The following Fedora EPEL 6 Security updates need testing:
Age URL
359
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-6828
chicken-4.9.0.1-4.el6
341
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7031
python-virtualenv-12.0.7-1.el6
335
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-7168
rubygem-crack-0.3.2-2.el6
266
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-8156 nagios-4.0.8-1.el6
225
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-e2b4b5b2fb
mcollective-2.8.4-1.el6
197
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-35e240edd9
thttpd-2.25b-24.el6
90
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-8fbd838843
dropbear-2016.72-1.el6
83
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-30a8346813
vtun-3.0.1-10.el6
12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-c5dae2a582
GraphicsMagick-1.3.24-1.el6
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-314ade996d
phpMyAdmin-4.0.10.15-2.el6
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-52cc1f9c07
iperf3-3.0.12-1.el6
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-7640e3144a
proftpd-1.3.3g-10.el6
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-42cb1b4ac8
php-ZendFramework2-2.2.10-1.el6 php-zendframework-zendxml-1.0.2-2.el6
The following builds have been pushed to Fedora EPEL 6 updates-testing
copr-cli-1.51-1.el6
dibbler-1.0.1-3.el6
php-ZendFramework2-2.2.10-1.el6
php-zendframework-zendxml-1.0.2-2.el6
Details about builds:
================================================================================
copr-cli-1.51-1.el6 (FEDORA-EPEL-2016-29927f4d99)
Command line interface for COPR
--------------------------------------------------------------------------------
Update Information:
Support for package manipulation as a main new feature.
--------------------------------------------------------------------------------
================================================================================
dibbler-1.0.1-3.el6 (FEDORA-EPEL-2016-2864119c48)
Portable DHCPv6 implementation
--------------------------------------------------------------------------------
Update Information:
This is the initial version of the dibbler package for EPEL6.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1325681 - Build for EL6 in EPEL?
https://bugzilla.redhat.com/show_bug.cgi?id=1325681
--------------------------------------------------------------------------------
================================================================================
php-ZendFramework2-2.2.10-1.el6 (FEDORA-EPEL-2016-42cb1b4ac8)
Zend Framework 2
--------------------------------------------------------------------------------
Update Information:
## 2.2.10 (2015-02-18) ### SECURITY UPDATES - **ZF2015-02:**
`Zend\Db\Adapter\Platform\Postgresql` was incorrectly using `\\` to escape
double quotes in identifiers and values, which could lead to SQL injection
vectors. We have provided patches that use proper escaping. If you use
Postgresql with Zend Framework 2, we recommend upgrading immediately. ## 2.2.9
(2015-01-14) ### SECURITY UPDATES - **ZF2015-01:** Session validators were not
run if set before session start. Essentially, the validators were writing to
the `$_SESSION` superglobal before session start, which meant the data was
overwritten once the session began. This meant on subsequent calls, the
validators had no data to compare against, making the sessions automatically
valid. We have provided patches to ensure that validators are run only after
the session has begun, which will ensure they validate sessions correctly
going forward. If you use `Zend\Session` validators, we recommend upgrading
immediately.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1343989 - [epel6][security] php-ZendFramework2-2.2.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1343989
--------------------------------------------------------------------------------
================================================================================
php-zendframework-zendxml-1.0.2-2.el6 (FEDORA-EPEL-2016-42cb1b4ac8)
Zend Framework ZendXml component
--------------------------------------------------------------------------------
Update Information:
## 2.2.10 (2015-02-18) ### SECURITY UPDATES - **ZF2015-02:**
`Zend\Db\Adapter\Platform\Postgresql` was incorrectly using `\\` to escape
double quotes in identifiers and values, which could lead to SQL injection
vectors. We have provided patches that use proper escaping. If you use
Postgresql with Zend Framework 2, we recommend upgrading immediately. ## 2.2.9
(2015-01-14) ### SECURITY UPDATES - **ZF2015-01:** Session validators were not
run if set before session start. Essentially, the validators were writing to
the `$_SESSION` superglobal before session start, which meant the data was
overwritten once the session began. This meant on subsequent calls, the
validators had no data to compare against, making the sessions automatically
valid. We have provided patches to ensure that validators are run only after
the session has begun, which will ensure they validate sessions correctly
going forward. If you use `Zend\Session` validators, we recommend upgrading
immediately.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1343989 - [epel6][security] php-ZendFramework2-2.2.10 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1343989
--------------------------------------------------------------------------------