[SECURITY] Fedora 21 Update: python-rhsm-1.13.6-1.fc21

A small library for communicating with the REST interface of a Red Hat Unif ied Entitlement Platform. This interface is used for the management of system entitlements, certificates, and access to content...

[SECURITY] Fedora 21 Update: claws-mail-plugins-3.11.1-1.fc21

Additional plugins for Claws Mail...

[SECURITY] Fedora 21 Update: Pound-2.7-0.4.d.fc21

The Pound program is a reverse proxy, load balancer and HTTPS front-end for Web servers. Pound was developed to enable distributing the load among several Web-servers and to allow for a convenient SSL wrapper for those Web servers that do not offer it natively. Pound is distributed under the GPL ...

[SECURITY] Fedora 21 Update: slapi-nis-0.54.1-1.fc21

This package provides two plugins for Red Hat and 389 Directory Server. The NIS Server plugin allows the directory server to act as a NIS server for clients, dynamically generating and updating NIS maps according to its configuration and the contents of the DIT, and serving the results to clients...

[SECURITY] Fedora 21 Update: fedup-0.9.0-2.fc21

fedup is the Fedora Upgrade tool...

Fedora 21 : freeipa-4.1.1-1.fc21 / slapi-nis-0.54.1-1.fc21 (2014-14427)

freeipa : - Update to upstream 4.1.1 - see http://www.freeipa.org/page/Releases/4.1.1 - fix CVE-2014-7828 slapi-nis : - support FreeIPA overrides in LDAP BIND callback - ignore FreeIPA override searchs outside configured schema compat subtrees Note that Tenable Network Security has extracted the...

Fedora 21 : fedup-0.9.0-2.fc21 (2014-14347)

This update works around a serious problem in Fedora 21 Beta which makes systems automatically shut down 15 minutes into the upgrade. Other improvements : - Adds --product=PRODUCT flag, required for upgrades to F21 - Uses host's config files in upgrade.img, which should fix various upgrade proble...

Fedora 21 : qemu-2.1.2-6.fc21 (2014-13993)

CVE-2014-7815 vnc: insufficient bitsperpixel from the client sanitization bz 1157647, bz 1157641 - CVE-2014-3689 vmwarevga: insufficient parameter validation in rectangle functions bz 1153038, bz 1153035 Fix dep on numactl-devel to be build time not install time Note that Tenable Network Security...

Fedora 21 : wpa_supplicant-2.0-12.fc21 (2014-13537)

This update fixes a possible security issue executing scripts with wpacli. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducin...

Adobe Flash Player Memory Corruption (APSB14-21: CVE-2014-0549)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Fedora 19 : fedup-0.9.0-2.fc19 (2014-14252)

This update works around a serious problem in Fedora 21 Beta which makes systems automatically shut down 15 minutes into the upgrade. Other improvements : - Adds --product=PRODUCT flag, required for upgrades to F21 - Uses host's config files in upgrade.img, which should fix various upgrade proble...

Fedora 21 : python-oauth2-1.5.211-8.fc21 (2014-12483)

Actually apply patch to fix CVE-2013-4347 thanks to Jason Green, Matt Wilson. Fix CVE-2013-4346 and CVE-2013-4347, thanks to Philippe Makowski. Fix CVE-2013-4346 and CVE-2013-4347, thanks to Philippe Makowski. Note that Tenable Network Security has extracted the preceding description block direct...

Fedora 21 : php-5.6.2-1.fc21 (2014-12983)

16 Oct 2014, PHP 5.6.2 Core : - Fixed bug 68044 Integer overflow in unserialize 32-bits only. CVE-2014-3669 Stas cURL : - Fixed bug 68089 NULL byte injection - cURL lib. Stas EXIF : - Fixed bug 68113 Heap corruption in exifthumbnail. CVE-2014-3670 Stas XMLRPC : - Fixed bug 68027 Global buffer...

Fedora 21 : sysklogd-1.5-18.fc21 (2014-12875)

Added patch for remote syslog PRI vulnerability 1142373 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 21 : phpMyAdmin-4.2.10.1-1.fc21 (2014-13479)

phpMyAdmin 4.2.10.1 2014-10-21 ================================ - security XSS in debug SQL output - security XSS in monitor query analyzer Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 21 : drupal7-7.32-1.fc21 (2014-12934)

Update to upstream 7.32 security release for SA-CORE-2014-005, CVE-2014-3704 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 21 : devscripts-2.14.10-1.fc21 (2014-12947)

Update to version 2.14.10, see http://metadata.ftp-master.debian.org/changelogs//main/d/devscripts/de vscripts2.14.10changelog for details. Update to version 2.14.9, see http://metadata.ftp-master.debian.org/changelogs//main/d/devscripts/de vscripts2.14.9changelog for details. Update to version...

Fedora 21 : java-1.8.0-openjdk-1.8.0.25-0.b18.fc21 (2014-12935)

Updated to security u25. Security bugs are same as for http://blog.fuseyism.com/index.php/2014/10/15/security-icedtea-2-5-3-f or-openjdk-7-released/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted t...

Fedora 21 : hostapd-2.3-1.fc21 (2014-13608)

Security fix for CVE-2014-3686. Update to version 2.3 from upstream. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 21 : webkitgtk4-2.6.2-1.fc21 (2014-13461)

Update to 2.6.2. This update disables the SSLv3 to address the POODLE vulnerability. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...