[SECURITY] Fedora EPEL 6 Update: mbedtls-2.7.6-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-ca7fe27b10
2018-10-07 20:06:17.436517
--------------------------------------------------------------------------------
Name : mbedtls
Product : Fedora EPEL 6
Version : 2.7.6
Release : 1.el6
URL : https://tls.mbed.org/
Summary : Light-weight cryptographic and SSL/TLS library
Description :
Mbed TLS is a light-weight open source cryptographic and SSL/TLS
library written in C. Mbed TLS makes it easy for developers to include
cryptographic and SSL/TLS capabilities in their (embedded)
applications with as little hassle as possible.
FOSS License Exception: https://tls.mbed.org/foss-license-exception
--------------------------------------------------------------------------------
Update Information:
- Update to 2.7.6 Release notes: https://tls.mbed.org/tech-
updates/releases/mbedtls-2.13.0-2.7.6-and-2.1.15-released
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mbedtls' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 8 months
Fedora EPEL 6 Update: spectre-meltdown-checker-0.39-1.el6
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-bf866c8f05
2018-10-07 20:06:17.436420
--------------------------------------------------------------------------------
Name : spectre-meltdown-checker
Product : Fedora EPEL 6
Version : 0.39
Release : 1.el6
URL : https://github.com/speed47/spectre-meltdown-checker
Summary : Spectre & Meltdown vulnerability/mitigation checker for Linux
Description :
Spectre & Meltdown vulnerability/mitigation checker for Linux.
--------------------------------------------------------------------------------
Update Information:
* Feature: two new methods for reading MSR without a recent-enough `dd` binary:
using `perl` or the `msr-tools` when these are present * Feature: add detection
of RSBA feature bit (set by some hypervisors) indicating possible RSB underflow
host CPU vulnerability, and require kernel support for RSB stuffing even on non-
Skylake CPUs when this is the case * Feature: support for /boot partition on a
btrfs subvolume * Feature: add standard location of Arch armv5/armv7 kernel
image * Fix: the ARCH_CAPABILITIES MSR wasn't read correctly, preventing proper
SSB_NO and RDCL_NO feature bits detection
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update spectre-meltdown-checker' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 8 months
Fedora EPEL 7 Update: s3fs-fuse-1.84-2.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-9ad5351ee5
2018-10-05 17:19:16.701607
--------------------------------------------------------------------------------
Name : s3fs-fuse
Product : Fedora EPEL 7
Version : 1.84
Release : 2.el7
URL : https://github.com/s3fs-fuse/s3fs-fuse
Summary : FUSE-based file system backed by Amazon S3
Description :
s3fs is a FUSE file system that allows you to mount an Amazon S3 bucket as a
local file system. It stores files natively and transparently in S3 (i.e.,
you can use other programs to access the same files). Maximum file size=64GB
(limited by s3fs, not Amazon).
s3fs is stable and is being used in number of production environments, e.g.,
rsync backup to s3.
--------------------------------------------------------------------------------
Update Information:
New package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1631988 - Review Request: s3fs-fuse - FUSE-based file system backed by Amazon S3
https://bugzilla.redhat.com/show_bug.cgi?id=1631988
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update s3fs-fuse' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 8 months
Fedora EPEL 7 Update: holland-1.1.7-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-5683182a91
2018-10-05 17:19:16.701593
--------------------------------------------------------------------------------
Name : holland
Product : Fedora EPEL 7
Version : 1.1.7
Release : 1.el7
URL : http://hollandbackup.org
Summary : Pluggable Backup Framework
Description :
A pluggable backup framework which focuses on, but is not limited to, highly
configurable database backups.
--------------------------------------------------------------------------------
Update Information:
- Latest upstream This upstream release contains an important bugfix for
holland-mysql. https://github.com/holland-backup/holland/issues/210 ---- -
Latest upstream - Add sbin symlink to holland_cvmysqlsv command This upstream
release contains an important bugfix for the holland-commvault plugin.
https://github.com/holland-backup/holland/issues/208
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update holland' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 8 months
Fedora EPEL 7 Update: xorgxrdp-0.2.8-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-bf0e6c6e41
2018-10-05 17:19:16.701579
--------------------------------------------------------------------------------
Name : xorgxrdp
Product : Fedora EPEL 7
Version : 0.2.8
Release : 1.el7
URL : https://github.com/neutrinolabs/xorgxrdp
Summary : Implementation of xrdp backend as Xorg modules
Description :
xorgxrdp is a set of X11 modules that make Xorg act as a backend for
xrdp. Xorg with xorgxrdp is the most advanced xrdp backend with support
for screen resizing and multiple monitors.
--------------------------------------------------------------------------------
Update Information:
This release includes some invalid memory access issue, #124 and #125.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update xorgxrdp' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 8 months
Fedora EPEL 7 Update: zabbix30-3.0.22-2.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-39c65ddf94
2018-10-05 17:19:16.701565
--------------------------------------------------------------------------------
Name : zabbix30
Product : Fedora EPEL 7
Version : 3.0.22
Release : 2.el7
URL : http://www.zabbix.com
Summary : Open-source monitoring solution for your IT infrastructure
Description :
Zabbix is software that monitors numerous parameters of a network and the
health and integrity of servers. Zabbix uses a flexible notification mechanism
that allows users to configure e-mail based alerts for virtually any event.
