WordPress 4.5.2 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately. CVE-2016-4566: WordPress versions 4.5.1 and earlier are affected by a SOME vulnerability through Plupload, the third-party library WordPress uses for uploading files. Upstream fix: https://core.trac.wordpress.org/changeset/37382/ CVE-2016-4567: WordPress versions 4.2 through 4.5.1 are vulnerable to reflected XSS using specially crafted URIs through MediaElement.js, the third-party library used for media players. Upstream fix: https://core.trac.wordpress.org/changeset/37371/ External references: https://wordpress.org/news/2016/05/wordpress-4-5-2/
Created wordpress tracking bugs for this issue: Affects: fedora-all [bug 1334206] Affects: epel-all [bug 1334207]
wordpress-4.5.2-2.fc24 has been pushed to the Fedora 24 stable repository. If problems still persist, please make note of it in this bug report.
wordpress-4.5.2-1.fc22 has been pushed to the Fedora 22 stable repository. If problems still persist, please make note of it in this bug report.
wordpress-4.5.2-1.fc23 has been pushed to the Fedora 23 stable repository. If problems still persist, please make note of it in this bug report.
wordpress-4.5.2-1.el5 has been pushed to the Fedora EPEL 5 stable repository. If problems still persist, please make note of it in this bug report.
wordpress-4.5.2-1.el6 has been pushed to the Fedora EPEL 6 stable repository. If problems still persist, please make note of it in this bug report.
wordpress-4.5.2-1.el7 has been pushed to the Fedora EPEL 7 stable repository. If problems still persist, please make note of it in this bug report.