Fedora 30 : graphite2 (2019-644ef7ebec)

New upstream 1.3.13 release - Move to python3 for tests - Fix CVE-2018-7999 rhbz 1554383 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

opensc security, bug fix, and enhancement update

0.19.0-3 - Make OpenSC multilib also on s390 and ppc arches 0.19.0-2 - Make OpenSC multilib again by moving the conflicting files on ix86 arch 0.19.0-1 - Rebase to new upstream release 1656791 - Add Support for HID Crescendo 144K 1612372 - Add Support for CAC Alt tokens 1645581 - Fix usage...

Fedora 29 : icedtea-web (2019-efb92eed7a)

fixed CVEs 2019-10181, 2019-10182, 2019-10185 ---- Updated to fres upstream release : https://mail.openjdk.java.net/pipermail/distro-pkg-dev/2019-March/0413 20.html New in release 1.8 2019-03-12 : - added support for javafx-desc and so allwong run of pure-javafx only applications - --nosecurity...

Fedora 28 : nspr / nss / nss-softokn / nss-util (2018-1a7a5c54c2)

Updates the nss family of packages to upstream NSPR 4.20 and NSS 3.39. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS3.39 releasenotes Note that Tenable Network...

Fedora 28 : glibc (2018-264d881a62)

This updates contains various updates from the upstream glibc 2.27 release branch, including minor fixes for the realpath function and the i386 memmove implementation. Python helper scripts in the glibc-benchtests subpackage now use /usr/bin/python3 as the script interpreter RHBZ1577223. Starting...

Fedora 29 : nspr / nss / nss-softokn / nss-util (2018-c72d2d89ec)

Updates the nss family of packages to upstream NSPR 4.20 and NSS 3.39. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS3.39 releasenotes Note that Tenable Network...

Fedora 29 : pdns-recursor (2018-e14840a7f5)

Fixes CVE-2018-16855 Crafted query can cause a denial of service ---- New upstream release with security fixes for CVE-2018-10851, CVE-2018-14626 and CVE-2018-14644 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website...

Fedora 28 : zsh (2018-a5e9a619f6)

update to latest upstream release, which fixes the following vulnerabilities : - CVE-2018-1100 - stack-based buffer overflow in utils.c:checkmailpath - CVE-2018-1083 - stack-based buffer overflow in compctl.c:genmatchesfiles - CVE-2018-1071 - stack-based buffer overflow in exec.c:hashcmd Note tha...

A cache invalidation bug in Linux memory management

Posted by Jann Horn, Google Project Zero This blogpost describes a way to exploit a Linux kernel bug CVE-2018-17182 that exists since kernel version 3.16. While the bug itself is in code that is reachable even from relatively strongly sandboxed contexts, this blogpost only describes a way to...

Security update for cgit (moderate)

This update for cgit to version 1.2.1 fixes the following issues: The following security vulnerability was addressed: - CVE-2018-14912: Fixed a directory traversal vulnerability, when enable-http-clone=1 is not turned off boo1103799 The following other changes were made: - Update to upstream...

Security update for cgit (moderate)

This update for cgit fixes the following issues: The following security vulnerability was addressed: - CVE-2018-14912: Fixed a directory traversal vulnerability, when enable-http-clone=1 is not turned off boo1103799 The following other changes were made: - Update to upstream release 1.2.1...

Updated blender packages fix security vulnerabilities

Updated blender package fixes security vulnerabilities: Multiple vulnerabilities have been discovered in various parsers of Blender. Malformed .blend model files and malformed multimedia files AVI, BMP, HDR, CIN, IRIS, PNG, TIFF may result in the execution of arbitrary code CVE-2017-2899,...

openSUSE Security Update : nodejs6 (openSUSE-2018-444)

This update for nodejs6 fixes the following issues : - Fix some node-gyp permissions - New upstream LTS release 6.14.1 : - Security fixes : + CVE-2018-7160: Fix for inspector DNS rebinding vulnerability bsc1087463 + CVE-2018-7158: Fix for 'path' module regular expression denial of service...

Updated glpi packages fix security vulnerability

The glpi package has been updated to version 9.1.6, which fixes several security issues and other bugs. See the upstream release announcements for details. An issue in the php-zetacomponents-base package which prevented GLPI from working has also been fixed...

openSUSE: Security Advisory for hostapd (openSUSE-SU-2017:2896-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 26 : tor (2017-1179268a20)

update to upstream release 0.3.1.7 ---- update to upstream release 0.2.9.12 SECURITY 1494860 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

SUSE-SU-2017:2168-1 Security update for nodejs4, nodejs6

This update for nodejs4 and nodejs6 fixes the following issues: Security issues fixed: - CVE-2017-1000381: The c-ares function aresparsenaptrreply could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way. bsc1044946 -...

MGASA-2017-0229 Updated graphicsmagick packages fix security vulnerabilities

New stable upstream release including security fixes for CVE-2016-7800, CVE-2016-7996, CVE-2016-7997, CVE-2016-8682, CVE-2016-8683, CVE-2016-8684, CVE-2016-9830, CVE-2017-6335, CVE-2017-8350, CVE-2017-10794, CVE-2017-10799, CVE-2017-10800, CVE-2017-11403 and possibly several other security issues...

SUSE-SU-2017:0855-1 Security update for nodejs4

This update for nodejs4 fixes the following issues: - New upstream LTS release 4.7.3 The embedded openssl sources were updated to 1.0.2k CVE-2017-3731, CVE-2017-3732, CVE-2016-7055, bsc1022085, bsc1022086, bsc1009528 - No changes in LTS version 4.7.2 - New upstream LTS release 4.7.1 build: shared...

Fedora 25 : knot-resolver (2017-df53d02da7)

new upstream release + security: Knot Resolver 1.2.0 and higher could return AD flag for insecure answer if the daemon received answer with invalid RRSIG several times in a row. + fix: layer/iterate: some improvements in cname chain unrolling + fix: layer/validate: fix duplicate records in...