Category Archives: Fedora

Fedora – Security Updates

community-mysql-5.7.17-1.fc25

* Mon Dec 12 2016 Norvald H. Ryeng – 5.7.17-1
– Update to MySQL 5.7.17, for various fixes described at
https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-17.html
– Add new plugin: connnection_control.so
– Add MySQL Group Replication: group_replication.so
– Add numactl-devel to buildreq and enable NUMA support (if available)
– Simplify boost path
– Build compat-openssl10 in rawhide for now
– Reqs. in -devel packages was incomplete

freeipa-4.4.3-1.fc25

Rebase to upstream 4.4.3: http://www.freeipa.org/page/Releases/4.4.3

—-

– Fixes 1395311 – CVE-2016-9575 ipa: Insufficient permission check in certprofile-mod
– Fixes 1370493 – CVE-2016-7030 ipa: DoS attack against kerberized services
by abusing password policy

freeipa-4.3.2-4.fc24

– Fixes 1395311 – CVE-2016-9575 ipa: Insufficient permission check in certprofile-mod
– Fixes 1370493 – CVE-2016-7030 ipa: DoS attack against kerberized services by abusing password policy

—-

– Fixes 1395311 – CVE-2016-9575 ipa: Insufficient permission check in certprofile-mod
– Fixes 1370493 – CVE-2016-7030 ipa: DoS attack against kerberized services
by abusing password policy

python-wikitcms-2.1.10-1.fc23

This update contains a **SECURITY** fix for an issue with potentially serious consequences but very limited scope. If an administrator of a wiki you talked to using python-wikitcms were malicious, they could cause arbitrary code execution as the user running wikitcms. No-one besides a wiki administrator could do this, as it requires crafting the wiki’s response to an edit request to include a malicious payload.

It also drops some now useless or unneeded code (due to changes in mediawiki and mwclient).