Sm-announce mailing list

[Vlad Glagolev <stealth AT sourcemage.org>]

Hello, Valley!

It was a long delay after previous security update, and some kind of my RL 
stuff
forced me to pull in about 0.62 stable grimoire as well.

But it's time to go on, and we started with the last security update of
0.61 stable branch.

Thanks to all developers and testers who has made this release
available to all.

The tarballs have been signed and uploaded to our server and will be
propogating out to the mirrors within six hours.

To download the grimoire manually, get
http://codex.sourcemage.org/stable.tar.bz2 or specifically
http://codex.sourcemage.org/stable-0.61.tar.bz2 .

GPG signatures are available at
http://codex.sourcemage.org/stable.tar.bz2.asc or
http://codex.sourcemage.org/stable-0.61.tar.bz2.asc .

Following updates were integrated[0]:

Eric Sandall (11):
      mysql: Add -fpermissive in CXXFLAGS with 5.1.67 (!$OLD)     Add 
-fpermissive in CXXFLAGS with 5.1.67 (!$OLD)     for 
extra/yassl/taocrypt/src/Makefile.in
      curl: Fix -DPIC from CFLAGS -> CPPFLAGS (Bug #537)
      openjpeg: PATCHLEVEL++ for Bug #540 (Javier Vasquez's fix)     Adding 
"default_install" and the removal of broken symlink and the     creation of 
the correct one.     (cherry picked from commit 
3a271be4d15d99af290840402cb0f1a1c6759ab5)
      linux: Linux 3.9.0+ depends on bc
      linux: smgl-logo-0.2-for-2.6.31.patch works for 3.1-3.9     (cherry 
picked from commit 7a0d047fa4c7eec7914beeeaafd4f89b08ba3908)
      mesalib: GLUT functionality depends on libxmu and libxi (plus libx11)
      smgl-mirrors: Updated to 0.7     Updated SOURCEFORGE to new mirrors     
SOURCEFORGE default is now "Auto Select"     (cherry picked from commit 
6459a2dd8ad45029bfe1f1bf4bc0e0fd28ba4a01)
      firefox: firefox.desktop icon moved under icons/browser directory     
PATCHLEVEL++     (cherry picked from commit 
74a4415a49755e06df37fdd1e76b4557b87237f4)
      thunderbird: thunderbird.desktop mozicon50.xpm is no longer available,  
   PATCHLEVEL++     desktop icon to use 
/usr/lib/thunderbird/chrome/icons/default/default256.png     (cherry picked 
from commit c95a10cd08dd42e909d4e4d41ea7d4dead183418)
      perl-error: Updated to 0.17020 (0.17018 file missing)     (cherry 
picked from commit a63616f3b49131293927dafb566e9e72422db050)
      linux: smgl-logo-0.2-for-2.6.31.patch works with 3.10     (cherry 
picked from commit 0404ca515f0f8ffc6f7f309da744969bd1a7ea9a)

