[SECURITY] Fedora 31 Update: zabbix-4.0.22-1.fc31
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-519516feec
2020-07-28 15:00:49.912013
--------------------------------------------------------------------------------
Name : zabbix
Product : Fedora 31
Version : 4.0.22
Release : 1.fc31
URL : https://www.zabbix.com
Summary : Open-source monitoring solution for your IT infrastructure
Description :
Zabbix is software that monitors numerous parameters of a network and the
health and integrity of servers. Zabbix uses a flexible notification mechanism
that allows users to configure e-mail based alerts for virtually any event.
This allows a fast reaction to server problems. Zabbix offers excellent
reporting and data visualization features based on the stored data.
This makes Zabbix ideal for capacity planning.
Zabbix supports both polling and trapping. All Zabbix reports and statistics,
as well as configuration parameters are accessed through a web-based front end.
A web-based front end ensures that the status of your network and the health of
your servers can be assessed from any location. Properly configured, Zabbix can
play an important role in monitoring IT infrastructure. This is equally true
for small organizations with a few servers and for large companies with a
multitude of servers.
--------------------------------------------------------------------------------
Update Information:
Update to 4.0.22
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jul 18 2020 Orion Poplawski <orion(a)nwra.com> - 1:4.0.22-1
- Update to 4.0.22 (bz#1858259) CVE-2020-15803
- Fix alert/external scripts directories
* Mon Apr 20 2020 Orion Poplawski <orion(a)nwra.com> - 1:4.0.19-3
- Fix chmod/chown in scriptlet
* Mon Apr 20 2020 Vit Mojzis <vmojzis(a)redhat.com> - 1:4.0.19-2
- Add SELinux subpackage
* Sun Apr 19 2020 Orion Poplawski <orion(a)nwra.com> - 1:4.0.19-1
- Update to 4.0.19
- Upstream now uses jquery 3, so link to that
* Thu Apr 2 2020 Bj��rn Esser <besser82(a)fedoraproject.org> - 1:4.0.16-3
- Fix string quoting for rpm >= 4.16
* Fri Jan 31 2020 Fedora Release Engineering <releng(a)fedoraproject.org> -
1:4.0.16-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Mon Dec 23 2019 Volker Froehlich <volker27(a)gmx.at> - 1:4.0.16-1
- New upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1858259 - CVE-2020-15803 zabbix: stored XSS in the URL Widget [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1858259
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-519516feec' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------