summaryrefslogtreecommitdiffstats
path: root/zarb-ml/mageia-dev/2013-February/022867.html
diff options
context:
space:
mode:
Diffstat (limited to 'zarb-ml/mageia-dev/2013-February/022867.html')
-rw-r--r--zarb-ml/mageia-dev/2013-February/022867.html148
1 files changed, 148 insertions, 0 deletions
diff --git a/zarb-ml/mageia-dev/2013-February/022867.html b/zarb-ml/mageia-dev/2013-February/022867.html
new file mode 100644
index 000000000..5fda704df
--- /dev/null
+++ b/zarb-ml/mageia-dev/2013-February/022867.html
@@ -0,0 +1,148 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
+<HTML>
+ <HEAD>
+ <TITLE> [Mageia-dev] Security updates - help needed!
+ </TITLE>
+ <LINK REL="Index" HREF="index.html" >
+ <LINK REL="made" HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20Security%20updates%20-%20help%20needed%21&In-Reply-To=%3C1360970634.66129.YahooMailClassic%40web122006.mail.ne1.yahoo.com%3E">
+ <META NAME="robots" CONTENT="index,nofollow">
+ <META http-equiv="Content-Type" content="text/html; charset=us-ascii">
+ <LINK REL="Previous" HREF="022872.html">
+ <LINK REL="Next" HREF="022868.html">
+ </HEAD>
+ <BODY BGCOLOR="#ffffff">
+ <H1>[Mageia-dev] Security updates - help needed!</H1>
+ <B>David Walser</B>
+ <A HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20Security%20updates%20-%20help%20needed%21&In-Reply-To=%3C1360970634.66129.YahooMailClassic%40web122006.mail.ne1.yahoo.com%3E"
+ TITLE="[Mageia-dev] Security updates - help needed!">luigiwalser at yahoo.com
+ </A><BR>
+ <I>Sat Feb 16 00:23:54 CET 2013</I>
+ <P><UL>
+ <LI>Previous message: <A HREF="022872.html">[Mageia-dev] Freeze push: httping
+</A></li>
+ <LI>Next message: <A HREF="022868.html">[Mageia-dev] Soft regressions
+</A></li>
+ <LI> <B>Messages sorted by:</B>
+ <a href="date.html#22867">[ date ]</a>
+ <a href="thread.html#22867">[ thread ]</a>
+ <a href="subject.html#22867">[ subject ]</a>
+ <a href="author.html#22867">[ author ]</a>
+ </LI>
+ </UL>
+ <HR>
+<!--beginarticle-->
+<PRE>Some old ones have finally left the list, some are still there, some new ones are here. Help is still needed.
+
+Also, Manuel pointed out a bugzilla search that will typically contain most of these.
+<A HREF="https://bugs.mageia.org/buglist.cgi?quicksearch=comp:secu+-@qa-b">https://bugs.mageia.org/buglist.cgi?quicksearch=comp:secu+-@qa-b</A>
+
+......... updated initial message below ........
+
+There are several packages that need security updates that either have not been built yet, or there are some issues that need help and/or input from packagers.
+
+Please help out with these where you can.
+
+I'll try to organize these into categories and give a little info on them so it's easy to see if you can and want to help.
+
+Web apps
+--------
+wordpress [mga2] - issues fixed in 3.5.1
+<A HREF="https://bugs.mageia.org/show_bug.cgi?id=9030">https://bugs.mageia.org/show_bug.cgi?id=9030</A>
+
+mediawiki [mga2] - versions we have are at or nearing EOL upstream, probably should be updated. Oliver Burger is working on this.
+<A HREF="https://bugs.mageia.org/show_bug.cgi?id=3448">https://bugs.mageia.org/show_bug.cgi?id=3448</A>
+
+glpi [mga2] - issue fixed in 0.83.3, no backported patch is available that I'm aware of
+<A HREF="https://bugs.mageia.org/show_bug.cgi?id=6762">https://bugs.mageia.org/show_bug.cgi?id=6762</A>
+
+Games
+-----
+openarena, alienarena [mga2] - affected by DoS bug in quake3 engine.
