Scientific Linux 7.5 x86_64 Security Errata

Update: bind-devel-9.9.4-61.el7_5.1

Mon, 27 Aug 2018 15:55:52 +0000

Package: bind-devel
Summary: Header files and libraries needed for BIND DNS development

Description:
The bind-devel package contains full version of the header files and libraries required for development with ISC BIND 9

Changes:

bind-devel-9.9.4-61.el7_5.1.x86_64 [369 KiB]	Changelog by Petr Menšík (2018-08-09): - Fix CVE-2018-5740
bind-devel-9.9.4-61.el7_5.1.i686 [369 KiB]	Changelog by Petr Menšík (2018-08-09): - Fix CVE-2018-5740

Update: bind-libs-9.9.4-61.el7_5.1

Mon, 27 Aug 2018 15:55:52 +0000

Package: bind-libs
Summary: Libraries used by the BIND DNS packages

Description:
Contains heavyweight version of BIND suite libraries used by both named DNS server and utilities in bind-utils package.

Changes:

bind-libs-9.9.4-61.el7_5.1.x86_64 [963 KiB]	Changelog by Petr Menšík (2018-08-09): - Fix CVE-2018-5740
bind-libs-9.9.4-61.el7_5.1.i686 [941 KiB]	Changelog by Petr Menšík (2018-08-09): - Fix CVE-2018-5740

Update: bind-libs-lite-9.9.4-61.el7_5.1

Mon, 27 Aug 2018 15:55:52 +0000

Package: bind-libs-lite
Summary: Libraries for working with the DNS protocol

Description:
Contains lite version of BIND suite libraries which are used by various programs to work with DNS protocol.

Changes:

bind-libs-lite-9.9.4-61.el7_5.1.x86_64 [690 KiB]	Changelog by Petr Menšík (2018-08-09): - Fix CVE-2018-5740
bind-libs-lite-9.9.4-61.el7_5.1.i686 [677 KiB]	Changelog by Petr Menšík (2018-08-09): - Fix CVE-2018-5740

Update: bind-lite-devel-9.9.4-61.el7_5.1

Mon, 27 Aug 2018 15:55:52 +0000

Package: bind-lite-devel
Summary: Lite version of header files and libraries needed for BIND DNS development

Description:
The bind-lite-devel package contains lite version of the header files and libraries required for development with ISC BIND 9

Changes:

bind-lite-devel-9.9.4-61.el7_5.1.x86_64 [283 KiB]	Changelog by Petr Menšík (2018-08-09): - Fix CVE-2018-5740
bind-lite-devel-9.9.4-61.el7_5.1.i686 [283 KiB]	Changelog by Petr Menšík (2018-08-09): - Fix CVE-2018-5740

Update: bind-pkcs11-devel-9.9.4-61.el7_5.1

Mon, 27 Aug 2018 15:55:52 +0000

Package: bind-pkcs11-devel
Summary: Development files for Bind libraries compiled with native PKCS#11

Description:
This a set of development files for BIND libraries (dns, isc) compiled with native PKCS#11 functionality.

Changes:

bind-pkcs11-devel-9.9.4-61.el7_5.1.x86_64 [102 KiB]	Changelog by Petr Menšík (2018-08-09): - Fix CVE-2018-5740
bind-pkcs11-devel-9.9.4-61.el7_5.1.i686 [102 KiB]	Changelog by Petr Menšík (2018-08-09): - Fix CVE-2018-5740

Update: bind-pkcs11-libs-9.9.4-61.el7_5.1

Mon, 27 Aug 2018 15:55:52 +0000

Package: bind-pkcs11-libs
Summary: Bind libraries compiled with native PKCS#11

Description:
This is a set of BIND libraries (dns, isc) compiled with native PKCS#11 functionality.

