Fedora Essential and Critical Security Patch Updates - Page 729

Fedora 22: curl Security Update 2015-6695

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

- require credentials to match for NTLM re-use (CVE-2015-3143) - fix invalid write with a zero-length host name in URL (CVE-2015-3144) - fix invalid write in cookie path sanitization code (CVE-2015-3145) - close Negotiate connections when done (CVE-2015-3148)

LinuxSecurity.com Team
Apr 26, 2015

Fedora 20: qt5-qtbase Security Update

Multiple vulnerabilities were found in Qt image format handling of BMP, ICO and GIF files. The issues exposed included denial of service and buffer overflows leading to heap corruption. It is possible the latter could be used to perform remote code execution. See also https://lists.qt-project.org/pipermail/announce/2015-April/000067.html

LinuxSecurity.com Team
Apr 26, 2015

Fedora 22: FlightGear Security Update

This update provides a security fix related to the Nasal scripting language.

LinuxSecurity.com Team
Apr 26, 2015

Fedora 22: FlightGear-data Security Update

This update provides a security fix related to the Nasal scripting language.

LinuxSecurity.com Team
Apr 26, 2015

Fedora 20: chrony Security Update

Security fix for CVE-2015-1853, CVE-2015-1821, CVE-2015-1822

LinuxSecurity.com Team
Apr 24, 2015

Fedora 22: qt3 Security Update

This update fixes CVE-2015-1860, a buffer overflow when loading some specific invalid GIF image files, which could be exploited for denial of service (application crash) and possibly even arbitrary code execution attacks. The security patch is backported from Qt 4. (Please note that Qt 3 is NOT vulnerable to the simultaneously published issues CVE-2015-1858 and CVE-2015-1859.)

LinuxSecurity.com Team
Apr 24, 2015

Fedora 20: resteasy Security Update

Security fix for CVE-2014-3490

LinuxSecurity.com Team
Apr 24, 2015

Fedora 22: firefox Security Update 2015-6629

Update to new upstream - 37.0.2 Bookmark rebuild - Bug 1210474

LinuxSecurity.com Team
Apr 24, 2015

Fedora 22: xulrunner Security Update

Update to new upstream - 37.0.2 Bookmark rebuild - Bug 1210474

LinuxSecurity.com Team
Apr 24, 2015

Fedora 21: php Security Update 2015-6407

16 Apr 2015, **PHP 5.6.8** Core: * Fixed bug #66609 (php crashes with __get() and ++ operator in some cases). (Dmitry, Laruence) * Fixed bug #68021 (get_browser() browser_name_regex returns non-utf-8 characters). (Tjerk) * Fixed bug #68917 (parse_url fails on some partial urls). (Wei Dai)