[SECURITY] Fedora EPEL 8 Update: glances-3.2.5-1.el8
--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2022-59cdfb46c4
2022-07-01 00:44:47.278074
--------------------------------------------------------------------------------
Name : glances
Product : Fedora EPEL 8
Version : 3.2.5
Release : 1.el8
URL : https://nicolargo.github.io/glances/
Summary : A cross-platform curses-based monitoring tool
Description :
Glances is a cross-platform monitoring tool which aims to present a large
amount of monitoring information through a curses or Web based interface.
The information dynamically adapts depending on the size of the user interface
It can also work in client/server mode. Remote monitoring could be done via
terminal, Web interface or API (XML-RPC and RESTful). Stats can also be
exported to files or external time/value databases.
Glances is written in Python and uses libraries to grab information from your
system. It is based on an open architecture where developers can add new
plugins or exports modules.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2021-23418
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jun 22 2022 Ali Erdinc Koroglu <aekoroglu(a)fedoraproject.org> - 3.2.5-1
- Update to 3.2.5 (rhbz #1963987 and #1988545)
* Thu Jan 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> -
3.1.4.1-12
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Thu Jul 22 2021 Fedora Release Engineering <releng(a)fedoraproject.org> -
3.1.4.1-11
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Fri Jun 4 2021 Python Maint <python-maint(a)redhat.com> - 3.1.4.1-10
- Rebuilt for Python 3.10
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.4.1-9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.4.1-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1963987 - glances: Unsafe XML parsing [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1963987
[ 2 ] Bug #1988545 - CVE-2021-23418 glances: XEE injection via the use of Fault to parse
untrusted XML data [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1988545
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update glances' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------