Changes:

bind-pkcs11-libs-9.9.4-61.el7_5.1.x86_64 [1.1 MiB]	Changelog by Petr Menšík (2018-08-09): - Fix CVE-2018-5740
bind-pkcs11-libs-9.9.4-61.el7_5.1.i686 [1.0 MiB]	Changelog by Petr Menšík (2018-08-09): - Fix CVE-2018-5740

Update: bind-9.9.4-61.el7_5.1

Mon, 27 Aug 2018 15:55:52 +0000

Package: bind
Summary: The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server

Description:
BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.

Changes:

bind-9.9.4-61.el7_5.1.x86_64 [1.7 MiB]

Changelog by Petr Menšík (2018-08-09):

- Fix CVE-2018-5740

Update: bind-chroot-9.9.4-61.el7_5.1

Mon, 27 Aug 2018 15:55:52 +0000

Package: bind-chroot
Summary: A chroot runtime environment for the ISC BIND DNS server, named(8)

Description:
This package contains a tree of files which can be used as a chroot(2) jail for the named(8) program from the BIND package. Based on the code from Jan "Yenya" Kasprzak <kas@fi.muni.cz>

Changes:

bind-chroot-9.9.4-61.el7_5.1.x86_64 [86 KiB]

Changelog by Petr Menšík (2018-08-09):

- Fix CVE-2018-5740

Update: bind-license-9.9.4-61.el7_5.1

Mon, 27 Aug 2018 15:55:52 +0000

Package: bind-license
Summary: License of the BIND DNS suite

Description:
Contains license of the BIND DNS suite.

Changes:

bind-license-9.9.4-61.el7_5.1.noarch [84 KiB]

Changelog by Petr Menšík (2018-08-09):

- Fix CVE-2018-5740

Update: bind-pkcs11-9.9.4-61.el7_5.1

Mon, 27 Aug 2018 15:55:52 +0000

Package: bind-pkcs11
Summary: Bind with native PKCS#11 functionality for crypto

Description:
This is a version of BIND server built with native PKCS#11 functionality. It is important to have SoftHSM v2+ installed and some token initialized. For other supported HSM modules please check the BIND documentation. This version of BIND binary is supported only in setup with the IPA server.

Changes:

bind-pkcs11-9.9.4-61.el7_5.1.x86_64 [284 KiB]

Changelog by Petr Menšík (2018-08-09):

- Fix CVE-2018-5740

Update: bind-pkcs11-utils-9.9.4-61.el7_5.1

Mon, 27 Aug 2018 15:55:52 +0000

Package: bind-pkcs11-utils
Summary: Bind tools with native PKCS#11 for using DNSSEC

Description:
This is a set of PKCS#11 utilities that when used together create rsa keys in a PKCS11 keystore. Also utilities for working with DNSSEC compiled with native PKCS#11 functionality are included.

Changes:

bind-pkcs11-utils-9.9.4-61.el7_5.1.x86_64 [193 KiB]

Changelog by Petr Menšík (2018-08-09):

- Fix CVE-2018-5740

Update: bind-sdb-9.9.4-61.el7_5.1

Mon, 27 Aug 2018 15:55:52 +0000

Package: bind-sdb
Summary: BIND server with database backends and DLZ support

Description:
BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named-sdb) which has compiled-in SDB (Simplified Database Backend) which includes support for using alternative Zone Databases stored in an LDAP server (ldapdb), a postgreSQL database (pgsqldb), an sqlite database (sqlitedb), or in the filesystem (dirdb), in addition to the standard in-memory RBT (Red Black Tree) zone database. It also includes support for DLZ (Dynamic Loadable Zones)

Changes:

bind-sdb-9.9.4-61.el7_5.1.x86_64 [338 KiB]

Changelog by Petr Menšík (2018-08-09):

- Fix CVE-2018-5740

Update: bind-sdb-chroot-9.9.4-61.el7_5.1

Mon, 27 Aug 2018 15:55:52 +0000

Package: bind-sdb-chroot
Summary: A chroot runtime environment for the ISC BIND DNS server, named-sdb(8)

