Resolved Bugs
1179354 – python-pillow: potential denial-of-service during PNG decompression<br
This update fixes a potential denial-of-service during PNG decompression.

Resolved Bugs
1177254 – libsndfile: division by zero leading to denial of service in psf_fwrite()
1178842 – libsndfile: division by zero leading to denial of service in psf_fwrite() [fedora-all]<br
fixing above security issues

Resolved Bugs
1181483 – chicken: buffer overflow vulnerability in CHICKEN Scheme’s substring-index[-ci] procedures
1181485 – chicken: buffer overflow vulnerability in CHICKEN Scheme’s substring-index[-ci] procedures [epel-all]
1181484 – chicken: buffer overflow vulnerability in CHICKEN Scheme’s substring-index[-ci] procedures [fedora-all]
1104019 – chicken-4.9.0.1 is available<br
Patches security vulnerability discussed here:
https://bugzilla.redhat.com/show_bug.cgi?id=1181483
Latest upstream release.
Latest upstream release.

Resolved Bugs
1181483 – chicken: buffer overflow vulnerability in CHICKEN Scheme’s substring-index[-ci] procedures
1181485 – chicken: buffer overflow vulnerability in CHICKEN Scheme’s substring-index[-ci] procedures [epel-all]
1181484 – chicken: buffer overflow vulnerability in CHICKEN Scheme’s substring-index[-ci] procedures [fedora-all]
1104019 – chicken-4.9.0.1 is available<br
Patches security vulnerability discussed here:
https://bugzilla.redhat.com/show_bug.cgi?id=1181483
Latest upstream release.
Latest upstream release.

New upstream version.

Resolved Bugs
1177254 – libsndfile: division by zero leading to denial of service in psf_fwrite()
1178842 – libsndfile: division by zero leading to denial of service in psf_fwrite() [fedora-all]<br
fixing above security issues

Resolved Bugs
1180234 – CVE-2014-3571 openssl: DTLS segmentation fault in dtls1_get_record
1180239 – CVE-2015-0205 openssl: DH client certificates accepted without verification
1180189 – CVE-2015-0204 openssl: Only allow ephemeral RSA keys in export ciphersuites [fedora-all]
1180187 – CVE-2014-8275 openssl: Fix various certificate fingerprint issues
1181013 – CVE-2014-3571 CVE-2014-3570 CVE-2015-0205 CVE-2015-0206 openssl: various flaws [fedora-all]
1180235 – CVE-2015-0206 openssl: DTLS memory leak in dtls1_buffer_record
1180240 – CVE-2014-3570 openssl: Bignum squaring may produce incorrect results<br
Multiple low and moderate impact security issues fixed.

Resolved Bugs
1177254 – libsndfile: division by zero leading to denial of service in psf_fwrite()
1178843 – libsndfile: division by zero leading to denial of service in psf_fwrite() [epel-5]<br
fixing above security issues

Resolved Bugs
1181483 – chicken: buffer overflow vulnerability in CHICKEN Scheme’s substring-index[-ci] procedures
1181485 – chicken: buffer overflow vulnerability in CHICKEN Scheme’s substring-index[-ci] procedures [epel-all]
1181484 – chicken: buffer overflow vulnerability in CHICKEN Scheme’s substring-index[-ci] procedures [fedora-all]
1104019 – chicken-4.9.0.1 is available<br
Patches security vulnerability discussed here:
https://bugzilla.redhat.com/show_bug.cgi?id=1181483
Latest upstream release.
Latest upstream release.

Fixes CVE-2014-9221 denial-of-service vulnerability.