Sm-announce mailing list

[Vlad Glagolev <stealth AT sourcemage.org>]

Hi all!

Too bad software has bugs, and too bad it has a lot of security bugs
as well.

This is yet another security update of 0.61 stable branch which fixes
many vulns that were found recently.

The tarballs have been signed and uploaded to our server and will be
propogating out to the mirrors within six hours.

To download the grimoire manually, get
http://codex.sourcemage.org/stable.tar.bz2 or specifically
http://codex.sourcemage.org/stable-0.61.tar.bz2 .

GPG signatures are available at
http://codex.sourcemage.org/stable.tar.bz2.asc or
http://codex.sourcemage.org/stable-0.61.tar.bz2.asc .

Following updates were integrated[0]:

Eric Sandall (4):
      gnutls: Apply gets.patch/x509.patch for DEFAULT/2.12 branch (Bug #493)  
   * gets.patch: Fix gets() removal from glibc 2.16 (Bug #493)     * 
x509.patch: Fix x509 compilation (found after Bug #493 fixed)     (cherry 
picked from commit e264a23ccfecb32f487f9a55474e686cf8c4e703)
      gnutls: Fix typo for "2.12" -> "x2.12" (part of Bug #509)     (cherry 
picked from commit 929ae06a5175c9a243ec6bcd66dac16de133ff4d)
      gnutls: Removed patches, no longer needed for 2.12.23 (Bug #509)
      openssl: Remove TLSEXT option (See Bug #511)     (cherry picked from 
commit e4f8e99cb69862d1b4ec11da773b083ab55e298f)

Florian Franzmann (3):
      crypto/gnutls update WEB_SITE     (cherry picked from commit 
638b0424faf16714b87b95b83a05cd9291cf8af0)
      ruby-raa/ruby-1.9: add dependencies on libffi, libx11, tcl     (cherry 
picked from commit 345a734fe8d4f9b6a3ffd1eccc74da43f41110e4)
      libs/apr: version 1.4.6     (cherry picked from commit 
0a0d30822dd8a7badcf2bf9fd7943d80808589ab)

Ladislav Hagara (16):
      samba 3.6.6     (cherry picked from commit 
cff4500ee974367a87e38916012d37079013a080)
      samba 3.6.7     (cherry picked from commit 
b3e958ee49d97d3199e8a8ac10a5cc453a24b965)
      samba 3.6.8     (cherry picked from commit 
aea8c7e42f4b0a44d0f84411191cbff8a0a5b0f6)
      samba 3.6.10     (cherry picked from commit 
140f49870e6053932528da409fd7958f0d6d35ed)
      linux 3.7.6     (cherry picked from commit 
956778c626813bb11971abeb3dd40a4b6492110b)
      openssl 0.9.8y, 1.0.0k, SECURITY_PATCH=20     (cherry picked from 
commit 34e5ddfe02ec4c2a00be7488ded9c3be2fd548c4)
      gnutls 3.0.20     (cherry picked from commit 
21a6991e5f839e7ab655ff5973afe2bb4e7163ac)
      gnutls 2.12.20 & 3.0.21     (cherry picked from commit 
5b868862df35a2b4b4178efdc0cfa35dfe5d97d1)
      gnutls 3.1.7, 3.0.28 and 2.12.23, SECURITY_PATCH=8     (cherry picked 
from commit da7cf43c26c7baf332a2ef7b322cb5343bce2a5c)
      linux 3.7.7     (cherry picked from commit 
0ae8d4d60b15e6cd8f7e253ebd9bb07bf61fc223)
      pidgin 2.10.6     (cherry picked from commit 
71df0dd368144c3059396d74da60e2b706b33221)
      pidgin 2.10.7, SECURITY_PATCH=16     (cherry picked from commit 
822cc8dc55da8b1294b8a5afe4bae567c4fc4785)
      nss 3.14.2     (cherry picked from commit 
553633a75b3f9166fcb40333d28763553e3d6c30)
      linux 3.7.8     (cherry picked from commit 
a870afc363d68249bfef751902d2174002e128eb)
      linux 3.7.9     (cherry picked from commit 
3cce397666835598e32696b50f5c4a02086a3583)
      dbus-glib 0.100     (cherry picked from commit 
118e70ed55c64f8f5e6e0dc35aea71351fc693be)

Sukneet Basuta (1):
      mariadb: build with -with-readline     until system readline support 
fixed.

