Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 26: FEDORA-2017-7de600f72a Important: Elog Security Enhancement

fedora
Calendar Grey September 4, 2016
Dist Fedora Esm H88
Patch implemented for CVE-2016-6342 in elog on Fedora 25. Upgrade aims to bolster defense mechanisms against potential vulnerabilities.
Security fix for CVE-2016-6342

Summary

ELOG is part of a family of applications known as weblogs. Their general

purpose is:

1. To make it easy for people to put information online in a chronological

fashion, in the form of short, time-stamped text messages ("entries") with

optional HTML markup for presentation, and optional file attachments

(images, archives, etc.)

2. To make it easy for other people to access this information through a

Web interface, browse entries, search, download files, and optionally add,

update, delete or comment on entries.

ELOG is a remarkable implementation of a weblog in at least two respects:

1. Its simplicity of use: you don't need to be a seasoned server operator

and/or an experimented database administrator to run ELOG ; one executable

file (under Unix or Windows), a simple configuration text file, and it works.

No Web server or relational database required. It is also easy to translate

the interface to the appropriate language for your users.

2. Its versatility: through its single configuration file, ELOG can be made

to display an infinity of variants of the weblog concept. There are options

for what to display, how to display it, what commands are available and to

whom, access control, etc. Moreover, a single server can host several

weblogs, and each weblog can be totally different from the rest.

Update Information:

Security fix for CVE-2016-6342

Change Log

References


[ 1 ] Bug #1371328 - CVE-2016-6342 elog: posting entry as arbitrary username by improper authentication https://bugzilla.redhat.com/show_bug.cgi?id=1371328

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update elog' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
important
Lowest
Low
Medium
High
Critical

Name: elog
Product: Fedora 25
Version: 3.1.1
Release: 7.fc25
URL: Summary : Logbook system to manage notes through a Web interface

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here