Fedora 19 : anaconda-19.25-1.fc19 / pykickstart-1.99.30-1.fc19 / python-blivet-0.13-1.fc19 (2013-7834)

A giant pile of fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora 19 : plexus-archiver-2.3-1.fc19 (2013-5530)

Rebase to upstream version and add patch to fix CVE-2012-2098. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 19 : phpMyAdmin-3.5.8.1-1.fc19 (2013-6928)

phpMyAdmin 3.5.8.1 2013-04-24 =============================== - security Remote code execution pregreplace, reported by Janek Vind see PMASA-2013-2 - security Locally Saved SQL Dump File Multiple File Extension Remote Code Execution, reported by Janek Vind see PMASA-2013-3 Note that Tenable Netwo...

Fedora 19 : libtiff-4.0.3-6.fc19 (2013-7339)

Repair minor security issues CVE-2013-1960, CVE-2013-1961 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 19 : xen-4.2.2-3.fc19 (2013-7406)

update to xen-4.2.2 including two security fixes and fix two possible denial of service attacks Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possib...

[SECURITY] Fedora 19 Update: xen-4.2.2-3.fc19

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

[SECURITY] Fedora 19 Update: libtiff-4.0.3-6.fc19

The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if yo...

[SECURITY] Fedora 19 Update: python-pip-1.3.1-1.fc19

Pip is a replacement for easyinstall . It uses mostly the same techniques for finding packages, so packages that were made easyinstallable should be pip-installable as well...

[SECURITY] Fedora 19 Update: curl-7.29.0-6.fc19

curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

Fedora 19 : curl-7.29.0-6.fc19 (2013-6780)

prevent an artificial timeout event due to stale speed-check data 906031 - show proper host name on failed resolve 957173 fix cookie tailmatching to prevent cross-domain leakage CVE-2013-1944 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

[SECURITY] Fedora 19 Update: tftp-5.2-9.fc19

The Trivial File Transfer Protocol TFTP is normally used only for booting diskless workstations. The tftp package provides the user interface for TFTP, which allows users to transfer files to and from a remote machine. This program and TFTP provide very little security, and should not be enabled...

[SECURITY] Fedora 19 Update: arpwatch-2.1a15-28.fc19

The arpwatch package contains arpwatch and arpsnmp. Arpwatch and arpsnmp are both network monitoring tools. Both utilities monitor Ethernet or FDDI network traffic and build databases of Ethernet/IP address pairs, and can report certain changes via email. Install the arpwatch package if you need...

[SECURITY] Fedora 19 Update: xorg-x11-server-1.14.0-6.fc19

X.Org X11 X server...

Fedora 19 : xorg-x11-server-1.14.0-6.fc19 (2013-5883)

Fix input buffer size to flush evdev events before enabling a device CVE-2013-1940 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 19 : miredo-1.2.5-4.fc19 (2013-6481)

Enabled hardend build as required by PackagingGuidlines Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 19 : telepathy-idle-0.1.15-1.fc19 (2013-6591)

This release validate TLS certificates properly, preventing man-in-the-middle attacks. This will be a regression for users of IRC-over-SSL servers/proxies that do not have a certificate trusted by system-wide CA configuration; they will no longer be able to connect. If someone implements fd.o...

Fedora 19 : haproxy-1.4.23-2.fc19 (2013-6253)

Rebuild to use PIE flags. Update to upstream stable release 1.4.23. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

[SECURITY] Fedora 19 Update: haproxy-1.4.23-2.fc19

HA-Proxy is a TCP/HTTP reverse proxy which is particularly suited for high availability environments. Indeed, it can: - route HTTP requests depending on statically assigned cookies - spread the load among several servers while assuring server persistence through the use of HTTP cookies - switch t...

Fedora 19 : mediawiki-1.20.4-1.fc19 (2013-5874)

An internal review discovered that specially crafted Lua function names could lead to XSS. https://bugzilla.wikimedia.org/showbug.cgi?id=46084 - Daniel Franke reported that during SVG parsing, MediaWiki failed to prevent XML external entity XXE processing. This could lead to local file...

Fedora 19 : icedtea-web-1.3.2-0.fc19 (2013-5877)

New in release 1.3.2 2013-04-17 : - Security Updates - CVE-2013-1927, RH884705: fixed gifar vulnerability - CVE-2013-1926, RH916774: Class-loader incorrectly shared for applets with same relative-path. - Common - Added new option in itw-settings which allows users to set JVM arguments when plugin...