systemd-journald Memory Corruption / Information Leak Vulnerability

This is a thorough analysis of how Qualys approached exploiting three vulnerabilities in systemd-journald. Although they have not released formal exploits yet, they detail in here is useful in understanding the flaws. Qualys Security Advisory System Down: A systemd-journald exploit...

Fedora 29 : libgxps (2019-8e9789a629)

libgxps 0.3.1 release. - Fix font scaling when converting xps to pdf - Handle errors returned by archivereaddata in GXPSArchive - Ensure gxpsarchivereadentry fills the GError in case of failure - Make the pdf generated by xpstopdf to be 96 dpi - Fix OUTPUT FILE description in man pages - Clear th...

Fedora 29 : golang (2019-1198005e1f)

Rebase to go1.11.4 - Security fix for CVE-2018-16875, CVE-2018-16874 and CVE-2018-16873 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

[SECURITY] Fedora 29 Update: libgxps-0.3.1-1.fc29

libgxps is a GObject based library for handling and rendering XPS documents...

[SECURITY] Fedora 29 Update: beep-1.3-26.fc29

Beep allows the user to control the PC speaker with precision, allowing different sounds to indicate different events. While it can be run quite happily on the command line, its intended place of residence is within shell/Perl scripts, notifying the user when something interesting occurs. Of...

Fedora 29 : tcpreplay (2018-5f91054677)

This release 4.3.1 contains bug fixes only : - Fix checkspell detected typos 531 - Heap overflow packet2tree and getl2len 530 This is Tcpreplay suite 4.3.0 This release contains several bug fixes and enhancements : - Fix maxOS TOS checksum failure 524 - TCP sequence edits seeding 514 - Fix issues...

Fedora 29 : python3 / python3-docs (2019-f9d5bbef82)

Python update to 3.7.2. Read the release announcement or the full changelog. Mostly bugfixes, but also 2 security fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean an...

Fedora 29 : chromium (2019-859384e002)

Update to Chromium 71. Fixes CVE-2018-17480 CVE-2018-17481 CVE-2018-18335 CVE-2018-18336 CVE-2018-18337 CVE-2018-18338 CVE-2018-18339 CVE-2018-18340 CVE-2018-18341 CVE-2018-18342 CVE-2018-18343 CVE-2018-18344 CVE-2018-18345 CVE-2018-18346 CVE-2018-18347 CVE-2018-18348 CVE-2018-18349 CVE-2018-1835...

[SECURITY] Fedora 29 Update: python3-docs-3.7.2-1.fc29

The python3-docs package contains documentation on the Python 3 programming language and interpreter. Install the python3-docs package if you'd like to use the documentation for the Python 3 language...

[SECURITY] Fedora 29 Update: thunderbird-60.4.0-1.fc29

Mozilla Thunderbird is a standalone mail and newsgroup client...

[SECURITY] Fedora 29 Update: wget-1.20.1-1.fc29

GNU Wget is a file retrieval utility which can use either the HTTP or FTP protocols. Wget features include the ability to work in the background while you are logged out, recursive retrieval of directories, file name wildcard matching, remote file timestamp storage and comparison, use of Rest wit...

Fedora 29 : 1:wireshark (2018-b7a58187ba)

New version 2.6.4, contains security fix for CVE-2018-16056, CVE-2018-16057, CVE-2018-16058. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

Fedora 29 : python3 (2018-9860917db0)

Update to 3.7.1, Security fix for CVE-2018-14647 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 29 : spamassassin (2018-8f0df2c366)

Fixed some small bugs in the previous package: Initial rules now have the correct version, sought channel config is dropped since it doesn't exist anymore and build / runtime deps adjusted. ---- Update to 3.4.2. Fixes CVE-2017-15705, CVE-2018-11780 and CVE-2018-11781 along with many other bugfixe...

Fedora 29 : opensc (2018-fe4b72fa7d)

Security fix for CVE-2018-16418, CVE-2018-16419, CVE-2018-16420, CVE-2018-16421, CVE-2018-16423, CVE-2018-16424, CVE-2018-16425, CVE-2018-16426, CVE-2018-16427 + support for RSA-PSS signatures. Note that Tenable Network Security has extracted the preceding description block directly from the Fedo...

Fedora 29 : krb5 (2018-7db7ccda4d)

Fix low-severity CVE-2018-20217 an authenticated user who can obtain a TGT using an older encryption type DES, DES3, or RC4 can cause an assertion failure in the KDC by sending an S4U2Self request. Note that Tenable Network Security has extracted the preceding description block directly from the...

Fedora 29 : chromium (2018-8e866c5066)

Security fix for CVE-2018-17478 CVE-2018-17479. Update to 70.0.3538.110. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 29 : apache-commons-compress (2018-1b7b0ad759)

Fix for CVE-2018-11771 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenab...

Fedora 29 : pdns (2018-85fc964de8)

Update to 4.1.5 Release notes: https://blog.powerdns.com/2018/11/06/powerdns-authoritative-server-4-0 -6-4-1-5-and-recursor-4-0-9-4-1-5-released/ PowerDNS Security Advisory 2018-03 https://doc.powerdns.com/authoritative/security-advisories/powerdns-a dvisory-2018-03.html CVE-2018-10851 PowerDNS...

Fedora 29 : coreutils (2018-3a25355ab6)

fix heap-based buffer overflow in vasnprintf CVE-2018-17942 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...