Fedora 23 : webkitgtk4-2.10.7-1.fc23 (2016-ec05afb364)

This update together with previous releases addresses the following vulnerabilities: - CVE-2015-7096 - CVE-2015-7098 Additional fixes: - Disable DNS prefetch when a proxy is configured. - Reduce the maximum simultaneous network connections to match other browsers. - Make WebKitWebView always...

Fedora 23 : mod_nss-1.0.12-1.fc23 (2015-c76c1c84cf)

Update to upstream 1.0.12 Fixes CVE-2015-5244 Add support for SNI Add RenegBufferSize option Add support for TLS Session Tickets RFC 5077 For full list of changes see https://fedorahosted.org/modnss/wiki/Releases modnss-1.0.12-1.fc23 - Update to upstream 1.0.12 Note that Tenable Network Security...

Fedora 23 : openstack-swift-2.3.0-3.fc23 (2016-2256c80a94)

Security fix for CVE-2016-0738 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 23 : glibc-2.22-6.fc23 (2015-7174c4d68d)

This update re-adds large file support to the openat function, removes support for the LDPOINTERGUARD environment variable which could be used to weaken security protections in ATSECURE/SUID binaries, and adds function pointer obfuscation to the TLS destructor list. Note that Tenable Network...

Fedora 23 : pcre-8.38-1.fc23 (2015-994f0b3021)

This release fixes various bugs when compiling or matching expressions. It also fixes how pcregrep handles binary files. It also fixes a heap-based buffer overflow in pcreexec when ovector has size 1 bug 1285415 Note that Tenable Network Security has extracted the preceding description block...

Fedora 23 : php-symfony-2.7.7-2.fc23 / php-twig-1.23.1-2.fc23 (2015-0efcb5fbc5)

Twig 1.23.1 2015-11-05 fixed some exception messages which triggered PHP warnings fixed BC on TwigTestNodeTestCase Twig 1.23.0 2015-10-29 - deprecated the possibility to override an extension by registering another one with the same name deprecated TwigExtensionInterface::getGlobals added...

Fedora 23 : arts-1.5.10-30.fc23 (2015-6d473c95ee)

Security fix for CVE-2015-7543 in arts the legacy aRts sound server: A temporary directory was being created insecurely using mktemp and mkdir, allowing an attacker to hijack the temporary directory and thus the inter- process communication IPC. This update fixes the temporary directory creation ...

Fedora 23 : snappy-player-1.0-7.20151010git166a98.fc23 (2015-bae05abd06)

snappy-player-1.0-7.20151010git166a98.fc23 - Update to commit 166a98 - Hardened build activated on F23 snappy-player-1.0-7.20151010git166a98.fc21 - Update to commit 166a98 - Hardened build activated on F23 snappy- player-1.0-7.20151010git166a98.fc22 - Update to commit 166a98 - Hardened build...

Fedora 23 : xscreensaver-5.34-1.fc23 (2015-19b2b73dc5)

A security flaw was found that xscreensaver aborts in some case with dual screen and unplugging one of them. This new rpm should fix the issue. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 23 : python-django-1.8.6-1.fc23 (2015-1dd5bc998f)

rebase to 1.8.6 rhbz1276914 ---- rebase to 1.8.5 rhbz1276914 ---- python-django-1.8.4-1.fc23 - Do not install bash completion for python executables Ville Skytta, rhbz1253076 - CVE-2015-5963 Denial-of-service possibility in logout view by filling session store rhbz1254911 - CVE-2015-5964...

Fedora 23 : pacemaker-1.1.13-3.fc23 (2015-f9864ecd8f)

Security fix for CVE-2015-1867: issue allegedly present in pacemaker-1.1.12, fixed in pacemaker-1.1.13. pacemaker-1.1.13-3.fc21,22,23 - Update to Pacemaker-1.1.13 post-release + patches sync - Add nagios-plugins-metadata subpackage enabling support of selected Nagios plugins as resources recogniz...

Fedora 23 : xen-4.5.2-8.fc23 (2016-e48f4bd14f)

x86: inconsistent cachability flags on guest mappings XSA-154, CVE-2016-2270 1309324 VMX: guest user mode may crash guest with non-canonical RIP XSA-170, CVE-2016-2271 1309323 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

Fedora 23 : kernel-4.3.3-300.fc23 (2016-6ce812a1e0)

Update to latest upstream stable release, 4.3.3. This is a major kernel version rebase and testers should take care to ensure things are working as expected. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Fedora 23 : openjpeg2-2.1.0-7.fc23 (2015-a2c2a898f1)

This update adds a fix for CVE-2015-6581 double free vulnerability. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 23 : shellinabox-2.19-1.fc23 (2015-1c773e8702)

Added support for middle-click paste Improved iOS support New logic to enable soft keyboard icon Disable HTTPS fallback using the URL /plain. Consequently disables automatic upgrades from HTTP to HTTPS CVE-2015-8400 Note that Tenable Network Security has extracted the preceding description block...

Fedora 23 : qemu-2.4.1-5.fc23 (2016-e9bba2bb01)

CVE-2015-7549: pci: NULL pointer dereference issue bz 1291138 CVE-2015-8558: DoS by infinite loop in ehciadvancestate bz 1291309 CVE-2015-8666: Heap-based buffer overrun during VM migration bz 1294027 CVE-2015-8744: vmxnet3: fix crash with short packets bz 1295440 CVE-2015-8745: vmxnet3: don't...

Fedora 23 : libpng-1.6.17-4.fc23 (2015-5e52306c9c)

Security fix for CVE-2015-8126 1281757, 1281756. Proper patch Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 23 : sddm-0.12.0-5.fc23 (2015-b15b90eeaa)

sddm-0.12.0-5.fc23 - Security fix for CVE-2015-0856 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 23 : thunderbird-38.3.0-1.fc23 (2015-9b3fceb4b6)

thunderbird-38.3.0-1.fc21 - Update to 38.3.0 - For changes see https://www.mozilla.org/en-US/thunderbird/38.3.0/releasenotes/ thunderbird-38.3.0-1.fc22 - Update to 38.3.0 - For changes see https://www.mozilla.org/en-US/thunderbird/38.3.0/releasenotes/ thunderbird-38.3.0-1.fc23 - Update to 38.3.0 ...

Fedora 23 : nodejs-ws-1.0.1-1.fc23 (2016-3509d27585)

Update to 1.0.1 - Security Fix - 1295717,1295718,1295719 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issue...