Fedora 29 : 1:wireshark (2018-b7a58187ba)

New version 2.6.4, contains security fix for CVE-2018-16056, CVE-2018-16057, CVE-2018-16058. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

Fedora 29 : python3 (2018-9860917db0)

Update to 3.7.1, Security fix for CVE-2018-14647 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 29 : gnutls (2018-79f7540a1e)

Update to upstream 3.6.5 release - Security fix for CVE-2018-16868 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 29 : kio-extras (2018-2e64407bef)

Drop -htmlthumbnailer, it has security implications and didn't work all that well. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible withou...

Fedora 29 : virtualbox-guest-additions (2018-a7988e4520)

Update Virtualbox Guest Additions to 5.2.22, security fix version Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 29 : mingw-openjpeg2 / openjpeg2 (2018-9954b282ec)

This update fixes CVE-2018-5785. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 703...

Fedora 29 : spatialite-tools / sqlite (2018-ccbe8b931c)

Security fix for fts3/4 corrupt database exploit sqlite rebased to version 3.26.0 per: https://sqlite.org/releaselog/3260.html spatialite-tools rebuilt for latest sqlite version Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...

Fedora 29 : spamassassin (2018-8f0df2c366)

Fixed some small bugs in the previous package: Initial rules now have the correct version, sought channel config is dropped since it doesn't exist anymore and build / runtime deps adjusted. ---- Update to 3.4.2. Fixes CVE-2017-15705, CVE-2018-11780 and CVE-2018-11781 along with many other bugfixe...

Fedora 29 : glibc (2018-f6b7df660d)

This update for the glibc package addresses one moderate security vulnerability and a minor defect : - CVE-2018-19591: A file descriptor leak in ifnametoindex can lead to a denial of service due to resource exhaustion when processing getaddrinfo calls with crafted host names. Reported by Guido...

Fedora 29 : 1:gitolite3 (2018-d0bac4ff3b)

3.6.9 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

Fedora 29 : elfutils (2018-32c8599fe1)

Fixes CVE-2018-16062, CVE-2018-16402 and CVE-2018-16403. unstrip: Handle SHTGROUP sections. strip: Handle mixed out of order allocated/non-allocated sections. elfcompress: Don't rewrite input file if no section data needs updating. Try harder to keep same file mode bits suid on rewrite. libelf,...

Fedora 29 : lighttpd (2018-cd5a9c3c0f)

https://www.lighttpd.net/2018/10/14/1.4.51/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 29 : mosquitto (2018-ff1fdf28aa)

Release 1.5.3 Security : - Fix CVE-2018-12543. If a message is sent to Mosquitto with a topic that begins with $, but is not $SYS, then an assert that should be unreachable is triggered and Mosquitto will exit. Broker : - Elevate log level to warning for situation when socket limit is hit. - Remo...

Fedora 29 : git (2018-f467c36c2b)

Upstream bugfix and security update. Refer to the release notes for general information and upstream commit 321fd82389 for details on CVE-2018-19486. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

Fedora 29 : xen (2018-a24754252a)

x86: Nested VT-x usable even when disabled XSA-278 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 29 : php-pear-CAS (2018-6d62140b89)

Version 1.3.6 Security Fixes: - Fix XSS in proxy mode 271 Joachim Fritschi Bug Fixes: - Fix bad condition 252 Brice Vercoustre - Hash ticket strings to generate valid-length session-ids 224, 244, 248 Adam Franco - Fix 'phpCAS' class capitalization in code 273, 277 phy25 Improvement: - Remove...

Fedora 29 : mingw-poppler (2018-679f8aba03)

This update fixes CVE-2018-16646, CVE-2018-19058, CVE-2018-19059, CVE-2018-19060, CVE-2018-19149. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

Fedora 29 : python2 (2018-ee97fc9e81)

Security fix for CVE-2018-14647 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...

Fedora 29 : 1:NetworkManager (2018-71d85bc8cd)

dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin CVE-2018-15688 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 29 : mingw-podofo / podofo (2018-6b9320d9c9)

The remote Fedora 29 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2018-6b9320d9c9 advisory. This update fixes multiple security vulnerabilities: CVE-2018-5783, CVE-2018-11254, CVE-2018-11255, CVE-2018-11256, CVE-2018-12982, CVE-2018-14320,...