This is a list of security announcments that have been released for the current stable version of Frugalware
A vulnerability has been reported in GNU ed, which can be exploited by malicious, local users to perform certain actions with escalated privileges. The vulnerability is caused due to temporary files being created insecurely. This can be exploited via symlink attacks to overwrite arbitrary files with the privileges of the user running ed.
A weakness has been reported in KDE and KOffice, which can be exploited by malicious people to cause a DoS (Denial of Service). The weakness is caused due to an error within the handling of catalog dictionaries or page attributes that reference an invalid page treenode. This can be exploited to cause an infinite loop by e.g. tricking a user into opening a specially crafted PDF document.
A weakness has been reported in KDE and KOffice, which can be exploited by malicious people to cause a DoS (Denial of Service). The weakness is caused due to an error within the handling of catalog dictionaries or page attributes that reference an invalid page treenode. This can be exploited to cause an infinite loop by e.g. tricking a user into opening a specially crafted PDF document.
John Heasman has reported some vulnerabilities in OpenOffice, which can be exploited by malicious people to compromise a user’s system.
A vulnerability and a security issue have been reported in Fetchmail, which can be exploited by malicious, local users to cause a DoS (Denial of Service) and by malicious people to gain knowledge of sensitive information.
Liu Qishuai has reported a vulnerability in libgtop2, which can be exploited by malicious, local users to gain escalated privileges. The vulnerability is caused due to a boundary error within the “glibtop_get_proc_map_s()” function in sysdeps/linux/procmap.c. This can be exploited to cause a stack-based buffer overflow by running a process with a specially crafted long path and tricking a victim into running an application using the library (e.g. gnome-system-monitor).
Roland Lezuo and Josselin Mouette have reported a vulnerability in libsoup, which can be exploited by malicious people to cause a DoS (Denial of Service). The vulnerability is caused due to an error within the “soup_headers_parse()” function in soup-headers.c. This can be exploited to crash an application using the library by sending specially crafted HTTP requests.
A vulnerability has been reported in MediaWiki, which can be exploited by malicious people to conduct cross-site scripting attacks. Input passed to an unspecified parameter is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user’s browser session in context of an affected site. Successful exploitation requires that $wgUseAjax is set to true, which is not its default setting.
Alfredo Ortega has reported a vulnerability in the mod_ctrls module for ProFTPD, which can be exploited by malicious, local users to gain escalated privileges. The vulnerability is caused due to a boundary error within the “pr_ctrls_recv_request()” function in src/ctrls.c and can be exploited to cause a buffer overflow by sending specially crafted control messages to the module. Successful exploitation may allow to execute arbitrary code with escalated privileges, but requires that the mod_ctrl module is used and that ACLs allow the attacker to access the module.
