[SECURITY] Fedora EPEL 7 Update: cacti-1.1.12-2.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-d13b9e8413
2017-07-23 17:01:34.223690
--------------------------------------------------------------------------------
Name : cacti
Product : Fedora EPEL 7
Version : 1.1.12
Release : 2.el7
URL : http://www.cacti.net/
Summary : An rrd based graphing tool
Description :
Cacti is a complete frontend to RRDTool. It stores all of the
necessary information to create graphs and populate them with
data in a MySQL database. The frontend is completely PHP
driven.
--------------------------------------------------------------------------------
Update Information:
- Update to 1.1.12 - Fix Cross-site Scripting (XSS) issue with link.php
(CVE-2017-10970) Release notes:
https://www.cacti.net/release_notes.php?version=1.1.11 Release notes:
https://www.cacti.net/release_notes.php?version=1.1.12
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1470248 - CVE-2017-10970 cacti: XSS in link.php [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470248
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update cacti' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 10 months
Fedora EPEL 7 Update: nagios-4.3.2-5.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-a6bf582624
2017-07-23 17:01:34.223635
--------------------------------------------------------------------------------
Name : nagios
Product : Fedora EPEL 7
Version : 4.3.2
Release : 5.el7
URL : https://www.nagios.org/projects/nagios-core/
Summary : Host/service/network monitoring program
Description :
Nagios is a program that will monitor hosts and services on your
network. It has the ability to send email or page alerts when a
problem arises and when a problem is resolved. Nagios is written
in C and is designed to run under Linux (and some other *NIX
variants) as a background process, intermittently running checks
on various services that you specify.
The actual service checks are performed by separate "plugin" programs
which return the status of the checks to Nagios. The plugins are
available at https://github.com/nagios-plugins/nagios-plugins
This package provides the core program, web interface, and documentation
files for Nagios. Development files are built as a separate package.
--------------------------------------------------------------------------------
Update Information:
Added fix for selinux from Patrick Uiterwijk ---- Update to latest in git
---- Updated from 4.3.1 maint to 4.3.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1005974 - nagios-4.3.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1005974
[ 2 ] Bug #1084934 - Unable to reload nagios under systemd
https://bugzilla.redhat.com/show_bug.cgi?id=1084934
[ 3 ] Bug #1201849 - Support an environment file in the systemd unit file
https://bugzilla.redhat.com/show_bug.cgi?id=1201849
[ 4 ] Bug #1218320 - Install the Nagios checkresults directory with group-writable permissions
https://bugzilla.redhat.com/show_bug.cgi?id=1218320
[ 5 ] Bug #1426816 - Nagios RPM 4.2.4 forgot to reload systemd in postinstall
https://bugzilla.redhat.com/show_bug.cgi?id=1426816
[ 6 ] Bug #1428111 - Broken links in the View Trends and the View Histogram menu
https://bugzilla.redhat.com/show_bug.cgi?id=1428111
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update nagios' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 10 months
Fedora EPEL 7 Update: python-botocore-1.5.72-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-f0df4cfbde
2017-07-23 17:01:34.223503
--------------------------------------------------------------------------------
Name : python-botocore
Product : Fedora EPEL 7
Version : 1.5.72
Release : 1.el7
URL : https://github.com/boto/botocore
Summary : Low-level, data-driven core of boto 3
Description :
A low-level interface to a growing number of Amazon Web Services. The
botocore package is the foundation for the AWS CLI as well as boto3.
--------------------------------------------------------------------------------
Update Information:
update
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-botocore' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 10 months
Fedora EPEL 7 Update: awscli-1.11.109-2.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-f0df4cfbde
2017-07-23 17:01:34.223503
--------------------------------------------------------------------------------
Name : awscli
Product : Fedora EPEL 7
Version : 1.11.109
Release : 2.el7
URL : http://aws.amazon.com/cli
Summary : Universal Command Line Environment for AWS
Description :
This package provides a unified
command line interface to Amazon Web Services.
--------------------------------------------------------------------------------
Update Information:
update
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update awscli' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 10 months
Fedora EPEL 6 Update: the_silver_searcher-2.0.0-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-9964e1638a
2017-07-23 00:27:11.877702
--------------------------------------------------------------------------------
Name : the_silver_searcher
Product : Fedora EPEL 6
Version : 2.0.0
Release : 1.el6
URL : https://github.com/ggreer/the_silver_searcher
Summary : Super-fast text searching tool (ag)
Description :
The Silver Searcher is a code searching tool similar to ack,
with a focus on speed.
--------------------------------------------------------------------------------
Update Information:
update to 2.0.0
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update the_silver_searcher' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 11 months
[SECURITY] Fedora EPEL 6 Update: GraphicsMagick-1.3.26-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-fb86b52c2c
2017-07-23 00:27:11.877639
--------------------------------------------------------------------------------
Name : GraphicsMagick
Product : Fedora EPEL 6
Version : 1.3.26
Release : 1.el6
URL : http://www.graphicsmagick.org/
Summary : An ImageMagick fork, offering faster image generation and better quality
Description :
GraphicsMagick is a comprehensive image processing package which is initially
based on ImageMagick 5.5.2, but which has undergone significant re-work by
the GraphicsMagick Group to significantly improve the quality and performance
of the software.
