[SECURITY] Fedora 13 Update: cups-1.4.4-5.fc13

The Common UNIX Printing System provides a portable printing layer for UNIX=C2=AE operating systems. It has been developed by Easy Software Produc ts to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces...

[SECURITY] Fedora 13 Update: libtiff-3.9.4-1.fc13

The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if yo...

[SECURITY] Fedora 13 Update: libpng-1.2.44-1.fc13

The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. PNG is a bit-mapped graphics format similar to the GIF format. PNG was created to replace the GIF format, since GIF uses a patented data compression algorithm. Libpng...

Fedora 13 : alienarena-7.33-2.fc13 (2010-6179)

Fixes the following security issues: - By supplying various invalid parameters to the download command, it is possible to cause a DoS condition by causing the server to crash. A path ending in . or / will crash on Linux. Supplying a negative offset will cause a crash on all platforms. - Fix buffe...

Fedora 13 : spamass-milter-0.3.1-18.fc13 (2010-5112)

This update includes a fix for a problem where if the milter is running using the '-x' option to expand aliases before passing inbound mail through SpamAssassin, a malicious client using a carefully-crafted SMTP session could execute arbitrary code on the mail server. The fix avoids the use of a...

Fedora 13 : boa-0.94.14-0.15.rc21.fc13 (2010-7599)

This update fixes CVE-2009-4496 where HTTP request logs were written without sanitizing non-printable characters. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it...

Fedora 13 : kernel-2.6.33.5-112.fc13 (2010-9183)

Update to kernel 2.6.33.5: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.33.5 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 13 : krb5-1.7.1-10.fc13 (2010-8749)

Shawn Emery discovered a remotely-triggerable NULL pointer dereference in the Kerberos GSS-API library which could be used to cause GSS-API-authenticated services to crash. This update incorporates fixes to instead correctly detect the error and return an error code. Note that Tenable Network...

Fedora 13 : openttd-1.0.1-1.fc13 (2010-7895)

Fixes security issues CVE-2010-0401, CVE-2010-0402 and CVE-2010-0406. http://security.openttd.org/en/CVE-2010-0401 http://security.openttd.org/en/CVE-2010-0402 http://security.openttd.org/en/CVE-2010-0406 Note that Tenable Network Security has extracted the preceding description block directly fr...

Fedora 13 : bournal-1.4.1-1.fc13 (2010-3168)

Sat Feb 27 2010 Fabian Affolter - 1.4.1-1 - Updated URL and source URL - Updated to new upstream version 1.4.1 to fix 568440 CVE-2010-0118, CVE-2010-0119 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Fedora 13 : udisks-1.0.1-1.fc13 (2010-6296)

Fix for CVE-2010-1149 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora 13 : sunbird-1.0-0.21.20090916hg.fc13 / thunderbird-3.0.4-1.fc13 (2010-5561)

Update to new upstream Thunderbird version 3.0.4, fixing multiple security issues detailed in the upstream advisories: http://www.mozilla.org/security /known-vulnerabilities/thunderbird30.htmlthunderbird3.0.4 Update also includes sunbird package rebuilt against new version of Thunderbird...

Fedora 13 : sudo-1.7.2p6-2.fc13 (2010-9402)

added patch that fixes insufficient environment sanitization issue CVE-2010-1646 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 13 : dvipng-1.13-1.fc13 (2010-8335)

Upgrades dvipng to version 1.13 which fixes CVE-2010-0829. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 13 : amsn-0.98.3-1.fc13 (2010-7291)

fixes security problem caused by not validating ssl certicates, als add new features because of a new upstream version. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

Fedora 13 : lighttpd-1.4.26-2.fc13 (2010-7611)

Update lighttpd to the latest version of the 1.4 branch, with the spawn-fcgi program split out for the first time on EL. This fixes CVE-2010-0295 and also includes a fix for upstream bug 2157 where SSL stopped working with RHEL 5.4. Note that Tenable Network Security has extracted the preceding...

Fedora 13 : viewvc-1.1.4-1.fc13 (2010-4239)

Update to upstream version 1.1.4, fixing one XSS flaw and several bugs: http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?revision=2 341 security fix: escape user-provided query form input to avoid XSS attack fix standalone.py failure when per-root options aren't used issue 445 fix...

Fedora 13 : libannodex-0.7.3-14.fc13 / libfishsound-0.9.1-5.fc13 / liboggz-1.1.1-1.fc13 / etc (2010-9774)

This update upgrades liboggs to version 1.1.1, fixing multiple security issues: CVE-2009-3377 liboggz: unspecified security fixes mentioned in MFSA 2009-63 This updates also provides updated libannodex, modannodex, libfishsound, and sonic-visualiser rebuilt against new liboggz version. Note that...

Fedora 13 : zikula-1.2.3-1.fc13 (2010-8501)

Upstream pushed this release to fix two security issues one XSS, and one CSRF Upstream also removed a non-free JavaScript library that we previously had to strip. http://community.zikula.org/module-News-display-sid-3012.htm Note that Tenable Network Security has extracted the preceding descriptio...

Fedora 13 : pidgin-2.7.0-2.fc13 (2010-8503)

2.7.0 with new features, bug fixes and a security fix for CVE-2010-1624 Full Upstream ChangeLog: http://developer.pidgin.im/wiki/ChangeLog Fedora packaging changes: Use System SSL Certificates Add additional dependencies for Voice + Video Note that Tenable Network Security has extracted the...