Fedora 23 : mbedtls-2.1.2-1.fc23 (2015-e22bb33731)

Update to 2.1.2 - CVE-2015-5291 Release notes: https://tls.mbed.org/tech- updates/releases/mbedtls-2.1.2-and-1.3.14-and-polarssl-1 .2.17-released Security notes: https://tls.mbed.org/tech-updates/security-advisories/mb edtls-security- advisory-2015-01 Note that Tenable Network Security has...

Fedora 23 : php-udan11-sql-parser-3.0.4-1.fc23 / phpMyAdmin-4.5.1-1.fc23 (2015-287c164df5)

phpMyAdmin 4.5.1.0 2015-10-23 =============================== - Invalid argument supplied for foreach - arraykeyexists expects parameter 2 to be array - Notice Undefined index: dropdatabase - Server variable edition in ANSIQUOTES sqlmode: losing current value - Propose table structure broken -...

Fedora 22 : telegram-cli-1.3.1-7.20150730git2052f4.fc22 (2015-69133edcb2)

telegram-cli-1.3.1-7.20150730git2052f4.fc22 - Hardened builds on F23 telegram-cli-1.3.1-7.20150730git2052f4.fc23 - Hardened builds on F23 telegram-cli-1.3.1-7.20150730git2052f4.el7 - Hardened builds on F23 telegram-cli-1.3.1-7.20150730git2052f4.el6 - Hardened builds on F23 Note that Tenable Netwo...

Fedora 23 : wildmagic5-5.13-12.fc23 (2015-91585ff79b)

wildmagic5-5.13-12.fc23 - Rebuild with -fPIC - Hardened builds on F23 wildmagic5-5.13-12.fc21 - Rebuild with -fPIC - Hardened builds on F23 wildmagic5-5.13-12.fc22 - Rebuild with -fPIC - Hardened builds on F23 wildmagic5-5.13-12.el6 - Rebuild with -fPIC - Hardened builds on F23...

Fedora 21 : zarafa-7.1.14-1.fc21 (2015-a275fd68f2)

Zarafa Collaboration Platform 7.1.14 final 51822 ================================================== - ZCP-13581: update fck- editor for webaccess to solve CVE-2012-4000 - ZCP-13572: CVE-2015-6566 - zarafa-autorespond suffers from a potential local privilege escalation - ZCP-13087: Meeting request...

Fedora 23 : mediawiki-1.25.3-1.fc23 (2015-ec6d598d3d)

https://www.mediawiki.org/wiki/Releasenotes/1.25MediaWiki1.25.3 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additiona...

Fedora 23 : kdelibs3-3.5.10-71.fc23 (2015-6e50918d8e)

Security fix for CVE-2015-7543 in kdelibs3 the KDE 3 compatibility version of kdelibs: A temporary directory was being created insecurely using mktemp and mkdir, allowing an attacker to hijack the temporary directory and thus the inter-process communication IPC. This update fixes the temporary...

Fedora 23 : monitorix-3.8.1-1.fc23 (2015-b6b8582f4e)

This is a maintenance release that mainly fixes a Document Object Model DOM-based cross-site scripting XSS vulnerability in the monitorix.cgi file. Such vulnerability is by injection a JS code in the when parameter of the URL shown after generating the graphs. Additionally, a potential denial of...

Fedora 23 : xen-4.5.2-6.fc23 (2015-d8253e2b1d)

paravirtualized drivers incautious about shared memory contents XSA-155, CVE-2015-8550 qemu-dm buffer overrun in MSI-X handling XSA-164, CVE-2015-8554 information leak in legacy x86 FPU/XMM initialization XSA-165, CVE-2015-8555 ioreq handling possibly susceptible to multiple read issue XSA-166 No...

Fedora 23 : perl-5.22.1-351.fc23 (2016-5d4fc5ecc9)

Fix manipulating environment variables to align with how glibc handles duplicated environment variables. Perl now uses the first variable listed in the environment array and it removes any subsequent entries of the same-named variable from the array, so that child processes have only one variable...

Fedora 23 : kernel-4.2.2-300.fc23 (2015-3c8c8ba072)

The 4.2.2 stable kernel update contains a number of important fixes across the tree. kernel-4.2.2-300.fc23 - Linux v4.2.2 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

Fedora 23 : opensmtpd-5.7.3p1-1.fc23 (2015-ed1c673f09)

"Issues fixed in this release since 5.7.2: - fix an mda buffer truncation bug which allows a user to create forward files that pass session checks but fail delivery later down the chain, within the user mda; - fix remote buffer overflow in unprivileged pony process; - reworked offline enqueue to...

Fedora 22 : drupal7-active_tags-2.0-0.9.alpha1.fc22 (2015-4b2e639bb6)

Issue 2288251 by pfrenssen, SylvainM: Fix XSS vulnerability when rendering tags. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 23 : drupal7-jquery_update-2.7-1.fc23 (2015-c2f6872886)

See jQuery Update - Less Critical - Open Redirect - SA- CONTRIB-2015-158 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 22 : monitorix-3.8.1-1.fc22 (2015-12813acfa3)

This is a maintenance release that mainly fixes a Document Object Model DOM-based cross-site scripting XSS vulnerability in the monitorix.cgi file. Such vulnerability is by injection a JS code in the when parameter of the URL shown after generating the graphs. Additionally, a potential denial of...

Fedora 23 : mariadb-10.0.23-1.fc23 (2016-e30164d0a2)

This is an update to 10.0.23 that delivers also all fixes for CVE-2015-4792, CVE-2015-4802, CVE-2015-4807, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819, CVE-2015-4826, CVE-2015-4830, CVE-2015-4836, CVE-2015-4858, CVE-2015-4861, CVE-2015-4870, CVE-2015-4879, CVE-2015-4895, CVE-2015-4913,...

Fedora 22 : tubo-5.0.15-3.fc22 (2015-4329bbe285)

tubo-5.0.15-3.el6 - Hardened builds on F23 tubo-5.0.15-3.fc23 - Hardened builds on F23 tubo-5.0.15-3.fc22 - Hardened builds on F23 tubo-5.0.15-3.fc21 - Hardened builds on F23 tubo-5.0.15-3.el6 - Hardened builds on F23 Note that Tenable Network Security has extracted the preceding description bloc...

Fedora 23 : prosody-0.9.10-1.fc23 (2016-5a5c85c5a8)

Prosody 0.9.10 ============== A summary of changes in this release: Security -------- moddialback: Adopt key generation algorithm from XEP-0185, to prevent impersonation attacks CVE-2016-0756 Fixes and improvements ---------------------- Startup: Open /dev/urandom read-only, to fix a failure to...

Fedora 23 : metis-5.1.0-7.fc23 (2015-8cf7bff87b)

metis-5.1.0-7.el7 - Rebuild for cmake 3.4.0 - Hardened builds on F23 metis-5.1.0-7.fc22 - Rebuild for cmake 3.4.0 - Hardened builds on F23 metis-5.1.0-7.fc21 - Rebuild for cmake 3.4.0 - Hardened builds on F23 metis-5.1.0-7.el6 - Rebuild for cmake 3.4.0 - Hardened builds on F23 metis-5.1.0-7.fc23 ...

Fedora 23 : php-horde-horde-5.2.9-1.fc23 (2016-5d0e7f15ef)

horde 5.2.9 jan SECURITY: Fix XSS vulnerability in menu bar exposed by few applications Bug 14213. jan Add more detailed user DN settings to Kolab group configuration Request 11737. jan Fix returning to last page after problem reporting from AJAX pages Bug 12112. jan Fix custom database...