openSUSE Security Update : dbus-1 (openSUSE-SU-2014:1239-1)

The DBUS-1 service and libraries were updated to upstream release 1.6.24 fixing security issues and bugs. Upstream changes since dbus 1.6.8 + Security fixes - Do not accept an extra fd in the padding of a cmsg message, which could lead to a 4-byte heap buffer overrun. CVE-2014-3635, fdo83622; Sim...

openSUSE Security Update : dbus-1 (openSUSE-SU-2014:1228-1)

DBUS-1 was upgraded to upstream release 1.8. This brings the version of dbus to the latest stable release from an unstable snapshot 1.7.4 that is know to have several regressions - Upstream changes since 1.7.4 : + Security fixes : - Do not accept an extra fd in the padding of a cmsg message, whic...

USN-2291-1 mysql-5.5 vulnerabilities

Multiple security issues were discovered in MySQL and this update includes a new upstream MySQL version to fix these issues. MySQL has been updated to 5.5.38. In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes. Please see the...

Fedora 19 : varnish-3.0.5-1.fc19 (2013-24023)

New upstream release 3.0.5. List of changes available at https://www.varnish-cache.org/releases/varnish-cache-3.0.5 - Changed default mask for varnish log dir to 700, closing 915413 - Added a patch for CVE-2013-4484 from upstream, closing 1025128 Note that Tenable Network Security has extracted t...

Fedora 20 : check-mk-1.2.4p2-1.fc20 (2014-5194)

New upstream release. Fixes CVEs : - CVE-2014-2329 - CVE-2014-2330 - CVE-2014-2331 - CVE-2014-2332 Fixes CVEs : - CVE-2014-2329 - CVE-2014-2330 - CVE-2014-2331 - CVE-2014-2332 Fixes CVEs : - CVE-2014-2329 - CVE-2014-2330 - CVE-2014-2331 - CVE-2014-2332 Fixes CVEs : - CVE-2014-2329 - CVE-2014-2330...

Fedora 20 : ReviewBoard-1.7.14-1.fc20 / python-djblets-0.7.18-1.fc20 (2013-17413)

Mon Sep 23 2013 Stephen Gallagher - 1.7.14-1 - New upstream security release 1.7.14 - http://www.reviewboard.org/docs/releasenotes/reviewboa rd/1.7.14/ - Some API resources were accessible even if their parent resources were not, due to a missing check. In most cases, this was harmless, but it...

Fedora 19 : moodle-2.4.6-1.fc19 (2013-16476)

Moodle upstream has released upstream 2.3.9, 2.4.6, and 2.5.2 versions : http://docs.moodle.org/dev/Moodle2.3.9releasenotes http://docs.moodle.org/dev/Moodle2.4.6releasenotes http://docs.moodle.org/dev/Moodle2.5.2releasenotes These releases contain unspecified security fixes, the nature of which...

Fedora 18 : stunnel-4.55-1.fc18 (2013-4243)

new upstream release. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora 17 : xorg-x11-drv-openchrome-0.3.3-1.fc17 (2013-9138)

Fix integer overflow in libchromeXvMC CVE-2013-1994. - Various bug fixes and improvements. Update to latest upstream release. For details, see http://cgit.freedesktop.org/openchrome/xf86-video-open chrome/tree/NEWS?id=release033 Note that Tenable Network Security has extracted the preceding...

Fedora 18 : xorg-x11-drv-openchrome-0.3.3-1.fc18 (2013-9114)

Fix integer overflow in libchromeXvMC CVE-2013-1994. - Various bug fixes and improvements. Update to latest upstream release. For details, see http://cgit.freedesktop.org/openchrome/xf86-video-open chrome/tree/NEWS?id=release033 Note that Tenable Network Security has extracted the preceding...

Fedora 19 : xorg-x11-drv-openchrome-0.3.3-1.fc19 (2013-8991)

Fix integer overflow in libchromeXvMC CVE-2013-1994. - Various bug fixes and improvements. Update to latest upstream release. For details, see http://cgit.freedesktop.org/openchrome/xf86-video-open chrome/tree/NEWS?id=release033 Note that Tenable Network Security has extracted the preceding...

Fedora 17 : moodle-2.2.10-1.fc17 (2013-8692)

Moodle upstream has released upstream 2.4.4, 2.3.7, and 2.2.10 versions : http://docs.moodle.org/dev/Moodle2.2.10releasenotes http://docs.moodle.org/dev/Moodle2.3.7releasenotes http://docs.moodle.org/dev/Moodle2.4.4releasenotes These releases contain unspecified security fixes, the nature of whic...

Fedora 18 : moodle-2.3.7-1.fc18 (2013-8702)

Moodle upstream has released upstream 2.4.4, 2.3.7, and 2.2.10 versions: http://docs.moodle.org/dev/Moodle2.2.10releasenotes http://docs.moodle.org/dev/Moodle2.3.7releasenotes http://docs.moodle.org/dev/Moodle2.4.4releasenotes These releases contain unspecified security fixes, the nature of which...

Fedora 19 : gypsy-0.9-1.fc19 (2013-8659)

New upstream 0.9 release - add patch to fix FTBSF due to deprecated gtypeinit - Fix CVE-2011-0523 - read arbitrary files as the root user on behalf of a regular user - Fix CVE-2011-0524 - buffer overflow in nmea device input handling code no longer in existence - aarch64 support - Fix segfault...

Fedora 18 : nspr-4.9.5-2.fc18 / nss-3.14.3-1.fc18 / nss-softokn-3.14.3-1.fc18 / etc (2013-2929)

Update nss to nss-3.14.3 This is a patch release to address CVE-2013-1620. Detailed descriptions of the bugs fixes on nss-3.14.3 can be found in the upstream release notes at https://developer.mozilla.org/en-US/docs/NSS/NSS3.14.3releasenotes Note that Tenable Network Security has extracted the...

Fedora 17 : mate-settings-daemon-1.5.4-1.fc17 (2012-19726)

Latest upstream release Fix CVE2012-5560 mate-settings-daemon-1.5.3-3.fc17 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducin...

Security fix for the ALT Linux 9 package mailman version 5:2.1.15-alt0.2

Oct. 17, 2012 Konstantin Lepikhov 5:2.1.15-alt0.2 - New upstream release 2.1.15. - Security fixes: + CVE-2011-0707, + many fixes in web interface against XSS attacks, + web admin interface has been hardened against CSRF attacks. - Re-merge debian patches...

Fedora 17 : puppet-2.7.18-1.fc17 (2012-10891)

This is an upstream security release. It addresses a number of issues found in puppet-2.7.x. The Red Hat security team has rated this update as having low security impact. Refer to the upstream release notes and bugzilla entries for further details...

Fedora 17 2012-9621

Cobbler is a network install server. Cobbler supports PXE, virtualized installs, and re-installing existing Linux machines. The last two modes use a helper tool, 'koan', that integrates with cobbler. There is also a web interface 'cobbler-web'. Cobbler's advanced features include importing...

Debian DSA-2491-1 : postgresql-8.4 - several vulnerabilities

Two vulnerabilities were discovered in PostgreSQL, a SQL database server : - CVE-2012-2143 The crypttext, text function in the pgcrypto contrib module did not handle certain passwords correctly when producing traditional DES-based hashes. Characters after the first 0x80 byte were ignored. -...