epel-package-announce March 2018

epel-package-announce@lists.fedoraproject.org

1 participants
315 discussions

Fedora EPEL 7 Update: dictd-1.12.1-20.el7
by updates＠fedoraproject.org 30 Mar '18

30 Mar '18

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-f4620ae6d6 2018-03-30 13:12:24.193725 -------------------------------------------------------------------------------- Name : dictd Product : Fedora EPEL 7 Version : 1.12.1 Release : 20.el7 URL : http://www.dict.org/ Summary : DICT protocol (RFC 2229) server and command-line client Description : Command-line client for the DICT protocol. The Dictionary Server Protocol (DICT) is a TCP transaction based query/response protocol that allows a client to access dictionary definitions from a set of natural language dictionary databases. -------------------------------------------------------------------------------- Update Information: Fix packaging for EL-6 (don't confuse systemd service with the old initd script). -------------------------------------------------------------------------------- References: [ 1 ] Bug #1444555 - dictd-server includes a wrong kind of initscript https://bugzilla.redhat.com/show_bug.cgi?id=1444555 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update dictd' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora EPEL 7 Update: monitorix-3.10.1-1.el7
by updates＠fedoraproject.org 30 Mar '18

30 Mar '18

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-3f41541339 2018-03-30 13:12:24.193702 -------------------------------------------------------------------------------- Name : monitorix Product : Fedora EPEL 7 Version : 3.10.1 Release : 1.el7 URL : http://www.monitorix.org Summary : A free, open source, lightweight system monitoring tool Description : Monitorix is a free, open source, lightweight system monitoring tool designed to monitor as many services and system resources as possible. It has been created to be used under production Linux/UNIX servers, but due to its simplicity and small size may also be used on embedded devices as well. -------------------------------------------------------------------------------- Update Information: Prior Monitorix versions are vulnerable to cross-site scripting (XSS), caused by improper validation of user-supplied input by the monitorix.cgi file. A remote attacker could exploit this vulnerability using some of the arguments provided (graph= or when=) in a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie- based authentication credentials. I would like to thank Sebastian Gilon from TestArmy for reporting that issue. The rest of bugs fixed are, as always, reflected in the Changes file. All users still using older versions are advised and encouraged to upgrade to this version, which resolves this security issue. -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update monitorix' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 Update: youtube-dl-2018.03.10-1.el7
by updates＠fedoraproject.org 30 Mar '18

30 Mar '18

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-cdb6d1c8fa 2018-03-30 13:12:24.193680 -------------------------------------------------------------------------------- Name : youtube-dl Product : Fedora EPEL 7 Version : 2018.03.10 Release : 1.el7 URL : https://yt-dl.org Summary : A small command-line program to download online videos Description : Small command-line program to download videos from YouTube and other sites. -------------------------------------------------------------------------------- Update Information: Latest upstream release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1551176 - youtube-dl-2018.03.10 is available https://bugzilla.redhat.com/show_bug.cgi?id=1551176 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update youtube-dl' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 Update: R-Rcpp-0.12.16-1.el7
by updates＠fedoraproject.org 30 Mar '18

30 Mar '18

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-b2625028ae 2018-03-30 13:12:24.193657 -------------------------------------------------------------------------------- Name : R-Rcpp Product : Fedora EPEL 7 Version : 0.12.16 Release : 1.el7 URL : https://cran.r-project.org/web/packages/Rcpp/ Summary : Seamless R and C++ Integration Description : The Rcpp package provides R functions as well as C++ classes which offer a seamless integration of R and C++. Many R data types and objects can be mapped back and forth to C++ equivalents which facilitates both writing of new code as well as easier integration of third-party libraries. Documentation about Rcpp is provided by several vignettes included in this package, via the Rcpp Gallery site at http://gallery.rcpp.org, the paper by Eddelbuettel and Francois (2011, JSS), and the book by Eddelbuettel (2013, Springer). See citation("Rcpp") for details on the last two. -------------------------------------------------------------------------------- Update Information: Rcpp 0.12.16 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1557857 - Version 0.12.16 was released https://bugzilla.redhat.com/show_bug.cgi?id=1557857 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update R-Rcpp' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora EPEL 7 Update: exim-4.90.1-3.el7
by updates＠fedoraproject.org 30 Mar '18

30 Mar '18

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-673b3314a1 2018-03-30 13:12:24.193634 -------------------------------------------------------------------------------- Name : exim Product : Fedora EPEL 7 Version : 4.90.1 Release : 3.el7 URL : http://www.exim.org/ Summary : The exim mail transfer agent Description : Exim is a message transfer agent (MTA) developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal of flexibility in the way mail can be routed, and there are extensive facilities for checking incoming mail. Exim can be installed in place of sendmail, although the configuration of exim is quite different to that of sendmail. -------------------------------------------------------------------------------- Update Information: This is an update fixing dec64table OOB read in b64decode. -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update exim' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 Update: perl-Data-Entropy-0.007-6.el7
by updates＠fedoraproject.org 30 Mar '18

