5060 matches found
Fedora 22 : proftpd-1.3.5-6.fc22 (2015-7164)
Vadim Melihow reported a critical issue with proftpd installations that use the modcopy module's SITE CPFR/SITE CPTO commands; modcopy allows these commands to be used by unauthenticated clients Upstream report: http://bugs.proftpd.org/showbug.cgi?id=4169 Note that modcopy is not loaded/enabled b...
[SECURITY] Fedora 22 Update: kernel-4.0.1-300.fc22
The kernel meta package...
[SECURITY] Fedora 22 Update: dovecot-2.2.16-2.fc22
Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats. The SQL drivers and authentication plug-ins are in their subpackages...
[SECURITY] Fedora 22 Update: mingw-libgcrypt-1.6.3-1.fc22
Libgcrypt is a general purpose crypto library based on the code used in GNU Privacy Guard. This is a Windows cross-compiled version of the library...
[SECURITY] Fedora 22 Update: mingw-openssl-1.0.2a-1.fc22
The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols. This package contains Windows MinGW libraries and development tools...
[SECURITY] Fedora 22 Update: mingw-libtiff-4.0.3-6.fc22
The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if yo...
[SECURITY] Fedora 22 Update: pdns-3.4.4-1.fc22
The PowerDNS Nameserver is a modern, advanced and high performance authoritative-only nameserver. It is written from scratch and conforms to all relevant DNS standards documents. Furthermore, PowerDNS interfaces with almost any database...
[SECURITY] Fedora 22 Update: pdns-recursor-3.7.2-1.fc22
PowerDNS Recursor is a non authoritative/recursing DNS server. Use this package if you need a dns cache for your network...
Fedora 22 : testdisk-7.0-2.fc22 (2015-6892)
TestDisk 7.0 fixes several stack overflows. The new photorec is faster. qphotorec is a qt4 version of PhotoRec. Full release notes: http://www.cgsecurity.org/wiki/TestDisk7.0Release Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...
[SECURITY] Fedora 22 Update: yourls-1.7-3.20150410gitabc7d6c.fc22
YOURLS is a small set of PHP scripts that will allow you to run your own URL shortening service a la TinyURL. You can make it private or public, you can pick custom keyword URLs, it comes with its own API...
[SECURITY] Fedora 22 Update: testdisk-7.0-2.fc22
Tool to check and undelete partition. Works with FAT12, FAT16, FAT32, NTFS, ext2, ext3, ext4, btrfs, BeFS, CramFS, HFS, JFS, Linux Raid, Linux Swap, LVM, LVM2, NSS, ReiserFS, UFS, XFS. PhotoRec is a signature based file recovery utility. It handles more than 440 file formats including JPG,...
Fedora 22 : wpa_supplicant-2.3-3.fc22 (2015-6898)
This update addresses a security vulnerability identified as CVE-2015-1863 . More information on this vulnerability is provided by upstream at https://w1.fi/security/2015-1/wpasupplicant-p2p-ssid-overflow.txt . An extract : Attacker or a system controlled by the attacker needs to be within radio...
Fedora 22 : firefox-37.0.2-2.fc22 / xulrunner-37.0.2-1.fc22 (2015-6629)
Update to new upstream - 37.0.2 Bookmark rebuild - Bug 1210474 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
Fedora 22 : qt3-3.3.8b-63.fc22 (2015-6613)
This update fixes CVE-2015-1860, a buffer overflow when loading some specific invalid GIF image files, which could be exploited for denial of service application crash and possibly even arbitrary code execution attacks. The security patch is backported from Qt 4. Please note that Qt 3 is NOT...
Fedora 22 : FlightGear-3.4.0-4.fc22 / FlightGear-data-3.4.0-2.fc22 (2015-6557)
This update provides a security fix related to the Nasal scripting language. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
Fedora 22 : curl-7.40.0-3.fc22 (2015-6695)
require credentials to match for NTLM re-use CVE-2015-3143 - fix invalid write with a zero-length host name in URL CVE-2015-3144 - fix invalid write in cookie path sanitization code CVE-2015-3145 - close Negotiate connections when done CVE-2015-3148 Note that Tenable Network Security has...
Fedora 22 : xen-4.5.0-8.fc22 (2015-6569)
Information leak through XENDOMCTLgettscinfo XSA-132, CVE-2015-3340 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
[SECURITY] Fedora 22 Update: xen-4.5.0-8.fc22
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...