Description:
This package contains a tree of files which can be used as a chroot(2) jail for the named-sdb(8) program from the BIND package. Based on the code from Jan "Yenya" Kasprzak <kas@fi.muni.cz>

Changes:

bind-sdb-chroot-9.9.4-61.el7_5.1.x86_64 [86 KiB]

Changelog by Petr Menšík (2018-08-09):

- Fix CVE-2018-5740

Update: bind-utils-9.9.4-61.el7_5.1

Mon, 27 Aug 2018 15:55:52 +0000

Package: bind-utils
Summary: Utilities for querying DNS name servers

Description:
Bind-utils contains a collection of utilities for querying DNS (Domain Name System) name servers to find out information about Internet hosts. These tools will provide you with the IP addresses for given host names, as well as other information about registered domains and network addresses. You should install bind-utils if you need to get information from DNS name servers.

Changes:

bind-utils-9.9.4-61.el7_5.1.x86_64 [200 KiB]

Changelog by Petr Menšík (2018-08-09):

- Fix CVE-2018-5740

Update: postgresql-9.2.24-1.el7_5

Thu, 23 Aug 2018 15:14:06 +0000

Package: postgresql
Summary: PostgreSQL client programs

Description:
PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine as the PostgreSQL server, or on a remote machine that accesses a PostgreSQL server over a network connection. The PostgreSQL server can be found in the postgresql-server sub-package.

Changes:

postgresql-9.2.24-1.el7_5.x86_64 [2.6 MiB]	Changelog by Pavel Raiskup (2018-08-14): - update to the latest 9.2 release - fix CVE-2018-10915
postgresql-9.2.24-1.el7_5.i686 [2.6 MiB]	Changelog by Pavel Raiskup (2018-08-14): - update to the latest 9.2 release - fix CVE-2018-10915

Update: postgresql-devel-9.2.24-1.el7_5

Thu, 23 Aug 2018 15:14:06 +0000

Package: postgresql-devel
Summary: PostgreSQL development header files and libraries

Description:
The postgresql-devel package contains the header files and libraries needed to compile C or C++ applications which will directly interact with a PostgreSQL database management server. It also contains the ecpg Embedded C Postgres preprocessor. You need to install this package if you want to develop applications which will interact with a PostgreSQL server.

Changes:

postgresql-devel-9.2.24-1.el7_5.x86_64 [867 KiB]	Changelog by Pavel Raiskup (2018-08-14): - update to the latest 9.2 release - fix CVE-2018-10915
postgresql-devel-9.2.24-1.el7_5.i686 [861 KiB]	Changelog by Pavel Raiskup (2018-08-14): - update to the latest 9.2 release - fix CVE-2018-10915

Update: postgresql-libs-9.2.24-1.el7_5

Thu, 23 Aug 2018 15:14:06 +0000

Package: postgresql-libs
Summary: The shared libraries required for any PostgreSQL clients

Description:
The postgresql-libs package provides the essential shared libraries for any PostgreSQL client program or interface. You will need to install this package to use any other PostgreSQL package or any clients that need to connect to a PostgreSQL server.

Changes:

postgresql-libs-9.2.24-1.el7_5.x86_64 [221 KiB]	Changelog by Pavel Raiskup (2018-08-14): - update to the latest 9.2 release - fix CVE-2018-10915
postgresql-libs-9.2.24-1.el7_5.i686 [220 KiB]	Changelog by Pavel Raiskup (2018-08-14): - update to the latest 9.2 release - fix CVE-2018-10915

Update: postgresql-static-9.2.24-1.el7_5

Thu, 23 Aug 2018 15:14:06 +0000

Package: postgresql-static
Summary: Statically linked PostgreSQL libraries

Description:
Statically linked PostgreSQL libraries that do not have dynamically linked counterparts.

