diff options
Diffstat (limited to 'zarb-ml/mageia-dev/2012-September/018933.html')
| -rw-r--r-- | zarb-ml/mageia-dev/2012-September/018933.html | 204 |
1 files changed, 204 insertions, 0 deletions
diff --git a/zarb-ml/mageia-dev/2012-September/018933.html b/zarb-ml/mageia-dev/2012-September/018933.html new file mode 100644 index 000000000..4752b8402 --- /dev/null +++ b/zarb-ml/mageia-dev/2012-September/018933.html @@ -0,0 +1,204 @@ +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN"> +<HTML> + <HEAD> + <TITLE> [Mageia-dev] Security updates - help needed! + </TITLE> + <LINK REL="Index" HREF="index.html" > + <LINK REL="made" HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20Security%20updates%20-%20help%20needed%21&In-Reply-To=%3C1348605286.6237.YahooMailClassic%40web122003.mail.ne1.yahoo.com%3E"> + <META NAME="robots" CONTENT="index,nofollow"> + <META http-equiv="Content-Type" content="text/html; charset=us-ascii"> + <LINK REL="Previous" HREF="018942.html"> + <LINK REL="Next" HREF="018934.html"> + </HEAD> + <BODY BGCOLOR="#ffffff"> + <H1>[Mageia-dev] Security updates - help needed!</H1> + <B>David Walser</B> + <A HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20Security%20updates%20-%20help%20needed%21&In-Reply-To=%3C1348605286.6237.YahooMailClassic%40web122003.mail.ne1.yahoo.com%3E" + TITLE="[Mageia-dev] Security updates - help needed!">luigiwalser at yahoo.com + </A><BR> + <I>Tue Sep 25 22:34:46 CEST 2012</I> + <P><UL> + <LI>Previous message: <A HREF="018942.html">[Mageia-dev] Fwd: Distributor notes about GNOME 3.6.0 +</A></li> + <LI>Next message: <A HREF="018934.html">[Mageia-dev] grub2 integration into installer and drakx tools +</A></li> + <LI> <B>Messages sorted by:</B> + <a href="date.html#18933">[ date ]</a> + <a href="thread.html#18933">[ thread ]</a> + <a href="subject.html#18933">[ subject ]</a> + <a href="author.html#18933">[ author ]</a> + </LI> + </UL> + <HR> +<!--beginarticle--> +<PRE>I was asked in the packagers meeting to update this list. + +I've been really busy at work, and don't have much time to work on these, so help is needed. Thanks to all that have helped so far. + +Also, Manuel pointed out a bugzilla search that will typically contain most of these. +<A HREF="https://bugs.mageia.org/buglist.cgi?quicksearch=comp:secu+-@qa-b">https://bugs.mageia.org/buglist.cgi?quicksearch=comp:secu+-@qa-b</A> + +......... updated initial message below ........ + +There are several packages that need security updates that either have not been built yet, or there are some issues that need help and/or input from packagers. + +Please help out with these where you can. + +I'll try to organize these into categories and give a little info on them so it's easy to see if you can and want to help. + +Web apps +-------- +mediawiki - versions we have are at or nearing EOL upstream, probably should be updated. Oliver Burger is working on this. +<A HREF="https://bugs.mageia.org/show_bug.cgi?id=3448">https://bugs.mageia.org/show_bug.cgi?id=3448</A> + +drupal - update built, issues found by QA need fixing. Oliver Burger is working on this. +<A HREF="https://bugs.mageia.org/show_bug.cgi?id=5844">https://bugs.mageia.org/show_bug.cgi?id=5844</A> + +roundcubemail - issues fixed upstream in 0.8.1, or 0.7.3 + patch from Fedora +<A HREF="https://bugs.mageia.org/show_bug.cgi?id=7246">https://bugs.mageia.org/show_bug.cgi?id=7246</A> + +zabbix - issues fixed in 1.8.15 upstream, two possible patches linked in bug +<A HREF="https://bugs.mageia.org/show_bug.cgi?id=7277">https://bugs.mageia.org/show_bug.cgi?id=7277</A> + +otrs - issue fixed in 3.1.10 +<A HREF="https://bugs.mageia.org/show_bug.cgi?id=7527">https://bugs.mageia.org/show_bug.cgi?id=7527</A> + +GNOME software +-------------- +spice-gtk/glib2.0 - patches available from RedHat +<A HREF="https://bugs.mageia.org/show_bug.cgi?id=7536">https://bugs.mageia.org/show_bug.cgi?id=7536</A> + +empathy - XSS issues fixed upstream in 3.2.1 (only Mageia 1 is affected) +<A HREF="https://bugs.mageia.org/show_bug.cgi?id=7008">https://bugs.mageia.org/show_bug.cgi?id=7008</A> + +libvirt - patches available from RedHat +<A HREF="https://bugs.mageia.org/show_bug.cgi?id=6526">https://bugs.mageia.org/show_bug.cgi?id=6526</A> + +libgnomesu - re-diffing the patch might be non-trivial since OpenSuSE has many other patches too +<A HREF="https://bugs.mageia.org/show_bug.cgi?id=7068">https://bugs.mageia.org/show_bug.cgi?id=7068</A> + +gjs - doesn't rebuild against xulrunner in Mageia 1, but doesn't seem to be used by anything +<A HREF="https://bugs.mageia.org/show_bug.cgi?id=6382">https://bugs.mageia.org/show_bug.cgi?id=6382</A> + +Games +----- +openarena, alienarena - affected by DoS bug