Fedora 12 : puppet-0.25.4-1.fc12 (2010-1372)

The update from 0.24.x to 0.25.x brings many, many changes and improvements to puppet. The upstream release notes cover them in detail: http://reductivelabs.com/trac/puppet/wiki/ReleaseNotes Of note is that 0.25.x clients do not work with 0.24.x masters, so it is important to update the master...

Fedora 12 : mod_auth_shadow-2.2-8.fc12 (2010-6359)

Fixes CVE-2010-1151 modauthshadow: bad wait2 call causes randomized authorization behaviour 578168. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 12 : samba-3.4.5-55.fc12 (2010-1218)

Tue Jan 26 2010 Guenther Deschner - 3.4.5-55 - Security Release, fixes CVE-2009-3297 - resolves: 532940 - Tue Jan 26 2010 Guenther Deschner - 3.4.5-54 - Fix crash in pdbedit - resolves: 541267 - Tue Jan 19 2010 Guenther Deschner - 3.4.5-53 - Update to 3.4.5 - Thu Jan 14 2010 Guenther Deschner -...

Fedora 12 : squid-3.1.0.16-6.fc12 (2010-3064)

Denial of service issue in HTCP processing SQUID-2010:2 http://www.squid- cache.org/Advisories/SQUID-20102.txt Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...

Fedora 12 : spamass-milter-0.3.1-18.fc12 (2010-5096)

This update includes a fix for a problem where if the milter is running using the '-x' option to expand aliases before passing inbound mail through SpamAssassin, a malicious client using a carefully-crafted SMTP session could execute arbitrary code on the mail server. The fix avoids the use of a...

Fedora 12 : fcron-3.0.5-1.fc12 (2010-4063)

Rebased fcron, this new version is mostly bugfixing, see referenced bug. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 12 : kernel-2.6.32.14-127.fc12 (2010-9209)

Update to kernel 2.6.32.14: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.13 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.14 Multiple iwlwifi bugfixes from Fedora 13. Fix thinkpad backlight controls. Note that Tenable Network Security has extracted the preceding...

Fedora 12 : krb5-1.7-18.fc12 (2010-0503)

This update incorporates fixes from upstream which correct integer underflow problems in the AES and RC4 decryption routines CVE-2009-4212. It also corrects a failure in 'kdb5util load' which could occur when the database files being created did not previously exist. Note that Tenable Network...

Fedora 12 : moin-1.8.8-1.fc12 (2010-9857)

This update fixes XSS issues found in moin 1.8.7: http://moinmo.in/SecurityFixes For a list of bug fixes and new features refer to http://hg.moinmo.in/moin/1.8 /raw-file/1.8.8/docs/CHANGES Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora 12 : krb5-1.7.1-2.fc12 (2010-1722)

This update adds the upstream patch to avoid a potential denial of service in the KDC in versions 1.7 and later CVE-2010-0283. It obsoletes a previous pending update to version 1.7.1, which incorporates a fix to avoid accidentally tripping account lockout logic on AD servers when the user types i...

Fedora 12 : exim-4.72-1.fc12 (2010-9506)

This update fixes the following security flaws: CVE-2010-2023 exim: hard-link following vulnerability in mailbox handling CVE-2010-2024 exim: race condition when MBX locking is enabled Note that Tenable Network Security has extracted the preceding description block directly from the Fedora securi...

Fedora 12 : cronie-1.4.3-4.fc12 (2010-2751)

CVE-2010-0424 vixie-cron, cronie: Race condition by setting timestamp of user's crontab file, when editing the file . Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and forma...

Fedora 12 : asterisk-1.6.1.17-1.fc12 (2010-3381)

Update to 1.6.1.17 AST-2010-003: Invalid parsing of ACL rules can compromise security AST-2010-002: This security release is intended to raise awareness of how it is possible to insert malicious strings into dialplans, and to advise developers to read the best practices documents so that they may...

Fedora 12 : fuse-2.8.1-4.fc12 (2010-1159)

Fixed CVE-2009-3297 rhbz 558833 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 12 : fwbuilder-3.0.7-1.fc12 / libfwbuilder-3.0.7-1.fc12 (2010-0157)

Update to 3.0.7 Fixed security issue with temporary file handling in the generated iptables script. The problem only affects Linux systems where Firewall Builder is used to generate static routing configuration. The problem exists in Firewall Builder versions 3.0.4, 3.0.5, 3.0.6 Improved...

Fedora 12 : pidgin-2.7.0-2.fc12 (2010-8524)

2.7.0 with new features, bug fixes and a security fix for CVE-2010-1624 Full Upstream ChangeLog: http://developer.pidgin.im/wiki/ChangeLog Fedora packaging changes: Use System SSL Certificates Add additional dependencies for Voice + Video Note that Tenable Network Security has extracted the...

Fedora 12 : kernel-2.6.32.12-115.fc12 (2010-7779)

Update to kernel 2.6.32.12: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.12 Revert 'ath9k: fix lockdep warning when unloading module' from the 2.6.32.12 update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

Fedora 12 : openssl-1.0.0a-1.fc12 (2010-9639)

Minor update from upstream fixing two security vulnerabilities - CVE-2010-0742 and CVE-2010-1633. It is fully ABI compatible with openssl-1.0.0. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 12 : curl-7.19.7-7.fc12 (2010-2762)

http://curl.haxx.se/docs/adv20100209.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVE...

Fedora 12 : sssd-1.0.1-1.fc12 (2010-0413)

Fixes CVE-2010-0014 - SSSD accepts any password when offline with a valid TGT available Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible witho...