Fedora Essential and Critical Security Patch Updates - Page 763

Fedora 11 Update: java-1.6.0-openjdk-1.6.0.0-25.b16.fc11

Update to new upstream Firefox version 3.5.1, fixing multiple security issues detailed in the upstream advisories: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-3.5/ Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox / XULRunner.

• LinuxSecurity.com Team
• Jul 22, 2009

Fedora 11 Update: Miro-2.0.5-2.fc11

Update to new upstream Firefox version 3.5.1, fixing multiple security issues detailed in the upstream advisories: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-3.5/ Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox / XULRunner.

• LinuxSecurity.com Team
• Jul 22, 2009

Fedora 11 Update: firefox-3.5.1-1.fc11

Update to new upstream Firefox version 3.5.1, fixing multiple security issues detailed in the upstream advisories: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-3.5/ Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox / XULRunner.

• LinuxSecurity.com Team
• Jul 22, 2009

Fedora 11 Update: xulrunner-1.9.1.1-1.fc11

Update to new upstream Firefox version 3.5.1, fixing multiple security issues detailed in the upstream advisories: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-3.5/ Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox / XULRunner.

• LinuxSecurity.com Team
• Jul 22, 2009

Fedora 11 Update: blam-1.8.5-12.fc11

Update to new upstream Firefox version 3.5.1, fixing multiple security issues detailed in the upstream advisories: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-3.5/ Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox / XULRunner.

• LinuxSecurity.com Team
• Jul 22, 2009

Fedora 10 Update: wxGTK-2.8.10-2.fc10

added fix for CVE-2009-2369

• LinuxSecurity.com Team
• Jul 22, 2009

Fedora 11 Update: wxGTK-2.8.10-2.fc11

added fix for CVE-2009-2369

• LinuxSecurity.com Team
• Jul 22, 2009

Fedora 10 Update: perl-IO-Socket-SSL-1.26-1.fc10

This update to version 1.26 fixes an issue where only the prefix of the hostname was checked if there was no wildcard present, so for example www.example.org would match a certificate starting with www.exam.

• LinuxSecurity.com Team
• Jul 19, 2009

Fedora 11 Update: moin-1.8.4-2.fc11

This update removes the filemanager directory from the embedded FCKeditor, it contains code with know security vulnerabilities, even though that code couldn't be invoked when Moin was used with the default settings. Moin was probably not affected, but installing this update is still recommended as a security measure. CVE-2009-2265 is the related CVE identifier.

• LinuxSecurity.com Team
• Jul 19, 2009

Fedora 11 Update: mediawiki-1.15.1-48.fc11

This update upgrades mediawiki code to 1.15.1 and fixes some path references. Upstream comments: This is a security and bugfix release of MediaWiki 1.15.1 and 1.14.1. A cross-site scripting (XSS) vulnerability was discovered. Only versions 1.14.0, 1.15.0 and release candidates for those releases are affected.

• LinuxSecurity.com Team
• Jul 19, 2009

Fedora 11 Update: libtiff-3.8.2-14.fc11

CVE-2009-2347 libtiff: integer overflows in various inter-color spaces conversion tools (crash, ACE) Not the same as last week's libtiff security issue ...

• LinuxSecurity.com Team
• Jul 19, 2009

Fedora 10 Update: compat-wxGTK26-2.6.4-10.fc10

Added rediffed fix for CVE-2009-2369 as found in wxGTK 2.8.10

• LinuxSecurity.com Team
• Jul 19, 2009

Fedora 11 Update: mingw32-libtiff-3.8.2-17.fc11

- update upstream URL - Fix some more LZW decoding vulnerabilities (CVE-2009-2285)

• LinuxSecurity.com Team
• Jul 19, 2009

Fedora 10 Update: moin-1.6.4-3.fc10

This update removes the filemanager and _samples directories from the embedded FCKeditor, they contain code with know security vulnerabilities, even though that code couldn't be invoked when Moin was used with the default settings. Moin was probably not affected, but installing this update is still recommended as a security measure. CVE-2009-2265 is the related CVE identifier.

• LinuxSecurity.com Team
• Jul 19, 2009

Fedora 11 Update: compat-wxGTK26-2.6.4-10.fc11

Added rediffed fix for CVE-2009-2369 as found in wxGTK 2.8.10

• LinuxSecurity.com Team
• Jul 19, 2009

Fedora 10 Update: mediawiki-1.15.1-48.fc10

This update upgrades mediawiki code to 1.15.1 and fixes some path references. Upstream comments: This is a security and bugfix release of MediaWiki 1.15.1 and 1.14.1. A cross-site scripting (XSS) vulnerability was discovered. Only versions 1.14.0, 1.15.0 and release candidates for those releases are affected.

• LinuxSecurity.com Team
• Jul 19, 2009

Fedora 10 Update: wordpress-2.8.1-1.fc10

• LinuxSecurity.com Team
• Jul 19, 2009

Fedora 10 Update: libtiff-3.8.2-14.fc10

CVE-2009-2347 libtiff: integer overflows in various inter-color spaces conversion tools (crash, ACE) Not the same as last week's libtiff security issue ...

• LinuxSecurity.com Team
• Jul 19, 2009

Fedora 10 Update: mingw32-libtiff-3.8.2-17.fc10

- update upstream URL - Fix some more LZW decoding vulnerabilities (CVE-2009-2285) Bugzilla: #511015

• LinuxSecurity.com Team
• Jul 19, 2009

Fedora 11 Update: perl-IO-Socket-SSL-1.26-1.fc11

This update to version 1.26 fixes an issue where only the prefix of the hostname was checked if there was no wildcard present, so for example www.example.org would match a certificate starting with www.example.org

• LinuxSecurity.com Team
• Jul 19, 2009