Matt Mccutchen

**Name of the Vulnerable Software and Affected Versions** GNOME Evolution versions prior to 3.2.3 **Description** The issue allows user-assisted remote attackers to read arbitrary files via the `attachment` parameter to a "mailto:" URL, which attaches the file to the email. This enables attackers to access files on the user's system by manipulating the attachment parameter in a mailto URL. **Recommendations** For versions prior to 3.2.3, update to version 3.2.3 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the `attachment` parameter in mailto URLs until the update is applied.

[Content removed]

**Name of the Vulnerable Software and Affected Versions** NetworkManager versions 0.8.1 through 0.9.1 NetworkManager-glib versions 0.8.1 NetworkManager-glib-devel version 0.8.1 NetworkManager-devel version 0.8.1 NetworkManager-gnome version 0.8.1 NetworkManager-debuginfo version 0.8.1 **Description** The issue allows local users to execute arbitrary commands via a newline character in the name for a new network connection, which is not properly handled when writing to the ifcfg file. This can lead to a disruption of confidentiality, integrity, and availability of protected information. The exploitation of this issue can be carried out locally. **Recommendations** For NetworkManager versions 0.8.1 through 0.9.1, consider disabling the creation of new network connections via PolicyKit until a patch is available. For NetworkManager-glib versions 0.8.1, NetworkManager-glib-devel version 0.8.1, NetworkManager-devel version 0.8.1, NetworkManager-gnome version 0.8.1, and NetworkManager-debuginfo version 0.8.1, restrict access to the ifcfg file to minimize the risk of exploitation. Avoid using newline characters in the name for new network connections until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** rsync versions 3.0.6 through 3.0.7 rsync version 3.x before 3.0.8 **Description** The issue allows remote rsync servers to cause a denial of service or possibly execute arbitrary code via malformed data when certain recursion, deletion, and ownership options are used. This can lead to a violation of confidentiality, integrity, and availability of protected information. The exploitation of this issue can be carried out remotely. **Recommendations** For rsync versions 3.0.6 through 3.0.7, update to version 3.0.8 or later. For rsync version 3.x before 3.0.8, update to version 3.0.8 or later. As a temporary workaround, consider restricting access to the rsync server to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** dpkg version 1.9.21 **Description** The issue is related to the replacement of files during package upgrades, where the metadata of a file is not properly reset. This could potentially allow local users to gain privileges by creating a hard link to a setuid file, setgid file, or device. **Recommendations** For dpkg version 1.9.21, update to a newer version that contains a fix for this issue to prevent potential privilege escalation.

**Name of the Vulnerable Software and Affected Versions** RPM versions prior to 4.9.1.3 RPM versions 4.8.0 and 4.7.x and 4.6.x RPM versions before 4.4.3 **Description** The issue affects the RPM package, potentially leading to breaches of confidentiality, integrity, and availability of protected information. Exploitation can be carried out remotely. Local users might gain privileges by creating a hard link to a vulnerable setuid or setgid file due to improper resetting of executable file metadata during RPM package upgrades. **Recommendations** For RPM versions prior to 4.9.1.3, update to version 4.9.1.3 or later to resolve the issue. For RPM versions 4.8.0 and 4.7.x and 4.6.x, update to a version that properly resets metadata during package upgrades. For RPM versions before 4.4.3, update to version 4.4.3 or later to address the vulnerability. As a temporary workaround, consider restricting access to setuid and setgid files to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions 2.6.33.2 and earlier **Description** The issue allows local users to gain privileges by modifying extended attributes or ACLs when a ReiserFS filesystem exists. This can be achieved by deleting a file under `.reiserfs priv/xattrs/`. **Recommendations** For Linux kernel versions 2.6.33.2 and earlier, restrict read or write access to the `.reiserfs priv` directory to prevent local users from gaining privileges.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 3.0.11 Thunderbird versions prior to 2.0.0.22 SeaMonkey versions prior to 1.1.17 **Description** The issue allows remote attackers to cause a denial of service or possibly execute arbitrary code via several vectors related to the browser engine, including `nsEventStateManager::GetContentState`, `nsNativeTheme::CheckBooleanAttr`, `UnhookTextRunFromFrames`, `ClearAllTextRunReferences`, `nsTextFrame::ClearTextRun`, `IsPercentageAware`, `PL DHashTableFinish`, `nsListBoxBodyFrame::GetNextItemBox`, `AtomTableClearEntry`, `nsHTMLEditor::HideResizers`, and `nsWindow::SetCursor`. These vectors are related to the atom table, DOM mutation events, and Unicode surrogates. **Recommendations** For Mozilla Firefox versions prior to 3.0.11, update to version 3.0.11 or later. For Thunderbird versions prior to 2.0.0.22, update to version 2.0.0.22 or later. For SeaMonkey versions prior to 1.1.17, update to version 1.1.17 or later.