[El-errata] ELSA-2016-1293 Important: Oracle Linux 7 setroubleshoot and setroubleshoot-plugins security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2016-1293

http://linux.oracle.com/errata/ELSA-2016-1293.html

The following updated rpms for Oracle Linux 7 have been uploaded to the 
Unbreakable Linux Network:

x86_64:
setroubleshoot-3.2.24-4.0.1.el7_2.x86_64.rpm
setroubleshoot-plugins-3.0.59-2.0.1.el7_2.noarch.rpm
setroubleshoot-server-3.2.24-4.0.1.el7_2.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/setroubleshoot-3.2.24-4.0.1.el7_2.src.rpm
http://oss.oracle.com/ol7/SRPMS-updates/setroubleshoot-plugins-3.0.59-2.0.1.el7_2.src.rpm



Description of changes:

setroubleshoot
[3.2.24-4.0.1]
- Add setroubleshoot-oracle-enterprise.patch to change bug reporting
   URL to linux.oracle.com

[3.2.24-4]
- Catch all subprocess module exceptions

[3.2.24-3]
- Use subprocess.check_output() with a sequence of program arguments

[3.2.24-2]
- Do not use dangerous shell=True

setroubleshoot-plugins
[3.0.59-2.0.1]
- Add setroubleshoot-plugins-oracle-config.patch to use oracle url
- Add setroubleshoot-plugins-oracle-po.patch to use oracle url for po

[3.0.59-2]
- Don't use commands.get*output()
Resolves: CVE-2016-4444, CVE-2016-4446