--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-f4620ae6d6
2018-03-30 13:12:24.193725
--------------------------------------------------------------------------------
Name : dictd
Product : Fedora EPEL 7
Version : 1.12.1
Release : 20.el7
URL : http://www.dict.org/
Summary : DICT protocol (RFC 2229) server and command-line client
Description :
Command-line client for the DICT protocol. The Dictionary Server
Protocol (DICT) is a TCP transaction based query/response protocol that
allows a client to access dictionary definitions from a set of natural
language dictionary databases.
--------------------------------------------------------------------------------
Update Information:
Fix packaging for EL-6 (don't confuse systemd service with the old initd
script).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1444555 - dictd-server includes a wrong kind of initscript
https://bugzilla.redhat.com/show_bug.cgi?id=1444555
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update dictd' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht…
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-3f41541339
2018-03-30 13:12:24.193702
--------------------------------------------------------------------------------
Name : monitorix
Product : Fedora EPEL 7
Version : 3.10.1
Release : 1.el7
URL : http://www.monitorix.org
Summary : A free, open source, lightweight system monitoring tool
Description :
Monitorix is a free, open source, lightweight system monitoring tool designed
to monitor as many services and system resources as possible. It has been
created to be used under production Linux/UNIX servers, but due to its
simplicity and small size may also be used on embedded devices as well.
--------------------------------------------------------------------------------
Update Information:
Prior Monitorix versions are vulnerable to cross-site scripting (XSS), caused by
improper validation of user-supplied input by the monitorix.cgi file. A remote
attacker could exploit this vulnerability using some of the arguments provided
(graph= or when=) in a specially-crafted URL to execute script in a victim's Web
browser within the security context of the hosting Web site, once the URL is
clicked. An attacker could use this vulnerability to steal the victim's cookie-
based authentication credentials. I would like to thank Sebastian Gilon from
TestArmy for reporting that issue. The rest of bugs fixed are, as always,
reflected in the Changes file. All users still using older versions are advised
and encouraged to upgrade to this version, which resolves this security issue.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update monitorix' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht…
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-cdb6d1c8fa
2018-03-30 13:12:24.193680
--------------------------------------------------------------------------------
Name : youtube-dl
Product : Fedora EPEL 7
Version : 2018.03.10
Release : 1.el7
URL : https://yt-dl.org
Summary : A small command-line program to download online videos
Description :
Small command-line program to download videos from YouTube and other sites.
--------------------------------------------------------------------------------
Update Information:
Latest upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1551176 - youtube-dl-2018.03.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1551176
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update youtube-dl' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht…
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-b2625028ae
2018-03-30 13:12:24.193657
--------------------------------------------------------------------------------
Name : R-Rcpp
Product : Fedora EPEL 7
Version : 0.12.16
Release : 1.el7
URL : https://cran.r-project.org/web/packages/Rcpp/
Summary : Seamless R and C++ Integration
Description :
The Rcpp package provides R functions as well as C++ classes which
offer a seamless integration of R and C++. Many R data types and
objects can be mapped back and forth to C++ equivalents which
facilitates both writing of new code as well as easier integration of
third-party libraries.
Documentation about Rcpp is provided by several vignettes included in
this package, via the Rcpp Gallery site at http://gallery.rcpp.org,
the paper by Eddelbuettel and Francois (2011, JSS), and the book by
Eddelbuettel (2013, Springer).
See citation("Rcpp") for details on the last two.
--------------------------------------------------------------------------------
Update Information:
Rcpp 0.12.16
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1557857 - Version 0.12.16 was released
https://bugzilla.redhat.com/show_bug.cgi?id=1557857
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update R-Rcpp' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht…
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-673b3314a1
2018-03-30 13:12:24.193634
--------------------------------------------------------------------------------
Name : exim
Product : Fedora EPEL 7
Version : 4.90.1
Release : 3.el7
URL : http://www.exim.org/
Summary : The exim mail transfer agent
Description :
Exim is a message transfer agent (MTA) developed at the University of
Cambridge for use on Unix systems connected to the Internet. It is
freely available under the terms of the GNU General Public Licence. In
style it is similar to Smail 3, but its facilities are more
general. There is a great deal of flexibility in the way mail can be
routed, and there are extensive facilities for checking incoming
mail. Exim can be installed in place of sendmail, although the
configuration of exim is quite different to that of sendmail.
