Fedora 11 : seamonkey-1.1.19-1.fc11 (2010-7100)

Update to new upstream SeaMonkey version 1.1.19, fixing multiple security issues detailed in the upstream advisories: http://www.mozilla.org/security/known- vulnerabilities/seamonkey11.htmlseamonkey1.1.19 CVE-2010-0161 CVE-2010-0163 CVE-2009-3075 CVE-2009-3072 CVE-2009-2463 CVE-2009-3385...

Fedora 11 : libpng-1.2.43-1.fc11 (2010-4616)

Update to libpng 1.2.43, includes fix for CVE-2010-0205 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 11 : ruby-1.8.6.383-6.fc11 (2010-0533)

A security vulnerability is found on WEBrick module in Ruby currently shipped on Fedora 11 that WEBrick lets attackers to inject malicious escape sequences to its logs, making it possible for dangerous control characters to be executed on a victim's terminal emulator. This issue has now been tagg...

Fedora 11 : moin-1.8.8-1.fc11 (2010-9876)

This update fixes XSS issues found in moin 1.8.7: http://moinmo.in/SecurityFixes For a list of bug fixes and new features refer to http://hg.moinmo.in/moin/1.8 /raw-file/1.8.8/docs/CHANGES Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora 11 : wordpress-mu-2.8.6-1.fc11 (2009-12547)

Update to 2.8.6; a couple of security fixes including 1 XSS bug and some additional protections against certain permissive apache configurations Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 11 : DevIL-1.7.8-4.fc11 (2009-13255)

Fri Dec 4 2009 Hans de Goede 1.7.8-4 - Fix DICOM Processing Buffer Overflow Vulnerability CVE-2009-3994 542700 - Fri Aug 21 2009 Hans de Goede 1.7.8-3 - Switch Source0 to respun upstream tarbal added a missing header - Fri Jul 24 2009 Fedora Release Engineering - 1.7.8-2 - Rebuilt for...

Fedora 11 : mod_security-2.5.12-1.fc11 (2010-1862)

SECURITY: This release fixes several issues including potential rule bypass and Denial of Service attacks. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as muc...

Fedora 11 : nss_db-2.2-46.fc11 (2010-6331)

Stephane Chazelas reported that the nssdb module attempts to read a DBCONFIG file in the current directory when it is used. If the contents of the file can't be parsed properly, the copy of libdb which nssdb uses will print an error message. If nssdb is invoked from a setuid process, it may then...

Fedora 11 : httpd-2.2.14-1.fc11 (2009-12747)

This update contains the latest stable release of Apache httpd. Three security fixes are included, along with several minor bug fixes. A flaw was found in the way the TLS/SSL Transport Layer Security/Secure Sockets Layer protocols handle session renegotiation. A man-in-the-middle attacker could u...

Fedora 11 : automake17-1.7.9-13.fc11.1 (2010-3569)

Tue Feb 16 2010 Karsten Hopp 1.7.9-13.1 - fix CVE-2009-4029 - Fri Jul 24 2009 Fedora Release Engineering - 1.7.9-13 - Rebuilt for https://fedoraproject.org/wiki/Fedora12MassRebuild Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

Fedora 11 : java-1.6.0-openjdk-1.6.0.0-34.b17.fc11 (2010-6039)

Add latest security patches. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 11 : python-paste-1.7.4-1.fc11 (2010-10400)

1.7.4 The only real change is to paste.httpexceptions, which was using insecure quoting of some parameters and allowed an XSS hole, most specifically with its 404 messages. The most notably WSGI application using this is paste.urlparse.StaticURLParser and PkgResourcesParser. By directing someone ...

Fedora 11 : maniadrive-1.2-17.fc11 / php-5.2.12-1.fc11 (2010-0495)

Update to the latest PHP 5.2 release which focuses on improving the stability of the PHP 5.2.x branch with over 60 bug fixes, some of which are security related. All users of PHP 5.2 are encouraged to upgrade to this release. See http://www.php.net/releases/5212.php for more details. Note that...

Fedora 11 : moin-1.8.7-2.fc11 (2010-6012)

Sat Apr 3 2010 Ville-Pekka Vainio - 1.8.7-2 - Fixes CVE-2010-0828 rhbz578801 - Thu Feb 18 2010 Ville-Pekka Vainio - 1.8.7-1 - Fixed major security issues in miscellaneous parts of moin - http://hg.moinmo.in/moin/1.8/raw-file/1.8.7/docs/CHANG ES - http://secunia.com/advisories/38444/ - Fixes...

Fedora 11 : automake14-1.4p6-20.fc11 (2010-3591)

Tue Feb 9 2010 Karsten Hopp 1.4p6-20 - add fix for CVE-2009-4029 - Fri Jul 24 2009 Fedora Release Engineering - 1.4p6-19 - Rebuilt for https://fedoraproject.org/wiki/Fedora12MassRebuild Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora 11 : horde-3.3.6-1.fc11 (2010-5483)

Upgrade to 3.3.6 - Fixes a lot of security bugs Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 11 : Miro-2.5.4-2.fc11 / blam-1.8.5-18.fc11 / chmsee-1.0.1-15.fc11 / eclipse-3.4.2-20.fc11 / etc (2010-1936)

Update to new upstream Firefox version 3.5.8, fixing multiple security issues detailed in the upstream advisories: http://www.mozilla.org/security/known- vulnerabilities/firefox35.htmlfirefox3.5.8 Note that Tenable Network Security has extracted the preceding description block directly from the...

Fedora 11 : kernel-2.6.30.10-105.2.23.fc11 (2010-1804)

Security bugs: CVE-2010-0410 CVE-2010-0415 563091 Also fixes: xfs: xfsswapextents needs to handle dynamic fork offsets F12510823 Possible system lockups caused by the fix for bug 559100 in the previous updates. Note that Tenable Network Security has extracted the preceding description block...

Fedora 11 : konversation-1.2.3-1.fc11 (2010-1883)

Update to version 1.2.3, which fixes remote crash caused by a message containing invalid Unicode characters. If the message triggers a KNotify notification, invalid Unicode string is sent over D-Bus, resulting in application crash. Apart from that, the earlier update to 1.2.2 included lots of fix...

Fedora 11 : irssi-0.8.15-1.fc11 (2010-6618)

This release fixes two security issues: The first being that Irssi didn't check hostname on SSL connections and the other being a hard to exploit remote crash bug. For a complete listing of the changes and bugfixes since 0.8.14, please have a look at the http://irssi.org/news/ChangeLog Note that...