in quake3 engine. Juan Luis Baptiste is working on this. +<A HREF="https://bugs.mageia.org/show_bug.cgi?id=5496">https://bugs.mageia.org/show_bug.cgi?id=5496</A> + +Java-related +------------ +jruby - fixed upstream in 1.6.5.1 +<A HREF="https://bugs.mageia.org/show_bug.cgi?id=6742">https://bugs.mageia.org/show_bug.cgi?id=6742</A> + +poi - In progress by D Morgan. Additional updates pending. +<A HREF="https://bugs.mageia.org/show_bug.cgi?id=6011">https://bugs.mageia.org/show_bug.cgi?id=6011</A> + +apache-commons-compress - In progress by D Morgan. Mageia 1 updates pending. +<A HREF="https://bugs.mageia.org/show_bug.cgi?id=6331">https://bugs.mageia.org/show_bug.cgi?id=6331</A> + +apache-commons-daemon - fixed upstream in 1.0.7 (only Mageia 1 is affected) +<A HREF="https://bugs.mageia.org/show_bug.cgi?id=7004">https://bugs.mageia.org/show_bug.cgi?id=7004</A> + +Ruby-related +------------ +Several security issues, one possible packaging issue +<A HREF="https://bugs.mageia.org/show_bug.cgi?id=6487">https://bugs.mageia.org/show_bug.cgi?id=6487</A> + +No response has been received from packagers yet +------------------------------------------------ +openafs - patches available from Debian, plus a newer version is in Mageia 1 than Mageia 2 +<A HREF="https://bugs.mageia.org/show_bug.cgi?id=7085">https://bugs.mageia.org/show_bug.cgi?id=7085</A> + +openswan - patches are available from RedHat, one needs re-diffing +<A HREF="https://bugs.mageia.org/show_bug.cgi?id=7095">https://bugs.mageia.org/show_bug.cgi?id=7095</A> + +freeradius - patch should be available from Debian +<A HREF="https://bugs.mageia.org/show_bug.cgi?id=7447">https://bugs.mageia.org/show_bug.cgi?id=7447</A> + +blender - patches available from Fedora +<A HREF="https://bugs.mageia.org/show_bug.cgi?id=7065">https://bugs.mageia.org/show_bug.cgi?id=7065</A> +<A HREF="https://bugs.mageia.org/show_bug.cgi?id=7518">https://bugs.mageia.org/show_bug.cgi?id=7518</A> + +rpmdevtools - issue fixed in 8.3 +<A HREF="https://bugs.mageia.org/show_bug.cgi?id=7465">https://bugs.mageia.org/show_bug.cgi?id=7465</A> + +erlang - issue fixed in R14B03 (only Mageia 1 is affected) +<A HREF="https://bugs.mageia.org/show_bug.cgi?id=7062">https://bugs.mageia.org/show_bug.cgi?id=7062</A> + +fuse - patches available from RedHat (only Mageia 1 is affected) +<A HREF="https://bugs.mageia.org/show_bug.cgi?id=7063">https://bugs.mageia.org/show_bug.cgi?id=7063</A> + +libvoikko - issue fixed in 3.2.1 (only Mageia 1 is affected) +<A HREF="https://bugs.mageia.org/show_bug.cgi?id=7067">https://bugs.mageia.org/show_bug.cgi?id=7067</A> + +php-ZendFramework - issues fixed upstream in 1.11.6 (only Mageia 1 is affected) +<A HREF="https://bugs.mageia.org/show_bug.cgi?id=7083">https://bugs.mageia.org/show_bug.cgi?id=7083</A> + +abrt/libreport/btparser - should probably be upgraded to newer versions available from RedHat +<A HREF="https://bugs.mageia.org/show_bug.cgi?id=6523">https://bugs.mageia.org/show_bug.cgi?id=6523</A> + +sos - 62 patches available from Fedora +<A HREF="https://bugs.mageia.org/show_bug.cgi?id=6525">https://bugs.mageia.org/show_bug.cgi?id=6525</A> + +x11-server - upstream diffs linked by RedHat, maybe patches available from Ubuntu or Gentoo, plus other security issues fixed by RH/OpenSuSE/Ubuntu +<A HREF="https://bugs.mageia.org/show_bug.cgi?id=6744">https://bugs.mageia.org/show_bug.cgi?id=6744</A> + +In progress (help needed to finish) +----------------------------------- +xen - more patches need applied in Mageia 1 and Mageia 2 branches +<A HREF="https://bugs.mageia.org/show_bug.cgi?id=6931">https://bugs.mageia.org/show_bug.cgi?id=6931</A> + +argyllcms/icclib - file conflicts between these two packages need to be resolved +<A HREF="https://bugs.mageia.org/show_bug.cgi?id=7464">https://bugs.mageia.org/show_bug.cgi?id=7464</A> + +ganglia - some issues found by QA need to be addressed +<A HREF="https://bugs.mageia.org/show_bug.cgi?id=6874">https://bugs.mageia.org/show_bug.cgi?id=6874</A> +</PRE> + + + + + + + + + + + + + + + + + + + + + + + + + + + + +<!--endarticle--> + <HR> + <P><UL> + <!--threads--> + <LI>Previous message: <A HREF="018942.html">[Mageia-dev] Fwd: Distributor notes about GNOME 3.6.0 +</A></li> + <LI>Next message: <A HREF="018934.html">[Mageia-dev] grub2 integration into installer and drakx tools +</A></li> + <LI> <B>Messages sorted by:</B> + <a href="date.html#18933">[ date ]</a> + <a href="thread.html#18933">[ thread ]</a> + <a href="subject.html#18933">[ subject ]</a> + <a href="author.html#18933">[ author ]</a> + </LI> + </UL> + +<hr> +<a href="https://www.mageia.org/mailman/listinfo/mageia-dev">More information about the Mageia-dev +mailing list</a><br> +</body></html> |