--------------------------------------------------------------------------------
Update Information:
New stable upstream release, primarily includes security fixes for
CVE-2017-10794, CVE-2017-10799, CVE-2017-10800 See also
http://www.graphicsmagick.org/NEWS.html#july-4-2017
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1467378 - CVE-2017-10800 GraphicsMagick: out of memory in ReadMATImage() function
https://bugzilla.redhat.com/show_bug.cgi?id=1467378
[ 2 ] Bug #1467372 - CVE-2017-10799 GraphicsMagick: out of memory in ReadDPXImage() function
https://bugzilla.redhat.com/show_bug.cgi?id=1467372
[ 3 ] Bug #1467655 - CVE-2017-10794 GraphicsMagick: buffer overflow in QuantumTransferMode
https://bugzilla.redhat.com/show_bug.cgi?id=1467655
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update GraphicsMagick' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 11 months
[SECURITY] Fedora EPEL 6 Update: cacti-1.1.12-2.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-9098af995f
2017-07-23 00:27:11.877583
--------------------------------------------------------------------------------
Name : cacti
Product : Fedora EPEL 6
Version : 1.1.12
Release : 2.el6
URL : http://www.cacti.net/
Summary : An rrd based graphing tool
Description :
Cacti is a complete frontend to RRDTool. It stores all of the
necessary information to create graphs and populate them with
data in a MySQL database. The frontend is completely PHP
driven.
--------------------------------------------------------------------------------
Update Information:
- Update to 1.1.12 - Fix Cross-site Scripting (XSS) issue with link.php
(CVE-2017-10970) Release notes:
https://www.cacti.net/release_notes.php?version=1.1.11 Release notes:
https://www.cacti.net/release_notes.php?version=1.1.12
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1470248 - CVE-2017-10970 cacti: XSS in link.php [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1470248
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update cacti' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 11 months
[SECURITY] Fedora EPEL 6 Update: nagios-4.3.2-5.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-328a23d1ed
2017-07-23 00:27:11.877463
--------------------------------------------------------------------------------
Name : nagios
Product : Fedora EPEL 6
Version : 4.3.2
Release : 5.el6
URL : https://www.nagios.org/projects/nagios-core/
Summary : Host/service/network monitoring program
Description :
Nagios is a program that will monitor hosts and services on your
network. It has the ability to send email or page alerts when a
problem arises and when a problem is resolved. Nagios is written
in C and is designed to run under Linux (and some other *NIX
variants) as a background process, intermittently running checks
on various services that you specify.
The actual service checks are performed by separate "plugin" programs
which return the status of the checks to Nagios. The plugins are
available at https://github.com/nagios-plugins/nagios-plugins
This package provides the core program, web interface, and documentation
files for Nagios. Development files are built as a separate package.
--------------------------------------------------------------------------------
Update Information:
Added fix for selinux from Patrick Uiterwijk ---- Update to latest in git
---- Updated from 4.3.1 maint to 4.3.2 ---- We find out that RHEL-6 does not
like non-UTF so removed German translation ---- Major update to Nagios to
address outstanding Security needs. ---- nagios-4.0.8-1.fc21
nagios-4.0.8-1.fc22 nagios-4.0.8-1.el6 nagios-4.0.8-1.el7 nagios-4.0.8-1.fc23 -
update to 4.0.8
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #469320 - CVE-2008-4796 snoopy: command execution via shell metacharacters
https://bugzilla.redhat.com/show_bug.cgi?id=469320
[ 2 ] Bug #958002 - CVE-2013-4214 Nagios core: html/rss-newsfeed.php insecure temporary file usage
https://bugzilla.redhat.com/show_bug.cgi?id=958002
[ 3 ] Bug #1046113 - CVE-2013-7108 CVE-2013-7205 nagios: denial of service due to off-by-one flaw in process_cgivars()
https://bugzilla.redhat.com/show_bug.cgi?id=1046113
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update nagios' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 11 months
Fedora EPEL 6 Update: drupal7-views_slideshow-3.9-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-88cc027bbe
2017-07-21 01:24:14.640565
--------------------------------------------------------------------------------
Name : drupal7-views_slideshow
Product : Fedora EPEL 6
Version : 3.9
Release : 1.el6
URL : http://drupal.org/project/views_slideshow
Summary : Views Slideshow can be used to create a slideshow of any content
Description :
Views Slideshow can be used to create a slideshow of any content
(not just images) that can appear in a View.
Powered by jQuery, it is heavily customizable:
you may choose slideshow settings for each View you create.
This package provides the following Drupal module:
* views_slideshow
--------------------------------------------------------------------------------
Update Information:
* [3.9](https://www.drupal.org/project/views_slideshow/releases/7.x-3.9)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1459867 - drupal7-views_slideshow-3.9 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1459867
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update drupal7-views_slideshow' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
6 years, 11 months