Fedora 23 : kdelibs3-3.5.10-71.fc23 (2015-6e50918d8e)

Security fix for CVE-2015-7543 in kdelibs3 the KDE 3 compatibility version of kdelibs: A temporary directory was being created insecurely using mktemp and mkdir, allowing an attacker to hijack the temporary directory and thus the inter-process communication IPC. This update fixes the temporary...

Fedora 23 : perl-5.22.1-351.fc23 (2016-5d4fc5ecc9)

Fix manipulating environment variables to align with how glibc handles duplicated environment variables. Perl now uses the first variable listed in the environment array and it removes any subsequent entries of the same-named variable from the array, so that child processes have only one variable...

Fedora 23 : wildmagic5-5.13-12.fc23 (2015-91585ff79b)

wildmagic5-5.13-12.fc23 - Rebuild with -fPIC - Hardened builds on F23 wildmagic5-5.13-12.fc21 - Rebuild with -fPIC - Hardened builds on F23 wildmagic5-5.13-12.fc22 - Rebuild with -fPIC - Hardened builds on F23 wildmagic5-5.13-12.el6 - Rebuild with -fPIC - Hardened builds on F23...

Fedora 23 : mariadb-10.0.23-1.fc23 (2016-e30164d0a2)

This is an update to 10.0.23 that delivers also all fixes for CVE-2015-4792, CVE-2015-4802, CVE-2015-4807, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819, CVE-2015-4826, CVE-2015-4830, CVE-2015-4836, CVE-2015-4858, CVE-2015-4861, CVE-2015-4870, CVE-2015-4879, CVE-2015-4895, CVE-2015-4913,...

Fedora 22 : tubo-5.0.15-3.fc22 (2015-4329bbe285)

tubo-5.0.15-3.el6 - Hardened builds on F23 tubo-5.0.15-3.fc23 - Hardened builds on F23 tubo-5.0.15-3.fc22 - Hardened builds on F23 tubo-5.0.15-3.fc21 - Hardened builds on F23 tubo-5.0.15-3.el6 - Hardened builds on F23 Note that Tenable Network Security has extracted the preceding description bloc...

Fedora 21 : krb5-1.12.2-19.fc21 (2015-200d2dfd9f)

krb5-1.13.2-13.fc23 - Patch CVE-2015-2698 krb5-1.12.2-19.fc21 - Patch CVE-2015-2698 krb5-1.13.2-10.fc22 - Patch CVE-2015-2698 ---- krb5-1.12.2-18.fc21 - Fix CVE-2015-2695, CVE-2015-2696, CVE-2015-2697 krb5-1.13.2-9.fc22 - Fix CVE-2015-2695, CVE-2015-2696, CVE-2015-2697 krb5-1.13.2-12.fc23 - Fix...

Fedora 23 : telegram-cli-1.3.1-7.20150730git2052f4.fc23 (2015-802cb89674)

telegram-cli-1.3.1-7.20150730git2052f4.fc22 - Hardened builds on F23 telegram-cli-1.3.1-7.20150730git2052f4.fc23 - Hardened builds on F23 telegram-cli-1.3.1-7.20150730git2052f4.el7 - Hardened builds on F23 telegram-cli-1.3.1-7.20150730git2052f4.el6 - Hardened builds on F23 Note that Tenable Netwo...

Fedora 23 : snappy-player-1.0-7.20151010git166a98.fc23 (2015-bae05abd06)

snappy-player-1.0-7.20151010git166a98.fc23 - Update to commit 166a98 - Hardened build activated on F23 snappy-player-1.0-7.20151010git166a98.fc21 - Update to commit 166a98 - Hardened build activated on F23 snappy- player-1.0-7.20151010git166a98.fc22 - Update to commit 166a98 - Hardened build...

Fedora 22 : nodejs-0.10.42-4.fc22 (2016-8925b6119f)

Security fix for CVE-2016-2216, CVE-2016-2086 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 22 : ProDy-1.7.1-1.fc22 (2015-dbc15897fb)

ProDy-1.7.1-1.el6 - Update to 1.7.1 - Added scipy as BR package - Set CFLAGS for hardened builds ProDy-1.7.1-1.fc22 - Update to 1.7.1 - Added scipy as BR package - Set CFLAGS for hardened builds ProDy-1.7.1-1.fc21 - Update to 1.7.1 - Added scipy as BR package - Set CFLAGS for hardened builds...

