+----------------------------------------------------------------------+ | LinuxSecurity.com Linux Advisory Watch | | July 16th, 2011 Volume 12, Number 29 | | | | Editorial Team: Dave Wreski <dwreski@xxxxxxxxxxxxxxxxx> | | Benjamin D. Thomas <bthomas@xxxxxxxxxxxxxxxxx> | +----------------------------------------------------------------------+ Thank you for reading the Linux Advisory Watch Security Newsletter. The purpose of this document is to provide our readers with a quick summary of each week's vendor security bulletins and pointers on methods to improve the security posture of your open source system. Vulnerabilities affect nearly every vendor virtually every week, so be sure to read through to find the updates your distributor have made available. ------------------------------------------------------------------------ * Debian: 2276-2: asterisk: multiple denial of service (Jul 11) ------------------------------------------------------------- DSA 2276-1 for Asterisk in the oldstable distribution (lenny) introduced a functionality bug which invokes an undefined symbol. For the oldstable distribution (lenny), this problem has been fixed in [More...] http://www.linuxsecurity.com/content/view/155437 * Debian: 2277-1: xml-security-c: stack-based buffer overflow (Jul 10) -------------------------------------------------------------------- It has been discovered that xml-security-c, an implementation of the XML Digital Signature and Encryption specifications, is not properly handling RSA keys of sizes on the order of 8192 or more bits. This allows an attacker to crash applications using this functionality or potentially [More...] http://www.linuxsecurity.com/content/view/155432 * Debian: 2276-1: asterisk: multiple denial of service (Jul 10) ------------------------------------------------------------- Paul Belanger reported a vulnerability in Asterisk identified as AST-2011-008 (CVE-2011-2529) through which an unauthenticated attacker may crash an Asterisk server remotely. A package containing a null char causes the SIP header parser to alter unrelated memory structures. [More...] http://www.linuxsecurity.com/content/view/155431 ------------------------------------------------------------------------ * Red Hat: 2011:0927-01: kernel: Important Advisory (Jul 15) ---------------------------------------------------------- Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having [More...] http://www.linuxsecurity.com/content/view/155460 * Red Hat: 2011:0938-01: java-1.6.0-ibm: Critical Advisory (Jul 15) ----------------------------------------------------------------- Updated java-1.6.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 4 Extras, and Red Hat Enterprise Linux 5 and 6 Supplementary. [More...] http://www.linuxsecurity.com/content/view/155461 * Red Hat: 2011:0928-01: kernel: Moderate Advisory (Jul 12) --------------------------------------------------------- Updated kernel packages that fix multiple security issues and various bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate [More...] http://www.linuxsecurity.com/content/view/155443 * Red Hat: 2011:0930-01: NetworkManager: Moderate Advisory (Jul 12) ----------------------------------------------------------------- Updated NetworkManager packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate [More...] http://www.linuxsecurity.com/content/view/155444 ------------------------------------------------------------------------ * Slackware: 2011-195-02: mozilla-firefox: Security Update (Jul 14) ----------------------------------------------------------------- New mozilla-firefox packages are available for Slackware 13.0 and 13.1 to fix security issues. [More Info...] http://www.linuxsecurity.com/content/view/155458 * Slackware: 2011-195-01: seamonkey: Security Update (Jul 14) ----------------------------------------------------------- New seamonkey packages are available for Slackware 13.37, and -current to fix security issues. [More Info...] http://www.linuxsecurity.com/content/view/155459 * Slackware: 2011-189-02: mozilla-thunderbird: Security Update (Jul 8) -------------------------------------------------------------------- New mozilla-thunderbird packages are available for Slackware 13.0, 13.1, 13.37, and -current to fix security issues. [More Info...] http://www.linuxsecurity.com/content/view/155429 * Slackware: 2011-189-01: bind: Security Update (Jul 8) ----------------------------------------------------- New bind packages are available for Slackware 13.37, and -current to fix a security issue. [More Info...] http://www.linuxsecurity.com/content/view/155430 ------------------------------------------------------------------------ * Ubuntu: 1159-1: Linux kernel vulnerabilities (Marvell Dove) (Jul 13) -------------------------------------------------------------------- Multiple kernel flaws have been fixed. http://www.linuxsecurity.com/content/view/155449 * Ubuntu: 1161-1: Linux kernel vulnerabilities (EC2) (Jul 13) ----------------------------------------------------------- Multiple kernel flaws have been fixed. http://www.linuxsecurity.com/content/view/155450 * Ubuntu: 1167-1: Linux kernel vulnerabilities (Jul 13) ----------------------------------------------------- Multiple kernel flaws have been fixed. http://www.linuxsecurity.com/content/view/155451 ------------------------------------------------------------------------ * Pardus: 2011-99: vlc: Integer Overflow (Jul 14) ----------------------------------------------- A vulnerability has been fixed in vlc. http://www.linuxsecurity.com/content/view/155453 * Pardus: 2011-98: nfs-utils: Corruption of the (Jul 14) ------------------------------------------------------ A vulnerability has been fixed in ntf-utils. http://www.linuxsecurity.com/content/view/155452 * Pardus: 2011-96: libpng: Denial of Service (Jul 12) --------------------------------------------------- A vulnerability has been fixed in libpng. http://www.linuxsecurity.com/content/view/155441 * Pardus: 2011-95: Oracle Java: Multible (Jul 12) ----------------------------------------------- Multible vulnerabilities have been fixed in java. http://www.linuxsecurity.com/content/view/155440 * Pardus: : Security Summary: Summary (Jul 12) -------------------------------------------- A vulnerability has been fixed in vte. http://www.linuxsecurity.com/content/view/155439 * Pardus: 2011-93: D-bus: Denial of Service (Jul 12) -------------------------------------------------- A vulnerability has been fixed in d-bus. http://www.linuxsecurity.com/content/view/155438 ------------------------------------------------------------------------ Distributed by: Guardian Digital, Inc. LinuxSecurity.com To unsubscribe email vuln-newsletter-request@xxxxxxxxxxxxxxxxx with "unsubscribe" in the subject of the message. ------------------------------------------------------------------------
