Fedora 28 : python3 (2018-7eae87ec86)

Update to 3.6.5 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora 28 : php-tcpdf (2018-f1ca41a1a6)

Version 6.2.25 - Fix support for image URLs. ---- Version 6.2.24 - Support remote urls when checking if file exists. ---- Version 6.2.23 - Simplify fileexists function. ---- Version 6.2.20 - Fix for security vulnerability: Using the phar:// wrapper it was possible to trigger the unserialization o...

Fedora 28 : qutebrowser (2018-5c8854a808)

This update fixes an XSS vulnerability on the qute://history page :history. The vulnerability allowed websites to inject HTML into the page via a crafted title tag. This could allow them to steal your browsing history. It also ships some minor fixes not worth mentioning. ---- Add a few minor...

Fedora 28 : thunderbird-enigmail (2018-22c1b7e738)

Update to 2.0.8 : - A security issue has been fixed that allows an attacker to prepare a plain, unauthenticated HTML message in a way that it looks like it's signed and/or encrypted. - Changelog: https://enigmail.net/index.php/en/download/changelog Note that Tenable Network Security has extracted...

Fedora 28 : php-horde-Horde-Core (2018-f4558a5180)

HordeCore 2.31.6 - mjr SECURITY: Fix XSS vulnerability when rendering a colorpicker Bug 14857. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

Fedora 28 : nspr / nss / nss-softokn / nss-util (2018-1a7a5c54c2)

Updates the nss family of packages to upstream NSPR 4.20 and NSS 3.39. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS3.39 releasenotes Note that Tenable Network...

Fedora 28 : gifsicle (2018-202c536f70)

Update to 1.91 - fixes double-free in readgif Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 28 : mosquitto (2018-d305559481)

Fix CVE-2017-7651 rhbz1551755, rhbz1551754 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 28 : php-symfony (2018-8c06b6defd)

Version 2.8.49 2018-12-06 - security CVE-2018-19790 Security\Http detect bad redirect targets using backslashes @xabbuh - security CVE-2018-19789 Form Filter file uploads out of regular form types @nicolas-grekas Note that Tenable Network Security has extracted the preceding description block...

Fedora 28 : kernel / kernel-headers / kernel-tools (2018-3857a8b41a)

The v4.19.5 stable update contains important fixes across the tree Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 28 : sox (2018-57a9f93beb)

Fixes CVE-2017-11332, CVE-2017-11358, and CVE-2017-11359. ---- Prevents division by zero in src/ao.c This bug is hard to reproduce, depending on the HW configuration or installed OS parts. For me, it can be reproduced only in mock. In this update, error message should be displayed instead of...

Fedora 28 : python3 (2018-5ed8fb9efa)

Update to 3.6.7 Security fix for CVE-2018-14647 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 28 : python-lxml (2018-67e98d4b7a)

Update to 4.2.5 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora 28 : lldpad (2018-cec7093baa)

Add upstream fix for improper sanitization of shell-escape codes when lldptool parses a mngAddr TLV CVE-2018-10932. - Add upstream patch to support DSCP selectors in APP TLVs. This allows configuration of DSCP-based packet prioritization on capable network devices. Note that Tenable Network...

Fedora 28 : guava (2018-54a5bcc7e4)

Security fix for CVE-2018-10237 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...

Fedora 28 : tika (2018-639385f5ec)

Update to newer release of Tika including security fixes for CVE-2016-4434 and CVE-2016-6809. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

Fedora 28 : 1:NetworkManager (2018-7243f31304)

ifcfg: fix crash parsing DNS entries rh 1607866 - dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin CVE-2018-15688 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to...

Fedora 28 : calibre (2018-af8b2c28fe)

Update to calibure 3.19.0. See changelog at: https://calibre-ebook.com/whats-new Fixes CVE-2018-7889 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much ...

Fedora 28 : zsh (2018-d2dcdbb051)

avoid crash when copying empty hash table CVE-2018-7549 - avoid NULL dereference when using $PA... on an empty array CVE-2018-7548 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to...

Fedora 28 : 1:ImageMagick / libpaper / rubygem-rmagick (2018-3b518bd80f)

Fixing leaking descriptor libpaper - Fixed numerous use of uninitialized values, integer overflow, memory exceeded, and timeouts credit to OSS Fuzz. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...