Resolved Bugs
1159845 – CVE-2014-8627 CVE-2014-8628 polarssl: various issues fixed in 1.3.9<br
– Update to 1.2.12
– CVE-2014-8628 (#1159845)

Resolved Bugs
1162655 – binutils: directory traversal vulnerability
1162656 – arm-none-eabi-binutils-cs: binutils: directory traversal vulnerability [fedora-all]
1162594 – CVE-2014-8502 binutils: heap overflow in objdump
1162598 – CVE-2014-8502 arm-none-eabi-binutils-cs: binutils: heap overflow in objdump [fedora-all]
1162621 – CVE-2014-8504 binutils: stack overflow in the SREC parser
1162622 – CVE-2014-8504 arm-none-eabi-binutils-cs: binutils: stack overflow in the SREC parser [fedora-all]
1162570 – CVE-2014-8501 binutils: out-of-bounds write when parsing specially crafted PE executable
1162574 – CVE-2014-8501 arm-none-eabi-binutils-cs: binutils: out-of-bounds write when parsing specially crafted PE executable [fedora-all]<br
– fix directory traversal vulnerability (#1162657)
– fix CVE-2014-8501: out-of-bounds write when parsing specially crafted PE executable
– fix CVE-2014-8502: heap overflow in objdump
– fix CVE-2014-8503: stack overflow in objdump when parsing specially crafted ihex file
– fix CVE-2014-8504: stack overflow in the SREC parser

Resolved Bugs
1162655 – CVE-2014-8737 binutils: directory traversal vulnerability
1162656 – arm-none-eabi-binutils-cs: binutils: directory traversal vulnerability [fedora-all]
1162594 – CVE-2014-8502 binutils: heap overflow in objdump
1162598 – CVE-2014-8502 arm-none-eabi-binutils-cs: binutils: heap overflow in objdump [fedora-all]
1162621 – CVE-2014-8504 binutils: stack overflow in the SREC parser
1162622 – CVE-2014-8504 arm-none-eabi-binutils-cs: binutils: stack overflow in the SREC parser [fedora-all]
1162570 – CVE-2014-8501 binutils: out-of-bounds write when parsing specially crafted PE executable
1162574 – CVE-2014-8501 arm-none-eabi-binutils-cs: binutils: out-of-bounds write when parsing specially crafted PE executable [fedora-all]
1162666 – CVE-2014-8738 binutils: out of bounds memory write
1162669 – arm-none-eabi-binutils-cs: binutils: out of bounds memory write [fedora-all]<br
– fix directory traversal vulnerability (#1162657)
– fix CVE-2014-8501: out-of-bounds write when parsing specially crafted PE executable
– fix CVE-2014-8502: heap overflow in objdump
– fix CVE-2014-8503: stack overflow in objdump when parsing specially crafted ihex file
– fix CVE-2014-8504: stack overflow in the SREC parser
– fix out of bounds memory write

Resolved Bugs
1159845 – CVE-2014-8627 CVE-2014-8628 polarssl: various issues fixed in 1.3.9<br
– Update to 1.2.12
– CVE-2014-8628 (#1159845)

Resolved Bugs
1163778 – CVE-2014-8651 kde-workspace: arbitrary code execution and local privilege escalation<br
New security fix release, privilege escalation issue, see also https://www.kde.org/info/security/advisory-20141106-1.txt

Resolved Bugs
1002302 – libdigidoc: arbitrary file overwrite flaw [fedora-all]
1002299 – CVE-2013-5648 libdigidoc: arbitrary file overwrite flaw<br
New upstream release

Resolved Bugs
1163343 – CVE-2014-3007 python-pillow: python-pillow, python-imaging: command injection issue [fedora-all]
1094101 – CVE-2014-3007 python-pillow, python-imaging: command injection issue
1063658 – CVE-2014-1932 python-pillow, python-imaging: insecure temporary file creation
1089795 – CVE-2014-1933 CVE-2014-1932 python-pillow: various flaws [fedora-all]<br
Security fix for CVE-2014-3007, updated fix for CVE-2014-1932.
Followup fix for CVE-2014-1933.

Resolved Bugs
1162655 – binutils: directory traversal vulnerability
1162656 – arm-none-eabi-binutils-cs: binutils: directory traversal vulnerability [fedora-all]
1162594 – CVE-2014-8502 binutils: heap overflow in objdump
1162598 – CVE-2014-8502 arm-none-eabi-binutils-cs: binutils: heap overflow in objdump [fedora-all]
1162621 – CVE-2014-8504 binutils: stack overflow in the SREC parser
1162622 – CVE-2014-8504 arm-none-eabi-binutils-cs: binutils: stack overflow in the SREC parser [fedora-all]
1162570 – CVE-2014-8501 binutils: out-of-bounds write when parsing specially crafted PE executable
1162574 – CVE-2014-8501 arm-none-eabi-binutils-cs: binutils: out-of-bounds write when parsing specially crafted PE executable [fedora-all]<br
– fix directory traversal vulnerability (#1162657)
– fix CVE-2014-8501: out-of-bounds write when parsing specially crafted PE executable
– fix CVE-2014-8502: heap overflow in objdump
– fix CVE-2014-8503: stack overflow in objdump when parsing specially crafted ihex file
– fix CVE-2014-8504: stack overflow in the SREC parser

Resolved Bugs
1162655 – CVE-2014-8737 binutils: directory traversal vulnerability
1162656 – arm-none-eabi-binutils-cs: binutils: directory traversal vulnerability [fedora-all]
1162594 – CVE-2014-8502 binutils: heap overflow in objdump
1162598 – CVE-2014-8502 arm-none-eabi-binutils-cs: binutils: heap overflow in objdump [fedora-all]
1162621 – CVE-2014-8504 binutils: stack overflow in the SREC parser
1162622 – CVE-2014-8504 arm-none-eabi-binutils-cs: binutils: stack overflow in the SREC parser [fedora-all]
1162570 – CVE-2014-8501 binutils: out-of-bounds write when parsing specially crafted PE executable
1162574 – CVE-2014-8501 arm-none-eabi-binutils-cs: binutils: out-of-bounds write when parsing specially crafted PE executable [fedora-all]
1162666 – CVE-2014-8738 binutils: out of bounds memory write
1162669 – arm-none-eabi-binutils-cs: binutils: out of bounds memory write [fedora-all]<br
– fix directory traversal vulnerability (#1162657)
– fix CVE-2014-8501: out-of-bounds write when parsing specially crafted PE executable
– fix CVE-2014-8502: heap overflow in objdump
– fix CVE-2014-8503: stack overflow in objdump when parsing specially crafted ihex file
– fix CVE-2014-8504: stack overflow in the SREC parser
– fix out of bounds memory write

Resolved Bugs
1163778 – CVE-2014-8651 kde-workspace: arbitrary code execution and local privilege escalation<br
New security fix release, privilege escalation issue, see also https://www.kde.org/info/security/advisory-20141106-1.txt