Fedora 28 : python35 (2018-7689556ab2)

Security fix for CVE-2018-14647 1631822 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 28 : kernel / kernel-headers (2018-cc812838fb)

The 4.17.11 stable update contains a number of important fixes across the tree. Also of note, starting with this release, kernel-headers is built from a different srpm. The contents should be the same, but there were some benefits to breaking it from the kernel build. ---- The 4.17.10 stable kern...

Fedora 28 : teeworlds (2018-63465e1846)

0.6.5 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

[SECURITY] Fedora 28 Update: terminology-1.3.2-1.fc28

Fast and lightweight terminal emulator using EFL libraries...

Fedora Update for vcftools FEDORA-2018-ea05fcd378

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Code injection

Ivan Cordoba Generic Content Management System CMS through 2018-04-28 has XSS via the Administrator/users.php user ID...

[SECURITY] Fedora 28 Update: mingw-poppler-0.62.0-2.fc28

MinGW Windows Poppler library...

[SECURITY] Fedora 28 Update: openjpeg2-2.3.0-10.fc28

The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profil e-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multi ple...

[SECURITY] Fedora 28 Update: mingw-openjpeg2-2.3.0-6.fc28

MinGW Windows openjpeg2 library...

[SECURITY] Fedora 28 Update: sqlite-3.22.0-5.fc28

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...

[SECURITY] Fedora 28 Update: webkit2gtk3-2.22.5-1.fc28

WebKitGTK+ is the port of the portable web rendering engine WebKit to the GTK+ platform. This package contains WebKit2 based WebKitGTK+ for GTK+ 3...

[SECURITY] Fedora 28 Update: nettle-3.4.1-1.fc28

Nettle is a cryptographic library that is designed to fit easily in more or less any context: In crypto toolkits for object-oriented languages C++, Python, Pike, ..., in applications like LSH or GNUPG, or even in kernel space...

Fedora Update for mingw-openjpeg2 FEDORA-2018-200c84e08a

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-1000630

creationtimestamp| type| source ---|---|--- 2018-12-28 18:22:11+00:00| seen| https://t.me/cibsecurity/1804...

CVE-2018-1000631

creationtimestamp| type| source ---|---|--- 2018-12-28 18:22:10+00:00| seen| https://t.me/cibsecurity/1803...

CVE-2018-1000889

creationtimestamp| type| source ---|---|--- 2018-12-28 18:22:07+00:00| seen| https://t.me/cibsecurity/1800...

vma-ny.org XSS vulnerability

Open Bug Bounty ID: OBB-715082 Description| Value ---|--- Affected Website:| vma-ny.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

s.jword.jp XSS vulnerability

Open Bug Bounty ID: OBB-715009 Description| Value ---|--- Affected Website:| s.jword.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

[SECURITY] Fedora 28 Update: tinc-1.0.35-1.fc28

tinc is a Virtual Private Network VPN daemon that uses tunnelling and encryption to create a secure private network between hosts on the Internet. Because the tunnel appears to the IP level network code as a normal network device, there is no need to adapt any existing software. This tunnelling...

[SECURITY] Fedora 28 Update: mosquitto-1.5.5-1.fc28

Mosquitto is an open source message broker that implements the MQ Telemetry Transport protocol version 3.1 and 3.1.1 MQTT provides a lightweight method of carrying out messaging using a publish/subscribe model. This makes it suitable for "machine to machine" messaging such as with low power senso...