The following Fedora EPEL 5 Security updates need testing:
Age URL
867
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2013-11893
libguestfs-1.20.12-1.el5
632
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2014-1626 puppet-2.7.26-1.el5
481
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2014-3849
sblim-sfcb-1.3.8-2.el5
124
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-edbea40516
mcollective-2.8.4-1.el5
96
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2015-582c8075e6
thttpd-2.25b-24.el5
7
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-64da3a7a91
drupal6-6.38-1.el5
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-f158c9e72f
drupal7-7.43-1.el5
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-085f094286
php-htmLawed-1.1.21-1.el5
2
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-66faa4ea19
openssl101e-1.0.1e-7.el5
1
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-9c7ed6c982
websvn-2.3.3-12.el5
0
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-de8749748f
phpMyAdmin4-4.0.10.15-1.el5
The following builds have been pushed to Fedora EPEL 5 updates-testing
davix-0.6.0-1.el5
phpMyAdmin4-4.0.10.15-1.el5
Details about builds:
================================================================================
davix-0.6.0-1.el5 (FEDORA-EPEL-2016-76131e3e32)
Toolkit for Http-based file management
--------------------------------------------------------------------------------
Update Information:
davix 0.6.0 release, see RELEASE-NOTES for changes
--------------------------------------------------------------------------------
================================================================================
phpMyAdmin4-4.0.10.15-1.el5 (FEDORA-EPEL-2016-de8749748f)
Handle the administration of MySQL over the World Wide Web
--------------------------------------------------------------------------------
Update Information:
phpMyAdmin 4.0.10.15 (2016-02-29) ================================= This
version fixes multiple XSS vulnerabilities, see PMASA-2016-11 for more details.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1313696 - CVE-2016-2562 phpMyAdmin: man-in-the-middle attack on API call to
GitHub (PMASA-2016-13)
https://bugzilla.redhat.com/show_bug.cgi?id=1313696
[ 2 ] Bug #1313695 - CVE-2016-2559 phpMyAdmin: XSS vulnerability in SQL parser
(PMASA-2016-10)
https://bugzilla.redhat.com/show_bug.cgi?id=1313695
[ 3 ] Bug #1313224 - CVE-2016-2561 phpMyAdmin: multiple XSS vulnerabilities
(PMASA-2016-12)
https://bugzilla.redhat.com/show_bug.cgi?id=1313224
[ 4 ] Bug #1313221 - CVE-2016-2560 phpMyAdmin: multiple XSS vulnerabilities
(PMASA-2016-11)
https://bugzilla.redhat.com/show_bug.cgi?id=1313221
--------------------------------------------------------------------------------