Fedora 10 : lcms-1.18-0.1.beta2.fc10 (2009-2970)

Some patches that was collected in the fedora package have just been submitted upstream. Changes are hight that this update can be superseeded by a beta3 or a stable release from upstream. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora 10 : lcms-1.18-1.fc10 (2009-2903)

Mon Mar 23 2009 kwizart - 1.18-1 - Update to 1.18 final - Remove upstreamed patches - Disable autoreconf - patch libtool to prevent rpath issue - Fri Mar 20 2009 kwizart - 1.18-0.1.beta2 - Update to 1.18beta2 fix bug 487508: CVE-2009-0723 LittleCms integer overflow fix bug 487512: CVE-2009-0733...

Fedora 10 : java-1.6.0-openjdk-1.6.0.0-11.b14.fc10 (2009-2982)

Fixes important lcms security bug which gives unwarranted access to malicious users. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 10 : wordpress-mu-2.6.5-1.fc10 (2008-11104)

Mon Dec 1 2008 Bret McMillan - 2.6.5-1 - Update to 2.6.5 - http://wordpress.org/development/2008/11/wordpress-265 / - http://ocaoimh.ie/2008/11/25/wordpress-mu-265/ - Fixes 1 XSS security issue, 3 bugs Note that Tenable Network Security has extracted the preceding description block directly from...

Fedora 10 : amarok-2.0.1.1-1.fc10 (2009-0550)

An update to the latest release, includes new features such as queuing, playlist search and filtering as well as 'stop after current track'. And, long awaited and finally available: sorting the collection by composer. Also includes a security fix concerning the parsing of malformed Audible digita...

Fedora 10 : xine-lib-1.1.16-1.fc10 (2009-0483)

This updates xine-lib to the upstream 1.1.16 release. This fixes several bugs, including the security issues CVE-2008-5234 vector 1, CVE-2008-5236, CVE-2008-5237, CVE-2008-5239, CVE-2008-5240 vectors 3 & 4 and CVE-2008-5243. See http://sourceforge.net/project/shownotes.php?releaseid=652075&groupi...

Fedora 10 : psi-0.12.1-1.fc10 (2009-2285)

This is a bugfix-only update to version 0.12.1 New in 0.12.1 - Bugfix for DOS vulnerability in the file transfer code. Thanks to Jesus Olmos jolmos at isecauditors.com Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Fedora 10 : trickle-1.07-7.fc10 (2009-1694)

New patch for CVE-2009-0415 Fix for 484065 - CVE-2009-0415 trickle: Possibility to load arbitrary code from current working directory Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

Fedora 10 : gallery2-2.3-1.fc10 (2008-11218)

New upstream, multiple fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 10 : uw-imap-2007e-1.fc10 (2009-0413)

Update to new upstream version - 2007e. Contains fix for a security issue - buffer overflow in rfc822outputchar / rfc822outputdata CVE-2008-5514. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 10 : xine-lib-1.1.16.2-1.fc10 (2009-1525)

This release contains one new security fix CVE-2008-5240 and corrections of previous security fixes. It also includes fixes for race conditions in gaplessswitch ref. kde bug 180339 See also: http://sourceforge.net/project/shownotes.php?groupid=9655&releaseid= 660071 Note that Tenable Network...

Fedora 10 : avahi-0.6.22-12.fc10 (2008-11351)

This version includes five patches backported from the recently released 0.6.24 : - A trivial security fix for CVE-2008-5081, rhbz 475964. - A trivial fix for the threaded event loop, avahi bts 251 - A trivial fix unbreaking the --force-bind logic of avahi-autoipd, avahi bts 209 - A trivial fix t...

Fedora 10 : libpng10-1.0.43-1.fc10 (2009-1976)

This release fixes a vulnerability in which some arrays of pointers are not initialized prior to using malloc to define the pointers. If the application runs out of memory while executing the allocation loop which can be forced by malevolent input, libpng10 will jump to a cleanup process that...

Fedora 10 : libvirt-0.5.1-2.fc10 (2008-11443)

fix missing read-only access checks, fixes CVE-2008-5086 - upstream release 0.5.1 - mostly bugfixes e.g 473071 - some driver improvements Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 10 : thunderbird-2.0.0.18-1.fc10 (2008-9901)

This update update upgrades thunderbird packages to upstream version 2.0.0.18, which fixes multiple security issues detailed in upstream security advisories: http://www.mozilla.org/security/known- vulnerabilities/thunderbird20.htmlthunderbird2.0.0.18 Note that Tenable Network Security has extract...

Fedora 10 : pptp-1.7.2-5.fc10 (2009-3070)

This update corrects the behaviour of pptpsetup when its --delete option is used, retaining the permissions of /etc/ppp/chap-secrets rather than creating a new file that is likely to be world-readable. If you have previously used the --delete option of pptpsetup, you should reset the permissions ...

Fedora 10 : cups-1.3.10-1.fc10 (2009-3769)

This update fixes several security issues: CVE-2009-0163, CVE-2009-0164, CVE-2009-0146, CVE-2009-0147, and CVE-2009-0166. PDF files are now converted to PostScript using the poppler package's 'pdftops' program. NOTE: If your CUPS server is accessed using a hostname or hostnames not known to the...

Fedora 10 : lynx-2.8.6-18.fc10 (2008-9952)

Fri Nov 7 2008 Jiri Moskovcak - 2.8.6-18 - Fixed CVE-2008-4690 lynx: remote arbitrary command execution. via a crafted lynxcgi: URL thoger Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 10 : krb5-1.6.3-18.fc10 (2009-2852)

This update incorporates patches to fix potential read overflow and NULL pointer dereferences in the implementation of the SPNEGO GSSAPI mechanism CVE-2009-0844, CVE-2009-0845, attempts to free an uninitialized pointer during protocol parsing CVE-2009-0846, and a bug in length validation during...

Fedora 10 : wordpress-mu-2.6.5-2.fc10 (2009-3474)

Tue Apr 7 2009 Bret McMillan - 2.6.5-2 - Patch for CVE-2009-1030 - Mon Dec 1 2008 Bret McMillan - 2.6.5-1 - Update to 2.6.5 - http://wordpress.org/development/2008/11/wordpress-265 / - http://ocaoimh.ie/2008/11/25/wordpress-mu-265/ - Fixes 1 XSS security issue, 3 bugs Note that Tenable Network...