Description: Fedora has issued an update for newsx. This fixes a vulnerability, which potentially can be exploited by malicious people to compromise a user's system.
The vulnerability is caused due to a boundary error within the "read_article()" function in src/getarticle.c. This can be exploited to cause a stack-based buffer overflow via a specially crafted NNTP packet.
Solution: Apply updated packages via the yum utility ("yum update newsx").
Provided and/or discovered by: Reported by Enrico Scholz in a Red Hat bug report.
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
