Fedora 11 : squirrelmail-1.4.19-2.fc11 (2009-8822)

Implemented page referal verification mechanism. Secunia Advisory SA34627 - Implemented security token system. Secunia Advisory SA34627 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 11 : neon-0.28.6-1.fc11 (2009-8815)

This update includes the latest release of neon, version 0.28.6. This fixes two security issues: the 'billion laughs' attack against expat could allow a Denial of Service attack by a malicious server. CVE-2009-2473 an embedded NUL byte in a certificate subject name could allow an undetected MITM...

Fedora 11 : qt-4.5.2-2.fc11 (2009-8800)

Qt's WebKit code did not properly handle numeric character references, which could allow remote attackers to cause a denial of service memory corruption and application crash via a crafted HTML document. Also included is: a fix for lib symlinks changing erroneously on upgrades a fix for Copy and...

Fedora 11 : kernel-2.6.29.6-217.2.7.fc11 (2009-8649)

Fix socksendpage NULL pointer dereference. CVE-2009-2692. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 11 : libxml-1.8.17-24.fc11 (2009-8582)

This update includes patches from RHEL-3 addressing a number of security vulnerabilities: - CVE-2004-0110 arbitrary code execution via a long URL - CVE-2004-0989 arbitrary code execution via a long URL - CVE-2009-2414 stack consumption DoS vulnerabilities - CVE-2009-2416 use-after-free DoS...

Fedora 11 : apr-1.3.8-1.fc11 (2009-8336)

CVE-2009-2412: allocator alignment fixes Full details here: http://www.apache.org/dist/apr/patches/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 11 : OpenEXR-1.6.1-8.fc11 (2009-8132)

Wed Jul 29 2009 Rex Dieter 1.6.1-8 - CVE-2009-1720 OpenEXR: Multiple integer overflows 513995 - CVE-2009-1721 OpenEXR: Invalid pointer free by image decompression 514003 - Fri Jul 24 2009 Fedora Release Engineering - 1.6.1-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora12MassRebuild Note...

Fedora 11 : pdfedit-0.4.3-1.fc11 (2009-7924)

Update to new upstream version 0.4.3 fixing multiple issues: xpdf code base updated to 3.02pl3 patch which fixes several serious remote vulnerabilities - French translation update bug 275 Fix for 33853 Secunia advisory backported from poppler Flattener class implemented bt289 Bugs 248, 256, 285,...

[SECURITY] Fedora 11 Update: sssd-0.4.1-3.fc11

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable backend system to connect to multiple different account sources. It is also the basis to provide client auditing and policy servic...

Fedora 11 : kdelibs-4.2.4-6.fc11 (2009-8039)

This update fixes several security issues in KHTML CVE-2009-1725, CVE-2009-1690, CVE-2009-1687, CVE-2009-1698, CVE-2009-0945, CVE-2009-2537 which may lead to a denial of service or potentially even arbitrary code execution. In addition, libplasma was fixed to make Plasmaboard a virtual keyboard...

[SECURITY] Fedora 11 Update: kdelibs-4.2.4-6.fc11

Libraries for the K Desktop Environment 4...

Fedora 11 : znc-0.072-3.fc11 (2009-7952)

No CVE yet, one has been requested. Upgrade to 0.072 of ZNC, fixes security issue in bug 513152 An users data directory traversal flaw was found in the way ZNC used to handle file upload requests via Direct Client Connection DCC /dcc SEND messages. A remote IRC user could issue a /dcc SEND messag...

[SECURITY] Fedora 11 Update: hulahop-0.4.9-6.fc11

The hulalop library contains a widget for embedding mozilla. It's based on pyxpcom and give access to the whole mozilla xpcom API through python...

[SECURITY] Fedora 11 Update: wxGTK-2.8.10-2.fc11

wxWidgets/GTK2 is the GTK2 port of the C++ cross-platform wxWidgets GUI library, offering classes for all common GUI controls as well as a comprehensive set of helper classes for most common application tasks, ranging from networking to HTML display and image manipulation...

Fedora 11 : poppler-0.10.7-2.fc11 (2009-6972)

An update to the latest stable upstream release fixing many bugs, as well as addressing several security issues. Release announcement, http://lists.freedesktop.org/archives/poppler/2009-May/004721.html Note that Tenable Network Security has extracted the preceding description block directly from...

Fedora 11 : rt3-3.8.2-8.fc11 (2009-6899)

Fri Jun 19 2009 Ralf Corsepius - 3.8.2-8 - Address BZ 506885 BZ 506236. - Remove rt-3.4.1-I18N.diff. - Fri Apr 24 2009 Ralf Corsepius - 3.8.2-7 - README.fedora.in: Add --dba root to rt-setup-database BZ 488621. - R: perlXML::RSS BZ 496720. Note that Tenable Network Security has extracted the...

Fedora 11 : mutt-1.5.19-5.fc11 (2009-6465)

This update fixes a problem with SSL certificate chain verification CVE-2009-1390. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 11 : gupnp-0.12.8-1.fc11 (2009-5865)

New upstream release that fixes a bug where the gupnp stack crashes when passed empty content ChangeLog here http://git.gupnp.org/cgit.cgi?url=gupnp/tree/NE WS&id=ce714a6700ce03953a2886a66ec57db59205f4e6 Bug report here http://bugzilla.openedhand.com/showbug.cgi?id=1604 Other bugs fixed here. -...

Fedora 11 : ocsinventory-1.02.1-1.fc11 (2009-5769)

2 Security fixes - CVE-2009-1769 OCS Inventory NG: Authentication result varies for existent and non-existent users - SQL injection and Unauthenticated Arbitrary File Read Some Other minor bug fixes http://www.ocsinventory-ng. org/index.php?mact=News,cntnt01,detail,0&cntnt01articleid=140&cntnt01r...

[SECURITY] Fedora 11 Update: php-Smarty-2.6.25-1.fc11

Although Smarty is known as a "Template Engine", it would be more accurately described as a "Template/Presentation Framework." That is, it provides the programmer and template designer with a wealth of tools to automate tasks commonly dealt with at the presentation layer of an application. I stre...