of allowing arbitrary code
execution on the target machine by an attacker.
|
|
|
Foresight: python
|
12 February 2008
|
|
|
Previous versions of the python package contain an integer overflow in the
imageop module which could cause a denial-of-service (crash) or possibly
leak sensitive information. |
|
|
Multiple vulnerabilities have been fixed in firefox, the most serious of
which is thought to allow unauthorized remote execution of abitrary code at
the permission level of the user running firefox. |
|
|
Previous versions of the python package contain an integer overflow in the
imageop module which could cause a denial-of-service (crash) or possibly
leak sensitive information. |
|
|
Previous versions of nss_ldap contain a race condition that can allow
nss_ldap to return the wrong information, allowing for the possibility of
improper information disclosure. |
|
|
Foresight: rsync
|
12 February 2008
|
|
|
Previous versions of the rsync package contain vulnerabilities in the rsync
server, potentially allowing users to bypass security restrictions.
Foresight Linux does not, by default, configure the rsync server to run.
|
|
|
Previous versions of the e2fsprogs package are vulnerable to multiple
integer overflows which may be exploited via specially-crafted filesystems.
The workaround for is to not run fsck on a filesystem to which an untrusted
user has the ability to directly modify filesystem metadata. This is most
commonly an issue when using a virtualization solution in which the root
user for the guest OS is not trusted, and can convince the host's root user
to run fsck on the guests's filesystem. Foresight Linux neither enables nor
supports any form of virtualization in the default install.
|
|
|
<< Start < Prev 1 2 3 Next > End >>
|
| Results 1 - 7 of 79 |
