The following Fedora EPEL 6 Security updates need testing:
Age URL
212
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-b6c663378c
unrtf-0.21.9-8.el6
37
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-61fe7c6e70
nagios-4.4.2-3.el6
23
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-b7556983e8
tomcat-7.0.92-1.el6
19
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-a0ddb153b8
game-music-emu-0.6.2-1.el6
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-721b35969d
php-horde-Horde-Image-2.5.4-1.el6
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-c61cb3eb1d
perl-Email-Address-1.912-1.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
php-horde-Horde-Form-2.0.19-1.el6
php-horde-imp-6.2.23-1.el6
php-horde-kronolith-4.2.26-1.el6
purple-facebook-0.9.5-13.9ff9acf9fa14.el6
Details about builds:
================================================================================
php-horde-Horde-Form-2.0.19-1.el6 (FEDORA-EPEL-2019-f49d74241e)
Horde Form API
--------------------------------------------------------------------------------
Update Information:
**Horde_Form 2.0.19** * [mjr] SECURITY: Prevent RCE vulnerability due to
potential directory traversal in Image uploads (An independent security
researcher has reported this vulnerability to SecuriTeam Secure Disclosure
program).
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 7 2019 Remi Collet <remi(a)remirepo.net> - 2.0.19-1
- update to 2.0.19
- use range dependencies
--------------------------------------------------------------------------------
================================================================================
php-horde-imp-6.2.23-1.el6 (FEDORA-EPEL-2019-cb70f98a43)
A web based webmail system
--------------------------------------------------------------------------------
Update Information:
**imp 6.2.23** * [mjr] Fix attachment handling in minimal mode (PR #3, Thorsten
Kahler). * [mjr] Fix regular expression error with PHP 7.3. * [mjr] Fix fatal
error when requested attachment not found in minimal mode.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 7 2019 Remi Collet <remi(a)remirepo.net> - 6.2.23-1
- update to 6.2.23
- use range dependencies
--------------------------------------------------------------------------------
================================================================================
php-horde-kronolith-4.2.26-1.el6 (FEDORA-EPEL-2019-d78e4b3641)
A web based calendar
--------------------------------------------------------------------------------
Update Information:
**kronolith 4.2.26** * [mjr] Remove hard coded end date for calendar feed and
allow it to be specified in url.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 7 2019 Remi Collet <remi(a)remirepo.net> - 4.2.26-1
- update to 4.2.26
- use range dependencies
--------------------------------------------------------------------------------
================================================================================
purple-facebook-0.9.5-13.9ff9acf9fa14.el6 (FEDORA-EPEL-2019-0dfd375e5a)
Facebook protocol plugin for purple2
--------------------------------------------------------------------------------
Update Information:
- Add patch from upstream fixing 'Failed to get sync_sequence_id' - Add patch to
check and link zlib
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 7 2019 Bj��rn Esser <besser82(a)fedoraproject.org> - 0.9.5-13.9ff9acf9fa14
- Add patch to check and link zlib
* Mon Jan 7 2019 Bj��rn Esser <besser82(a)fedoraproject.org> - 0.9.5-12.9ff9acf9fa14
- Add patch from upstream fixing 'Failed to get sync_sequence_id' (#1663599)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1663599 - Stop working with the error: Failed to get sync_sequence_id
https://bugzilla.redhat.com/show_bug.cgi?id=1663599
--------------------------------------------------------------------------------