Edgeos - New VulnerabilitiesEdgeos - Private-Labeled Vulnerability Assessment ServicesCentOS : RHSA-2008-0516- (Found June 29, 2008 ) Critical Risk -- The remote CentOS system is missing a security update which has been documented in Red Hat advisory RHSA-2008-0516. yum updatehttp://www.edgeos.com/threats/33111 CentOS : RHSA-2008-0515- (Found June 29, 2008 ) Critical Risk -- The remote CentOS system is missing a security update which has been documented in Red Hat advisory RHSA-2008-0515. yum updatehttp://www.edgeos.com/threats/33110 Fedora Core 9 2008-4910: libpng- (Found June 29, 2008 ) Critical Risk -- The remote host is missing the patch for the advisory FEDORA-2008-4910 (libpng).The libpng package contains a library of functions for creating andmanipulating PNG (Portable Network Graphics) image format files. PNGis a bit-mapped graphics format similar to the GIF format. PNG wascreated to replace the GIF format, since GIF uses a patented datacompression algorithm.Libpng should be installed if you need to manipulate PNG format imagefiles.-Update Information:Update to new...http://www.edgeos.com/threats/33081 Fedora Core 7 2008-4947: libpng- (Found June 29, 2008 ) Critical Risk -- The remote host is missing the patch for the advisory FEDORA-2008-4947 (libpng).The libpng package contains a library of functions for creating andmanipulating PNG (Portable Network Graphics) image format files. PNGis a bit-mapped graphics format similar to the GIF format. PNG wascreated to replace the GIF format, since GIF uses a patented datacompression algorithm.Libpng should be installed if you need to manipulate PNG format imagefiles.-Update Information:Update to new...http://www.edgeos.com/threats/33082 Fedora Core 7 2008-4950: imlib2- (Found June 29, 2008 ) Critical Risk -- The remote host is missing the patch for the advisory FEDORA-2008-4950 (imlib2).Imlib 2 is a library that does image file loading and saving as wellas rendering, manipulation, arbitrary polygon support, etc. It doesALL of these operations FAST. Imlib2 also tries to be highlyintelligent about doing them, so writing naive programs can be doneeasily, without sacrificing speed. This is a complete rewrite overthe Imlib 1.x series. The architecture is more modular, simple,...http://www.edgeos.com/threats/33083 GLSA-200806-01 mtr: Stack-based buffer overflow- (Found June 29, 2008 ) Critical Risk -- The remote host is affected by the vulnerability described in GLSA-200806-01(mtr: Stack-based buffer overflow) Adam Zabrocki reported a boundary error within the split_redraw() function in the file split.c, possibly leading to a stack-based buffer overflow. Impact A remote attacker could use a specially crafted resolved hostname to execute arbitrary code with root privileges. However, it is required that the attacker controls the DNS server used by the...http://www.edgeos.com/threats/33084 GLSA-200806-02 libxslt: Execution of arbitrary code- (Found June 29, 2008 ) High Risk -- The remote host is affected by the vulnerability described in GLSA-200806-02(libxslt: Execution of arbitrary code) Anthony de Almeida Lopes reported a vulnerability in libxslt when handling XSL style-sheet files, which could be exploited to trigger the use of uninitialized memory, e.g. in a call to "free()". Impact A remote attacker could entice a user or automated system to process an XML file using a specially crafted XSL transformation file, possibly .http://www.edgeos.com/threats/33085 RHSA-2008-0514: evolution- (Found June 29, 2008 ) Critical Risk -- Updated evolution packages that fix two buffer overflow vulnerabilities are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Evolution is the integrated collection of e-mail, calendaring, contact management, communications and personal information management (PIM) tools for the GNOME desktop environment. A flaw was found in the way Evolution parsed iCalendar timezone...http://www.edgeos.com/threats/33086 RHSA-2008-0521: redhat- (Found June 29, 2008 ) Critical Risk -- This is the 1-year notification of the End Of Life plans for Red Hat Enterprise Linux 2.1. In accordance with the Red Hat Enterprise Linux Errata Support Policy, the 7 year life-cycle of Red Hat Enterprise Linux 2.1 will end on May 31, 2009. After this date, Red Hat will discontinue the technical support services, bug fix, enhancement, and security errata updates for the following products: Red Hat Enterprise Linux AS 2.1 Red Hat Enterprise Linux ES 2.1 Red Hat...http://www.edgeos.com/threats/33087 SuSE Security Update: openwsman: vulnerability in http parser of shttpd (openwsman-5241)- (Found June 29, 2008 ) Critical Risk -- This update provides a fix for the included shttpdweb-server to patch a buffer overflow vulnerability in theHTTP request parser. This bug can only be exploited byauthenticated users to execute arbitrary code with theprivileges of the openwsmanshttp daemon. (CVE-2008-2097)http://www.edgeos.com/threats/33088 |