Fedora 23 : xen-4.5.2-8.fc23 (2016-e48f4bd14f)

x86: inconsistent cachability flags on guest mappings XSA-154, CVE-2016-2270 1309324 VMX: guest user mode may crash guest with non-canonical RIP XSA-170, CVE-2016-2271 1309323 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

Fedora 23 : arts-1.5.10-30.fc23 (2015-6d473c95ee)

Security fix for CVE-2015-7543 in arts the legacy aRts sound server: A temporary directory was being created insecurely using mktemp and mkdir, allowing an attacker to hijack the temporary directory and thus the inter- process communication IPC. This update fixes the temporary directory creation ...

Fedora 23 : openstack-swift-2.3.0-3.fc23 (2016-2256c80a94)

Security fix for CVE-2016-0738 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 23 : php-symfony-2.7.7-2.fc23 / php-twig-1.23.1-2.fc23 (2015-0efcb5fbc5)

Twig 1.23.1 2015-11-05 fixed some exception messages which triggered PHP warnings fixed BC on TwigTestNodeTestCase Twig 1.23.0 2015-10-29 - deprecated the possibility to override an extension by registering another one with the same name deprecated TwigExtensionInterface::getGlobals added...

Fedora 23 : pcre-8.38-1.fc23 (2015-994f0b3021)

This release fixes various bugs when compiling or matching expressions. It also fixes how pcregrep handles binary files. It also fixes a heap-based buffer overflow in pcreexec when ovector has size 1 bug 1285415 Note that Tenable Network Security has extracted the preceding description block...

Fedora 23 : sddm-0.12.0-5.fc23 (2015-b15b90eeaa)

sddm-0.12.0-5.fc23 - Security fix for CVE-2015-0856 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 23 : qemu-2.4.1-5.fc23 (2016-e9bba2bb01)

CVE-2015-7549: pci: NULL pointer dereference issue bz 1291138 CVE-2015-8558: DoS by infinite loop in ehciadvancestate bz 1291309 CVE-2015-8666: Heap-based buffer overrun during VM migration bz 1294027 CVE-2015-8744: vmxnet3: fix crash with short packets bz 1295440 CVE-2015-8745: vmxnet3: don't...

Fedora 23 : libsbw-2.11.1-9.20150414svn579.fc23 (2015-3a59e6cf5c)

libsbw-2.11.1-9.20150414svn579.fc22 - Rebuild for cmake 3.4.0 libsbw-2.11.1-9.20150414svn579.fc23 - Rebuild for cmake 3.4.0 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

Fedora 23 : libvirt-1.2.18.2-1.fc23 (2015-30b347dff1)

Rebased to version 1.2.18.2 disk backend is not removed properly when disk frontent hotplug fails bz 1265968 Fix TPM cancel path on newer kernels bz 1244895 Remove timeout for libvirt-guests.service bz 1195544 CVE-2015-5313 libvirt: filesystem storage volume names path traversal flaw bz 1291433...

Fedora 23 : libpng-1.6.17-4.fc23 (2015-5e52306c9c)

Security fix for CVE-2015-8126 1281757, 1281756. Proper patch Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 23 : xscreensaver-5.34-1.fc23 (2015-19b2b73dc5)

A security flaw was found that xscreensaver aborts in some case with dual screen and unplugging one of them. This new rpm should fix the issue. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 23 : python-django-1.8.6-1.fc23 (2015-1dd5bc998f)

rebase to 1.8.6 rhbz1276914 ---- rebase to 1.8.5 rhbz1276914 ---- python-django-1.8.4-1.fc23 - Do not install bash completion for python executables Ville Skytta, rhbz1253076 - CVE-2015-5963 Denial-of-service possibility in logout view by filling session store rhbz1254911 - CVE-2015-5964...

Fedora 23 : libsndfile (2015-5afed1aad2)

The remote Fedora 23 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2015-5afed1aad2 advisory. libsndfile-1.0.25-17.fc22 - fix CVE-2015-7805: Heap overflow vulnerability when parsing specially crafted AIFF header libsndfile-1.0.25-16.fc21 - fi...

Fedora 23 : jenkins-1.625.3-1.fc23 (2015-d7e5461dbf)

Update to latest LTS release 1.625.3. This update fixes CVE-2015-7536, CVE-2015-7537, CVE-2015-7538, CVE-2015-7539. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format ...

Fedora 23 : prosody-0.9.10-1.fc23 (2016-5a5c85c5a8)

Prosody 0.9.10 ============== A summary of changes in this release: Security -------- moddialback: Adopt key generation algorithm from XEP-0185, to prevent impersonation attacks CVE-2016-0756 Fixes and improvements ---------------------- Startup: Open /dev/urandom read-only, to fix a failure to...

[SECURITY] Fedora 23 Update: pcs-0.9.149-2.fc23

pcs is a corosync and pacemaker configuration tool. It permits users to easily view, modify and created pacemaker based clusters...

[SECURITY] Fedora 23 Update: exiv2-0.25-3.fc23

A command line utility to access image metadata, allowing one to: print the Exif metadata of Jpeg images as summary info, interpreted value s, or the plain data for each tag print the Iptc metadata of Jpeg images print the Jpeg comment of Jpeg images set, add and delete Exif and Iptc metadata of...

[SECURITY] Fedora 23 Update: openssl-1.0.2g-2.fc23

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...

[SECURITY] Fedora 23 Update: kernel-4.4.3-300.fc23

The kernel meta package...

[SECURITY] Fedora 23 Update: pcre-8.38-6.fc23

Perl-compatible regular expression library. PCRE has its own native API, but a set of "wrapper" functions that are base d on the POSIX API are also supplied in the library libpcreposix. Note that this just provides a POSIX calling interface to PCRE: the regular expressions themselves still follow...