This allows a fast reaction to server problems. Zabbix offers excellent
reporting and data visualization features based on the stored data.
This makes Zabbix ideal for capacity planning.
Zabbix supports both polling and trapping. All Zabbix reports and statistics,
as well as configuration parameters are accessed through a web-based front end.
A web-based front end ensures that the status of your network and the health of
your servers can be assessed from any location. Properly configured, Zabbix can
play an important role in monitoring IT infrastructure. This is equally true
for small organizations with a few servers and for large companies with a
multitude of servers.
--------------------------------------------------------------------------------
Update Information:
Zabbix is software that monitors numerous parameters of a network and the health
and integrity of servers. Zabbix uses a flexible notification mechanism that
allows users to configure e-mail based alerts for virtually any event. This
allows a fast reaction to server problems. Zabbix offers excellent reporting and
data visualization features based on the stored data. This makes Zabbix ideal
for capacity planning. Zabbix supports both polling and trapping. All Zabbix
reports and statistics, as well as configuration parameters are accessed through
a web-based front end. A web-based front end ensures that the status of your
network and the health of your servers can be assessed from any location.
Properly configured, Zabbix can play an important role in monitoring IT
infrastructure. This is equally true for small organizations with a few servers
and for large companies with a multitude of servers.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1528400 - Review Request: zabbix30 - Open-source monitoring solution for your IT infrastructure
https://bugzilla.redhat.com/show_bug.cgi?id=1528400
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update zabbix30' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 8 months
Fedora EPEL 7 Update: libmodulemd-1.6.4-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-a2566f75da
2018-10-05 17:19:16.701551
--------------------------------------------------------------------------------
Name : libmodulemd
Product : Fedora EPEL 7
Version : 1.6.4
Release : 1.el7
URL : https://github.com/fedora-modularity/libmodulemd
Summary : Module metadata manipulation library
Description :
C Library for manipulating module metadata files.
See https://github.com/fedora-modularity/libmodulemd/blob/master/README.md for
more details.
--------------------------------------------------------------------------------
Update Information:
- Update to 1.6.4 - Add Buildopts to the documentation. - Deduplicate module
streams when merging. - Drop upstreamed patches.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update libmodulemd' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 8 months
Fedora EPEL 7 Update: python-collectd_systemd-0.0.1-0.7.20180604gitbe9c647.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-0b0d1f216e
2018-10-05 17:19:16.701536
--------------------------------------------------------------------------------
Name : python-collectd_systemd
Product : Fedora EPEL 7
Version : 0.0.1
Release : 0.7.20180604gitbe9c647.el7
URL : https://github.com/mbachry/collectd-systemd/
Summary : Collectd plugin to monitor systemd services
Description :
collectd-systemd A collectd plugin which checks if given systemd services
are in "running" state and sends metrics with 1.0 or 0.0.
--------------------------------------------------------------------------------
Update Information:
An update to the selinux policy. collectd is now able to access status of old
style SysV init scripts being managed with systemd.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-collectd_systemd' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 8 months
[SECURITY] Fedora EPEL 7 Update: mozilla-noscript-10.1.9.6-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-1141f91524
2018-10-05 17:19:16.701523
--------------------------------------------------------------------------------
Name : mozilla-noscript
Product : Fedora EPEL 7
Version : 10.1.9.6
Release : 1.el7
URL : http://noscript.net/
Summary : JavaScript white list extension for Mozilla Firefox
Description :
The NoScript Firefox extension provides extra protection for Firefox.
It allows JavaScript, Java, Flash and other plug-ins to be executed only by
trusted web sites of your choice (e.g. your online bank) and additionally
provides Anti-XSS protection.
--------------------------------------------------------------------------------
Update Information:
This update introduces NoScript version 10 (WebExtension-compatible) required
for Firefox 60 ESR and moves the legacy (classic) version 5.x to SeaMonkey-
specific folder. v 5.1.8.7
============================================================= * [Security] Fixed
script blocking bypass zero-day (thanks Zerodium for unresponsible disclosure,
https://twitter.com/Zerodium/status/1039127214602641409) * [Surrogate] Fixed
typo in 2mdn replacement (thansk barbaz) * [XSS] Fixed InjectionChecker choking
at some big JSON payloads sents as POST form data * [XSS] In-depth protection
against native ES6 modules abuse * Fixed classic beta channel users being
accidentally migrated to stable (thanks barbaz)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1629212 - CVE-2018-16983 mozilla-noscript: NoScript Bypass via the text/html;/json Content-Type value
https://bugzilla.redhat.com/show_bug.cgi?id=1629212
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mozilla-noscript' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 8 months
Fedora EPEL 7 Update: inxi-3.0.24-1.el7
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-1449c1d272
2018-10-05 17:19:16.701509
--------------------------------------------------------------------------------
Name : inxi
Product : Fedora EPEL 7
Version : 3.0.24
Release : 1.el7
URL : http://smxi.org/docs/inxi.htm
Summary : A full featured system information script
Description :
Inxi offers a wide range of built-in options, as well as a good number of extra
features which require having the script recommends installed on the system.
--------------------------------------------------------------------------------
Update Information:
Update to 3.0.24. Now you can see hardware vulnerabilities and it's mitigations
by -Ca key.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update inxi' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 8 months