update to 3.8.2 Security Release

- fix privilege escalation issue  CVE-2014-0165
- fix authentication bypass issue CVE-2014-0166

(cherry picked from commit 8bfaea7ed1)
This commit is contained in:
Remi Collet 2014-04-09 16:47:16 +02:00
commit 4a9188b2ef
3 changed files with 9 additions and 3 deletions

1
.gitignore vendored
View file

@ -4,3 +4,4 @@ clog
/wordpress-3.7.1.tar.gz
/wordpress-3.8.tar.gz
/wordpress-3.8.1.tar.gz
/wordpress-3.8.2.tar.gz

View file

@ -1 +1 @@
6da5f73a2c7a46457b6ceb20fb6166c2 wordpress-3.8.1.tar.gz
436fecefe21b1d2df6beb1c201fc6426 wordpress-3.8.2.tar.gz

View file

@ -10,9 +10,9 @@
Summary: Blog tool and publishing platform
URL: http://www.wordpress.org
Name: wordpress
Version: 3.8.1
Version: 3.8.2
Group: Applications/Publishing
Release: 3%{?dist}
Release: 1%{?dist}
License: GPLv2
Source0: http://wordpress.org/%{name}-%{version}.tar.gz
@ -236,6 +236,11 @@ rm -rf ${RPM_BUILD_ROOT}
%dir %{_sysconfdir}/wordpress
%changelog
* Wed Apr 9 2014 Remi Collet <remi@fedoraproject.org> - 3.8.2-1
- update to 3.8.2 Security Release
- fix privilege escalation issue CVE-2014-0165
- fix authentication bypass issue CVE-2014-0166
* Sat Jan 25 2014 Remi Collet <remi@fedoraproject.org> - 3.8.1-3
- ignore WP_AUTO_UPDATE_CORE (always false)