Fedora 26 : glpi (2017-fd9d2dd019)

various security fixes https://github.com/glpi-project/glpi/issues/2475, https://github.com/glpi-project/glpi/issues/2476, https://github.com/glpi-project/glpi/issues/2492, - fix regressions on self service portal : - self-service users should not be auto assigned as tech - type and category...

RHEL 7 : GStreamer (RHSA-2017:2060)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:2060 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The following packages have been upgraded t...

Product update: Virtuozzo 7.0 Update 5 (7.0.5-593)

The Update 5 for Virtuozzo 7.0 provides new features, security fixes as well as stability and usability bug fixes. Vulnerability id: PSBM-67221 A vulnerability was found in the signal handling in the Linux kernel. A local unprivileged user could cause a kernel crash general protection fault in th...

Moderate: Red Hat Security Advisory: openssh security, bug fix, and enhancement update

An update for openssh is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Moderate: Red Hat Security Advisory: tcpdump security, bug fix, and enhancement update

An update for tcpdump is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

SUSE-SU-2017:1997-1 Security update for apache2

This update provides apache2 2.2.34, which brings many fixes and enhancements: Security issues fixed: - CVE-2017-9788: Uninitialized memory reflection in modauthdigest. bsc1048576 Bug fixes: - Remove /usr/bin/http2 link only during package uninstall, not upgrade. bsc1041830 - Don't put the backen...

Fedora 26 : 1:java-1.8.0-openjdk (2017-fe57cf60c3)

Updated to latest security fxes. http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622 .html - search Java SE Risk Matrix yah, href is no longer an option obviously... Disabled autokarmatism as I need to run JDK testsuite over weekend. Note that Tenable Network Security has...

Fedora 25 : 1:java-1.8.0-openjdk (2017-735e2ae663)

Updated to latest security fxes. http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622 .html - search Java SE Risk Matrix yah, href is no longer an option obviously... Disabled autokarmatism as I need to run JDK testsuite over weekend. ---- restored support for system NSS comment...

chromium -- multiple vulnerabilities

Google Chrome releases reports: 40 security fixes in this release Please reference CVE/URL list for details...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 60 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 60.0.3112.78 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...

Fedora 24 : qt5-qtwebengine (2017-98bed96d12)

This update updates QtWebEngine to a snapshot from the Qt 5.6 LTS long-term support branch. This is a snapshot of the QtWebEngine that will be included in the bugfix and security release Qt 5.6.3, but only the QtWebEngine component is included in this update. The update fixes the following securi...

RedHat Update for graphite2 RHSA-2017:1793-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 25 : qt5-qtwebengine (2017-a7a488d8d0)

This update updates QtWebEngine to the 5.9.1 release, a security and bugfix release from the 5.9 branch. QtWebEngine 5.9.1 is part of the Qt 5.9.1 release, but only the QtWebEngine component is included in this update. The update fixes the following security issues in QtWebEngine 5.9.0:...

Fedora 26 : ghostscript (2017-a606d224a5)

Security fixes release for these CVEs : - CVE-2016-10217 use-after-free and application crash - CVE-2016-10218 NULL pointer dereference and application crash - CVE-2016-10219 divide-by-zero error and application crash - CVE-2016-10220 NULL pointer dereference and application crash - CVE-2017-5951...

Fedora 26 : php-pear-CAS (2017-2f3096ba16)

Changes in version 1.3.5 - Security Fixes : - Fix possible authentication bypass in validateCAS20 228 Gregory Boddin - Bug Fixes : - Fix file permissions non-executable 177 Remi Collet - Fixed translations Greek and Japanese 192 ikari7789 - Fix errors under phpdbg 204 MasonM - Fix logout...

Fedora 26 : bodhi / python-fedora (2017-26b2a7f9ba)

This update set fixed problems with Bodhi update submitting. It also includes two security fixes for python-fedora. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and...

Fedora 26 : mediawiki (2017-05cb6287b7)

https://www.mediawiki.org/wiki/Releasenotes/1.28MediaWiki1.28.1 Changes since 1.28.0 - $wgRunJobsAsync is now false by default T142751. This change only affects wikis with $wgJobRunRate 0. - Fix fatal from 'WaitConditionLoop' not being found, experienced when a wiki has more than one database...

Fedora 26 : 1:chromium-native_client / chromium (2017-811133dc2c)

Update to chromium 58. Move chrome-remote-desktop to user systemd service. Security fixes for CVE-2017-5068, CVE-2017-5057, CVE-2017-5058, CVE-2017-5059, CVE-2017-5060, CVE-2017-5061, CVE-2017-5062, CVE-2017-5063, CVE-2017-5064, CVE-2017-5065, CVE-2017-5066, CVE-2017-5067, CVE-2017-5069 Note that...

Fedora 26 : qt5-qtwebengine (2017-1e34da27f3)

This update updates QtWebEngine to the 5.9.1 release, a security and bugfix release from the 5.9 branch. QtWebEngine 5.9.1 is part of the Qt 5.9.1 release, but only the QtWebEngine component is included in this update. The update fixes the following security issues in QtWebEngine 5.9.0:...

PSF-2017-11 Expat 2.2.3

Expat 2.2.2 was released with multiple security fixes: 43: Protect against compilation without any source of high quality entropy enabled, e.g. with CMake build system 60: Windows with UNICODE: Unintended use of LoadLibraryW with a non-wide string resulted in failure to load advapi32.dll and...