Fedora Linux Distribution

Fedora 27: php Security Update 2018-6f37f99641

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

**PHP version 7.1.20** (19 Jul 2018) **Core:** * Fixed bug php#76534 (PHP hangs on 'illegal string offset on string references with an error handler). (Laruence) * Fixed bug php#76502 (Chain of mixed exceptions and errors does not serialize properly). (Nikita) **Date:** * Fixed bug php#76462 (Undefined property: DateInterval::$f). (Anatol) **exif:** * Fixed bug php#76423 (Int

LinuxSecurity.com Team
Jul 27, 2018

Fedora 27: NetworkManager-vpnc Security Update

Update to 1.2.6 to fix a local authenticated privilege escalation bug (CVE-2018-10900). The issue has been discovered and responsibly disclosed by Denis Andzakovic: https://pulsesecurity.co.nz/advisories/NM-VPNC-Privesc

LinuxSecurity.com Team
Jul 26, 2018

Fedora 28: httpd Security Update

This update includes the latest upstream release, **httpd 2.4.34**, with multiple bug fixes and enhancements. See for more information on the changes in this version. A security vulnerability is addressed in this update: * `mod_md`: DoS via Coredumps on specially crafted requests (CVE-2018-8011)

LinuxSecurity.com Team
Jul 25, 2018

Fedora 27: dcraw Security Update

New version of dcraw is available 9.28.0 Security fix for CVE-2018-5801

LinuxSecurity.com Team
Jul 25, 2018

Fedora 28: NetworkManager-vpnc Security Update

LinuxSecurity.com Team
Jul 23, 2018

Fedora 28: mailman Security Update 2018-f8fd4c5798

Add fix for CVE-2018-0618 (#1596459) ---- Add fix for CVE-2018-0618 (#1596460)

LinuxSecurity.com Team
Jul 23, 2018

Fedora 28: haproxy Security Update 2018-941d094624

Update to 1.8.12

LinuxSecurity.com Team
Jul 23, 2018

Fedora 28: openslp Security Update

Fix heap memory corruption, CVE-2017-17833

LinuxSecurity.com Team
Jul 19, 2018

Fedora 28: libtomcrypt Security Update

- Fix Side Channel Based ECDSA Key Extraction (CVE-2018-12437) (PR #408) - Fix potential stack overflow when DER flexi-decoding (CVE-2018-0739) (PR #373) - Fix two-key 3DES (PR #390) - Fix accelerated CTR mode (PR #359) - Fix Fortuna PRNG (PR #363) - Fix compilation on platforms where cc doesn't point to gcc (PR #382) - Fix using the wrong environment variable LT instead of LIBTOOL (PR #392) - Fix [More...]

LinuxSecurity.com Team
Jul 19, 2018

Fedora 28: perl-Archive-Zip Security Update

This release fixes a directory and symbolic link traversal vulnerability in Archive::Zip::Archive Perl module that allows an attacker to writite into an arbitrary file accesible by a local user.

LinuxSecurity.com Team
Jul 19, 2018

Fedora 28: libgit2 Security Update

Update to 0.26.5 (CVE-2018-10887, CVE-2018-10888)

LinuxSecurity.com Team
Jul 19, 2018

Fedora 27: perl-Archive-Zip Security Update

This release fixes a directory and symbolic link traversal vulnerability in Archive::Zip::Archive Perl module that allows an attacker to writite into an arbitrary file accesible by a local user.