Fedora 16 : ejabberd-2.1.9-1.fc16 (2011-16281)

Ver. 2.1.9 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

[SECURITY] Fedora 16 Update: abrt-2.0.7-2.fc16

abrt is a tool to help users to detect defects in applications and to create a bug report with all informations needed by maintainer to fix it. It uses plugin system to extend its functionality...

CVE-2011-4339

ipmievd aka the IPMI event daemon in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux RHEL 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this fil...

Code injection

ipmievd aka the IPMI event daemon in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux RHEL 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this fil...

CVE-2011-4339

ipmievd aka the IPMI event daemon in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux RHEL 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid PID file, which allows local users to kill arbitrary processes by writing to this fil...

CVE-2011-4339

OpenIPMI’s ipmievd daemon (as used by ipmitool 1.8.11 on RHEL6, Debian, Fedora 16 and other products) creates a world-writable ipmievd.pid (0666), enabling a local user to kill arbitrary processes. CVE-2011-4339 is cited across multiple advisories (e.g., MiracleLinux AXSA entries, Oracle Linux RH...

Fedora 16 : krb5-1.9.2-4.fc16 (2011-16296)

This update rebases Fedora 15 and 16 from version 1.9.1 to version 1.9.2, incorporating a recent security update, and some of the fixes we were previously backporting, among others. It also incorporates fixes for NULL pointer dereferences which the KDC could make while processing TGS requests...

[SECURITY] Fedora 16 Update: pam_yubico-2.8-1.fc16

This is pamyubico, a pluggable authentication module that can be used with Linux-PAM and yubikeys. This module supports yubikey OTP checking...

[SECURITY] Fedora 16 Update: ykclient-2.6-1.fc16

commandline for yubikeys...

Fedora 16 : python-celery-2.2.8-1.fc16 (2011-16539)

Fixes CELERYSA-0001 : - https://github.com/ask/celery/blob/master/docs/sec/CELER YSA-0001.txt Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 16 : psi-0.14-7.fc16 (2011-16488)

Work around input validation failure in the certificate dialog. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additiona...

Fedora 16 : colord-0.1.15-1.fc16 (2011-16453)

New upstream version - This release fixes an important security bug: CVE-2011-4349. - Do not crash the daemon if adding the device to the db failed - Fix a memory leak when getting properties from a device Note that Tenable Network Security has extracted the preceding description block directly...

[SECURITY] Fedora 16 Update: torque-3.0.3-2.fc16

TORQUE Tera-scale Open-source Resource and QUEue manager is a resource manager providing control over batch jobs and distributed compute nodes. TORQUE is based on OpenPBS version 2.3.12 and incorporates scalability, fault tolerance, and feature extension patches provided by USC, NCSA, OSC, the U....

[SECURITY] Fedora 16 Update: colord-0.1.15-1.fc16

colord is a low level system activated daemon that maps color devices to color profiles in the system context...

[SECURITY] Fedora 16 Update: pam-1.1.5-1.fc16

PAM Pluggable Authentication Modules is a system security tool that allows system administrators to set authentication policy without having to recompile programs that handle authentication...

Fedora 16 : ReviewBoard-1.6.3-1.fc16 (2011-15935)

New upstream security release 1.6.3 - Security Fixes : - A script injection vulnerability was discovered in the commenting system. This affected the diff viewer and screenshot pages, and allowed a commenter to break the page and execute JavaScript Note that Tenable Network Security has extracted...

Fedora 16 : cherokee-1.2.101-1.fc16 (2011-14622)

Latest 1.2.x upstream release Resolves bz 746532 - put some deps back: GeoIP-devel openldap-devel Latest 1.2.x upstream release .spec corrections for optional build for systemd Resolves bz 710474 Resolves bz 713307 Resolves bz 680691 Note that Tenable Network Security has extracted the preceding...

Fedora 16 : kernel-3.1.2-1.fc16 (2011-16237)

Update to kernel 3.1.2: http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.2 Additional changes : - Partially fix reported stalls during heavy I/O - Fix problems with udev probing Wacom bluetooth tablets Note that Tenable Network Security has extracted the preceding description block...

Fedora 16 : phpldapadmin-1.2.1.1-2.20111006git.fc16 (2011-14924)

Update to the latest upstream development code to fix CVE-2011-4074 and CVE-2011-4075 XSS and code injection vulnerabilities in versions = 1.2.1.1 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

[SECURITY] Fedora 16 Update: libsocialweb-0.25.20-1.fc16

libsocialweb is a social data server which fetches data from the "social we b", such as your friend's blog posts and photos, upcoming events, recently play ed tracks, and pending eBay auctions. It also provides a service to update your status on web services which support it, such as MySpace and...