Changes:

postgresql-static-9.2.24-1.el7_5.x86_64 [89 KiB]	Changelog by Pavel Raiskup (2018-08-14): - update to the latest 9.2 release - fix CVE-2018-10915
postgresql-static-9.2.24-1.el7_5.i686 [86 KiB]	Changelog by Pavel Raiskup (2018-08-14): - update to the latest 9.2 release - fix CVE-2018-10915

Update: postgresql-contrib-9.2.24-1.el7_5

Thu, 23 Aug 2018 15:14:06 +0000

Package: postgresql-contrib
Summary: Extension modules distributed with PostgreSQL

Description:
The postgresql-contrib package contains various extension modules that are included in the PostgreSQL distribution.

Changes:

postgresql-contrib-9.2.24-1.el7_5.x86_64 [525 KiB]

Changelog by Pavel Raiskup (2018-08-14):

- update to the latest 9.2 release
- fix CVE-2018-10915

Update: postgresql-docs-9.2.24-1.el7_5

Thu, 23 Aug 2018 15:14:06 +0000

Package: postgresql-docs
Summary: Extra documentation for PostgreSQL

Description:
The postgresql-docs package contains some additional documentation for PostgreSQL. Currently, this includes the main documentation in PDF format and source files for the PostgreSQL tutorial.

Changes:

postgresql-docs-9.2.24-1.el7_5.x86_64 [6.8 MiB]

Changelog by Pavel Raiskup (2018-08-14):

- update to the latest 9.2 release
- fix CVE-2018-10915

Update: postgresql-plperl-9.2.24-1.el7_5

Thu, 23 Aug 2018 15:14:06 +0000

Package: postgresql-plperl
Summary: The Perl procedural language for PostgreSQL

Description:
The postgresql-plperl package contains the PL/Perl procedural language, which is an extension to the PostgreSQL database server. Install this if you want to write database functions in Perl.

Changes:

postgresql-plperl-9.2.24-1.el7_5.x86_64 [80 KiB]

Changelog by Pavel Raiskup (2018-08-14):

- update to the latest 9.2 release
- fix CVE-2018-10915

Update: postgresql-plpython-9.2.24-1.el7_5

Thu, 23 Aug 2018 15:14:06 +0000

Package: postgresql-plpython
Summary: The Python2 procedural language for PostgreSQL

Description:
The postgresql-plpython package contains the PL/Python procedural language, which is an extension to the PostgreSQL database server. Install this if you want to write database functions in Python 2.

Changes:

postgresql-plpython-9.2.24-1.el7_5.x86_64 [92 KiB]

Changelog by Pavel Raiskup (2018-08-14):

- update to the latest 9.2 release
- fix CVE-2018-10915

Update: postgresql-pltcl-9.2.24-1.el7_5

Thu, 23 Aug 2018 15:14:06 +0000

Package: postgresql-pltcl
Summary: The Tcl procedural language for PostgreSQL

Description:
The postgresql-pltcl package contains the PL/Tcl procedural language, which is an extension to the PostgreSQL database server. Install this if you want to write database functions in Tcl.

Changes:

postgresql-pltcl-9.2.24-1.el7_5.x86_64 [57 KiB]

Changelog by Pavel Raiskup (2018-08-14):

- update to the latest 9.2 release
- fix CVE-2018-10915

Update: postgresql-server-9.2.24-1.el7_5

Thu, 23 Aug 2018 15:14:06 +0000

Package: postgresql-server
Summary: The programs needed to create and run a PostgreSQL server

Description:
PostgreSQL is an advanced Object-Relational database management system (DBMS). The postgresql-server package contains the programs needed to create and run a PostgreSQL server, which will in turn allow you to create and maintain PostgreSQL databases.

Changes:

postgresql-server-9.2.24-1.el7_5.x86_64 [3.3 MiB]

Changelog by Pavel Raiskup (2018-08-14):

- update to the latest 9.2 release
- fix CVE-2018-10915

Update: postgresql-test-9.2.24-1.el7_5

Thu, 23 Aug 2018 15:14:06 +0000

Package: postgresql-test
Summary: The test suite distributed with PostgreSQL

Description:
The postgresql-test package contains files needed for various tests for the PostgreSQL database management system, including regression tests and benchmarks.

