Fedora 13 : cronie-1.4.4-1.fc13 (2010-3642)

Bug 565809 - CVE-2010-0424 vixie-cron, cronie: Race condition by setting timestamp of user's crontab file, when editing the file Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

Fedora 13 : horde-3.3.6-1.fc13 (2010-5563)

Upgrade to 3.3.6 - Fixes a lot of security bugs Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 13 : sudo-1.7.2p6-1.fc13 (2010-6756)

update to new upstream version - merged .audit and .libaudit patch - added sudoers.ldap.5 to files - http://sudo.ws/sudo/alerts/sudoeditescalate2.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted...

Fedora 13 : qt-4.6.2-17.fc13 (2010-8423)

fix multiple flaws in webkit: CVE-2010-0047, CVE-2010-0648, CVE-2010-0656 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 13 : viewvc-1.1.5-1.fc13 (2010-5805)

Full changelog: http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?r evision=2359&view=markup&pathrev=HEAD - security fix: escape user-provided searchre input to avoid XSS attack Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora 13 : amsn-0.98.3-1.fc13 (2010-7291)

fixes security problem caused by not validating ssl certicates, als add new features because of a new upstream version. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

Fedora 13 : znc-0.090-2.fc13 (2010-10042)

Bug 603915 - znc: NULL pointer dereference flaw leads to segfault under certain conditions A Debian bug report 1 noted that ZNC would segfault under certain conditions, such as clicking 'traffic' in the webadmin pages or issuing the traffic command on the /znc shell. This has been corrected...

Fedora 13 : java-1.6.0-openjdk-1.6.0.0-37.b17.fc13 (2010-6279)

Add latest security updates. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 13 : libpng10-1.0.53-1.fc13 (2010-2988)

This is the latest upstream maintenance release. In addition to a number of minor bugfixes, it mitigates the resource-consumption effects of highly compressed ancillary chunks in hostile PNG files as described at http://libpng.sourceforge.net/ADVISORY-1.4.1.html This issue has been assigned...

Fedora 13 : python-2.6.4-27.fc13 (2010-9652)

Fri Jun 4 2010 David Malcolm - 2.6.4-27 - ensure that the compiler is invoked with '-fwrapv' rhbz594819 - CVE-2010-1634: fix various integer overflow checks in the audioop module patch 113 - CVE-2010-2089: further checks within the audioop module patch 114 - CVE-2008-5983: the new PySysSetArgvEx...

Fedora 13 : Miro-2.5.4-3.fc13 / firefox-3.6.2-1.fc13 / galeon-2.0.7-25.fc13 / etc (2010-5202)

Update to new upstream Firefox version 3.6.2, fixing a security issue detailed in the upstream advisory: http://www.mozilla.org/security/known- vulnerabilities/firefox36.htmlfirefox3.6.2 Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox / XULRunner...

Fedora 13 : pidgin-2.7.0-2.fc13 (2010-8503)

2.7.0 with new features, bug fixes and a security fix for CVE-2010-1624 Full Upstream ChangeLog: http://developer.pidgin.im/wiki/ChangeLog Fedora packaging changes: Use System SSL Certificates Add additional dependencies for Voice + Video Note that Tenable Network Security has extracted the...

Fedora 13 : zikula-1.2.3-1.fc13 (2010-8501)

Upstream pushed this release to fix two security issues one XSS, and one CSRF Upstream also removed a non-free JavaScript library that we previously had to strip. http://community.zikula.org/module-News-display-sid-3012.htm Note that Tenable Network Security has extracted the preceding descriptio...

Fedora 13 : krb5-1.7.1-10.fc13 (2010-8749)

Shawn Emery discovered a remotely-triggerable NULL pointer dereference in the Kerberos GSS-API library which could be used to cause GSS-API-authenticated services to crash. This update incorporates fixes to instead correctly detect the error and return an error code. Note that Tenable Network...

Fedora 13 : alienarena-7.33-2.fc13 (2010-6179)

Fixes the following security issues: - By supplying various invalid parameters to the download command, it is possible to cause a DoS condition by causing the server to crash. A path ending in . or / will crash on Linux. Supplying a negative offset will cause a crash on all platforms. - Fix buffe...

Fedora 13 : sudo-1.7.2p6-2.fc13 (2010-9402)

added patch that fixes insufficient environment sanitization issue CVE-2010-1646 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 13 : irssi-0.8.15-1.fc13 (2010-6612)

This release fixes two security issues: The first being that Irssi didn't check hostname on SSL connections and the other being a hard to exploit remote crash bug. For a complete listing of the changes and bugfixes since 0.8.14, please have a look at the http://irssi.org/news/ChangeLog Note that...

Fedora 13 : aria2-1.9.3-1.fc13 (2010-8905)

Thu May 20 2010 Rahul Sundaram - 1.9.3-1 - http://aria2.svn.sourceforge.net/viewvc/aria2/trunk/NE WS?revision=2101 - Fixes CVE-2010-1512. rhbz 592014 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted...

Fedora 13 : glpi-0.72.4-2.svn11035.fc13 (2010-5068)

This version correct several bugs. Full upstream changelog : Bug 1893: Unable to access to the model of phones dictionnary Bug 1904: Vlan not add using Template Bug 1906: Message-ID should not use $SERVER'HTTPHOST' Bug 1918: configured listlimitmax not honnoured Bug 1941: Disconnecting a port...

Fedora 13 : viewvc-1.1.4-1.fc13 (2010-4239)

Update to upstream version 1.1.4, fixing one XSS flaw and several bugs: http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?revision=2 341 security fix: escape user-provided query form input to avoid XSS attack fix standalone.py failure when per-root options aren't used issue 445 fix...