Fedora 13 : libannodex-0.7.3-14.fc13 / libfishsound-0.9.1-5.fc13 / liboggz-1.1.1-1.fc13 / etc (2010-9774)

This update upgrades liboggs to version 1.1.1, fixing multiple security issues: CVE-2009-3377 liboggz: unspecified security fixes mentioned in MFSA 2009-63 This updates also provides updated libannodex, modannodex, libfishsound, and sonic-visualiser rebuilt against new liboggz version. Note that...

Fedora 13 : boa-0.94.14-0.15.rc21.fc13 (2010-7599)

This update fixes CVE-2009-4496 where HTTP request logs were written without sanitizing non-printable characters. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it...

Fedora 13 : kernel-2.6.33.5-112.fc13 (2010-9183)

Update to kernel 2.6.33.5: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.33.5 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 13 : tar-1.22-16.fc13 (2010-4274)

CVE-2010-0624 tar, cpio: Heap-based buffer overflow by expanding a specially crafted archive 572149 - realloc within checkexclusiontags caused invalid write 570591 - not closing file descriptors for excluded files/dirs with exlude-tag... options could cause descriptor exhaustion 570591 Note that...

Fedora 13 : cronie-1.4.4-1.fc13 (2010-3642)

Bug 565809 - CVE-2010-0424 vixie-cron, cronie: Race condition by setting timestamp of user's crontab file, when editing the file Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

Fedora 13 : samba-3.5.1-58.fc13 (2010-4087)

CVE-2010-0728 http://www.samba.org/samba/security/CVE-2010-0728 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additiona...

Fedora 13 : krb5-1.7.1-10.fc13 (2010-8749)

Shawn Emery discovered a remotely-triggerable NULL pointer dereference in the Kerberos GSS-API library which could be used to cause GSS-API-authenticated services to crash. This update incorporates fixes to instead correctly detect the error and return an error code. Note that Tenable Network...

Fedora 13 : qt-4.6.2-8.fc13 (2010-4521)

This update fixes several WebKit security issues: CVE-2010-0046: CSS format argument memory corruption CVE-2010-0049: Use of freed line boxes in mixed LTR/RTL text CVE-2010-0050: Crash at HTMLParser after handling misnested style tags CVE-2010-0051 CVE-2010-0651: Remote information disclosure...

Fedora 13 : openttd-1.0.1-1.fc13 (2010-7895)

Fixes security issues CVE-2010-0401, CVE-2010-0402 and CVE-2010-0406. http://security.openttd.org/en/CVE-2010-0401 http://security.openttd.org/en/CVE-2010-0402 http://security.openttd.org/en/CVE-2010-0406 Note that Tenable Network Security has extracted the preceding description block directly fr...

Fedora 13 : postgresql-8.4.4-1.fc13 (2010-8696)

Update to new minor releases, primarily to fix CVE-2010-1169 and CVE-2010-1170, but see also other fixes at: http://www.postgresql.org/docs/8.4/static/release-8-4-4.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Fedora 13 : bournal-1.4.1-1.fc13 (2010-3168)

Sat Feb 27 2010 Fabian Affolter - 1.4.1-1 - Updated URL and source URL - Updated to new upstream version 1.4.1 to fix 568440 CVE-2010-0118, CVE-2010-0119 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Fedora 13 : couchdb-0.10.2-1.fc13 (2010-8234)

Ver. 0.10.2 bugfix release. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 13 : gnutls-2.8.6-2.fc13 (2010-9518)

Add implementation of the safe renegotiation extension to fix the CVE-2009-3555 security vulnerability. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much a...

Fedora 13 : xinha-0.96.1-2.fc13 (2010-9320)

Name: CVE-2010-1916 URL: https://vulners.com/cve/CVE-2009-1916 Assigned: 20100511 Reference: MISC: http://www.php-security.org/2010/05/10/mops-2010-019-serendipity-wysiw yg-editor-plugin-configuration-injection-vulnerability/index.html Reference: MISC:...

Fedora 13 : libpng-1.2.43-1.fc13 (2010-4683)

Update to libpng 1.2.43, includes fix for CVE-2010-0205 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 13 : libpng10-1.0.53-1.fc13 (2010-2988)

This is the latest upstream maintenance release. In addition to a number of minor bugfixes, it mitigates the resource-consumption effects of highly compressed ancillary chunks in hostile PNG files as described at http://libpng.sourceforge.net/ADVISORY-1.4.1.html This issue has been assigned...

Fedora 13 : sudo-1.7.2p6-2.fc13 (2010-9402)

added patch that fixes insufficient environment sanitization issue CVE-2010-1646 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 13 : dvipng-1.13-1.fc13 (2010-8335)

Upgrades dvipng to version 1.13 which fixes CVE-2010-0829. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 13 : aria2-1.9.3-1.fc13 (2010-8905)

Thu May 20 2010 Rahul Sundaram - 1.9.3-1 - http://aria2.svn.sourceforge.net/viewvc/aria2/trunk/NE WS?revision=2101 - Fixes CVE-2010-1512. rhbz 592014 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted...

Fedora 13 : python-paste-1.7.4-1.fc13 (2010-10414)

1.7.4 The only real change is to paste.httpexceptions, which was using insecure quoting of some parameters and allowed an XSS hole, most specifically with its 404 messages. The most notably WSGI application using this is paste.urlparse.StaticURLParser and PkgResourcesParser. By directing someone ...