Fedora 29 : bird (2018-6aada550ca)

Updating bird to 1.6.4 release which includes fix for CVE-2018-12066 Running bird in foreground Bird is running under bird user and group rather than root Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

Fedora 28 : drupal7 (2018-75bca4c5a0)

https://www.drupal.org/SA-CORE-2018-002 - https://www.drupal.org/SA-CORE-2018-001 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 28 : yara (2018-8344cb89ac)

bump to 3.8.1, fix CVE-2018-12034 and CVE-2018-12035 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issue...

Fedora 28 : libgit2 (2018-b10e54263a)

Update to 0.26.4 CVE-2018-11235 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...

Fedora 28 : httpd (2018-6744ca470d)

This update includes the latest upstream release of the Apache HTTP Server, version 2.4.33. A number of security vulnerabilities are fixed in this release : - Low: Possible out of bound read in modcachesocache CVE-2018-1303 - Low: Possible out of bound access after failure in reading the HTTP...

Fedora 28 : cabextract / libmspack (2018-cb337fb199)

Latest stable releases of libmspack and cabextract, includes security fixes for CVE-2018-14680, CVE-2018-14681, CVE-2018-14682, CVE-2018-18584, CVE-2018-18585 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable h...

Fedora 28 : leptonica / mingw-leptonica (2018-93a16d053f)

Update to leptonica-1.77.0, see http://www.leptonica.com/source/version-notes.html for details. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

Fedora 28 : chromium (2018-f76e6d17f1)

Security fixes for CVE-2018-6055 CVE-2018-6119 CVE-2018-16429 CVE-2018-16428 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 28 : 1:openssl (2018-49651b2236)

Minor update to version 1.1.0h. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...

Fedora 28 : unboundid-ldapsdk (2018-e8635ed222)

Rebase packages to version: 4.0.5 CVE-2018-1000134 has been fixed in 4.0.5 release of the UnboundID LDAP SDK for Java. A blog post has been written covering the details of this CVE and is available at https://nawilson.com/2018/03/19/cve-2018-1000134-and-the-unboundid-lda p-sdk-for-java/ Further...

Fedora 29 : python2 (2018-ae70d262b0)

Security fix for CVE-2018-1000802 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Fedora 28 : sqlite (2018-bb66329dee)

Security fix for CVE-2018-8740 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...

Fedora 28 : monitorix (2018-3b67a68763)

Prior Monitorix versions are vulnerable to cross-site scripting XSS, caused by improper validation of user-supplied input by the monitorix.cgi file. A remote attacker could exploit this vulnerability using some of the arguments provided graph= or when= in a specially crafted URL to execute script...

Fedora 28 : php-symfony4 (2018-96d770ddc9)

Version 4.0.11 2018-05-25 - bug 27364 DI Fix bad exception on uninitialized references to non-shared services nicolas-grekas - bug 27359 HttpFoundation Fix perf issue during MimeTypeGuesser intialization nicolas-grekas - security cve-2018-11408 SecurityBundle Fail if security.httputils cannot be...

Fedora 28 : sos-collector (2018-1f3a47bfbb)

Update to new 1.5 release. Resolves CVE-2018-14650 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 28 : libarchive (2018-20c24949c0)

latest upstream release, fixes several CVE issues Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 28 : plexus-archiver (2018-7a9a2f6ec0)

Security fix: arbitrary file write vulnerability / arbitrary code execution using a specially crafted zip file CVE-2018-1002200 A path traversal vulnerability has been discovered in plexus-archiver when extracting a carefully crafted zip file which holds path traversal file names. A remote attack...

Fedora 28 : cfitsio / kst (2018-ceaa9a2cda)

CFITSIO security update, check https://heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/docs/changes2.txt Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much ...

Fedora 28 : ghostscript (2018-c39ae23dc8)

This is a security fix for CVE-2018-16802. It also fixes a printing problem discovered in one of the previous CVE fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean an...

Fedora 29 : soundtouch (2018-09802a742a)

Security fix version for CVE-2018-17098 , CVE-2018-17096 and CVE-2018-17097 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...