Fedora 10 : cups-1.3.9-4.fc10 (2008-10895)

Security update to fix CVE-2008-5183. Also changed in this update: a bug that caused cups-polld to fail to resolve hostnames has been fixed a bug that could cause libcups to get stuck in a loop has been fixed the dnssd backend has been removed as it is not working correctly and can prevent printe...

Fedora 10 : xine-lib-1.1.16.3-1.fc10 (2009-3433)

Maintenance release. Fixes two security problems CVE-2009-0385, CVE-2009-1274 and a few miscellaneous bugs. See the upstream changelog for details: http://sourceforge.net/project/shownotes.php?groupid=9655&releaseid= 673233 Note that Tenable Network Security has extracted the preceding descriptio...

Fedora 10 : krb5-1.6.3-18.fc10 (2009-2852)

This update incorporates patches to fix potential read overflow and NULL pointer dereferences in the implementation of the SPNEGO GSSAPI mechanism CVE-2009-0844, CVE-2009-0845, attempts to free an uninitialized pointer during protocol parsing CVE-2009-0846, and a bug in length validation during...

Fedora 10 : xine-lib-1.1.16.2-1.fc10 (2009-1525)

This release contains one new security fix CVE-2008-5240 and corrections of previous security fixes. It also includes fixes for race conditions in gaplessswitch ref. kde bug 180339 See also: http://sourceforge.net/project/shownotes.php?groupid=9655&releaseid= 660071 Note that Tenable Network...

Fedora 10 : libvirt-0.5.1-2.fc10 (2008-11443)

fix missing read-only access checks, fixes CVE-2008-5086 - upstream release 0.5.1 - mostly bugfixes e.g 473071 - some driver improvements Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 10 : amarok-2.0.1.1-1.fc10 (2009-0550)

An update to the latest release, includes new features such as queuing, playlist search and filtering as well as 'stop after current track'. And, long awaited and finally available: sorting the collection by composer. Also includes a security fix concerning the parsing of malformed Audible digita...

Fedora 10 : pptp-1.7.2-5.fc10 (2009-3070)

This update corrects the behaviour of pptpsetup when its --delete option is used, retaining the permissions of /etc/ppp/chap-secrets rather than creating a new file that is likely to be world-readable. If you have previously used the --delete option of pptpsetup, you should reset the permissions ...

Fedora 10 : moodle-1.9.4-6.fc10 (2009-3280)

CVE-2009-1171: The TeX filter in Moodle 1.6 before 1.6.9+, 1.7 before 1.7.7+, 1.8 before 1.8.9, and 1.9 before 1.9.5 allows user-assisted attackers to read arbitrary files via an input command in a '$$' sequence, which causes LaTeX to include the contents of the file. Upstream bug and CVS commit:...

Fedora 10 : lcms-1.18-0.1.beta2.fc10 (2009-2970)

Some patches that was collected in the fedora package have just been submitted upstream. Changes are hight that this update can be superseeded by a beta3 or a stable release from upstream. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora 10 : uw-imap-2007e-1.fc10 (2009-0413)

Update to new upstream version - 2007e. Contains fix for a security issue - buffer overflow in rfc822outputchar / rfc822outputdata CVE-2008-5514. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 10 : roundup-1.4.6-4.fc10 (2009-2583)

Mon Mar 9 2009 Paul P. Komkoff Jr - 1.4.6-4 - security bug bz489355 - Wed Feb 25 2009 Fedora Release Engineering - 1.4.6-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora11MassRebuild - Sat Nov 29 2008 Ignacio Vazquez-Abrams - 1.4.6-2 - Rebuild for Python 2.6 Note that Tenable Network...

Fedora 10 : cups-1.3.10-1.fc10 (2009-3769)

This update fixes several security issues: CVE-2009-0163, CVE-2009-0164, CVE-2009-0146, CVE-2009-0147, and CVE-2009-0166. PDF files are now converted to PostScript using the poppler package's 'pdftops' program. NOTE: If your CUPS server is accessed using a hostname or hostnames not known to the...

Fedora 10 : lcms-1.18-1.fc10 (2009-2903)

Mon Mar 23 2009 kwizart - 1.18-1 - Update to 1.18 final - Remove upstreamed patches - Disable autoreconf - patch libtool to prevent rpath issue - Fri Mar 20 2009 kwizart - 1.18-0.1.beta2 - Update to 1.18beta2 fix bug 487508: CVE-2009-0723 LittleCms integer overflow fix bug 487512: CVE-2009-0733...

Fedora 10 : wordpress-mu-2.6.5-1.fc10 (2008-11104)

Mon Dec 1 2008 Bret McMillan - 2.6.5-1 - Update to 2.6.5 - http://wordpress.org/development/2008/11/wordpress-265 / - http://ocaoimh.ie/2008/11/25/wordpress-mu-265/ - Fixes 1 XSS security issue, 3 bugs Note that Tenable Network Security has extracted the preceding description block directly from...

Fedora 10 : fail2ban-0.8.3-18.fc10 (2009-1737)

This updates fixes CVE-2009-0362. See https://vulners.com/cve/CVE-2009-0362 for further details. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 10 : psi-0.12.1-1.fc10 (2009-2285)

This is a bugfix-only update to version 0.12.1 New in 0.12.1 - Bugfix for DOS vulnerability in the file transfer code. Thanks to Jesus Olmos jolmos at isecauditors.com Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Fedora 10 : libpng10-1.0.43-1.fc10 (2009-1976)

This release fixes a vulnerability in which some arrays of pointers are not initialized prior to using malloc to define the pointers. If the application runs out of memory while executing the allocation loop which can be forced by malevolent input, libpng10 will jump to a cleanup process that...

Fedora 10 : evolution-data-server-2.24.5-4.fc10 (2009-2784)

This update fixes two security issues: Evolution Data Server did not properly check the Secure/Multipurpose Internet Mail Extensions S/MIME signatures used for public key encryption and signing of e-mail messages. An attacker could use this flaw to spoof a signature by modifying the text of the...

Fedora 10 : weechat-0.2.6.1-1.fc10 (2009-2859)

Thu Mar 19 2009 Paul P. Komkoff Jr - 0.2.6.1-1 - fix bz490709 - Wed Feb 25 2009 Fedora Release Engineering - 0.2.6-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora11MassRebuild - Sun Nov 30 2008 Ignacio Vazquez-Abrams - 0.2.6-6 - Rebuild for Python 2.6 Note that Tenable Network Security has...

Fedora 10 : gpsdrive-2.09-7.fc10 (2009-1225)

This update removes several helper scripts: geo-code, geo-nearest, and gpssmswatch, which have been removed upstream due to security issues. This update also has a fix for an issue with the splash screen. Note that Tenable Network Security has extracted the preceding description block directly fr...