[SECURITY] Fedora EPEL 7 Update: php-horde-passwd-5.0.7-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-3a2abe4898
2017-10-06 13:44:20.907332
--------------------------------------------------------------------------------
Name : php-horde-passwd
Product : Fedora EPEL 7
Version : 5.0.7
Release : 1.el7
URL : http://www.horde.org/apps/passwd
Summary : Horde password changing application
Description :
An application to change any user passwords stored in various backends like
SQL, LDAP, Kolab, passwd files etc.
--------------------------------------------------------------------------------
Update Information:
**passwd 5.0.7** * [jan] Officially support PHP 7. * [jan] SECURITY: Fix open
redirects.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-horde-passwd' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 6 months
Fedora EPEL 7 Update: gsmartcontrol-1.1.0-2.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-49d0d44929
2017-10-06 13:44:20.907277
--------------------------------------------------------------------------------
Name : gsmartcontrol
Product : Fedora EPEL 7
Version : 1.1.0
Release : 2.el7
URL : http://gsmartcontrol.sourceforge.net
Summary : Graphical user interface for smartctl
Description :
GSmartControl is a graphical user interface for smartctl (from
smartmontools package), which is a tool for querying and controlling
SMART (Self-Monitoring, Analysis, and Reporting Technology) data on
modern hard disk drives. It allows you to inspect the drive's SMART
data to determine its health, as well as run various tests on it.
--------------------------------------------------------------------------------
Update Information:
Drop consolehelper. ---- Update to 1.1.0.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update gsmartcontrol' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 6 months
Fedora EPEL 7 Update: rakudo-URI-0.1.4-0.1.20170920gite5c8551.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-3f1f20ada8
2017-10-06 13:44:20.907227
--------------------------------------------------------------------------------
Name : rakudo-URI
Product : Fedora EPEL 7
Version : 0.1.4
Release : 0.1.20170920gite5c8551.el7
URL : https://github.com/perl6-community-modules/URI
Summary : Perl 6 realization of URI
Description :
Perl6 realization of URI - Uniform Resource Identifiers handler
A URI implementation using Perl 6 grammars to implement RFC 3986 BNF. Currently
only implements parsing. Includes URI::Escape to (un?)escape characters that
aren't otherwise allowed in a URI with % and a hex character numbering.
--------------------------------------------------------------------------------
Update Information:
add initial build
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update rakudo-URI' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 6 months
Fedora EPEL 7 Update: abook-0.6.1-2.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-1812b18f17
2017-10-06 13:44:20.907170
--------------------------------------------------------------------------------
Name : abook
Product : Fedora EPEL 7
Version : 0.6.1
Release : 2.el7
URL : http://abook.sourceforge.net/
Summary : Text-based addressbook program for mutt
Description :
Abook is a small and powerful text-based addressbook program
designed for use with the mutt mail client.
--------------------------------------------------------------------------------
Update Information:
Text-based address book program.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1492297 - please create an epel7 package for abook
https://bugzilla.redhat.com/show_bug.cgi?id=1492297
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update abook' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 6 months
[SECURITY] Fedora EPEL 6 Update: php-horde-nag-4.2.17-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-a981889220
2017-10-06 13:44:17.845307
--------------------------------------------------------------------------------
Name : php-horde-nag
Product : Fedora EPEL 6
Version : 4.2.17
Release : 1.el6
URL : http://www.horde.org/apps/nag
Summary : A web based task list manager
Description :
Nag is a web-based application built upon the Horde Application Framework
which provides a simple, clean interface for managing online task lists
(i.e., todo lists). It also includes strong integration with the other
Horde applications and allows users to share task lists or enable
light-weight project management.
--------------------------------------------------------------------------------
Update Information:
**nag 4.2.17** * [jan] SECURITY: Fix unauthorized access to task exports. *
[jan] Fix regression when exporting single tags to iCalendar CATEGORIES. * [jan]
Officially support PHP 7.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-horde-nag' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 6 months
[SECURITY] Fedora EPEL 6 Update: php-horde-wicked-2.0.8-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-e6c88309c0
2017-10-06 13:44:17.845250
--------------------------------------------------------------------------------
Name : php-horde-wicked
Product : Fedora EPEL 6
Version : 2.0.8
Release : 1.el6
URL : http://www.horde.org/apps/wicked
Summary : Wiki application
Description :
Wicked is a wiki application for Horde.
--------------------------------------------------------------------------------
Update Information:
**wicked 2.0.8** * [jan] SECURITY: Fix unauthorized access to page attachments.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-horde-wicked' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 6 months
[SECURITY] Fedora EPEL 7 Update: moodle-3.1.8-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-8da6477f0a
2017-10-06 13:44:20.907097
--------------------------------------------------------------------------------
Name : moodle
Product : Fedora EPEL 7
Version : 3.1.8
Release : 1.el7
URL : http://moodle.org/
Summary : A Course Management System
Description :
Moodle is a course management system (CMS) - a free, Open Source software
package designed using sound pedagogical principles, to help educators create
effective online learning communities.