30 Mar '18

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-31372193df 2018-03-30 13:12:24.193611 -------------------------------------------------------------------------------- Name : perl-Data-Entropy Product : Fedora EPEL 7 Version : 0.007 Release : 6.el7 URL : http://search.cpan.org/dist/Data-Entropy/ Summary : Entropy (randomness) management Description : This module maintains a concept of a current selection of entropy source. Algorithms that require entropy, such as those in Data::Entropy::Algorithms, can use the source nominated by this module, avoiding the need for entropy source objects to be explicitly passed around. This is convenient because usually one entropy source will be used for an entire program run and so an explicit entropy source parameter would rarely vary. There is also a default entropy source, avoiding the need to explicitly configure a source at all. -------------------------------------------------------------------------------- Update Information: perl-Data-Entropy contains the perl modulel Data::Entropy which maintains a concept of a current selection of entropy source. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1543181 - Please provide a package for EPEL7 https://bugzilla.redhat.com/show_bug.cgi?id=1543181 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update perl-Data-Entropy' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 Update: python-testinfra-1.11.1-1.el7
by updates＠fedoraproject.org 30 Mar '18

30 Mar '18

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-b60ab21ef3 2018-03-30 13:12:24.193586 -------------------------------------------------------------------------------- Name : python-testinfra Product : Fedora EPEL 7 Version : 1.11.1 Release : 1.el7 URL : https://github.com/philpep/testinfra Summary : Unit testing for config-managed server state Description : With Testinfra you can write unit tests in Python to test actual state of your servers configured by management tools like Salt, Ansible, Puppet, Chef and so on. Testinfra aims to be a Serverspec equivalent in python and is written as a plugin to the powerful Pytest test engine -------------------------------------------------------------------------------- Update Information: new package -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update python-testinfra' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 7 Update: lynis-2.6.3-1.el7
by updates＠fedoraproject.org 30 Mar '18

30 Mar '18

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-1e85622c30 2018-03-30 13:12:24.193529 -------------------------------------------------------------------------------- Name : lynis Product : Fedora EPEL 7 Version : 2.6.3 Release : 1.el7 URL : https://cisofy.com/lynis/ Summary : Security and system auditing tool Description : Lynis is an auditing and hardening tool for Unix/Linux and you might even call it a compliance tool. It scans the system and installed software. Then it performs many individual security control checks. It determines the hardening state of the machine, detects security issues and provides suggestions to improve the security defense of the system. -------------------------------------------------------------------------------- Update Information: Update to 2.6.3 (rhbz #1552963) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1552963 - lynis-2.6.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1552963 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update lynis' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Fedora EPEL 6 Update: dictd-1.12.1-20.el6
by updates＠fedoraproject.org 30 Mar '18

30 Mar '18

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-229e4b4653 2018-03-30 13:07:58.665702 -------------------------------------------------------------------------------- Name : dictd Product : Fedora EPEL 6 Version : 1.12.1 Release : 20.el6 URL : http://www.dict.org/ Summary : DICT protocol (RFC 2229) server and command-line client Description : Command-line client for the DICT protocol. The Dictionary Server Protocol (DICT) is a TCP transaction based query/response protocol that allows a client to access dictionary definitions from a set of natural language dictionary databases. -------------------------------------------------------------------------------- Update Information: Fix packaging for EL-6 (don't confuse systemd service with the old initd script). -------------------------------------------------------------------------------- References: [ 1 ] Bug #1444555 - dictd-server includes a wrong kind of initscript https://bugzilla.redhat.com/show_bug.cgi?id=1444555 -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update dictd' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

[SECURITY] Fedora EPEL 6 Update: monitorix-3.10.1-1.el6
by updates＠fedoraproject.org 30 Mar '18

30 Mar '18

-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-10ff026fa8 2018-03-30 13:07:58.665679 -------------------------------------------------------------------------------- Name : monitorix Product : Fedora EPEL 6 Version : 3.10.1 Release : 1.el6 URL : http://www.monitorix.org Summary : A free, open source, lightweight system monitoring tool Description : Monitorix is a free, open source, lightweight system monitoring tool designed to monitor as many services and system resources as possible. It has been created to be used under production Linux/UNIX servers, but due to its simplicity and small size may also be used on embedded devices as well. -------------------------------------------------------------------------------- Update Information: Prior Monitorix versions are vulnerable to cross-site scripting (XSS), caused by improper validation of user-supplied input by the monitorix.cgi file. A remote attacker could exploit this vulnerability using some of the arguments provided (graph= or when=) in a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie- based authentication credentials. I would like to thank Sebastian Gilon from TestArmy for reporting that issue. The rest of bugs fixed are, as always, reflected in the Changes file. All users still using older versions are advised and encouraged to upgrade to this version, which resolves this security issue. -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update monitorix' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht… All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

epel-package-announce March 2018