The following Fedora EPEL 5 Security updates need testing:
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-3762/couchdb-1.0...
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-5289/python-virt...
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-4907/bugzilla-3....
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-5293/unbound-1.4...
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-5197/jasper-1.90...
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-5332/phpMyAdmin3...
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-5210/clearsilver...
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-5213/cacti-0.8.7...
The following builds have been pushed to Fedora EPEL 5 updates-testing
phpMyAdmin3-3.4.9-1.el5
Details about builds:
================================================================================
phpMyAdmin3-3.4.9-1.el5 (FEDORA-EPEL-2011-5332)
Handle the administration of MySQL over the World Wide Web
--------------------------------------------------------------------------------
Update Information:
Changes 3.4.9.0 (2011-12-21):
- [edit] Inline editing enum fields with null shows no dropdown
- [interface] DB suggestion not correct for user with underscore
- [core] Magic quotes removed in PHP 5.4
- [session] No feedback when result is empty (signon auth_type)
- [display] Problems regarding ShowTooltipAliasTB
- [edit] Can't rename a database that contains views
- [edit] Unable to move tables with triggers
- [navi] Fast filter broken with table tree
- [GUI] Firefox favicon frameset regression
- [core] Better compatibility with mysql extension
- [security] Self-XSS on export options (export server/database/table), see PMASA-2011-20
(
http://www.phpmyadmin.net/home_page/security/PMASA-2011-20.php)
- [security] Self-XSS in setup (host parameter), see PMASA-2011-19
(
http://www.phpmyadmin.net/home_page/security/PMASA-2011-19.php)
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 22 2011 Robert Scheck <robert(a)fedoraproject.org> 3.4.9-1
- Upgrade to 3.4.9 (#769818)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #769982 - CVE-2011-4782 phpMyAdmin Crafted values entered in the setup
interface can produce XSS PMASA-2011-19
https://bugzilla.redhat.com/show_bug.cgi?id=769982
[ 2 ] Bug #769981 - CVE-2011-4780 phpMyAdmin XSS on the export panels in the server,
database and table sections PMASA-2011-20
https://bugzilla.redhat.com/show_bug.cgi?id=769981
--------------------------------------------------------------------------------