[EPEL-devel] Fedora EPEL 7 updates-testing report

Sun Apr 26 19:38:04 UTC 2015

The following Fedora EPEL 7 Security updates need testing:
 Age  URL
 164  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3989/cross-binutils-2.23.88.0.1-2.el7.1
  59  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-0862/nodejs-0.10.36-3.el7,libuv-0.10.34-1.el7,v8-3.14.5.10-17.el7
  48  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-1087/dokuwiki-0-0.24.20140929c.el7
  48  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-0952/qpid-qmf-0.28-27.el7,qpid-cpp-0.30-12.el7
  31  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-1421/quassel-0.11.0-2.el7
  25  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-1545/strongswan-5.3.0-1.el7
  20  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-1596/postgis-2.0.7-1.el7
  14  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5756/tor-0.2.5.12-1.el7
  11  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5811/qt5-qtbase-5.4.1-9.el7
  11  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5703/php-pecl-zendopcache-7.0.5-1.el7
   9  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5832/mingw-gnutls-3.3.14-1.el7,mingw-libtasn1-4.4-1.el7,mingw-p11-kit-0.20.7-1.el7
   0  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5973/mingw-libtiff-4.0.3-6.el7
   0  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-6006/dpkg-1.16.16-5.el7
   0  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5991/mingw-libgcrypt-1.6.3-1.el7
   0  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5995/mingw-qt-4.8.6-8.el7
   0  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5987/mingw-openssl-1.0.2a-1.el7
   0  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5937/wordpress-4.1.3-1.el7
   0  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5994/mingw-qt5-qtbase-5.4.1-2.el7
   0  https://admin.fedoraproject.org/updates/FEDORA-EPEL-2015-5971/mingw-curl-7.42.0-1.el7

The following builds have been pushed to Fedora EPEL 7 updates-testing

    dpkg-1.16.16-5.el7
    libass-0.12.1-1.el7
    php-patchwork-jsqueeze-2.0.2-1.el7
    phpMyAdmin-4.4.4-1.el7

Details about builds:

================================================================================
 dpkg-1.16.16-5.el7 (FEDORA-EPEL-2015-6006)
 Package maintenance system for Debian Linux
--------------------------------------------------------------------------------
Update Information:

Fix build for all versions, previous try wasn't correct and back with dpkg-perl-libexecdir.patch
Security update to 1.16.16
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1103026 - CVE-2014-3864 CVE-2014-3865 dpkg: multiple directory traversal flaws in dpkg-source
        https://bugzilla.redhat.com/show_bug.cgi?id=1103026
  [ 2 ] Bug #1162166 - CVE-2014-8625 dpkg: format string vulnerability
        https://bugzilla.redhat.com/show_bug.cgi?id=1162166
  [ 3 ] Bug #1210748 - CVE-2015-0840 dpkg: source package integrity verification bypass
        https://bugzilla.redhat.com/show_bug.cgi?id=1210748
  [ 4 ] Bug #1092210 - CVE-2014-0471 dpkg: path traversal when unpacking a source package
        https://bugzilla.redhat.com/show_bug.cgi?id=1092210
--------------------------------------------------------------------------------

================================================================================
 libass-0.12.1-1.el7 (FEDORA-EPEL-2015-6007)
 Portable library for SSA/ASS subtitles rendering
--------------------------------------------------------------------------------
Update Information:

Update to 0.12.1
--------------------------------------------------------------------------------
ChangeLog:

* Sun Apr 26 2015 Martin Sourada <mso at fedoraproject.org> - 0.12.1-1
- Update to 0.12.1
--------------------------------------------------------------------------------

================================================================================
 php-patchwork-jsqueeze-2.0.2-1.el7 (FEDORA-EPEL-2015-6013)
 Efficient JavaScript minification
--------------------------------------------------------------------------------
Update Information:

This update provides the latest upstream release of jsqueeze, with a single bug fix (to case statement parsing) which was not in the previous build.
--------------------------------------------------------------------------------

================================================================================
 phpMyAdmin-4.4.4-1.el7 (FEDORA-EPEL-2015-6010)
 Handle the administration of MySQL over the World Wide Web
--------------------------------------------------------------------------------
Update Information:

phpMyAdmin 4.4.4.0 (2015-04-26)
===============================

  - Edit vs Change
  - Don't scroll (to bottom) when editing multiple rows
  - Misaligned Inline edit field
  - Use of undefined constant PMA_DRIZZLE
  - sprintf(): Too few arguments
  - Limit column ordering in index edit dialog
  - Incorrect ALTER TABLE statement generated
  - Inconsistency in 'Ignore' checkbox in insert page
  - Drop column action not asking to confirm
  - Error on creating table
  - Undefined index: Rows
--------------------------------------------------------------------------------
ChangeLog:

* Sun Apr 26 2015 Robert Scheck <robert at fedoraproject.org> 4.4.4-1
- Upgrade to 4.4.4 (#1215417)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1215417 - phpMyAdmin-4.4.4 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1215417
--------------------------------------------------------------------------------