+<A HREF="https://bugs.mageia.org/show_bug.cgi?id=5496">https://bugs.mageia.org/show_bug.cgi?id=5496</A>
+
+Java-related
+------------
+jruby [mga2+cauldron] - one issue fixed upstream in 1.6.5.1, the other in 1.7.1
+<A HREF="https://bugs.mageia.org/show_bug.cgi?id=6742">https://bugs.mageia.org/show_bug.cgi?id=6742</A>
+
+tomcat5 [mga2] - permissions problem found by QA needs to be fixed
+<A HREF="https://bugs.mageia.org/show_bug.cgi?id=8307">https://bugs.mageia.org/show_bug.cgi?id=8307</A>
+
+apache-commons-compress [mga2] - apache-commons-compress10 possibly needs patched
+<A HREF="https://bugs.mageia.org/show_bug.cgi?id=6331">https://bugs.mageia.org/show_bug.cgi?id=6331</A>
+
+jakarta-commons-httpclient [mga2] - patch available from Fedora
+<A HREF="https://bugs.mageia.org/show_bug.cgi?id=8933">https://bugs.mageia.org/show_bug.cgi?id=8933</A>
+
+axis [mga2] - patch available from Fedora
+<A HREF="https://bugs.mageia.org/show_bug.cgi?id=8936">https://bugs.mageia.org/show_bug.cgi?id=8936</A>
+
+No response has been received from packagers yet
+------------------------------------------------
+chromium/v8 [mga2+cauldron] - need upgraded to newest versions
+<A HREF="https://bugs.mageia.org/show_bug.cgi?id=6927">https://bugs.mageia.org/show_bug.cgi?id=6927</A>
+<A HREF="https://bugs.mageia.org/show_bug.cgi?id=8567">https://bugs.mageia.org/show_bug.cgi?id=8567</A>
+
+corosync [mga2] - denial of service issued fixed in 2.3.0
+<A HREF="https://bugs.mageia.org/show_bug.cgi?id=8905">https://bugs.mageia.org/show_bug.cgi?id=8905</A>
+
+ffmpeg [mga2] - issues fixed in upstream git, not clear if they plan to cut another release
+<A HREF="https://bugs.mageia.org/show_bug.cgi?id=8881">https://bugs.mageia.org/show_bug.cgi?id=8881</A>
+
+In progress (help needed to finish)
+-----------------------------------
+libvirt [mga2] - patches available from RedHat, need re-diffed
+<A HREF="https://bugs.mageia.org/show_bug.cgi?id=6526">https://bugs.mageia.org/show_bug.cgi?id=6526</A>
+
+zabbix [mga2] - issues raised by QA need to be addressed
+<A HREF="https://bugs.mageia.org/show_bug.cgi?id=8801">https://bugs.mageia.org/show_bug.cgi?id=8801</A>
+
+xen [mga2+cauldron] - several outstanding security issues need additional patches applied
+<A HREF="https://bugs.mageia.org/show_bug.cgi?id=6931">https://bugs.mageia.org/show_bug.cgi?id=6931</A>
+
+openafs [mga2] - pam_afs is missing from the current build in updates_testing
+<A HREF="https://bugs.mageia.org/show_bug.cgi?id=7085">https://bugs.mageia.org/show_bug.cgi?id=7085</A>
+
+</PRE>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+<!--endarticle-->
+ <HR>
+ <P><UL>
+ <!--threads-->
+ <LI>Previous message: <A HREF="022872.html">[Mageia-dev] Freeze push: httping
+</A></li>
+ <LI>Next message: <A HREF="022868.html">[Mageia-dev] Soft regressions
+</A></li>
+ <LI> <B>Messages sorted by:</B>
+ <a href="date.html#22867">[ date ]</a>
+ <a href="thread.html#22867">[ thread ]</a>
+ <a href="subject.html#22867">[ subject ]</a>
+ <a href="author.html#22867">[ author ]</a>
+ </LI>
+ </UL>
+
+<hr>
+<a href="https://www.mageia.org/mailman/listinfo/mageia-dev">More information about the Mageia-dev
+mailing list</a><br>
+</body></html>