5745 matches found
Fedora 20 : mod_nss-1.0.8-24.fc20 (2013-19931)
Bugzilla Bug 961471 - Port Downstream Patches Upstream Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora 20 : ReviewBoard-1.7.16-2.fc20 / python-djblets-0.7.21-1.fc20 (2013-18840)
Review Board 1.6.19 and 1.7.15 fix a few issues in the API where users could access certain data they should not have been able to access, if using the Local Sites feature, invite-only groups, or private repositories. It also fixes cases with invite-only groups where the group name and list of...
Fedora 20 : python-crypto-2.6.1-1.fc20 (2013-19390)
In previous versions of PyCrypto, the Crypto.Random PRNG exhibits a race condition that may cause forked processes to generate identical sequences of 'random' numbers. This release fixes the problem by resetting the rate-limiter when Crypto.Random.atfork is invoked. Note that Tenable Network...
Fedora 20 : roundcubemail-0.9.5-1.fc20 (2013-19699)
Roundcubemail just released new 0.9.5 version with fixes for VCE2013-6172will be available soon. Hotfix: https://github.com/roundcube/roundcubemail/commit/4109bb26ce.diff Full announcement : Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...
Fedora 20 : kernel-3.11.7-300.fc20 (2013-20705)
The 3.11.7 stable update contains a number of important fixes across the tree. Various bug and CVE fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much...
Fedora 20 : scipy-0.12.1-1.fc20 (2013-19101)
Update to 0.12.1, fixes CVE-2013-4251: insecure /tmp usage by scipy.weave. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducin...
[SECURITY] Fedora 20 Update: dropbear-2013.59-1.fc20
Dropbear is a relatively small SSH server and client. Dropbear is particularly useful for "embedded"-type Linux or other Unix systems, such as wireless routers...
[SECURITY] Fedora 20 Update: kernel-3.11.7-300.fc20
The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating system: memory allocation, process allocation, device input and output, etc...
[SECURITY] Fedora 20 Update: libuv-0.10.18-1.fc20
libuv is a new platform layer for Node. Its purpose is to abstract IOCP on Windows and libev on Unix systems. We intend to eventually contain all plat form differences in this library...
[SECURITY] Fedora 20 Update: mod_nss-1.0.8-24.fc20
The modnss module provides strong cryptography for the Apache Web server via the Secure Sockets Layer SSL and Transport Layer Security TLS protocols using the Network Security Services NSS security library...
[SECURITY] Fedora 20 Update: accountsservice-0.6.35-1.fc20
The accountsservice project provides a set of D-Bus interfaces for querying and manipulating user account information and an implementation of these interfaces, based on the useradd, usermod and userdel commands...
[SECURITY] Fedora 20 Update: spice-0.12.4-3.fc20
The Simple Protocol for Independent Computing Environments SPICE is a remote display system built for virtual environments which allows you to view a computing 'desktop' environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine...
[SECURITY] Fedora 20 Update: libguestfs-1.24.0-1.fc20
Libguestfs is a library for accessing and modifying guest disk images. Amongst the things this is good for: making batch configuration changes to guests, getting disk used/free statistics see also: virt-df, migrating between virtualization systems see also: virt-p2v, performing partial backups,...
[SECURITY] Fedora 20 Update: ReviewBoard-1.7.16-2.fc20
Review Board is a powerful web-based code review tool that offers developers an easy way to handle code reviews. It scales well from small projects to large companies and offers a variety of tools to take much of the stress and time out of the code review process...
[SECURITY] Fedora 20 Update: python-djblets-0.7.21-1.fc20
A collection of useful classes and functions for Django...
[SECURITY] Fedora 20 Update: xulrunner-25.0-2.fc20
XULRunner is a Mozilla runtime package that can be used to bootstrap XUL+XP COM applications that are as rich as Firefox and Thunderbird. It provides mecha nisms for installing, upgrading, and uninstalling these applications. XULRunner a lso provides libxul, a solution which allows the embedding ...
[SECURITY] Fedora 20 Update: salt-0.17.1-1.fc20
Salt is a distributed remote execution system used to execute commands and query data. It was developed in order to bring the best solutions found in the world of remote execution together and make them better, faster and more malleable. Salt accomplishes this via its ability to handle larger loa...
[SECURITY] Fedora 20 Update: rubygem-ruby-openid-2.3.0-3.fc20
The Ruby OpenID library, with batteries included. A Ruby library for verifying and serving OpenID identities. Ruby OpenID makes it easy to add OpenID authentication to your web applications...
Cisco Identity Services Engine contains an input validation vulnerability
Overview Cisco Identity Services Engine contains an input validation vulnerability CWE-20. Description CWE-20: Improper Input Validation Cisco Identity Services Engine ISE contains an input validation vulnerability. The ISE device contains a TCP Dump option for analyzing traffic on the device. By...