The following Fedora EPEL 6 Security updates need testing:
Age URL
33 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-b7556983e8
tomcat-7.0.92-1.el6
29 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-a0ddb153b8
game-music-emu-0.6.2-1.el6
10 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-f49d74241e
php-horde-Horde-Form-2.0.19-1.el6
7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-5fba945293
gitolite3-3.6.11-1.el6
7 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-13717fa751
golang-1.11.4-1.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
R-3.5.2-2.el6
nagios-4.4.3-1.el6
Details about builds:
================================================================================
R-3.5.2-2.el6 (FEDORA-EPEL-2019-4af4dd7943)
A language for data analysis and graphics
--------------------------------------------------------------------------------
Update Information:
Update R to 3.5.2, update rpy to 2.9.5, rebuild rkward.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 8 2019 Tom Callaway <s...@fedoraproject.org> - 3.5.2-2
- handle pcre2 use/detection
* Mon Jan 7 2019 Tom Callaway <s...@fedoraproject.org> - 3.5.2-1
- update to 3.5.2
* Fri Dec 7 2018 Tom Callaway <s...@fedoraproject.org> - 3.5.1-2
- use absolute path in symlink for latex dir (bz1594102)
--------------------------------------------------------------------------------
================================================================================
nagios-4.4.3-1.el6 (FEDORA-EPEL-2019-17b388679b)
Host/service/network monitoring program
--------------------------------------------------------------------------------
Update Information:
Incorporate many fixes from Justin Paulsen <peta...@gmail.com> THANKS!!! ----
Updates to nagios-4.4.2 which is a major update. Fixes CVE's CVE-2018-13441
CVE-2016-8641 ---- Remove section which unset nagios Fix BZ#1568273
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jan 16 2019 Stephen Smoogen <smo...@fedoraproject.org> - 4.4.3-1
- Incorporate many fixes from Justin Paulsen <peta...@gmail.com> THANKS!!!
- Update to 4.4.3 for CVE fixes
- BZ#1661479
- BZ#1661480
- BZ#1665200
- BZ#1665201
- BZ#1665206
- BZ#1665207
- BZ#1665209
- BZ#1665210
- Fix BZ#1666209 Add RuntimeDirectory too systemd
* Fri Nov 30 2018 Stephen Smoogen <smo...@fedoraproject.org> - 4.4.2-3
- Remove systemd startup since built in works properly
- Incorporate fixes from patch14 into patch9
* Thu Nov 29 2018 Stephen Smoogen <smo...@fedoraproject.org> - 4.4.2-2
- Fix init-type and initdir for systemd and sysv
* Wed Nov 28 2018 Justin Paulsen <peta...@gmail.com> 4.4.2-1
- Bumped to version 4.4.2
- Updated patches 0001,0002,0003,0006,0009,0010,0011 to reflect upstream changes
- Updates to nagios.spec (this file) to cleanup un-needed elements and
adjust/fix as required
- As a result of the cleanup I have added a patch
nagios-0014-fix-resource.cfg-path.patch
* Tue Jul 24 2018 Stephen Smoogen <smo...@fedoraproject.org> - 4.3.4-13
- Remove section which unset nagios Fix BZ#1568273
- Remove /etc/nagios/conf.d Fix BZ#1504306
- Change perms on dir Fix BZ#1579935
- Close BZ#1273154
- Hopefully Fix BZ#1201849
- Hopefully Fix BZ#1476238
- Hopefully Fix BZ#1494292
* Fri Jul 13 2018 Fedora Release Engineering <rel...@fedoraproject.org> -
4.3.4-12
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Thu Jun 28 2018 Jitka Plesnikova <jples...@redhat.com> - 4.3.4-11
- Perl 5.28 rebuild
* Thu Apr 26 2018 Stephen Smoogen <smo...@fedoraproject.org> - 4.3.4-10
- Fix systemd failures due to old versioning.
* Tue Feb 20 2018 Stephen Smoogen <smo...@fedoraproject.org> - 4.3.4-9
- Add buildrequires for gcc
* Thu Feb 8 2018 Fedora Release Engineering <rel...@fedoraproject.org> -
4.3.4-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1661479 - CVE-2018-18245 nagios: Stored XSS via Plugin Output
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1661479
[ 2 ] Bug #1661480 - CVE-2018-18245 nagios: Stored XSS via Plugin Output
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1661480
[ 3 ] Bug #1665200 - CVE-2018-13441 nagios: NULL pointer dereference in
qh_help in base/query-handler.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1665200
[ 4 ] Bug #1665201 - CVE-2018-13441 nagios: NULL pointer dereference in
qh_help in base/query-handler.c [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1665201
[ 5 ] Bug #1665206 - CVE-2018-13457 nagios: NULL pointer dereference in
qh_echo in base/query-handler.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1665206
[ 6 ] Bug #1665207 - CVE-2018-13457 nagios: NULL pointer dereference in
qh_echo in base/query-handler.c [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1665207
[ 7 ] Bug #1665209 - CVE-2018-13458 nagios: NULL pointer dereference in
qh_core in base/query-handler.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1665209
[ 8 ] Bug #1665210 - CVE-2018-13458 nagios: NULL pointer dereference in
qh_core in base/query-handler.c [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1665210
[ 9 ] Bug #1666209 - Nagios cannot start after system reboot because of
missing directory
https://bugzilla.redhat.com/show_bug.cgi?id=1666209
[ 10 ] Bug #1593048 - nagios-4.4.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1593048
[ 11 ] Bug #1647765 - Memory leak in nagios
https://bugzilla.redhat.com/show_bug.cgi?id=1647765
[ 12 ] Bug #1482407 - nagios-4.3.2-8.el7 crash caused by (potential) result
size issue in wproc
https://bugzilla.redhat.com/show_bug.cgi?id=1482407
[ 13 ] Bug #1506423 - Nagios regularly crashes with SIGSEGV after couple of
weeks of starting.
https://bugzilla.redhat.com/show_bug.cgi?id=1506423
[ 14 ] Bug #1592594 - nagios spool files in wrong location by default,
causing SELinux violations
https://bugzilla.redhat.com/show_bug.cgi?id=1592594
--------------------------------------------------------------------------------
_______________________________________________
epel-devel mailing list -- epel-devel@lists.fedoraproject.org
To unsubscribe send an email to epel-devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org
