Resolved Bugs
1193952 – CVE-2015-2060 cabextract: directory traversal with UTF-8 symbols in filenames
1193955 – cabextract: directory traversal with UTF-8 symbols in filenames [fedora-all]<br
Security fix for directory traversal with UTF-8 symbols in filenames. Fixed in upstream version 1.5.

Resolved Bugs
1180214 – lftp: saves unknown host’s fingerprint in known_hosts without any prompt [fedora-all]
1180209 – lftp: saves unknown host’s fingerprint in known_hosts without any prompt<br
one bug fixed

Resolved Bugs
1193952 – CVE-2015-2060 cabextract: directory traversal with UTF-8 symbols in filenames
1193955 – cabextract: directory traversal with UTF-8 symbols in filenames [fedora-all]<br
Security fix for directory traversal with UTF-8 symbols in filenames. Fixed in upstream version 1.5.

Resolved Bugs
1186308 – CVE-2015-0223 qpid-cpp: anonymous access to qpidd cannot be prevented
1181721 – CVE-2015-0203 qpid-cpp: qpidd can be crashed by unauthenticated user
1184488 – build failure in qpid-cpp-0.30/src/tests/txshift.cpp<br
Added qpidtoollibs to the qpid-tools package.
Fixed path to qpid-ha in the systemd service descriptor.
Resolves: BZ#1186308
Apply patch 10.
Resolves: BZ#1184488
Resolves: BZ#1181721

Resolved Bugs
1180214 – lftp: saves unknown host’s fingerprint in known_hosts without any prompt [fedora-all]
1180209 – lftp: saves unknown host’s fingerprint in known_hosts without any prompt<br
one bug fixed

Resolved Bugs
1193451 – novnc: session hijack through insecurely set session token cookies
1193454 – novnc: session hijack through insecurely set session token cookies [epel-all]<br
Security fix (via update to 0.5.1) for session hijack through insecurely set session token cookies

Resolved Bugs
1181721 – CVE-2015-0203 qpid-cpp: qpidd can be crashed by unauthenticated user
1186308 – CVE-2015-0223 qpid-cpp: anonymous access to qpidd cannot be prevented
1184488 – build failure in qpid-cpp-0.30/src/tests/txshift.cpp<br
Added qpidtoollibs to the qpid-tools package.
Fixed path to qpid-ha in the systemd service descriptor.
Resolves: BZ#1186308
Apply patch 10.
Resolves: BZ#1184488
Resolves: BZ#1181721
Enabled building the linear store.

Resolved Bugs
1193451 – novnc: session hijack through insecurely set session token cookies
1193454 – novnc: session hijack through insecurely set session token cookies [epel-all]<br
Security fix (via update to 0.5.1) for session hijack through insecurely set session token cookies

Resolved Bugs
1180209 – lftp: saves unknown host’s fingerprint in known_hosts without any prompt
1180214 – lftp: saves unknown host’s fingerprint in known_hosts without any prompt [fedora-all]<br
one bug fixed

Resolved Bugs
1196254 – CVE-2015-2080 jetty: remote unauthenticated credential exposure<br
Rebase to upstream version 9.2.9, resolves CVE-2015-2080 security vulnerability.