Fedora 25 : php-horde-Horde-Core (2016-866713edaf)

HordeCore 2.26.1 - jan SECURITY: Add CSRF protection tokens to portal layout forms and fix open URL redirection Reported by Florian Kllich. - jan SECURITY: enable CSRF token for configuration form again Reported by Dawid Gounski via Beyond Security's SecuriTeam Secure Disclosure program. - mjr...

Fedora 25 : dbxtool (2016-0f013aee39)

This is the update to add blacklist items for CVE-2016-3320 Microsoft bootloaders. See https://support.microsoft.com/en-us/kb/3179577 for more details. Before applying, 'dbxtool -l' should show something around 14 entries in dbx on UEFI systems though possibly several fewer. After updating the...

Fedora 25 : 1:tomcat (2016-f4a443888b)

This updates includes a rebase from tomcat 8.0.32 up to 8.0.36 to resolve : - rhbz1349469 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service and also includes the following bug fixes : - rhbz1341850 tomcat-jsvc.service has TOMCATUSER value hard-coded -...

Fedora 25 : mingw-openjpeg2 (2016-8ed6b7bb5e)

Backport fix for an out-of-bounds write. ---- Security fix for CVE-2016-7163 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 25 : chromium (2016-eec838a3a0)

Stable update to 53.0.2785.101. Security fix for CVE-2016-5147, CVE-2016-5148, CVE-2016-5149, CVE-2016-5150, CVE-2016-5151, CVE-2016-5152, CVE-2016-5153, CVE-2016-5154, CVE-2016-5155, CVE-2016-5156, CVE-2016-5157, CVE-2016-5158, CVE-2016-5159, CVE-2016-5161, CVE-2016-5162, CVE-2016-5163,...

Fedora 25 : chromium (2016-03b199bec6)

Update to 53.0.2785.113 Security fix for CVE-2016-5170, CVE-2016-5171, CVE-2016-5172, CVE-2016-5173, CVE-2016-5174, CVE-2016-5175 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically...

Fedora 25 : 1:openssl (2016-64e0743e16)

Update from upstream with multiple security issues fixed. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 25 : bash (2016-eda100d886)

Security fix for CVE-2016-0634. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...

Fedora 25 : bash (2016-2c4b5ad64e)

Specially crafted SHELLOPTS and PS4 variables can cause arbitrary code execution. It is a security bug described in CVE-2016-7543 and this update fixes it. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

Fedora 25 : python-proteus / tryton / trytond / trytond-account / etc (2016-d961441913)

security fix for CVE-2016-1241, CVE-2016-1242 - other bug fixes Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 25 : 5:guile (2016-0aab71f552)

Update to the latest stable release, which fixes CVE-2016-8605 and CVE-2016-8606. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 25 : mingw-openjpeg2 (2016-f8235d2ef9)

Update to version 2.1.2, see https://github.com/uclouvain/openjpeg/blob/v2.1.2/CHANGELOG.md for details. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as...

Fedora 25 : xen (2016-1d8429b89f)

fix build problem with glibc 2.24 x86: Disallow L3 recursive pagetable for 32-bit PV guests XSA-185, CVE-2016-7092 x86: Mishandling of instruction pointer truncation during emulation XSA-186, CVE-2016-7093 x86 HVM: Overflow of shctxt-segreg XSA-187, CVE-2016-7094 pandoc documentation has dependen...

[SECURITY] Fedora 25 Update: pacemaker-1.1.15-3.fc25

Pacemaker is an advanced, scalable High-Availability cluster resource manager for Corosync, CMAN and/or Linux-HA. It supports more than 16 node clusters with significant capabilities for managing resources and dependencies. It will run scripts at initialization, when machines go up or down, when...

bind security update

30:9.3.6-25.P1.11 - Fix CVE-2016-8864...

[SECURITY] Fedora 25 Update: kdepimlibs-4.14.10-15.fc25

Personal Information Management PIM libraries for KDE 4...

[SECURITY] Fedora 25 Update: jasper-1.900.13-1.fc25

This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...

imagebam.com Open Redirect vulnerability

Vulnerable URL: http://www.imagebam.com/rd.php?https://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 840 VIP website status:| Yes Coordinated Disclosur...

[SECURITY] Fedora 25 Update: kernel-4.8.3-300.fc25

The kernel meta package...

[SECURITY] Fedora 25 Update: ghostscript-9.20-2.fc25

Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable Document Format PDF files. Ghostscript translates PostScript code into many...