This is a list of security announcments that have been released for the current stable version of Frugalware
Stefan Esser has reported a vulnerability in PHP, which can be exploited by malicious, local users to bypass certain security restrictions. The vulnerability is caused due to a race condition in the handling of symlinks and can be exploited to bypass the open_basedir protection mechanism.
Tavis Ormandy has discovered a vulnerability in DenyHosts, which can be exploited by malicious people to cause a DoS (Denial of Service). The vulnerability is caused due to an error in the parsing of log files before adding an entry in /etc/hosts.deny. This can be exploited to add arbitrary IP addresses to /etc/hosts.deny resulting in a DoS for that IP.
Tavis Ormandy has reported a vulnerability in GnuPG, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused due to an error within the decryption of malformed OpenPGP messages. This can be exploited to corrupt memory when decrypting a specially crafted OpenPGP message. Successful exploitation allows execution of arbitrary code.
Laurent Butti, Jerome Raznieski, and Julien Tinnes have reported a vulnerability in MadWifi, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused due to a boundary error and can be exploited to cause a buffer overflow, which allows execution of arbitrary code with kernel privileges.
Some vulnerabilities have been reported in xine-lib, which potentially can be exploited by malicious people to compromise a user’s system.
A vulnerability has been discovered in Evince, which can be exploited by malicious people to compromise a user’s system. The vulnerability is caused due to a boundary error within the “get_next_text()” function in ps/ps.c. This can be exploited to cause a buffer overflow by e.g. tricking a user into opening a specially crafted PostScript file.
Some vulnerabilities have been reported in SquirrelMail, which can be exploited by malicious people to conduct cross-site scripting and script insertion attacks.
Hugh Warrington has reported a vulnerability in GnuPG, which potentially can be exploited by malicious people to compromise a user’s system. The vulnerability is caused due to a boundary error in the “ask_outfile_name()” function in openfile.c, because the “make_printable_string()” function can return a string longer than the expected “NAMELEN”. This can be exploited to cause a buffer overflow by e.g. tricking a user into processing a specially crafted file using the interactive mode. Successful exploitation may allow the execution of arbitrary code, but requires that the interactive mode is used. Applications using the batch mode (e.g. most e-mail clients) are not affected.
A weakness has been reported in KDE, which can be exploited by malicious people to cause a DoS (Denial of Service). The weakness is caused due to an error within the JPEG kfile-info plugin when parsing EXIF information. This can be exploited to cause an endless recursion by e.g. tricking a user into opening a specially crafted file with an application using the kfile-info plugin.
Some vulnerabilities have been reported in LHa, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system.
