Fedora 23 : nghttp2-1.7.1-1.fc23 (2016-ac861a840e)

CVE-2016-1544: Out of memory in nghttpd, nghttp, and libnghttp2asio applications due to unlimited incoming HTTP header fields: https://github.com/tatsuhiro-t/nghttp2/releases/tag/v1.7.1 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora 23 : php-5.6.18-1.fc23 (2016-46a34efa06)

04 Feb 2016, PHP 5.6.18 Core: Fixed bug php71039 exec functions ignore length but look for NULL termination. Anatol Fixed bug php71089 No check to duplicate zendextension. Remi Fixed bug php71201 round segfault on 64-bit builds. Anatol Added support for new HTTP 451 code. Julien Fixed bug php7127...

Fedora 23 : libldb-1.1.24-1.fc23 / libtalloc-2.1.5-2.fc23 / libtdb-1.3.8-1.fc23 / etc (2015-b960ca78bf)

Fixes CVE-2015-5330 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora 23 : claws-mail-3.13.1-4.fc23 (2015-aa14be8d92)

Update from 3.12.0 to 3.13.1 for bug-fixes. Includes security fix for CVE-2015-8614. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 23 : glibc-2.22-9.fc23 (2016-0f9e9a34ce)

This updates addresses a critical security vulnerability in the DNS resolver related to AFUNSPEC queries with getaddrinfo CVE-2015-7547. In addition, a bug that causes Hesiod lookups to fail with a crash is fixed. Note that Tenable Network Security has extracted the preceding description block...

Fedora 23 : owncloud-8.0.9-1.fc23 (2015-a6be3a6810)

This update provides the latest upstream release of ownCloud in the current minor series - 8.0.9 for all releases but EPEL 6, 7.0.11 for EPEL 6. These releases come with unspecified 'security improvements', so updating quickly is recommended. As usual, a minor update should apply smoothly, but we...

Fedora 23 : xen-4.5.2-5.fc23 (2015-12a089920e)

eepro100: Prevent two endless loops CVE-2015-8345, pcnet: fix rx buffer overflow CVE-2015-7512, ui: vnc: avoid floating point exception CVE-2015-8504, additional patch for XSA-158, CVE-2015-8338 long running memory operations on ARM XSA-158, CVE-2015-8338 XENMEMexchange error handling issues...

Fedora 23 : owncloud-8.0.10-1.fc23 (2016-a576196426)

This update provides the new upstream patch release of ownCloud 7.0.12 for EPEL 6, 8.0.10 for all other distributions. It also adds a 'well-known' redirect for WebDAV alongside the existing ones for CalDAV and CardDAV - if you don't know what this is, don't worry. These are bugfix updates which...

Fedora 23 : wget-1.17-1.fc23 (2015-10f92d4d06)

new version Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

Fedora 23 : mbedtls-2.2.1-1.fc23 (2016-b3784096ef)

Update to 2.2.1 Release notes: https://tls.mbed.org/tech- updates/releases/mbedtls-2.2.1-2.1.4-1.3.16-and-polarssl .1.2.19-released ---- - Update to 2.2.0 Release notes: https://tls.mbed.org/tech- updates/releases/mbedtls-2.2.0-2.1.3-1.3.15-and-polarssl .1.2.18-released Note that Tenable Network...

Fedora 23 : ganglia-3.7.2-6.fc23 (2015-de8ba28354)

Update to ganglia-web 3.7.1, including security fix for CVE-2015-6816. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 23 : grub2-2.02-0.24.fc23 (2015-c3b4fef3af)

Rebuild without multiboot modules in the EFI image. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 23 : qemu-2.4.1-2.fc23 (2015-2773b85b49)

Fix SSE4 emulation with accel=tcg bz 1270703 CVE-2015-8345: Fix infinite loop in eepro100 bz 1285214 CVE-2015-7504: Fix heap overflow in pcnet bz 1286543 CVE-2015-7512: Fix buffer overflow in pcnet bz 1286549 Note that Tenable Network Security has extracted the preceding description block...

Fedora 23 : seamonkey-2.39-1.fc23 (2015-28e56e52e7)

Update to 2.39 Fixes various security issues, see http://www.mozilla.org/security/known-vulnerabilities/seamonkey.html for more info. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

Fedora 23 : abrt-2.7.0-2.fc23 / libreport-2.6.3-1.fc23 (2015-cc585b503f)

Security fix for CVE-2015-5302 abrt-2.7.0-2.fc23 - Fix broken problem details in abrt-cli/gnome-abrt abrt-2.7.0-1.fc23 - cli-ng: initial - bodhi: introduce wrapper for 'reporter-bugzilla -h' and 'abrt-bodhi' - handle-event: remove obsolete workaround - remove 'not needed' code - doc: change...

Fedora 23 : phpMyAdmin-4.5.3.1-1.fc23 (2015-deb2bbdde0)

phpMyAdmin 4.5.3.1 2015-12-25 =============================== - Undefined offset 2 - Security Path disclosure, see PMASA-2015-6 ---- phpMyAdmin 4.5.3.0 2015-12-23 =============================== - Incomplete results of UNION ALL - MATCH AGAINST keywords not recognized - syntax verifier is not...

Fedora 23 : kea-1.0.0-1.fc23 (2015-aa3a69bdc3)

New upstream release including security fix for CVE-2015-8373 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 23 : mediawiki-1.26.2-1.fc23 (2015-5567dd228a)

Changes since 1.26.1 bug T121892 Various special pages resulted in fatal errors. Changes since 1.26.0 bug T117899 SECURITY: $wgArticlePath can no longer be set to relative paths that do not begin with a slash. This enabled trivial XSS attacks. Configuration values such as...

Fedora 23 : kernel-4.2.7-300.fc23 (2015-ac9a19888e)

The 4.2.7 stable update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 23 : springframework-3.2.15-1.fc23 (2015-065d9953e8)

Security fix for CVE-2015-5211. Update to 3.2.15.RELEASE Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issue...