[SECURITY] Fedora 24 Update: dnsmasq-2.76-1.fc24

Dnsmasq is lightweight, easy to configure DNS forwarder and DHCP server. It is designed to provide DNS and, optionally, DHCP, to a small network. It can serve the names of local machines which are not in the global DNS. The DHCP server integrates with the DNS server and allows machines with...

Fedora 24 : python (2016-9932f852c7)

CVE-2016-5636 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Networ...

Fedora 24 : gsi-openssh (2016-3f128cf0ce)

Synch with openssh package. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 24 : 1:nodejs (2016-f90dc5ee3e)

Update to latest LTS security release 4.4.6 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 24 : gd (2016-a4d48d6fd6)

Version 2.2.2 Security related fixes : - Integer Overflow in gdImagePaletteToTrueColor resulting in heap overflow CVE-2016-5767 - Stack overflow with gdImageFillToBorder CVE-2015-8874 - Integer Overflow in gd2GetHeader resulting in heap overflow CVE-2016-5766 - NULL pointer Dereference at...

Fedora 24 : phpMyAdmin (2016-81c2dabf20)

phpMyAdmin 4.6.3 2016-06-23 ============================= This version includes many security fixes that are announced as PMASA-2016-17 through PMASA-2016-28 which are posted at https://www.phpmyadmin.net/security/ Furthermore, version 4.6.3 includes the regularly scheduled maintenance improvemen...

Fedora 24 : kernel (2016-1c409313f4)

Rebase to latest upstream 4.6 release, 4.6.3. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 24 : wordpress (2016-7db496f6f2)

See upstream announcement WordPress 4.5.3 Maintenance and Security Release Packaging changes : - provide nginx configuration fedora - drop mandatory dependency on httpd suggested 1336091 - protect php files in uploads directory Note that Tenable Network Security has extracted the preceding...

Fedora 24 : xerces-c (2016-9284772686)

Update to xerces-c 3.1.4, fixing CVE-2016-2099 and CVE-2016-4463 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 24 : openjpeg2 (2016-abdc548f46)

The remote Fedora 24 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2016-abdc548f46 advisory. Update to version 2.1.1, see https://github.com/uclouvain/openjpeg/releases/tag/v2.1.1 for details. Fixes: CVE-2016-3183, CVE-2016-3181,...

Fedora 24 : davfs2 (2016-5e7abcde9d)

rebase to latest upstream Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 24 : squidGuard (2016-8b19472a3c)

Unit file fix. ---- http://www.squidguard.org/Downloads/Patches/1.4/Readme.Patch-20150201 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 24 : mirrormanager (2016-e84b809c4b)

Added a patch to move the mirrormanager client from pickle to json related to CVE-2016-1000003. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

Fedora 24 : php-pecl-zip (2016-79ac80a0d5)

Version 1.13.3 - Fixed bug php71923 integer overflow in ZipArchive::getFrom. CVE-2016-3078 Stas - Fixed bug php72258 ZipArchive converts filenames to unrecoverable form. Anatol - Fixed bug php72434 ZipArchive class Use After Free Vulnerability in PHP's GC algorithm and unserialize. Dmitry Note th...

Fedora 24 : python3 (2016-e63a732c9d)

CVE-2016-5636 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Networ...

Fedora 24 : mingw-xerces-c (2016-0a061f6dd9)

MinGW cross compiled xerces-c 3.1.4, fixing CVE-2016-0729, CVE-2016-2099 and CVE-2016-4463 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possibl...

Fedora 24 : struts (2016-d717fdcf74)

Security fix for CVE-2016-1181, CVE-2016-1182 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 24 : 2:qemu (2016-a80eab65ba)

CVE-2016-4002: net: buffer overflow in MIPSnet bz 1326083 - CVE-2016-4952 scsi: pvscsi: out-of-bounds access issue - CVE-2016-4964: scsi: mptsas infinite loop bz 1339157 - CVE-2016-5106: scsi: megasas: out-of-bounds write bz 1339581 - CVE-2016-5105: scsi: megasas: stack information leakage bz...

[SECURITY] Fedora 24 Update: sqlite-3.13.0-1.fc24

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...

Fedora 24 : setroubleshoot (2016-047a86f5b1)

Security fix for CVE-2016-4446 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...