Changes:

postgresql-test-9.2.24-1.el7_5.x86_64 [933 KiB]

Changelog by Pavel Raiskup (2018-08-14):

- update to the latest 9.2 release
- fix CVE-2018-10915

Update: postgresql-upgrade-9.2.24-1.el7_5

Thu, 23 Aug 2018 15:14:06 +0000

Package: postgresql-upgrade
Summary: Support for upgrading from the previous major release of PostgreSQL

Description:
The postgresql-upgrade package contains the pg_upgrade utility and supporting files needed for upgrading a PostgreSQL database from the previous major version of PostgreSQL.

Changes:

postgresql-upgrade-9.2.24-1.el7_5.x86_64 [2.0 MiB]

Changelog by Pavel Raiskup (2018-08-14):

- update to the latest 9.2 release
- fix CVE-2018-10915

Update: mutt-1.5.21-28.el7_5

Mon, 20 Aug 2018 18:03:39 +0000

Package: mutt
Summary: A text mode mail user agent

Description:
Mutt is a small but very powerful text-based MIME mail client. Mutt is highly configurable, and is well suited to the mail power user with advanced features like key bindings, keyboard macros, mail threading, regular expression searches and a powerful pattern matching language for selecting groups of messages.

Changes:

mutt-1.5.21-28.el7_5.x86_64 [1.2 MiB]

Changelog by Matej Mužila (2018-07-26):

- Resolves: CVE-2018-14354 CVE-2018-14357 CVE-2018-14362

Update: mariadb-devel-5.5.60-1.el7_5

Thu, 16 Aug 2018 20:20:28 +0000

Package: mariadb-devel
Summary: Files for development of MariaDB/MySQL applications

Description:
MariaDB is a multi-user, multi-threaded SQL database server. This package contains the libraries and header files that are needed for developing MariaDB/MySQL client applications. MariaDB is a community developed branch of MySQL.

Changes:

mariadb-devel-5.5.60-1.el7_5.x86_64 [663 KiB]

Changelog by Michal Schorm (2018-05-10):

- Rebase to 5.5.60
- CVE's fixed: #1558256, #1558260, #1559060
  CVE-2017-3636 CVE-2017-3641 CVE-2017-3653 CVE-2017-10379
  CVE-2017-10384 CVE-2017-10378 CVE-2017-10268 CVE-2018-2562
  CVE-2018-2622 CVE-2018-2640 CVE-2018-2665 CVE-2018-2668
  CVE-2018-2755 CVE-2018-2819 CVE-2018-2817 CVE-2018-2761
  CVE-2018-2781 CVE-2018-2771 CVE-2018-2813
- Resolves: #1535217, #1491833, #1511982, #1145455, #1461692

mariadb-devel-5.5.60-1.el7_5.i686 [663 KiB]

Changelog by Michal Schorm (2018-05-10):

- Rebase to 5.5.60
- CVE's fixed: #1558256, #1558260, #1559060
  CVE-2017-3636 CVE-2017-3641 CVE-2017-3653 CVE-2017-10379
  CVE-2017-10384 CVE-2017-10378 CVE-2017-10268 CVE-2018-2562
  CVE-2018-2622 CVE-2018-2640 CVE-2018-2665 CVE-2018-2668
  CVE-2018-2755 CVE-2018-2819 CVE-2018-2817 CVE-2018-2761
  CVE-2018-2781 CVE-2018-2771 CVE-2018-2813
- Resolves: #1535217, #1491833, #1511982, #1145455, #1461692

Update: mariadb-embedded-5.5.60-1.el7_5

Thu, 16 Aug 2018 20:20:28 +0000

Package: mariadb-embedded
Summary: MariaDB as an embeddable library

Description:
MariaDB is a multi-user, multi-threaded SQL database server. This package contains a version of the MariaDB server that can be embedded into a client application instead of running as a separate process. MariaDB is a community developed branch of MySQL.