Treeve Jelbert (9):
      gnutls: => 3.1.5     (cherry picked from commit 
38e0e068695be3bc0c08fa570b9c99c21f1752b4)
      libssh - add libgcrypt support     (cherry picked from commit 
6f6aadba343a08d62f1a2b36a8656c456fdd2cfc)
      libssh: => 0.5.4 SECURITY fix     (cherry picked from commit 
70fe8d1cab12fd0191016c78c5e292bdd1ed1d30)
      dbus-glib: => 0.100.1   SECURITY fix CVE-2013-0292     (cherry picked 
from commit f2750e125480a213e3e08193c6a1a4ce86e2e883)
      boost: => 1_50_0     (cherry picked from commit 
d582d2a2d823787036007a837a0d203ff19d06a5)
      boost - fix SUB_DEPENDS python usage     (cherry picked from commit 
e99d3dec59be909e91bbc61265b1dfa904310a0b)
      boost: => 1_51_0     (cherry picked from commit 
bf957f72bfaf054aa60f57992bca64822e8b39a1)
      boost: => 1_52_0     (cherry picked from commit 
6e11b6e9fcbe75477b3169007e76a94eeed49c3c)
      boost: => 1_53_0  (SECURITY fix)     (cherry picked from commit 
b4dc4ee737c4acf6a46ec12c7aa256a349b1ba57)

Vlad Glagolev (27):
      samba: fixed build with cups 1.6     (cherry picked from commit 
882d3feb5323ca0243512b9b51d9a108febf5378)
      samba: => 3.6.9     (cherry picked from commit 
41763278eac7a1d0f384317d5ad70deb86f01ec0)
      samba: => 3.6.11     (cherry picked from commit 
9b0e8b55eec1cd1785e18d2dc3193856a10751c4)
      samba: fixed conflicts with tdb and talloc     (cherry picked from 
commit df614947e72ee50539e06fb4fd1ecd4f6d57b647)
      samba: handle conflicts more precisely     (cherry picked from commit 
1b8ea892f36b7f74ac3b46a5684cf330d67b9d20)
      samba: => 3.6.12 (security)     (cherry picked from commit 
3e01ebe09a36d4d6fb2b45b40a35c2b58d680c88)
      tdb: => 1.2.10     (cherry picked from commit 
0b35d44047ba3227c83c818f7188c63854bda38f)
      tdb: added special options for compiling     (cherry picked from commit 
fa86bcaa5072f9cb50b903f1bea87481fbae8932)
      tdb: => 1.2.11     (cherry picked from commit 
568970869a4d9f6a50f623127490538dc56b9f61)
      tdb: added FTP mirror     (cherry picked from commit 
7670ca8163d001463a7cb9d1304718fe8eb57edd)
      tdb: fixed conflict with samba's internal lib     (cherry picked from 
commit 4de64596b35689c1e0ff7f976d98ab3ad3d1eaa2)
      talloc: => 2.0.8     (cherry picked from commit 
6df6a27ed475ae18b3612b5e23f5d469903b0c03)
      talloc: fixed conflict with samba's internal lib     (cherry picked 
from commit dbd88ddf56223ffbc87d63b2c92f429cb723c60f)
      ruby-1.9: => 1.9.3-p362     (cherry picked from commit 
838bea2c10e6451923f8c3213959f8ecafe848df)
      Revert "ruby-raa/ruby-1.9: add dependencies on libffi, libx11, tcl"
      ruby-1.9: => 1.9.3-p374     (cherry picked from commit 
dbb7af1fca9bc15d1ceaf2341a5411c25b7682b6)
      ruby-1.9: => 1.9.3-p385 (security)     (cherry picked from commit 
38bf6f8063a6436acf49d38602fef31d1f711ef3)
      postgresql: => 9.1.8 (security)
      gtkglext: added missing dependencies     (cherry picked from commit 
4efbdd831a82b0847a1c5d124042338d85769f8e)
      apr: marked previous update a security one     (cherry picked from 
commit 301360b0af1b05476dd679e026efc07023dbe9a1)
      apache22: fixed requirement of LDAP subdependency in apr-util     
(cherry picked from commit db3c839d8f3622373a02134abf4e3040ed0ea068)
      nss: don't overwrite OpenSSL's libssl.a static library     (cherry 
picked from commit 6485ee3691f08a431db3b8cfe50daa2f20cb1c77)
      linux: => 3.2.38 (lts)     (cherry picked from commit 
1488b72859ca9f8ae97814740ea7a33cf38f98e0)
      linux: => 3.4.32 (lts)     (cherry picked from commit 
bd5eaf4f787a460e880afbcef4c00ab048f24aea)
      linux: => 3.0.65 (lts)     (cherry picked from commit 
e3d64e96ee820fab46fc12ab586a43a840a95ac6)
      xen: security update     (cherry picked from commit 
e9e817af9033fb56723e46a50778a4536448f64a)
      VERSION: 0.61-18


[0] Generated: 'git shortlog --no-merges stable-0.61-17..stable-0.61-18'

-- 
Dont wait to die to find paradise...
--
Cheerz,
Vlad "Stealth" Glagolev

Attachment: pgp39nFbeaCzj.pgp
Description: PGP signature