Guardian Digital is happy to announce the release of EnGarde Secure Community 3.0.22 (Version 3.0, Release 22). This release includes many updated packages and bug fixes and some feature enhancements to the EnGarde Secure Linux Installer and the SELinux policy.

http://www.linuxsecurity.com/content/view/145668

http://www.linuxsecurity.com/content/view/149380

http://www.linuxsecurity.com/content/view/149379

http://www.linuxsecurity.com/content/view/149372

http://www.linuxsecurity.com/content/view/149366

http://www.linuxsecurity.com/content/view/149363

http://www.linuxsecurity.com/content/view/149362

http://www.linuxsecurity.com/content/view/149346

http://www.linuxsecurity.com/content/view/149339

This security update fixes an off-by-one overflow in Compress::Raw::Zlib (CVE-2009-1391) Moreover, it contains a subtle change to the configuration that does not affect the Perl interpreter itself, but fixes the propagation of the chosen options to the modules. For example, a rebuild of perl-Wx against perl-5.10.0-73 will fix bug 508496.

http://www.linuxsecurity.com/content/view/149385

An update to the latest stable upstream release fixing many bugs, as well as addressing several security issues. Release announcement, http://lists.freedesktop.org/archives/poppler/2009-May/004721.html

http://www.linuxsecurity.com/content/view/149384

Update to upstream version 1.1.17, fixing multiple security flaws: http://www.mozilla.org/security/known- vulnerabilities/seamonkey11.html#seamonkey1.1.17

http://www.linuxsecurity.com/content/view/149383

Update to upstream version 1.1.17, fixing multiple security flaws: http://www.mozilla.org/security/known- vulnerabilities/seamonkey11.html#seamonkey1.1.17

http://www.linuxsecurity.com/content/view/149382

- Security fix for Firefox plugin bug #479171

http://www.linuxsecurity.com/content/view/149343

Fixes Openswan PSK issue with NSS. Fixes CVE-2009-2185

http://www.linuxsecurity.com/content/view/149342

WebKitGTK+ 1.1.8 contains many bug-fixes and updates including spell-checking support, enhanced error reporting, lots of ATK enhancements, support for copying images to the clipboard, and a new printing API (since 1.1.5) that allows applications better control and monitoring of the printing process. Also, a potential buffer overflow in SVGList::insertItemBefore has been fixed (CVE-2009-0945); and the JIT compiler is now enabled by default for x86_64 systems. Please see the upstream changelog for the full list of fixes and enhancements: http://svn.webkit.org/repository/webkit/trunk/WebKit/gtk/NEWS

http://www.linuxsecurity.com/content/view/149341

http://www.linuxsecurity.com/content/view/149340

A vulnerability in PulseAudio may allow a local user to execute code with escalated privileges.

http://www.linuxsecurity.com/content/view/149386

=3D=3D=3D=3D=3D=3D=3D=3D A buffer overflow in dhclient as included in the ISC DHCP implementation allows for the remote execution of arbitrary code with root privileges.

http://www.linuxsecurity.com/content/view/149371

Multiple vulnerabilities in multiple GStreamer plug-ins might allow for the execution of arbitrary code.

http://www.linuxsecurity.com/content/view/149355

A buffer overflow in Cyrus-SASL might allow for the execution of arbitrary code in applications or daemons that authenticate using SASL.

http://www.linuxsecurity.com/content/view/149353

Syslog-ng does not properly initialize its chroot jail allowing for an escape if a separate vulnerability in Syslog-ng is exploited.

http://www.linuxsecurity.com/content/view/149354

An integer overflow in multiple Ralink wireless drivers might lead to the execution of arbitrary code with elevated privileges.

http://www.linuxsecurity.com/content/view/149352

ModPlug contains several buffer overflows that could lead to the execution of arbitrary code.

http://www.linuxsecurity.com/content/view/149351

Adobe Reader is vulnerable to remote code execution via crafted PDF files.

http://www.linuxsecurity.com/content/view/149350

An error in git-daemon might lead to a Denial of Service via resource consumption.

http://www.linuxsecurity.com/content/view/149349

=3D=3D=3D=3D=3D=3D=3D=3D Multiple vulnerabilities in the Apache HTTP daemon allow for local privilege escalation, information disclosure or Denial of Service attacks.

