Newsfeeds

LinuxSecurity.com - Security Advisories

RedHat: Important: ipsec-tools security update
LinuxSecurity.com: An updated ipsec-tools package that fixes two security issues is now available for Red Hat Enterprise Linux 3, 4, and 5. Two denial of service flaws were found in the ipsec-tools racoon daemon. It was possible for a remote attacker to cause the racoon daemon to consume all available memory. This update has been rated as having important security impact by the Red Hat Security Response Team.
RedHat: Important: kernel security and bug fix update
LinuxSecurity.com: Updated kernel packages that fix several security issues and several bugs are now available for Red Hat Enterprise MRG 1.0. The possibility of a timeout value overflow was found in the Linux kernel high-resolution timers functionality, hrtimer. This could allow a local unprivileged user to execute arbitrary code, or cause a denial of service (kernel panic). This update has been rated as having important security impact by the Red Hat Security Response Team.
Mandriva: Subject: [Security Announce] [ MDVSA-2008:180-1 ] libxml2
LinuxSecurity.com: Andreas Solberg found a denial of service flaw in how libxml2 processed certain content. If an application linked against libxml2 processed such malformed XML content, it could cause the application to stop responding (CVE-2008-3281). U
Debian: New libxml2 packages fix denial of service
LinuxSecurity.com: The previous security update of the libxml2 package introduced some problems with other packages, most notably with librsvg. This update corrects these problems whilst still fixing the reported scurity problem.
Debian: New tiff packages fix arbitrary code execution
LinuxSecurity.com: Drew Yao discovered that libTIFF, a library for handling the Tagged Image File Format, is vulnerable to a programming error allowing malformed tiff files to lead to a crash or execution of arbitrary code.
Ubuntu: Linux kernel vulnerabilities
LinuxSecurity.com: It was discovered that there were multiple NULL-pointer function dereferences in the Linux kernel terminal handling code. A local attacker could exploit this to execute arbitrary code as root, or crash the system, leading to a denial of service. (CVE-2008-2812)