[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248392

 
 

909

 
 

195452

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

CESA-2011:1327 -- centos 4 x86_64 frysk

ID: oval:org.secpod.oval:def:200349Date: (C)2012-01-31   (M)2023-11-09
Class: PATCHFamily: unix




frysk is an execution-analysis technology implemented using native Java and C++. It provides developers and system administrators with the ability to examine and analyze multi-host, multi-process, and multithreaded systems while they are running. frysk is released as a Technology Preview for Red Hat Enterprise Linux 4. A buffer overflow flaw was found in HarfBuzz, an OpenType text shaping engine used in the embedded Pango library. If a frysk application were used to debug or trace a process that uses HarfBuzz while it loaded a specially-crafted font file, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user running the application. Users of frysk are advised to upgrade to this updated package, which contains a backported patch to correct this issue. All running frysk applications must be restarted for this update to take effect.

Platform:
CentOS 4
Product:
frysk
Reference:
CESA-2011:1327
CVE-2011-3193
CVE    1
CVE-2011-3193
CPE    1
cpe:/o:centos:centos:4

© SecPod Technologies