Category Archives: Fedora

Fedora – Security Updates

botan-1.10.14-3.fc23

### Botan 1.10.14 ###
* NOTE WELL: Botan 1.10.x is supported for security patches only until 2017-12-31
* Fix integer overflow during BER decoding, found by Falko Strenzke. This bug is not thought to be directly exploitable but upgrading ASAP is advised. (CVE-2016-9132)
* Fix two cases where (in error situations) an exception would be thrown from a destructor, causing a call to std::terminate.
* When RC4 is disabled in the build, also prevent it from being included in the OpenSSL provider. (GH #638)

botan-1.10.14-3.fc25

### Botan 1.10.14 ###
* NOTE WELL: Botan 1.10.x is supported for security patches only until 2017-12-31
* Fix integer overflow during BER decoding, found by Falko Strenzke. This bug is not thought to be directly exploitable but upgrading ASAP is advised. (CVE-2016-9132)
* Fix two cases where (in error situations) an exception would be thrown from a destructor, causing a call to std::terminate.
* When RC4 is disabled in the build, also prevent it from being included in the OpenSSL provider. (GH #638)

botan-1.10.14-3.fc24

### Botan 1.10.14 ###
* NOTE WELL: Botan 1.10.x is supported for security patches only until 2017-12-31
* Fix integer overflow during BER decoding, found by Falko Strenzke. This bug is not thought to be directly exploitable but upgrading ASAP is advised. (CVE-2016-9132)
* Fix two cases where (in error situations) an exception would be thrown from a destructor, causing a call to std::terminate.
* When RC4 is disabled in the build, also prevent it from being included in the OpenSSL provider. (GH #638)

botan-1.10.14-3.el7

### Botan 1.10.14 ###
* NOTE WELL: Botan 1.10.x is supported for security patches only until 2017-12-31
* Fix integer overflow during BER decoding, found by Falko Strenzke. This bug is not thought to be directly exploitable but upgrading ASAP is advised. (CVE-2016-9132)
* Fix two cases where (in error situations) an exception would be thrown from a destructor, causing a call to std::terminate.
* When RC4 is disabled in the build, also prevent it from being included in the OpenSSL provider. (GH #638)

xen-4.6.4-3.fc24

ARM guests may induce host asynchronous abort [XSA-201, CVE-2016-9815,
CVE-2016-9816, CVE-2016-9817, CVE-2016-9818] (#1399747)
qemu: Divide by zero vulnerability in cirrus_do_copy (#1399055)
[CVE-2016-9921, CVE-2016-9922]
Qemu: 9pfs: memory leakage via proxy/handle callbacks (#1402278)
qemu ioport array overflow [XSA-199, CVE-2016-9637]