Fedora 28 : dnsdist (2018-ef486b9e50)

Security fix for CVE-2018-14663 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...

Fedora 29 : patch (2018-90af6f5b8a)

security fix for CVE-2018-6952 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...

Fedora 29 : rpm (2018-89a3999673)

An unfortunate regression in rpm 4.14.2 causes --setperms to behave incorrectly on symbolic links: file and directory permissions become world-writable and executable on symlink targets. A similar flaw exists in --setugids, but it is less exploitable. If you have used --setperms or --setugids, or...

Fedora 28 : terminology (2018-27f957ae8e)

Fix CVEs as described in related RHBZ bug. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 28 : 3:mailman (2018-e071e178f8)

New version 2.1.29. Security fix for CVE-2018-13796 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 28 : cobbler (2018-1d2a79fe1c)

Fix empty man pages ---- - Revert bindmanageipmi feature that is broken on 2.8 - Use pathfix.py to fix python shebangs ---- - Update to 2.8.4 Fixes BZ 1613292, 1643860, 1614433, CVE-2018-1000226, CVE-2018-10931 - Make koan require python2-ethtool BZ 1638933 Note that Tenable Network Security has...

Fedora 28 : bird (2018-8f0d2429d3)

Updating bird to 1.6.4 release which includes fix for CVE-2018-12066 Running bird in foreground Bird is running under bird user and group rather than root Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

Fedora 29 : mingw-podofo / podofo (2018-6b9320d9c9)

The remote Fedora 29 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2018-6b9320d9c9 advisory. This update fixes multiple security vulnerabilities: CVE-2018-5783, CVE-2018-11254, CVE-2018-11255, CVE-2018-11256, CVE-2018-12982, CVE-2018-14320,...

Fedora 29 : python2 (2018-ee97fc9e81)

Security fix for CVE-2018-14647 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...

Fedora 29 : 2:qemu (2018-87f2ace20d)

Fix cpu model crash on AMD hosts bz 1640140 - CVE-2018-15746: seccomp blacklist is not applied to all threads bz 1618357 - Fix assertion in addressspacestwlecached bz 1644728 - CVE-2018-10839: ne2000: fix possible out of bound access bz 1636429 - CVE-2018-17958: rtl8139: fix possible out of bound...

Fedora 28 : 1:php-pear (2018-50e3877b63)

ArchiveTar version 1.4.4 - Fix Bug 21058: Long symlinks are not supported mrook - Fix Bug 23782: Prevent phar:// files from being extracted mrook --- PEAR version 1.10.7 - PR 79: Prevent Unable to find the wrapper 'channel' Warning - PR 80: fix Warning: 'continue' targeting switch is equivalent t...

Fedora 29 : php-pear-CAS (2018-6d62140b89)

Version 1.3.6 Security Fixes: - Fix XSS in proxy mode 271 Joachim Fritschi Bug Fixes: - Fix bad condition 252 Brice Vercoustre - Hash ticket strings to generate valid-length session-ids 224, 244, 248 Adam Franco - Fix 'phpCAS' class capitalization in code 273, 277 phy25 Improvement: - Remove...

Fedora 28 : seamonkey (2018-1c5750c688)

Based on the Firefox/Thunderbird ESR extension support release code version 52.7.3 Fixes various security issues, see https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-e sr/ and https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbi rd/ for more info. Note that...

Fedora 28 : 2:qemu (2018-44f8a7454d) (Spectre)

New CPU features for speculative store bypass CVE-2018-3639 On Intel x86 hosts, the 'ssbd' feature must be explicitly added to any virtual machines that are not using host-passthrough/host-model CPU setup. NB this requires new microcode too, which is not yet available in Fedora microcodectl RPMs...

Fedora 29 : nbdkit (2018-c42a144c65)

New upstream version 1.8.2. Fix low priority security issue with TLS: https://www.redhat.com/archives/libguestfs/2018-December/msg00047.html ---- New upstream version 1.8.1. ---- Rebase to new stable version 1.8.0. ---- nbdkit metapackage should depend on versioned -server subpackage etc. ---- Ne...

Fedora 28 : uriparser (2018-a3ef0a026f)

Update to 0.9.0, see https://github.com/uriparser/uriparser/blob/uriparser-0.9.0/ChangeLog for details. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as mu...

Fedora 28 : 2:shadow-utils (2018-35254ad97d)

Minor security update to version 4.6 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Fedora 29 : hesiod (2018-792ff3cafa)

Fix CVE-2016-10152 hard-coded DNS fallback Fix CVE-2016-10151 weak SUID check Move package to autosetup Resolves: 1332509 Resolves: 1332494 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to...

Fedora 28 : chromium (2018-13d8c35127)

Update to Chromium 69. EPEL-7 update is blocked by a GCC bug: 1629813, so as soon as devtoolset-8 arrives... Fixes a lot of security issues, like every major release of Chromium, including CVE-2018-16087 CVE-2018-16088 CVE-2018-16086CVE-2018-16065 CVE-2018-16066 CVE-2018-16067 CVE-2018-16068...

Fedora 28 : mingw-SDL2_image (2018-e8d19367cb)

Security fix for CVE-2018-3977 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...