Fedora 29 : feh (2018-a84b6d0071)

update to 2.28 fixes rhbz 1438979 1444077 and 1602421 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 29 : lldpad (2018-06d56c8c9d)

Add upstream fix for improper sanitization of shell-escape codes when lldptool parses a mngAddr TLV CVE-2018-10932. - Add upstream patch to support DSCP selectors in APP TLVs. This allows configuration of DSCP-based packet prioritization on capable network devices. Note that Tenable Network...

Fedora 29 : python-paramiko (2018-ea6b328afd)

Python Paramiko versions 2.3.2 and 2.4.1 are vulnerable to an authentication bypass in paramiko/authhandler.py. A remote attacker could exploit this vulnerability in Paramiko SSH servers to execute arbitrary code. Note that applications using Paramiko only as a client such as ansible are not...

Fedora 29 : haproxy (2018-0b038c7047)

Update to 1.8.14, which includes fix for CVE-2018-14645. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 29 : php-symfony (2018-b38a4dd0c7)

Version 2.8.49 2018-12-06 - security CVE-2018-19790 Security\Http detect bad redirect targets using backslashes @xabbuh - security CVE-2018-19789 Form Filter file uploads out of regular form types @nicolas-grekas Note that Tenable Network Security has extracted the preceding description block...

Fedora 29 : kde-connect (2018-7850e2ac5b)

Security fix release, Changes since 1.3.1 : - Security fix Don't disable all modern SSH encryption algorithms. - Remote media player info didn't update under some circumstances. - Remove characters from commands UUIDs that aren't legal in URLs. - New notifications now appear on top and not in the...

Fedora 29 : 2:qemu (2018-87f2ace20d)

Fix cpu model crash on AMD hosts bz 1640140 - CVE-2018-15746: seccomp blacklist is not applied to all threads bz 1618357 - Fix assertion in addressspacestwlecached bz 1644728 - CVE-2018-10839: ne2000: fix possible out of bound access bz 1636429 - CVE-2018-17958: rtl8139: fix possible out of bound...

Fedora 29 : curl (2018-7785911c9e)

SASL password overflow via integer overflow CVE-2018-16839 - fix use-after-free in handle close CVE-2018-16840 - fix bad arethmetic when outputting warnings to stderr CVE-2018-16842 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update...

Fedora 29 : polkit (2018-2f8696869e)

Fix of CVE-2018-19788, priv escalation with high UIDs Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 29 : php-PHPMailer (2018-a2e9bd6eae)

Version 5.2.27 - SECURITY Fix potential object injection vulnerability. CVE-2018-19296. Reported by Sehun Oh of cyberone.kr. Note that the 5.2 branch is deprecated and will not receive security updates after 31st December 2018. Note that Tenable Network Security has extracted the preceding...

Fedora 29 : php-horde-Horde-Core (2018-6a2f930619)

HordeCore 2.31.6 - mjr SECURITY: Fix XSS vulnerability when rendering a colorpicker Bug 14857. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

Fedora 29 : adplug (2018-de3a0ba76e)

Fix double-free in CEmuopl::CEmuopl 1635881, CVE-2018-17825 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 29 : firefox (2018-da8f2af12c)

New upstream Firefox version 62.0 - More info at https://www.mozilla.org/en-US/firefox/62.0/releasenotes/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as...

Fedora 29 : poppler (2018-e805688895)

Security fix for CVE-2018-16646, CVE-2018-19058, CVE-2018-19059 and CVE-2018-19060. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible witho...

Fedora 29 : kernel / kernel-headers (2018-272cf2f9f4)

The 4.18.9 stable update contains a number of important fixes across the tree. ---- The 4.18.8 update contains a number of important fixes across the tree Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

Fedora 29 : git (2018-f467c36c2b)

Upstream bugfix and security update. Refer to the release notes for general information and upstream commit 321fd82389 for details on CVE-2018-19486. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

Fedora 29 : kernel / kernel-headers (2018-f392ab8c84)

The 4.18.12 update contains a number of important fixes across the tree Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introduci...

Fedora 29 : ansible (2018-af82e7c863)

Update to 2.7.5 bugfix release. Fix for CVE-2018-16876 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 29 : soundtouch (2018-09802a742a)

Security fix version for CVE-2018-17098 , CVE-2018-17096 and CVE-2018-17097 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 29 : nss (2018-a78b2ef820)

Updates the nss package to upstream NSS 3.40.1. This is a point release after 3.40, with a security fix for CVE-2018-12404. For details about other new functionality and a list of bugs fixed in this release please see the upstream release notes...