INSECURITY NEWS
INSECURITY NEWS
kdelibs
The kdelibs package provides libraries for the K Desktop Environment (KDE). The KDE khtml library uses Qt in such a way that untrusted parameters could be passed to Qt, triggering the overflow. An attacker could, for example, create a malicious web page that, when viewed by a victim in the Konqueror browser, would cause Konqueror to crash or possibly execute arbitrary code with the privileges of the victim (CVE-2006-4811). Mandriva reference: MDKSA-2006:186 Red Hat reference: RHSA-2006:0720-5 CodeDom.Compiler classes in mono used temporary files in an insecure way that could allow a symbolic link attack to overwrite arbitrary files with the privileges of the user running a program that made use of those classes (CVE-20065072). Mandriva reference: MDKSA-2006:188 Ubuntu reference: USN-357-1
OpenSSL
OpenSSL is a protocol system for secure networking. Dr S. N. Henson of the OpenSSL core team and Open Network Security recently developed an ASN1 test suite for NISCC (www.niscc.gov.uk). When the test suite was run against OpenSSL, two denial of service vulnerabilities were discovered.
Mono
Mono is an Open Source .NET framework. Sebastian Krahmer of the Suse security team found that the System.
SECURITY POSTURE OF MAJOR DISTRIBUTIONS
Distributor
Debian
Security Sources
Info: http://www.debian.org/security/ List: http://lists.debian.org/ debiansecurity-announce/ Reference: DSA-… 1) Info: http://www.gentoo.org/ security/en/glsa/index.xml Forum: http://forums.gentoo.org/ List: http://www.gentoo.org/main/ en/lists.xml Reference: GLSA: … 1) Info: http://www.mandriva.com/security List: http://www1.mandrivalinux.com/en/ flists.php3#2security Reference: MDKSA-… 1) Info: http://www.redhat.com/errata/ List: http://www.redhat.com/mailing -lists/ Reference: RHSA-… 1) Info: http://www.slackware.com/ security/ List: http://www.slackware. com/lists/ (slackware-security) Reference: [slackware-security] … 1) Info: http://www.novell.com/linux/ security/securitysupport.html Patches: http://www.suse.de/uk/ private/download/updates/ List: suse-security-announce Reference: SUSE-SA … 1) Info:http://www.ubuntu.com/usn List:https://lists.ubuntu.com/mailman/ listinfo/ubuntu-security-announce

下一页