Guardian Digital is happy to announce the release of EnGarde Secure Community 3.0.19 (Version 3.0, Release 19). This release includes many updated packages and bug fixes and some feature enhancements to the EnGarde Secure Linux Installer and the SELinux policy.

http://www.linuxsecurity.com/content/view/136174

Chaskiel M Grundman discovered that opensc, a library and utilities to handle smart cards, would initialise smart cards with the Siemens CardOS M4 card operating system without proper access rights. This allowed everyone to change the card's PIN.

http://www.linuxsecurity.com/content/view/140868

Joan Calvet discovered that httrack, a utility to create local copies of websites, is vulnerable to a buffer overflow potentially allowing to execute arbitrary code when passed excessively long URLs.

http://www.linuxsecurity.com/content/view/140860

Buffer overflows in the HP-GL input filter allowed to possibly run arbitrary code through crafted HP-GL files.

http://www.linuxsecurity.com/content/view/140859

Chris Evans discovered that a buffer overflow in the RC4 functions of libexslt may lead to the execution of arbitrary code.

http://www.linuxsecurity.com/content/view/140812

This update changes Debian's dnsmasq packages to implement the recommended countermeasure: UDP query source port randomization. This change increases the size of the space from which an attacker has to guess values in a backwards-compatible fashion and makes successful attacks significantly more difficult.

http://www.linuxsecurity.com/content/view/140809

It was discovered that newsx, an NNTP news exchange utility, was affected by a buffer overflow allowing remote attackers to execute arbitrary code via a news article containing a large number of lines starting with a period.

http://www.linuxsecurity.com/content/view/140801

libxslt is affected by a heap-based buffer overflow, possibly leading to the execution of arbitrary code.

http://www.linuxsecurity.com/content/view/140884

A Denial of Service vulnerability was discovered in ISC DHCP.

http://www.linuxsecurity.com/content/view/140883

Multiple Denial of Service vulnerabilities have been discovered in Wireshark.

http://www.linuxsecurity.com/content/view/140880

Multiple vulnerabilities have been reported in Mozilla Firefox, Thunderbird, SeaMonkey and XULRunner, some of which may allow user-assisted execution of arbitrary code.

http://www.linuxsecurity.com/content/view/140879

Multiple vulnerabilities in Net-SNMP allow for authentication bypass in snmpd and execution of arbitrary code in Perl applications using Net-SMNP.

http://www.linuxsecurity.com/content/view/140878

xine-lib is vulnerable to multiple buffer overflows when processing media streams.

http://www.linuxsecurity.com/content/view/140877

Multiple vulnerabilities in Python may allow for the execution of arbitrary code.

http://www.linuxsecurity.com/content/view/140814

A buffer overflow vulnerability in Pan may allow remote attacker to execute arbitrary code.

http://www.linuxsecurity.com/content/view/140811

Multiple vulnerabilities in VLC may allow for the execution of arbitrary code.

http://www.linuxsecurity.com/content/view/140810

Chris Evans of the Google Security Team found a vulnerability in the RC4 processing code in libxslt that did not properly handle corrupted key information. A remote attacker able to make an application linked against libxslt process malicious XML input could cause the application to crash or possibly execute arbitrary code with the privileges of the application in question (CVE-2008-2935). The updated packages have been patched to correct this issue.

http://www.linuxsecurity.com/content/view/140867

Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 5. A possible kernel memory leak was found in the Linux kernel Simple Internet Transition (SIT) INET6 implementation. This could allow a local unprivileged user to cause a denial of service. (CVE-2008-2136, Important)

http://www.linuxsecurity.com/content/view/140872

RealPlayer 10.0.9 is vulnerable to a critical security flaw and should no longer be used. A remote attacker could leverage this flaw to execute arbitrary code as the user running RealPlayer. (CVE-2007-5400) This issue is addressed in RealPlayer 11. Red Hat is unable to ship RealPlayer 11 due to additional proprietary codecs included in that version. Therefore, users who wish to continue to use RealPlayer should get an update directly from www.real.com.

http://www.linuxsecurity.com/content/view/140808

Updated java-1.5.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team.

http://www.linuxsecurity.com/content/view/140807

Updated libxslt packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team.

http://www.linuxsecurity.com/content/view/140806

An updated nfs-utils package that fixes a security issue is now available for Red Hat Enterprise Linux 5. A flaw was found in the nfs-utils package build. The nfs-utils package was missing TCP wrappers support, which could result in an administrator believing they had access restrictions enabled when they did not. This update has been rated as having moderate security impact by the RedHat Security Response Team.

http://www.linuxsecurity.com/content/view/140805

New pan packages are available for Slackware 12.0, 12.1, and -current to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures (CVE) database: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2363

http://www.linuxsecurity.com/content/view/140874

New python packages are available for Slackware 10.1, 10.2, 11.0, 12.0, 12.1, and -current to fix security issues. More details about the issues may be found in the Common Vulnerabilities and Exposures (CVE) database:

http://www.linuxsecurity.com/content/view/140875

The net-snmp daemon implements the "simple network management protocol". The version 3 of SNMP as implemented in net-snmp uses the length of the HMAC in a packet to verify against a local HMAC for authentication. An attacker can therefore send a SNMPv3 packet with a one byte HMAC and guess the correct first byte of the local HMAC with 256 packets (max).

http://www.linuxsecurity.com/content/view/140862

A flaw was discovered in the browser engine. A variable could be made to overflow causing the browser to crash. If a user were tricked into opening a malicious web page, an attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program. (CVE-2008-2785)

http://www.linuxsecurity.com/content/view/140871

It was discovered that long transformation matches in libxslt could overflow. If an attacker were able to make an application linked against libxslt process malicious XSL style sheet input, they could execute arbitrary code with user privileges or cause the application to crash, leading to a denial of serivce. (CVE-2008-1767)

http://www.linuxsecurity.com/content/view/140864

Cameron Hotchkies discovered that OpenLDAP did not correctly handle certain ASN.1 BER data. A remote attacker could send a specially crafted packet and crash slapd, leading to a denial of service.

http://www.linuxsecurity.com/content/view/140865

It was discovered that there were new integer overflows in the imageop module. If an attacker were able to trick a Python application into processing a specially crafted image, they could execute arbitrary code with user privileges. (CVE-2008-1679)

http://www.linuxsecurity.com/content/view/140863