--------------------------------------------------------------------------------
Update Information:
Patches for CVE-2017-12156, CVE-2017-12157. ---- Bundling corrections.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1493515 - CVE-2017-12156 CVE-2017-12157 moodle: Multiple vulnerabilities [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1493515
[ 2 ] Bug #1493516 - CVE-2017-12156 CVE-2017-12157 moodle: Multiple vulnerabilities [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1493516
[ 3 ] Bug #1489208 - EPEL moodle 3.1.x doesn't load tcpdf/tcpdf.php
https://bugzilla.redhat.com/show_bug.cgi?id=1489208
[ 4 ] Bug #1489197 - EPEL moodle-3.1.x must use bundled php-pear-HTML*
https://bugzilla.redhat.com/show_bug.cgi?id=1489197
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update moodle' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 6 months
Fedora EPEL 7 Update: tracer-0.6.13.1-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-0ea7f2d350
2017-10-06 13:44:20.906924
--------------------------------------------------------------------------------
Name : tracer
Product : Fedora EPEL 7
Version : 0.6.13.1
Release : 1.el7
URL : http://tracer-package.com/
Summary : Finds outdated running applications in your system
Description :
Tracer determines which applications use outdated files and prints them. For
special kind of applications such as services or daemons, it suggests a standard
command to restart it. Detecting whether file is outdated or not is based on a
simple idea. If application has loaded in memory any version of a file
which is provided by any package updated since system was booted up, tracer
consider this application as outdated.
--------------------------------------------------------------------------------
Update Information:
Correct package version comparision (seanokeeffe797(a)gmail.com)
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update tracer' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 6 months
[SECURITY] Fedora EPEL 6 Update: php-horde-passwd-5.0.7-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-5b8684c487
2017-10-06 13:44:17.845035
--------------------------------------------------------------------------------
Name : php-horde-passwd
Product : Fedora EPEL 6
Version : 5.0.7
Release : 1.el6
URL : http://www.horde.org/apps/passwd
Summary : Horde password changing application
Description :
An application to change any user passwords stored in various backends like
SQL, LDAP, Kolab, passwd files etc.
--------------------------------------------------------------------------------
Update Information:
**passwd 5.0.7** * [jan] Officially support PHP 7. * [jan] SECURITY: Fix open
redirects.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update php-horde-passwd' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 6 months
[SECURITY] Fedora EPEL 7 Update: wordpress-4.8.2-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-5b07cc6958
2017-10-05 21:00:53.414728
--------------------------------------------------------------------------------
Name : wordpress
Product : Fedora EPEL 7
Version : 4.8.2
Release : 1.el7
URL : http://www.wordpress.org
Summary : Blog tool and publishing platform
Description :
Wordpress is an online publishing / weblog package that makes it very easy,
almost trivial, to get information out to people on the web.
Important information in /usr/share/doc/wordpress-4.8.2/README.fedora
--------------------------------------------------------------------------------
Update Information:
Upstream announcement: **WordPress 4.8.2 is now available**. This is a security
release for all previous versions and we strongly encourage you to update your
sites immediately. WordPress versions 4.8.1 and earlier are affected by these
security issues: * $wpdb->prepare() can create unexpected and unsafe queries
leading to potential SQL injection (SQLi). WordPress core is not directly
vulnerable to this issue, but we���ve added hardening to prevent plugins and
themes from accidentally causing a vulnerability. Reported by Slavco * A
cross-site scripting (XSS) vulnerability was discovered in the oEmbed discovery.
Reported by xknown of the WordPress Security Team. * A cross-site scripting
(XSS) vulnerability was discovered in the visual editor. Reported by Rodolfo
Assis (@brutelogic) of Sucuri Security. * A path traversal vulnerability was
discovered in the file unzipping code. Reported by Alex Chapman (noxrnet). *
A cross-site scripting (XSS) vulnerability was discovered in the plugin editor.
Reported by ��������� (Chen Ruiqi). * An open redirect was discovered on the user
and term edit screens. Reported by Yasin Soliman (ysx). * A path traversal
vulnerability was discovered in the customizer. Reported by Weston Ruter of the
WordPress Security Team. * A cross-site scripting (XSS) vulnerability was
discovered in template names. Reported by Luka (sikic). * A cross-site
scripting (XSS) vulnerability was discovered in the link modal. Reported by Anas
Roubi (qasuar). Thank you to the reporters of these issues for practicing
[responsible disclosure](https://make.wordpress.org/core/handbook/testing
/reporting-security-vulnerabilities/). In addition to the security issues
above, WordPress 4.8.2 contains 6 maintenance fixes to the 4.8 release series.
For more information, see the [release
notes](https://codex.wordpress.org/Version_4.8.2) or consult the [list of change
s](https://core.trac.wordpress.org/query?status=closed&milestone=4.8.2&gr...
ponent&col=id&col=summary&col=component&col=status&col=owner&col=type&col=priori
ty&col=keywords&order=priority). Thanks to everyone who contributed to 4.8.2.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update wordpress' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 7 months