ELSA-2014-1194

ELSA-2014-1194 - conga security and bug fix update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2014-09-17

Description

[0.12.2-81.0.2.el5]
- Replaced redhat logo image in Data.fs

[0.12.2-81.0.1.el5]
- Added conga-enterprise-Carthage.patch to support OEL5
- Replaced redhat logo image in conga-0.12.2.tar.gz

[0.12.2-81]
- luci: prevent non-admin user from unauthorized executive access
Resolves: rhbz#1089310

[0.12.2-79]
- luci: drop unsuccessful monkey patch application wrt. Plone 20121106 advisory
Related: rhbz#956861

[0.12.2-78]
- luci: reflect startup_wait parameter added in postgres-8 RA
Resolves: rhbz#1065263
- luci: Multiple information leak flaws in various luci site extensions
Resolves: rhbz#1076148

[0.12.2-72]
- luci: fix mishandling of distro release string
Resolves: rhbz#1072075
- luci: fix initscript does not check return values correctly
Resolves: rhbz#970288
- ricci: fix end-use modules do not handle stdin polling correctly
Resolves: rhbz#1076711

[0.12.2-69]
- luci: apply relevant parts of Plone 20121106 advisory (multiple vectors)
Resolves: rhbz#956861

Related CVEs

CVE-2013-6496

CVE-2012-5488

CVE-2012-5485

CVE-2012-5497

CVE-2012-5498

CVE-2012-5499

CVE-2012-5500

CVE-2012-5486

CVE-2014-3521

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 5 (i386)	conga-0.12.2-81.0.2.el5.src.rpm	38a28d52fcb6698ba058c2a3e122b2927c338cdbb537010cbebec4c64b5bb713	-	ol5_i386_latest
	conga-0.12.2-81.0.2.el5.src.rpm	38a28d52fcb6698ba058c2a3e122b2927c338cdbb537010cbebec4c64b5bb713	-	ol5_u11_i386_base
	luci-0.12.2-81.0.2.el5.i386.rpm	19899d7f76214459fd156f00d65f7123aee38901a897ad4086b4aa661add6ad7	-	ol5_i386_latest
	luci-0.12.2-81.0.2.el5.i386.rpm	19899d7f76214459fd156f00d65f7123aee38901a897ad4086b4aa661add6ad7	-	ol5_u11_i386_base
	ricci-0.12.2-81.0.2.el5.i386.rpm	70f397aa54ed28fb9bfa1a2a3ec732fa034548567e1b0328e07ca6d8311518e3	-	ol5_i386_latest
	ricci-0.12.2-81.0.2.el5.i386.rpm	70f397aa54ed28fb9bfa1a2a3ec732fa034548567e1b0328e07ca6d8311518e3	-	ol5_u11_i386_base
Oracle Linux 5 (ia64)	conga-0.12.2-81.0.2.el5.src.rpm	38a28d52fcb6698ba058c2a3e122b2927c338cdbb537010cbebec4c64b5bb713	-	ol5_ia64_latest
	conga-0.12.2-81.0.2.el5.src.rpm	38a28d52fcb6698ba058c2a3e122b2927c338cdbb537010cbebec4c64b5bb713	-	ol5_u11_ia64_base
	luci-0.12.2-81.0.2.el5.ia64.rpm	b68d1e0846d347b2ec6b6b0c9ab39242f391c8d797faabdcc43feadaf69e941d	-	ol5_ia64_latest
	luci-0.12.2-81.0.2.el5.ia64.rpm	b68d1e0846d347b2ec6b6b0c9ab39242f391c8d797faabdcc43feadaf69e941d	-	ol5_u11_ia64_base
	ricci-0.12.2-81.0.2.el5.ia64.rpm	ffe3380b16b604395a50066cb85289a19ec42a0f0ea4e6145e85528d6e82f958	-	ol5_ia64_latest
	ricci-0.12.2-81.0.2.el5.ia64.rpm	ffe3380b16b604395a50066cb85289a19ec42a0f0ea4e6145e85528d6e82f958	-	ol5_u11_ia64_base
Oracle Linux 5 (x86_64)	conga-0.12.2-81.0.2.el5.src.rpm	38a28d52fcb6698ba058c2a3e122b2927c338cdbb537010cbebec4c64b5bb713	-	ol5_u11_x86_64_base
	conga-0.12.2-81.0.2.el5.src.rpm	38a28d52fcb6698ba058c2a3e122b2927c338cdbb537010cbebec4c64b5bb713	-	ol5_x86_64_latest
	luci-0.12.2-81.0.2.el5.x86_64.rpm	57f64796ed990011c9077cb5034a83901a42036d04a4bbb527f7823cb6d7b46e	-	ol5_u11_x86_64_base
	luci-0.12.2-81.0.2.el5.x86_64.rpm	57f64796ed990011c9077cb5034a83901a42036d04a4bbb527f7823cb6d7b46e	-	ol5_x86_64_latest
	ricci-0.12.2-81.0.2.el5.x86_64.rpm	497b99c3985f192029cbd487a062fe93a8fa76cf627642e3477ade3f6b5241dc	-	ol5_u11_x86_64_base
	ricci-0.12.2-81.0.2.el5.x86_64.rpm	497b99c3985f192029cbd487a062fe93a8fa76cf627642e3477ade3f6b5241dc	-	ol5_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team