--------------------------------------------------------------------------------
Update Information:
This is an update fixing dec64table OOB read in b64decode.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update exim' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht…
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-31372193df
2018-03-30 13:12:24.193611
--------------------------------------------------------------------------------
Name : perl-Data-Entropy
Product : Fedora EPEL 7
Version : 0.007
Release : 6.el7
URL : http://search.cpan.org/dist/Data-Entropy/
Summary : Entropy (randomness) management
Description :
This module maintains a concept of a current selection of entropy source.
Algorithms that require entropy, such as those in
Data::Entropy::Algorithms, can use the source nominated by this module,
avoiding the need for entropy source objects to be explicitly passed
around. This is convenient because usually one entropy source will be used
for an entire program run and so an explicit entropy source parameter would
rarely vary. There is also a default entropy source, avoiding the need to
explicitly configure a source at all.
--------------------------------------------------------------------------------
Update Information:
perl-Data-Entropy contains the perl modulel Data::Entropy which maintains a
concept of a current selection of entropy source.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1543181 - Please provide a package for EPEL7
https://bugzilla.redhat.com/show_bug.cgi?id=1543181
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update perl-Data-Entropy' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht…
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-b60ab21ef3
2018-03-30 13:12:24.193586
--------------------------------------------------------------------------------
Name : python-testinfra
Product : Fedora EPEL 7
Version : 1.11.1
Release : 1.el7
URL : https://github.com/philpep/testinfra
Summary : Unit testing for config-managed server state
Description :
With Testinfra you can write unit tests in Python to test actual state of your
servers configured by management tools like Salt, Ansible, Puppet, Chef and so
on.
Testinfra aims to be a Serverspec equivalent in python and is written as a
plugin to the powerful Pytest test engine
--------------------------------------------------------------------------------
Update Information:
new package
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-testinfra' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht…
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-1e85622c30
2018-03-30 13:12:24.193529
--------------------------------------------------------------------------------
Name : lynis
Product : Fedora EPEL 7
Version : 2.6.3
Release : 1.el7
URL : https://cisofy.com/lynis/
Summary : Security and system auditing tool
Description :
Lynis is an auditing and hardening tool for Unix/Linux and you might even call
it a compliance tool. It scans the system and installed software. Then it
performs many individual security control checks. It determines the hardening
state of the machine, detects security issues and provides suggestions to
improve the security defense of the system.
--------------------------------------------------------------------------------
Update Information:
Update to 2.6.3 (rhbz #1552963)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1552963 - lynis-2.6.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1552963
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update lynis' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht…
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-229e4b4653
2018-03-30 13:07:58.665702
--------------------------------------------------------------------------------
Name : dictd
Product : Fedora EPEL 6
Version : 1.12.1
Release : 20.el6
URL : http://www.dict.org/
Summary : DICT protocol (RFC 2229) server and command-line client
Description :
Command-line client for the DICT protocol. The Dictionary Server
Protocol (DICT) is a TCP transaction based query/response protocol that
allows a client to access dictionary definitions from a set of natural
language dictionary databases.
--------------------------------------------------------------------------------
Update Information:
Fix packaging for EL-6 (don't confuse systemd service with the old initd
script).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1444555 - dictd-server includes a wrong kind of initscript
https://bugzilla.redhat.com/show_bug.cgi?id=1444555
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update dictd' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht…
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-10ff026fa8
2018-03-30 13:07:58.665679
--------------------------------------------------------------------------------
Name : monitorix
Product : Fedora EPEL 6
Version : 3.10.1
Release : 1.el6
URL : http://www.monitorix.org
Summary : A free, open source, lightweight system monitoring tool
Description :
Monitorix is a free, open source, lightweight system monitoring tool designed
to monitor as many services and system resources as possible. It has been
created to be used under production Linux/UNIX servers, but due to its
simplicity and small size may also be used on embedded devices as well.
--------------------------------------------------------------------------------
Update Information:
Prior Monitorix versions are vulnerable to cross-site scripting (XSS), caused by
improper validation of user-supplied input by the monitorix.cgi file. A remote
attacker could exploit this vulnerability using some of the arguments provided
(graph= or when=) in a specially-crafted URL to execute script in a victim's Web
browser within the security context of the hosting Web site, once the URL is
clicked. An attacker could use this vulnerability to steal the victim's cookie-
based authentication credentials. I would like to thank Sebastian Gilon from
TestArmy for reporting that issue. The rest of bugs fixed are, as always,
reflected in the Changes file. All users still using older versions are advised
and encouraged to upgrade to this version, which resolves this security issue.
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update monitorix' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht…
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------