[SECURITY] Fedora 25 Update: libsndfile-1.0.28-2.fc25

libsndfile is a C library for reading and writing sound files such as AIFF, AU, WAV, and others through one standard interface. It can currently read/write 8, 16, 24 and 32-bit PCM files as well as 32 and 64-bit floating point WAV files and a number of compressed formats. It compiles and runs on...

[SECURITY] Fedora 25 Update: log4j12-1.2.17-19.fc25

Log4j is a tool to help the programmer output log statements to a variety of output targets...

Fedora 25 : mingw-poppler (2017-0ee7b8dd2a)

This update fixes CVEs 2017-7511 and 2017-9083. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 25 : perltidy (2017-a3c7d077c7)

Cumulative bug-fix, enhancement and security update, including fix for CVE-2016-10374: perltidy relies on the current working directory for certain output files and did not have a symlink-attack protection mechanism, which allowed local users to overwrite arbitrary files by creating a symlink, as...

Fedora 25 : ansible (2017-87a64155eb)

Update to 2.3.1, with various bugfixes and fix for CVE-2017-7481. Full changes available at : https://github.com/ansible/ansible/blob/stable-2.3/CHANGELOG.md Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable ha...

[SECURITY] Fedora 25 Update: gnutls-3.5.13-1.fc25

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, OpenPGP and...

[SECURITY] Fedora 25 Update: ansible-2.3.1.0-1.fc25

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...

[SECURITY] Fedora 25 Update: picocom-2.2-2.fc25

As its name suggests, picocom is a minimal dumb-terminal emulation program. It is, in principle, very much like minicom, only it's "pico" instead of "mini"! It was designed to serve as a simple, manual, modem configuration, testing, and debugging tool. It has also served quite well as a low-tech...

[SECURITY] Fedora 25 Update: perltidy-20170521-1.fc25

Perltidy is a Perl script that indents and re-formats Perl scripts to make them easier to read. If you write Perl scripts, or spend much time reading them, you will probably find it useful. The formatting can be controlled with command line parameters. The default parameter settings approximately...

[SECURITY] Fedora 25 Update: oniguruma-6.1.3-2.fc25

Oniguruma is a regular expressions library. The characteristics of this library is that different character encoding for every regular expression object can be specified. supported APIs: GNU regex, POSIX and Oniguruma native...

CVE-2017-2178

Untrusted search path vulnerability in Installer of electronic tendering and bid opening system available prior to May 25, 2017 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in screensaver installers jasdf01.exe, jasdf02.exe, jasdf03.exe, jasdf04.exe, jasdf05.exe, scramblesetup.exe, clock01setup.exe, clock02setup.exe available prior to May 25, 2017 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified...

CVE-2017-2176

Untrusted search path vulnerability in screensaver installers jasdf01.exe, jasdf02.exe, jasdf03.exe, jasdf04.exe, jasdf05.exe, scramblesetup.exe, clock01setup.exe, clock02setup.exe available prior to May 25, 2017 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified...

[SECURITY] Fedora 25 Update: mingw-poppler-0.45.0-2.fc25

MinGW Windows Poppler library...

[SECURITY] Fedora 25 Update: poppler-0.45.0-3.fc25

Poppler, a PDF rendering library, is a fork of the xpdf PDF viewer developed by Derek Noonburg of Glyph and Cog, LLC...

[SECURITY] Fedora 25 Update: libtasn1-4.12-1.fc25

A library that provides Abstract Syntax Notation One ASN.1, as specified by the X.680 ITU-T recommendation parsing and structures management, and Distinguished Encoding Rules DER, as per X.690 encoding and decoding func tions...

Fedora 25 : sudo (2017-54580efa82)

update to 1.8.20p2 - added sudo package to dnf/yum protected packages ---- - update to 1.8.20p1 - fixes CVE-2017-1000367 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean...

Fedora 25 : squirrelmail (2017-f85c37ae3d)

fix insufficient escaping of user-supplied data CVE-2017-7692 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 25 : dropbear (2017-8e9bd58cbb)

Security fixes for CVE-2017-9078 CVE-2017-9079 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

[SECURITY] Fedora 25 Update: wget-1.18-3.fc25

GNU Wget is a file retrieval utility which can use either the HTTP or FTP protocols. Wget features include the ability to work in the background while you are logged out, recursive retrieval of directories, file name wildcard matching, remote file timestamp storage and comparison, use of Rest wit...