Changes:

mariadb-embedded-5.5.60-1.el7_5.x86_64 [3.3 MiB]

Changelog by Michal Schorm (2018-05-10):

- Rebase to 5.5.60
- CVE's fixed: #1558256, #1558260, #1559060
  CVE-2017-3636 CVE-2017-3641 CVE-2017-3653 CVE-2017-10379
  CVE-2017-10384 CVE-2017-10378 CVE-2017-10268 CVE-2018-2562
  CVE-2018-2622 CVE-2018-2640 CVE-2018-2665 CVE-2018-2668
  CVE-2018-2755 CVE-2018-2819 CVE-2018-2817 CVE-2018-2761
  CVE-2018-2781 CVE-2018-2771 CVE-2018-2813
- Resolves: #1535217, #1491833, #1511982, #1145455, #1461692

mariadb-embedded-5.5.60-1.el7_5.i686 [3.3 MiB]

Changelog by Michal Schorm (2018-05-10):

- Rebase to 5.5.60
- CVE's fixed: #1558256, #1558260, #1559060
  CVE-2017-3636 CVE-2017-3641 CVE-2017-3653 CVE-2017-10379
  CVE-2017-10384 CVE-2017-10378 CVE-2017-10268 CVE-2018-2562
  CVE-2018-2622 CVE-2018-2640 CVE-2018-2665 CVE-2018-2668
  CVE-2018-2755 CVE-2018-2819 CVE-2018-2817 CVE-2018-2761
  CVE-2018-2781 CVE-2018-2771 CVE-2018-2813
- Resolves: #1535217, #1491833, #1511982, #1145455, #1461692

Update: mariadb-embedded-devel-5.5.60-1.el7_5

Thu, 16 Aug 2018 20:20:28 +0000

Package: mariadb-embedded-devel
Summary: Development files for MariaDB as an embeddable library

Description:
MariaDB is a multi-user, multi-threaded SQL database server. This package contains files needed for developing and testing with the embedded version of the MariaDB server. MariaDB is a community developed branch of MySQL.

Changes:

mariadb-embedded-devel-5.5.60-1.el7_5.x86_64 [4.2 MiB]

Changelog by Michal Schorm (2018-05-10):

- Rebase to 5.5.60
- CVE's fixed: #1558256, #1558260, #1559060
  CVE-2017-3636 CVE-2017-3641 CVE-2017-3653 CVE-2017-10379
  CVE-2017-10384 CVE-2017-10378 CVE-2017-10268 CVE-2018-2562
  CVE-2018-2622 CVE-2018-2640 CVE-2018-2665 CVE-2018-2668
  CVE-2018-2755 CVE-2018-2819 CVE-2018-2817 CVE-2018-2761
  CVE-2018-2781 CVE-2018-2771 CVE-2018-2813
- Resolves: #1535217, #1491833, #1511982, #1145455, #1461692

mariadb-embedded-devel-5.5.60-1.el7_5.i686 [4.1 MiB]

Changelog by Michal Schorm (2018-05-10):

- Rebase to 5.5.60
- CVE's fixed: #1558256, #1558260, #1559060
  CVE-2017-3636 CVE-2017-3641 CVE-2017-3653 CVE-2017-10379
  CVE-2017-10384 CVE-2017-10378 CVE-2017-10268 CVE-2018-2562
  CVE-2018-2622 CVE-2018-2640 CVE-2018-2665 CVE-2018-2668
  CVE-2018-2755 CVE-2018-2819 CVE-2018-2817 CVE-2018-2761
  CVE-2018-2781 CVE-2018-2771 CVE-2018-2813
- Resolves: #1535217, #1491833, #1511982, #1145455, #1461692