Fedora 10 : squid-3.0.STABLE13-1.fc10 (2009-1526)

Thu Feb 5 2009 Jonathan Steffan - 7:3.0.STABLE13-1 - upgrade to latest upstream - Thu Jan 29 2009 Henrik Nordstrom - 7:3.0.STABLE12-1 - upgrade to latest upstream - Fri Dec 19 2008 Henrik Nordstrom - 7:3.0.STABLE10-3 - actually include the upstream bugfixes in the build - Fri Dec 19 2008 Henrik...

Fedora 10 : cups-1.3.9-4.fc10 (2008-10895)

Security update to fix CVE-2008-5183. Also changed in this update: a bug that caused cups-polld to fail to resolve hostnames has been fixed a bug that could cause libcups to get stuck in a loop has been fixed the dnssd backend has been removed as it is not working correctly and can prevent printe...

Fedora 10 : krb5-1.6.3-18.fc10 (2009-2852)

This update incorporates patches to fix potential read overflow and NULL pointer dereferences in the implementation of the SPNEGO GSSAPI mechanism CVE-2009-0844, CVE-2009-0845, attempts to free an uninitialized pointer during protocol parsing CVE-2009-0846, and a bug in length validation during...

Fedora 10 : lynx-2.8.6-18.fc10 (2008-9952)

Fri Nov 7 2008 Jiri Moskovcak - 2.8.6-18 - Fixed CVE-2008-4690 lynx: remote arbitrary command execution. via a crafted lynxcgi: URL thoger Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 10 : xine-lib-1.1.16.3-1.fc10 (2009-3433)

Maintenance release. Fixes two security problems CVE-2009-0385, CVE-2009-1274 and a few miscellaneous bugs. See the upstream changelog for details: http://sourceforge.net/project/shownotes.php?groupid=9655&releaseid= 673233 Note that Tenable Network Security has extracted the preceding descriptio...

Fedora 10 : ntop-3.3.8-3.fc10 (2009-2805)

ls -lh /var/log/ntop/access.log -rw-rw-rw- 1 root root 0 2009-02-04 11:53 /var/log/ntop/access.log Fixed. log world-writable when the --access-log- file option is used. This option is not used in Fedora or Red Hat by default and is not noted in the configuration file. It is, however, noted in the...

Fedora 10 : seamonkey-1.1.15-3.fc10 (2009-3161)

http://www.mozilla.org/security/known-vulnerabilities/seamonkey11.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 10 : cups-1.3.10-1.fc10 (2009-3769)

This update fixes several security issues: CVE-2009-0163, CVE-2009-0164, CVE-2009-0146, CVE-2009-0147, and CVE-2009-0166. PDF files are now converted to PostScript using the poppler package's 'pdftops' program. NOTE: If your CUPS server is accessed using a hostname or hostnames not known to the...

Fedora 10 : moodle-1.9.4-6.fc10 (2009-3280)

CVE-2009-1171: The TeX filter in Moodle 1.6 before 1.6.9+, 1.7 before 1.7.7+, 1.8 before 1.8.9, and 1.9 before 1.9.5 allows user-assisted attackers to read arbitrary files via an input command in a '$$' sequence, which causes LaTeX to include the contents of the file. Upstream bug and CVS commit:...

Fedora 10 : lcms-1.18-0.1.beta2.fc10 (2009-2970)

Some patches that was collected in the fedora package have just been submitted upstream. Changes are hight that this update can be superseeded by a beta3 or a stable release from upstream. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora 10 : fail2ban-0.8.3-18.fc10 (2009-1737)

This updates fixes CVE-2009-0362. See https://vulners.com/cve/CVE-2009-0362 for further details. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 10 : roundup-1.4.6-4.fc10 (2009-2583)

Mon Mar 9 2009 Paul P. Komkoff Jr - 1.4.6-4 - security bug bz489355 - Wed Feb 25 2009 Fedora Release Engineering - 1.4.6-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora11MassRebuild - Sat Nov 29 2008 Ignacio Vazquez-Abrams - 1.4.6-2 - Rebuild for Python 2.6 Note that Tenable Network...

Fedora 10 : lcms-1.18-1.fc10 (2009-2903)

Mon Mar 23 2009 kwizart - 1.18-1 - Update to 1.18 final - Remove upstreamed patches - Disable autoreconf - patch libtool to prevent rpath issue - Fri Mar 20 2009 kwizart - 1.18-0.1.beta2 - Update to 1.18beta2 fix bug 487508: CVE-2009-0723 LittleCms integer overflow fix bug 487512: CVE-2009-0733...

Fedora 10 : libpng10-1.0.43-1.fc10 (2009-1976)

This release fixes a vulnerability in which some arrays of pointers are not initialized prior to using malloc to define the pointers. If the application runs out of memory while executing the allocation loop which can be forced by malevolent input, libpng10 will jump to a cleanup process that...

Fedora 10 : psi-0.12.1-1.fc10 (2009-2285)

This is a bugfix-only update to version 0.12.1 New in 0.12.1 - Bugfix for DOS vulnerability in the file transfer code. Thanks to Jesus Olmos jolmos at isecauditors.com Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Fedora 10 : uw-imap-2007e-1.fc10 (2009-0413)

Update to new upstream version - 2007e. Contains fix for a security issue - buffer overflow in rfc822outputchar / rfc822outputdata CVE-2008-5514. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 10 : wordpress-mu-2.6.5-1.fc10 (2008-11104)

Mon Dec 1 2008 Bret McMillan - 2.6.5-1 - Update to 2.6.5 - http://wordpress.org/development/2008/11/wordpress-265 / - http://ocaoimh.ie/2008/11/25/wordpress-mu-265/ - Fixes 1 XSS security issue, 3 bugs Note that Tenable Network Security has extracted the preceding description block directly from...

Fedora 10 : evolution-data-server-2.24.5-4.fc10 (2009-2784)

This update fixes two security issues: Evolution Data Server did not properly check the Secure/Multipurpose Internet Mail Extensions S/MIME signatures used for public key encryption and signing of e-mail messages. An attacker could use this flaw to spoof a signature by modifying the text of the...

Fedora 10 : wordpress-mu-2.6.5-2.fc10 (2009-3474)

Tue Apr 7 2009 Bret McMillan - 2.6.5-2 - Patch for CVE-2009-1030 - Mon Dec 1 2008 Bret McMillan - 2.6.5-1 - Update to 2.6.5 - http://wordpress.org/development/2008/11/wordpress-265 / - http://ocaoimh.ie/2008/11/25/wordpress-mu-265/ - Fixes 1 XSS security issue, 3 bugs Note that Tenable Network...

Fedora 10 : trickle-1.07-7.fc10 (2009-1694)

New patch for CVE-2009-0415 Fix for 484065 - CVE-2009-0415 trickle: Possibility to load arbitrary code from current working directory Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...