Fedora 31 : 2:samba / libldb / libtalloc / libtevent (2019-41c7fa478a)

Update to Samba 4.11.0 ---- Update to Samba 4.11.0rc4 ---- Update to Samba 4.11.0rc3 - Security fixes for CVE-2019-10197 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean an...

Fedora 31 : curl (2019-6d7f6fa2c8)

double free due to subsequent call of realloc CVE-2019-5481 - fix heap buffer overflow in function tftpreceivepacket CVE-2019-5482 ---- - avoid reporting spurious error in the HTTP2 framing layer 1690971 Note that Tenable Network Security has extracted the preceding description block directly...

Fedora 31 : irssi (2019-d2257607b8)

This is new version of irssi fixing CVE-2019-15717. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 31 : mbedtls (2019-1240f0fe43)

Update to 2.16.3 - Side channel attack on deterministic ECDSA CVE-2019-16910 Release notes: https://tls.mbed.org/tech-updates/releases/mbedtls-2.16.3-and-2.7.12-r eleased Security Advisory: https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security -advisory-2019-10 Note that Tenable...

Fedora 31 : libgcrypt (2019-6c96156c32)

Minor bug and security fix release 1.8.5. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenabl...

Fedora 31 : exim (2019-1ed7bbb09c)

This is an update fixing CVE-2019-15846. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable...

Fedora 31 : jackson-annotations / jackson-bom / jackson-core / jackson-databind (2019-99ff6aa32c)

Update jackson-databind to version 2.9.9.3. - Update jackson-core to version 2.9.9. - Update jackson-annotations to version 2.9.9. - Update jackson-bom to version 2.9.9. Resolves CVE-2019-12086, CVE-2019-12384, CVE-2019-12814, CVE-2019-14379, and CVE-14439. Note that Tenable Network Security has...

Fedora 31 : systemd (2019-d5bd5f0aa4)

Update to latest release - Emission of Session property-changed notifications from logind is fixed this was breaking the switching of sessions to and from gnome. - Security issue: unprivileged users were allowed to change DNS servers configured in systemd-resolved. Now proper polkit authorization...

Fedora 31 : python34 (2019-50772cf122)

Fix CVE-2019-16056 rhbz1750457 ---- Fix CVE-2019-10160 rhbz1718867 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 31 : openconnect (2019-6969467639)

Update to 8.05 release CVE-2019-16239 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable...

Fedora 31 : 1:ImageMagick / rubygem-rmagick (2019-27b9b94805)

Bug fixes and security fixes. Better threading compile time option set. See: https://src.fedoraproject.org/rpms/ImageMagick/pull-request/2 Additional formats enabled. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website...

Fedora 31 : 2:ceph (2019-5e54d5e6e9)

ceph 14.2.3 GA Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc. Th...

Fedora 31 : 1:compat-openssl10 (2019-db06efdea1)

Patch for CVE-2018-0737, CVE-2018-0732, CVE-2018-0734, CVE-2019-1552, CVE-2019-1559. https://www.openssl.org/news/vulnerabilities.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to...

Fedora 31 : nbdkit (2019-bd19067cb4)

New upstream version 1.14.2. Fixes second Denial of Service attack: https://www.redhat.com/archives/libguestfs/2019-September/msg00272.htm l Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to...

Fedora 31 : znc (2019-233d9b9a5e)

Update to 1.7.5 ---- Fixes CVE-2019-12816 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenabl...

[SECURITY] Fedora 31 Update: varnish-6.3.0-1.fc31

This is Varnish Cache, a high-performance HTTP accelerator. Varnish Cache stores web pages in memory so web servers don=EF=BF=BD=EF=BF =BD=EF=BF=BDt have to create the same web page over and over again. Varnish Cache serves pages much faster than any application server; giving the website a...

[SECURITY] Fedora 31 Update: glpi-9.4.4-1.fc31

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

ovbauto.de Cross Site Scripting vulnerability

Security Researcher metamorfosec Helped patch 1948 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting ovbauto.de website and its users. Following coordinat...

[SECURITY] Fedora 31 Update: mingw-libsoup-2.68.0-1.fc31

Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications...

[SECURITY] Fedora 31 Update: mbedtls-2.16.3-1.fc31

Mbed TLS is a light-weight open source cryptographic and SSL/TLS library written in C. Mbed TLS makes it easy for developers to include cryptographic and SSL/TLS capabilities in their embedded applications with as little hassle as possible. FOSS License Exception:...