Multiple security fixes.
Category Archives: Fedora
Fedora – Security Updates
dracut-044-78.fc25
– fixed permissions of initramfs file, if microcode is prepended
(CVE-2016-8637)
dracut-043-67.fc23
– fixed permissions of initramfs file, if microcode is prepended
(CVE-2016-8637)
dracut-044-21.fc24
– fixed permissions of initramfs file, if microcode is prepended
(CVE-2016-8637)
ansible-2.2.0.0-3.el7
Add patch to fix dnf module groupinstall handling
—-
Update to new ansible 2.2 version.
For full changes see:
https://github.com/ansible/ansible/blob/stable-2.2/CHANGELOG.md
ansible-2.2.0.0-3.el6
Add patch to fix dnf module groupinstall handling
—-
Update to new ansible 2.2 version.
For full changes see:
https://github.com/ansible/ansible/blob/stable-2.2/CHANGELOG.md
ansible-2.2.0.0-3.fc25
Add patch to fix dnf module groupinstall handling
—-
Update to new ansible 2.2 version.
For full changes see:
https://github.com/ansible/ansible/blob/stable-2.2/CHANGELOG.md
ansible-2.2.0.0-3.fc24
Add patch to fix dnf module groupinstall handling
—-
Update to new ansible 2.2 version.
For full changes see:
https://github.com/ansible/ansible/blob/stable-2.2/CHANGELOG.md
python-simplejson-3.5.3-1.el7
Update to 3.5.3:
* Fix lower bound checking in scan_once / raw_decode API
https://github.com/simplejson/simplejson/issues/98
* Consistently reject int_as_string_bitcount settings that are not
positive integers
* Added int_as_string_bitcount encoder option
https://github.com/simplejson/pull/96
* Fixed potential crash when encoder created with incorrect options
* Native setuptools support re-introduced
https://github.com/simplejson/simplejson/pull/92
ghostscript-9.20-5.fc24
This update fixes a rare ocasion where ghostscript would fail when displaying *.ps files. More info can be found [here](http://bugs.ghostscript.com/show_bug.cgi?id=697286).
—-
This is a security update for these CVEs:
* [CVE-2016-8602](https://bugzilla.redhat.com/show_bug.cgi?id=1383940) – *check for sufficient params in .sethalftone5*
* [CVE-2016-7977](https://bugzilla.redhat.com/show_bug.cgi?id=1380415) – *.libfile does not honor -dSAFER* [This CVE is now correctly fixed, previous release was accidentally missing the fix.]