Fedora 13 : pidgin-2.7.0-2.fc13 (2010-8503)

2.7.0 with new features, bug fixes and a security fix for CVE-2010-1624 Full Upstream ChangeLog: http://developer.pidgin.im/wiki/ChangeLog Fedora packaging changes: Use System SSL Certificates Add additional dependencies for Voice + Video Note that Tenable Network Security has extracted the...

Fedora 13 : spamass-milter-0.3.1-18.fc13 (2010-5112)

This update includes a fix for a problem where if the milter is running using the '-x' option to expand aliases before passing inbound mail through SpamAssassin, a malicious client using a carefully-crafted SMTP session could execute arbitrary code on the mail server. The fix avoids the use of a...

Fedora 13 : boa-0.94.14-0.15.rc21.fc13 (2010-7599)

This update fixes CVE-2009-4496 where HTTP request logs were written without sanitizing non-printable characters. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it...

Fedora 13 : lighttpd-1.4.26-2.fc13 (2010-7611)

Update lighttpd to the latest version of the 1.4 branch, with the spawn-fcgi program split out for the first time on EL. This fixes CVE-2010-0295 and also includes a fix for upstream bug 2157 where SSL stopped working with RHEL 5.4. Note that Tenable Network Security has extracted the preceding...

Fedora 13 : java-1.6.0-openjdk-1.6.0.0-37.b17.fc13 (2010-6279)

Add latest security updates. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 13 : sudo-1.7.2p5-1.fc13 (2010-3352)

update to new upstream version - fixes CVE-2010-0426 sudo: sudoedit option can possibly allow for arbitrary code execution Fedora all 567676 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 13 : cronie-1.4.4-1.fc13 (2010-3642)

Bug 565809 - CVE-2010-0424 vixie-cron, cronie: Race condition by setting timestamp of user's crontab file, when editing the file Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

Fedora 13 : tar-1.22-16.fc13 (2010-4274)

CVE-2010-0624 tar, cpio: Heap-based buffer overflow by expanding a specially crafted archive 572149 - realloc within checkexclusiontags caused invalid write 570591 - not closing file descriptors for excluded files/dirs with exlude-tag... options could cause descriptor exhaustion 570591 Note that...

Fedora 13 : openssl-1.0.0-1.fc13 (2010-5744)

Update to final release of upstream version 1.0.0. The update fixes important security vulnerabilities: CVE-2009-3245, CVE-2009-4355, CVE-2010-0433, and CVE-2010-0740. Refer to upstream CHANGES file for the detailed list of changes. Note that Tenable Network Security has extracted the preceding...

Fedora 13 : firefox-3.6.3-1.fc13 / xulrunner-1.9.2.3-1.fc13 (2010-6204)

Update to new upstream Firefox version 3.6.3, fixing a security issue detailed in the upstream advisory: http://www.mozilla.org/security/known- vulnerabilities/firefox36.htmlfirefox3.6.3 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora 13 : dhcp-4.1.1-22.P1.fc13 (2010-9433)

This is a patch release of ISC DHCP 4.1.1, which contains a pair of bug fixes including one for a security related bug. http://ftp.isc.org/isc/dhcp/dhcp-4.1.1-P1-RELNOTES Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Fedora 13 : samba-3.5.1-58.fc13 (2010-4087)

CVE-2010-0728 http://www.samba.org/samba/security/CVE-2010-0728 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additiona...

Fedora 13 : openttd-1.0.1-1.fc13 (2010-7895)

Fixes security issues CVE-2010-0401, CVE-2010-0402 and CVE-2010-0406. http://security.openttd.org/en/CVE-2010-0401 http://security.openttd.org/en/CVE-2010-0402 http://security.openttd.org/en/CVE-2010-0406 Note that Tenable Network Security has extracted the preceding description block directly fr...

Fedora 13 : xinha-0.96.1-2.fc13 (2010-9320)

Name: CVE-2010-1916 URL: https://vulners.com/cve/CVE-2009-1916 Assigned: 20100511 Reference: MISC: http://www.php-security.org/2010/05/10/mops-2010-019-serendipity-wysiw yg-editor-plugin-configuration-injection-vulnerability/index.html Reference: MISC:...

Fedora 13 : kdebase-workspace-4.4.2-5.fc13 (2010-6605)

This build includes a couple of small powerdevil patches see kde bugs 221637, 221637, fix icon name in plasma-konsole patch: use XDG icon instead of kappfinder one, initial attempts at kdm/plymouth integration, upstream kdm security fix for CVE-2010-0436 Note that Tenable Network Security has...

Fedora 13 : openssl-1.0.0a-1.fc13 (2010-9574)

Minor update from upstream fixing two security vulnerabilities - CVE-2010-0742 and CVE-2010-1633. It is fully ABI compatible with openssl-1.0.0. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 13 : qt-4.6.2-8.fc13 (2010-4521)

This update fixes several WebKit security issues: CVE-2010-0046: CSS format argument memory corruption CVE-2010-0049: Use of freed line boxes in mixed LTR/RTL text CVE-2010-0050: Crash at HTMLParser after handling misnested style tags CVE-2010-0051 CVE-2010-0651: Remote information disclosure...

Fedora 13 : seamonkey-2.0.4-1.fc13 (2010-6236)

Update to new upstream SeaMonkey version 2.0.4, fixing multiple security issues detailed in the upstream advisories: http://www.mozilla.org/security/known- vulnerabilities/seamonkey20.htmlseamonkey2.0.4 CVE-2010-0173 CVE-2010-0174 CVE-2010-0175 CVE-2010-0176 CVE-2010-0177 CVE-2010-0178...

Fedora 13 : postgresql-8.4.4-1.fc13 (2010-8696)

Update to new minor releases, primarily to fix CVE-2010-1169 and CVE-2010-1170, but see also other fixes at: http://www.postgresql.org/docs/8.4/static/release-8-4-4.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Fedora 13 : nss-3.12.6-1.2.fc13 (2010-3929)

Update to NSS 3.12.6 The primary feature of NSS 3.12.6 is support for the TLS Renegotiation Indication Extension, RFC 5746. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...