http://www.linuxsecurity.com/content/view/149347

A vulnerability has been found and corrected in ISC DHCP: Stack-based buffer overflow in the script_write_params method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.0p1, 4.0 before 4.0.1p1, 3.1 before 3.1.2p1, 3.0, and 2.0 allows remote DHCP servers to execute arbitrary code via a crafted subnet-mask option (CVE-2009-0692). This update provides fixes for this vulnerability.

http://www.linuxsecurity.com/content/view/149381

Evolution had several bugs like a hanging user interface when dealing with virtual folders that have been fixed in this update.

http://www.linuxsecurity.com/content/view/149370

Update driver to a newer version provided by the video card manufacturer. This new version fixes a system freeze issue.

http://www.linuxsecurity.com/content/view/149365

Multiple vulnerabilities has been found and corrected in libtiff: Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial of service (crash) via a crafted TIFF image, a different vulnerability than CVE-2008-2327 (CVE-2009-2285). Fix several places in tiff2rgba and rgb2ycbcr that were being careless about possible integer overflow in calculation of buffer sizes (CVE-2009-2347). This update provides fixes for these vulnerabilities.

http://www.linuxsecurity.com/content/view/149364

Latest kaddressbook update package for 2009.1 fails to install due to unresolved gnokii library dependencies. Additionally it was discovered gnokii wasn't rebuilt after the -Werror=format-security change and a patch for this had to be added.

http://www.linuxsecurity.com/content/view/149348

Multiple vulnerabilities has been found and corrected in apache: The stream_reqbody_cl function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server before 2.3.3, when a reverse proxy is configured, does not properly handle an amount of streamed data that exceeds the Content-Length value, which allows remote attackers to cause a denial of service (CPU consumption) via crafted requests (CVE-2009-1890). Fix a potential Denial-of-Service attack against mod_deflate or other modules, by forcing the server to consume CPU time in compressing a large file after a client disconnects (CVE-2009-1891). This update provides fixes for these vulnerabilities.

http://www.linuxsecurity.com/content/view/149336

Updated httpd packages that fix multiple security issues are now available for Red Hat Application Stack v2. This update has been rated as having important security impact by the Red Hat Security Response Team.

http://www.linuxsecurity.com/content/view/149375

Updated kernel-rt packages that fix several security issues and various bugs are now available for Red Hat Enterprise MRG 1.1. This update has been rated as having important security impact by the Red Hat Security Response Team.

http://www.linuxsecurity.com/content/view/149376

Updated dhcp packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 4.7 Extended Update Support. This update has been rated as having critical security impact by the Red Hat Security Response Team.

http://www.linuxsecurity.com/content/view/149373

Updated dhcp packages that fix two security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having critical security impact by the Red Hat Security Response Team.

http://www.linuxsecurity.com/content/view/149374

Updated httpd packages that fix two security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team.

http://www.linuxsecurity.com/content/view/149337

New dhcp packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, and -current to fix a security issue with dhclient. Note that dhclient is not the default DHCP client in Slackware's networking scripts, dhcpcd is. However, if you use dhclient on a network where someone could deploy a hostile DHCP server, you should upgrade to the new package. More details about this issue may be found in the Common Vulnerabilities and Exposures (CVE) database: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0692

http://www.linuxsecurity.com/content/view/149377

http://www.linuxsecurity.com/content/view/149378

It was discovered that the D-Bus library did not correctly validate signatures. If a local user sent a specially crafted D-Bus key, they could spoof a valid signature and bypass security policies.

http://www.linuxsecurity.com/content/view/149359

Tielei Wang and Tom Lane discovered that the TIFF library did not correctly handle certain malformed TIFF images. If a user or automated system were tricked into processing a malicious image, an attacker could execute arbitrary code with the privileges of the user invoking the program.

http://www.linuxsecurity.com/content/view/149360

It was discovered that mod_proxy_http did not properly handle a large amount of streamed data when used as a reverse proxy. A remote attacker could exploit this and cause a denial of service via memory resource consumption. This issue affected Ubuntu 8.04 LTS, 8.10 and 9.04. (CVE-2009-1890) It was discovered that mod_deflate did not abort compressing large files when the connection was closed. A remote attacker could exploit this and cause a denial of service via CPU resource consumption. (CVE-2009-1891)

http://www.linuxsecurity.com/content/view/149361

Some vulnerabilities have been reported in Apache, which can be

http://www.linuxsecurity.com/content/view/149344

malicious people to potentially compromise a user's system.

http://www.linuxsecurity.com/content/view/149345