Guardian Digital is happy to announce the release of EnGarde Secure Community 3.0.22 (Version 3.0, Release 22). This release includes many updated packages and bug fixes and some feature enhancements to the EnGarde Secure Linux Installer and the SELinux policy.

http://www.linuxsecurity.com/content/view/145668

It was discovered that several buffer overflows can be triggered via a long folder extension argument to the tmail or dmail program. This could lead to arbitrary code execution (CVE-2008-5005).

http://www.linuxsecurity.com/content/view/145812

Inadequate enforcement of fixed-length buffer limits allows an attacker to overflow a buffer on the stack, potentially enabling the execution of arbitrary code when a maliciously-crafted image is opened.

http://www.linuxsecurity.com/content/view/145729

Multiple buffer overflows involving HTTP header and playlist parsing have been discovered in streamripper (CVE-2007-4337, CVE-2008-4829).

http://www.linuxsecurity.com/content/view/145608

Eugene Teo reported a local DoS issue in the ext2 and ext3 filesystems. Local users who have been granted the privileges necessary to mount a filesystem would be able to craft a corrupted filesystem that causes the kernel to output error messages in an infinite loop.

http://www.linuxsecurity.com/content/view/145234

Moritz Jodeit discovered that ClamAV, an anti-virus solution, suffers from an off-by-one-error in its VBA project file processing, leading to a heap-based buffer overflow and potentially arbitrary code execution (CVE-2008-5050).

http://www.linuxsecurity.com/content/view/145229

Security update to fix CVE-2008-5183. Also included is a fix for incorrect form-feed handling in the textonly filter.

http://www.linuxsecurity.com/content/view/145657

Security update to fix CVE-2008-5183. Also fixed in this update are a bug that caused cups-polld to fail to resolve hostnames, a bug that could cause libcups to get stuck in a loop, and incorrect form-feed handling in the textonly filter.

http://www.linuxsecurity.com/content/view/145642

Security update to fix CVE-2008-5183. Also changed in this update: * a bug that caused cups-polld to fail to resolve hostnames has been fixed * a bug that could cause libcups to get stuck in a loop has been fixed * the dnssd backend has been removed as it is not working correctly and can prevent printers being added

http://www.linuxsecurity.com/content/view/145623

OpenJDK security patches applied.

http://www.linuxsecurity.com/content/view/145496

Several remotely exploitable bugs have been found in CUPS, which allow remote execution of arbitrary code.

http://www.linuxsecurity.com/content/view/145737

A directory traversal vulnerability has been discovered in Archive::Tar.

http://www.linuxsecurity.com/content/view/145732

Smart cards formatted using OpenSC do not sufficiently protect the PIN, allowing attackers to reset it.

http://www.linuxsecurity.com/content/view/145731

=3D=3D=3D=3D=3D=3D=3D=3D Mgetty uses temporary files in an insecure manner, allowing for symlink attacks.

http://www.linuxsecurity.com/content/view/145246

On Mandriva Linux 2009.0, every time a web page was opened under Konqueror, or opened in a new tab, it showed the HTML code in an editor instead of the website. This update makes Konqueror display websites correctly instead of pure HTML code.

http://www.linuxsecurity.com/content/view/145736

Alfredo Ortega found a flaw in how Vinagre uses format strings. A remote attacker could exploit this vulnerability if they were able to trick a user into connecting to a malicious VNC server, or opening a specially crafted URI with Vinagre. With older versions of Vinagre, it was possible to execute arbitrary code with user privileges. In later versions, Vinagre would abort, leading to a denial of service. The updated packages have been patched to prevent this issue.

http://www.linuxsecurity.com/content/view/145734

Several vulnerabilities were found in the vim editor: A number of input sanitization flaws were found in various vim system functions. If a user were to open a specially crafted file, it would be possible to execute arbitrary code as the user running vim (CVE-2008-2712).

http://www.linuxsecurity.com/content/view/145611

Ilja van Sprundel found that ClamAV contained a denial of service vulnerability in how it handled processing JPEG files, due to it not limiting the recursion depth when processing JPEG thumbnails (CVE-2008-5314). Other bugs have also been corrected in 0.94.2 which is being provided with this update.

http://www.linuxsecurity.com/content/view/145245

An incorrect configuration was preventing PIN authentication for Bluetooth devices under GNOME and KDE4. This package updates fixes the issue.

http://www.linuxsecurity.com/content/view/145243

A buffer overflow was found by Russell O'Conner in the libsamplerate library versions prior to 0.1.4 that could possibly lead to the execution of arbitrary code via a specially crafted audio file (CVE-2008-5008).

http://www.linuxsecurity.com/content/view/145240

A vulnerability was discovered in the mod_proxy module in Apache where it did not limit the number of forwarded interim responses, allowing remote HTTP servers to cause a denial of service (memory consumption) via a large number of interim responses (CVE-2008-2364). This update also provides HTTP/1.1 compliance fixes. The updated packages have been patched to prevent this issue.

http://www.linuxsecurity.com/content/view/145237

Red Hat Application Stack v2.2 is now available. This update fixes several security issues and adds various enhancements.A flaw was found in the mod_proxy module. An attacker who has control of a web server to which requests are being proxied could cause a limited denial of service due to CPU consumption and stack exhaustion. (CVE-2008-2364)

http://www.linuxsecurity.com/content/view/145239

Updated java-1.5.0-sun packages that correct several security issues are now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team.

http://www.linuxsecurity.com/content/view/145233

Updated ruby packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team.

http://www.linuxsecurity.com/content/view/145231

Updated java-1.6.0-sun packages that correct several security issues are now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team.

http://www.linuxsecurity.com/content/view/145232

New php packages are available for Slackware 12.0, 12.1, and -current to fix security issues, as well as make improvements and fix bugs.

http://www.linuxsecurity.com/content/view/145241

It was discovered that nfs-utils did not properly enforce netgroup restrictions when using TCP Wrappers. Remote attackers could bypass the netgroup restrictions enabled by the administrator and possibly gain access to sensitive information.

http://www.linuxsecurity.com/content/view/145238