gdm 3.30.3 release. – Screen lock bypass fix (when timed login is enabled) (CVE-2019-3825) – Translation updates
Archive for Fedora
FreeRDP fix for CVE-2018-1000852, Remmina bugfix update and rebuilds for updated FreeRDP.
Restrict default configuration to localhost.
fix for CVE-2018-5704 (RHBZ 1534844)
FreeRDP fix for CVE-2018-1000852, Remmina bugfix update and rebuilds for updated FreeRDP.
– CVE-2019-8907 – remote denial of service in do_core_note in readelf.c – CVE-2019-8905 – stack-based buffer over-read in do_core_note in readelf.c – CVE-2019-8904 – stack-based buffer over-read in do_bid_note in readelf.c – CVE-2019-8906 – out-of-bounds read in do_core_note in readelf.c
Update to 1.0.7 Fixes related to CVE-2019-5736.
Security fix for CVE-2018-16741,CVE-2018-16744,CVE-2018-16745
Security fix for CVE-2018-16741,CVE-2018-16744,CVE-2018-16745
This release fixes various buffer overflows when parsing or processing damaged Waveform audio and BMP image files.
Rebase to Koji 1.16.2 for CVE-2018-1002161
Update to Pagure 5.3, which includes the fix for CVE-2019-7628.
Fixes CVE-2019-3813
Fedora 29: dnf-plugins-extras Security Update
**createrepo_c** * Include file timestamp in repomd.xml to allow reproducing exact metadata as produced in the past * Support of zchunk **libcomps** **librepo** * Add zchunk support **libdnf** * Enhance modular solver to handle enabled and default module streams differently (RhBug:1648839) * Add support of wild cards for modules (RhBug:1644588) * Revert commit that adds best
**createrepo_c** * Include file timestamp in repomd.xml to allow reproducing exact metadata as produced in the past * Support of zchunk **libcomps** **librepo** * Add zchunk support **libdnf** * Enhance modular solver to handle enabled and default module streams differently (RhBug:1648839) * Add support of wild cards for modules (RhBug:1644588) * Revert commit that adds best
Fedora 29: createrepo_c Security Update
**createrepo_c** * Include file timestamp in repomd.xml to allow reproducing exact metadata as produced in the past * Support of zchunk **libcomps** **librepo** * Add zchunk support **libdnf** * Enhance modular solver to handle enabled and default module streams differently (RhBug:1648839) * Add support of wild cards for modules (RhBug:1644588) * Revert commit that adds best
Fedora 29: dnf-plugins-core Security Update
**createrepo_c** * Include file timestamp in repomd.xml to allow reproducing exact metadata as produced in the past * Support of zchunk **libcomps** **librepo** * Add zchunk support **libdnf** * Enhance modular solver to handle enabled and default module streams differently (RhBug:1648839) * Add support of wild cards for modules (RhBug:1644588) * Revert commit that adds best
**createrepo_c** * Include file timestamp in repomd.xml to allow reproducing exact metadata as produced in the past * Support of zchunk **libcomps** **librepo** * Add zchunk support **libdnf** * Enhance modular solver to handle enabled and default module streams differently (RhBug:1648839) * Add support of wild cards for modules (RhBug:1644588) * Revert commit that adds best
**createrepo_c** * Include file timestamp in repomd.xml to allow reproducing exact metadata as produced in the past * Support of zchunk **libcomps** **librepo** * Add zchunk support **libdnf** * Enhance modular solver to handle enabled and default module streams differently (RhBug:1648839) * Add support of wild cards for modules (RhBug:1644588) * Revert commit that adds best
New release (1:12.2.11-1) notes=Security fix for CVE-2018-14662, CVE-2018-16846, CVE-2018-16889
Update to 2.9.0 including security fix for CVE-2018-20187
Fedora 28: subversion Security Update
This update includes the latest stable release of _Apache Subversion_, version **1.11.1**. This update fixes a security issue in **mod_dav_svn**, `CVE-2018-11803`: > Malicious SVN clients can trigger a crash in mod_dav_svn by omitting > the root path from a recursive directory listing request. See https://subversion.apache.org/security/CVE-2018-11803-advisory.txt for more
Fedora 28: moby-engine Security Update
CVE-2019-5736
Fedora 29: python-markdown2 Security Update
## python-markdown2 2.3.7 – [pull #306] Drop support for legacy Python versions – [pull #307] Fix syntax highlighting test cases that depend on Pygments output – [pull #308] Add support for Python 3.7 – [pull #304] Add Wheel package support – [pull #312] Fix toc_depth initialization regression – [pull #315] XSS fix
Backport security fix for CVE-2019-7443
Fix for CVE-2018-20030 https://bugzilla.redhat.com/show_bug.cgi?id=1663878
Update to 1.8.4. Security fix for CVE-2018-8794 CVE-2018-8795 CVE-2018-8797 CVE-2018-20175 CVE-2018-20176 CVE-2018-8791 CVE-2018-8792 CVE-2018-8793 CVE-2018-8796 CVE-2018-8798 CVE-2018-8799 CVE-2018-8800 CVE-2018-20174 CVE-2018-20177 CVE-2018-20178 CVE-2018-20179 CVE-2018-20180 CVE-2018-20181 CVE-2018-20182.
Fedora 28: pdns-recursor Security Update
Fixes CVE-2019-386 and CVE-2019-3807
Update to 1.2.3 Fixes security vulnerability related to CVE-2019-5736.
Fedora 29: xerces-c27 Security Update
Fixes for CVE-2016-4463 and CVE-2017-12627.