Fedora 12 : Miro-2.5.4-3.fc12 / firefox-3.5.9-1.fc12 / galeon-2.0.7-22.fc12 / etc (2010-5506)

Update to new upstream Firefox version 3.5.9 / XULRunner version 1.9.1.9, fixing multiple security issues detailed in the upstream advisories: http://www.mozilla.org/security/known- vulnerabilities/firefox35.htmlfirefox3.5.9 Update also includes all packages depending on gecko-libs rebuilt agains...

Fedora 12 : sunbird-1.0-0.21.20090916hg.fc12 / thunderbird-3.0.4-1.fc12 (2010-5539)

Update to new upstream Thunderbird version 3.0.4, fixing multiple security issues detailed in the upstream advisories: http://www.mozilla.org/security /known-vulnerabilities/thunderbird30.htmlthunderbird3.0.4 Update also includes sunbird package rebuilt against new version of Thunderbird...

Fedora 12 : sunbird-1.0-0.19.20090916hg.fc12 / thunderbird-3.0.2-1.fc12 (2010-3230)

Update thunderbird to upstream version 3.0.2. http://www.mozillamessaging.com/en-US/thunderbird/3.0.2/releasenotes/ http://www.mozilla.org/security/known- vulnerabilities/thunderbird30.htmlthunderbird3.0.2 Note that Tenable Network Security has extracted the preceding description block directly...

Fedora 12 : openssl-1.0.0a-1.fc12 (2010-9639)

Minor update from upstream fixing two security vulnerabilities - CVE-2010-0742 and CVE-2010-1633. It is fully ABI compatible with openssl-1.0.0. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 12 : moin-1.8.8-1.fc12 (2010-9857)

This update fixes XSS issues found in moin 1.8.7: http://moinmo.in/SecurityFixes For a list of bug fixes and new features refer to http://hg.moinmo.in/moin/1.8 /raw-file/1.8.8/docs/CHANGES Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora 12 : hamlib-1.2.10-2.fc12 (2010-4407)

Thu Mar 11 2010 Lucian Langa - 1.2.10-2 - kill rpath - misc cleanups - use system ltdl 563975 - Sat Nov 7 2009 Lucian Langa - 1.2.10-1 - new upstream release Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Fedora 12 : mysql-5.1.46-1.fc12 (2010-7414)

Update to MySQL 5.1.46, for various fixes described at http://dev.mysql.com/doc/refman/5.1/en/news-5-1-46.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...

Fedora 12 : boa-0.94.14-0.15.rc21.fc12 (2010-7640)

This update fixes CVE-2009-4496 where HTTP request logs were written without sanitizing non-printable characters. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it...

Fedora 12 : mod_auth_shadow-2.2-8.fc12 (2010-6359)

Fixes CVE-2010-1151 modauthshadow: bad wait2 call causes randomized authorization behaviour 578168. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 12 : gnash-0.8.6-13.fc12 (2010-1820)

This update makes Gnash use the system version of the libltdl library instead of the bundled copy which was vulnerable to CVE-2009-3736. An update to the system libltdl fixing CVE-2009-3736 was issued on December 29, 2009. Note that Tenable Network Security has extracted the preceding description...

Fedora 12 : argyllcms-1.0.4-5.fc12 (2010-3587)

Backport the 55-Argyll.rules files from hargyllcms as the upstream Argyll file allows access to the hardware serial ports for all users. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 12 : trac-0.11.7-1.fc12 (2010-4318)

Update to upstream version 0.11.7, fixing one security flaw and multiple bugs. Refer to upstream changelog for further details: http://trac.edgewall.org/wiki/ChangeLoga0.11.7 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisor...

Fedora 12 : openttd-0.7.5-1.fc12 (2010-0135)

CVE-2009-4007 game server remote crash http://www.openttd.org/en/news/112 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 12 : mysql-5.1.47-1.fc12 (2010-9053)

Update to MySQL 5.1.47, for various fixes described at http://dev.mysql.com/doc/refman/5.1/en/news-5-1-47.html including fixes for CVE-2010-1848, CVE-2010-1849, CVE-2010-1850 In F13, also create mysql group explicitly in pre-server script, to ensure correct GID Note that Tenable Network Security...

Fedora 12 : quake3-1.36-7.svn1783.fc12 (2010-8558)

Wed May 12 2010 Xavier Lamien - 1.36-7.svn1783 - Update release to svn revision r1783. - Remove botlib-strcpy-abuse patch added upstream. - Thu Jan 21 2010 Hans de Goede 1.36-6 - Update fix autodlrc mirror URL's 557252 - Fri Dec 18 2009 Hans de Goede 1.36-5 - Modify Urban Terror launch script to...

Fedora 12 : asterisk-1.6.1.17-1.fc12 (2010-3381)

Update to 1.6.1.17 AST-2010-003: Invalid parsing of ACL rules can compromise security AST-2010-002: This security release is intended to raise awareness of how it is possible to insert malicious strings into dialplans, and to advise developers to read the best practices documents so that they may...

Fedora 12 : curl-7.19.7-7.fc12 (2010-2762)

http://curl.haxx.se/docs/adv20100209.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVE...

Fedora 12 : irssi-0.8.15-1.fc12 (2010-6629)

This release fixes two security issues: The first being that Irssi didn't check hostname on SSL connections and the other being a hard to exploit remote crash bug. For a complete listing of the changes and bugfixes since 0.8.14, please have a look at the http://irssi.org/news/ChangeLog Note that...

Fedora 12 : samba-3.4.5-55.fc12 (2010-1218)

Tue Jan 26 2010 Guenther Deschner - 3.4.5-55 - Security Release, fixes CVE-2009-3297 - resolves: 532940 - Tue Jan 26 2010 Guenther Deschner - 3.4.5-54 - Fix crash in pdbedit - resolves: 541267 - Tue Jan 19 2010 Guenther Deschner - 3.4.5-53 - Update to 3.4.5 - Thu Jan 14 2010 Guenther Deschner -...

Fedora 12 : kernel-2.6.31.12-174.2.19.fc12 (2010-1787)

Kernel security update. Bugs fixed: 563091 510823 559100 533087 CVE-2010-0307 CVE-2010-0410 CVE-2010-0415 CVE-2009-4536 CVE-2009-4537 CVE-2009-4538 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...