Fedora 22 : pcre-8.37-7.fc22 (2015-afafa29551)

This release fixes CVE-2015-8380 a heap-based buffer overflow in pcreexec when ovector has size 1. ---- This release fixes a crash when compiling an expression with long MARK or THEN names. It also fixes compiling a POSIX character class followed by a single ASCII character in a class item while...

Fedora 22 : kernel-4.2.6-200.fc22 (2015-cd94ad8d7c)

The 4.2.6 stable update contains a number of important fixes across the tree. kernel-4.2.6-200.fc22 - Fix incorrect size calculations in megaraid with 64K pages rhbz 1269300 - CVE-2015-8104 kvm: DoS infinite loop in microcode DB exception rhbz 1278496 1279691 - CVE-2015-5307 kvm: DoS infinite loo...

Fedora 23 : pacemaker-1.1.13-3.fc23 (2015-f9864ecd8f)

Security fix for CVE-2015-1867: issue allegedly present in pacemaker-1.1.12, fixed in pacemaker-1.1.13. pacemaker-1.1.13-3.fc21,22,23 - Update to Pacemaker-1.1.13 post-release + patches sync - Add nagios-plugins-metadata subpackage enabling support of selected Nagios plugins as resources recogniz...

VMware ESX / ESXi Third-Party Libraries Multiple Vulnerabilities (VMSA-2011-0013) (remote check)

The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several third-party components and libraries : - Java Runtime Environment JRE - libuser - Netscape Portable Runtime NS...

Fedora 22 : prosody-0.9.9-2.fc22 (2016-e289f41b76)

Prosody 0.9.9 ============= A summary of changes: Security fixes -------------- Fix path traversal vulnerability in modhttpfiles CVE-2016-1231 Fix use of weak PRNG in generation of dialback secrets CVE-2016-1232 Bugs ---- Improve handling of CNAME records in DNS Fix traceback when deleting a user...

Fedora 23 : metis-5.1.0-7.fc23 (2015-8cf7bff87b)

metis-5.1.0-7.el7 - Rebuild for cmake 3.4.0 - Hardened builds on F23 metis-5.1.0-7.fc22 - Rebuild for cmake 3.4.0 - Hardened builds on F23 metis-5.1.0-7.fc21 - Rebuild for cmake 3.4.0 - Hardened builds on F23 metis-5.1.0-7.el6 - Rebuild for cmake 3.4.0 - Hardened builds on F23 metis-5.1.0-7.fc23 ...

Fedora 23 : php-horde-horde-5.2.9-1.fc23 (2016-5d0e7f15ef)

horde 5.2.9 jan SECURITY: Fix XSS vulnerability in menu bar exposed by few applications Bug 14213. jan Add more detailed user DN settings to Kolab group configuration Request 11737. jan Fix returning to last page after problem reporting from AJAX pages Bug 12112. jan Fix custom database...

Fedora 23 : ca-certificates-2015.2.6-1.0.fc23 (2015-f9e5ca4e6a)

This is an update to the set of CA certificates version 2.6 as released with NSS version 3.21 However, as in previous versions of the ca-certificates package, the CA list has been modified to keep several legacy CAs still trusted for compatibility reasons. Please refer to the project URL for...

Fedora 22 : wordpress-4.4.1-1.fc22 (2016-4c8956da04)

WordPress 4.4.1 Security and Maintenance Release WordPress versions 4.4 and earlier are affected by a cross-site scripting vulnerability that could allow a site to be compromised. This was reported by Crtc4L. There were also several non-security bug fixes: Emoji support has been updated to includ...

Fedora 23 : prosody-0.9.10-1.fc23 (2016-5a5c85c5a8)

Prosody 0.9.10 ============== A summary of changes in this release: Security -------- moddialback: Adopt key generation algorithm from XEP-0185, to prevent impersonation attacks CVE-2016-0756 Fixes and improvements ---------------------- Startup: Open /dev/urandom read-only, to fix a failure to...