Florian Franzmann (31):
      crypto/nss: version 3.14.3     (cherry picked from commit 
57f48bc539ef40fca3731af8607f6b00961a08ff)
      fixup for 8ffe1be7f82f556c74b4d1fac110a68617d031ac     (cherry picked 
from commit 04837d070a3fc226a485d7361bd9c30aa56b86dd)
      mail/thunderbird: version 17.0.4esr, security update     (cherry picked 
from commit 0d18d550fd7adf40b9320c3b6da97ac125353a5e)
      mail/thunderbird: version 17.0.5, security update     (cherry picked 
from commit b3e24d42129fdba449aff876ae8aac392623abc6)
      http/firefox: disable avx when using gcc 4.7     (cherry picked from 
commit 4e76ebee07894c25f485f272c9d42237cdce9eee)
      http/firefox: version 19.0.2, security update     (cherry picked from 
commit 394b5e9ecea87bedc2acef6b5a517c43c0f11c7f)
      http/firefox: disable avx for all gcc versions >= 4.6     (cherry 
picked from commit 1170c465bcb4a264d1d2639d9f7440dcdee788e8)
      http/firefox: version 20.0     (cherry picked from commit 
432f4926f30a2f3b3188c3f0358b7fc46adf9cff)
      http/firefox: version 20.0.1     (cherry picked from commit 
8a0b49eceb3621d5f07de5364973a3f005f29f81)
      http/firefox: version 21.0     (cherry picked from commit 
f0fcb0189ed039da11035cfa369fa343c81cc746)
      utils/cpuburn: fix compile error on x86_64     (cherry picked from 
commit 4eaff3ecb64ee88017d68cc67e7b53c8ab1dbd9d)
      kernels/linux: version 3.8.2     (cherry picked from commit 
f1c9d131914f15bdd193de12df57ce81dfbaa371)
      update latest.defaults, fixup for 
f1c9d131914f15bdd193de12df57ce81dfbaa371     (cherry picked from commit 
548f66792573be100709f663ccc988bde50fe2c7)
      utils/sudo: fixed SOURCE_URL     (cherry picked from commit 
b1a672abf77fe866cb29370938684785a87e48ea)
      utils/sudo: re-add source urls     (cherry picked from commit 
784971a23a8e5be7941ed21ae7975025e3be09cc)
      http/firefox: disable avx for all gcc versions >= 4.6     (cherry 
picked from commit 1170c465bcb4a264d1d2639d9f7440dcdee788e8)
      kernels/linux: version 3.8.5     (cherry picked from commit 
4b16d217e6507358c17d27579695f9cf9b6d4aa4)
      kernels/linux: version 3.8.6     (cherry picked from commit 
023c0e1f50b3f6d647078a518d5c6e58d3a53c46)
      devel/python: add check_self on tk and tcl cast     (cherry picked from 
commit 1440d573f8e1ea64a9c1b0f6a5edfe9cd631b829)
      kernels/linux: version 3.8.7     (cherry picked from commit 
2866ca981cf2235972c8009e96c5b3971f929d37)
      devel/python3: add check_self on tk and tcl cast     (cherry picked 
from commit c5fad4f6740f6dd97f93b302b7f5a13c86ebb3d6)
      audio-players/ripperx: fix SOURCE_URL[0], add -lm to LIBS     (cherry 
picked from commit 7d05d343f5c7f53d55485c96ce07eb92f3cbf891)
      kernels/linux: version 3.8.9     (cherry picked from commit 
b137e31398fa0c2a7282ceb5a920cd5d922e170a)
      kernels/linux: version 3.9.1     (cherry picked from commit 
9b9b4d8d473e1756334b1cd0c19d4ec0104f6162)
      kernels/linux: version 3.9.2     (cherry picked from commit 
d4b305677f233dd797bdd24a6e51b65289ee038c)
      kernels/linux: version 3.9.3     (cherry picked from commit 
11dbd1429dc5ac5f5cd3131eef5a0bc4ec235992)
      kernels/linux: version 3.9.4     (cherry picked from commit 
ea44ca3fb8d150c7045f7527008613d0bfea9499)
      crypto/keepassx: patch in missing includes     (cherry picked from 
commit c2c70fb0452e26d1f63c3a649407d489fae46053)
      kernels/linux: version 3.9.5     (cherry picked from commit 
816a27339a497dc0225ff25a415c76d9425737ee)
      kernels/linux: version 3.9.6     (cherry picked from commit 
1ae3dac0be3c1907f157ba3a2b05c98a614f9d6c)
      kernels/linux: version 3.9.7     (cherry picked from commit 
9bb7f0a59de1f1805e695ca8675cd036168e651d)

Ladislav Hagara (14):
      seamonkey 2.17.1, SECURITY_PATCH=53     (cherry picked from commit 
a7dbebf17b84b9d7fc4c5d617f6e209c23ed38cc)
      linux 3.8.1     (cherry picked from commit 
0a2ece7ac24655ba175848790791647879e5bea8)
      wireshark 1.8.6, SECURITY_PATCH=42     (cherry picked from commit 
9961accba8dce6deaf3b2e2ca655831b6d6378f3)
      sudo 1.8.5p3     (cherry picked from commit 
b7fa9530aa4789cbf5abf0c4d6205a251a6fe0f2)
      linux 3.8.3     (cherry picked from commit 
e06d89a136bcfdd97b47f499ba1ea36aed1699e2)
      linux 3.8.4     (cherry picked from commit 
287ae2e5079d858b8eaf4d7ff2541076b660eabe)
      curl 7.27.0     (cherry picked from commit 
b67adc5c9f970c6162ee5cb62da616e4d368f363)
      linux 3.8.8     (cherry picked from commit 
81728a39263d2e15b57964b58b8b98a3706a9fd4)
      linux 3.8.10     (cherry picked from commit 
5cbc1d1f7fc3c63922cc533be9ebe1ed774727d0)
      linux 3.9     (cherry picked from commit 
c04c211a3ea9b1ec6858ef6c642b5395df5a1b65)
      wireshark 1.8.7, SECURITY_PATCH=43     (cherry picked from commit 
d85f9cb8bea16513cb50191d46291a0dbbc2534f)
      libxslt 1.1.28     (cherry picked from commit 
1f7d6891bb5196ca8820491da36d7bb99a62ec2c)
      linux 3.9.8     (cherry picked from commit 
ceea042b6f057c2cb53b2c65c2a7ce1f3464ac20)
      linux 3.10     (cherry picked from commit 
1f8ce5fa53e8ea5f80115d41c2f1980293aa54a9)

Pol Vinogradov (1):
      http/firefox: changed mozconfig to prevent segfaults     (cherry picked 
from commit aec498ba036dd1b1bdbb1b83671b9f1730ee4493)

Remko van der Vossen (7):
      pciutils: pci.ids is volatile     (cherry picked from commit 
432916aa02e185e2d273c5002db56e3e52c86348)
      pciutils: removed configs; pci.ids.gz was already marked volatile     
(cherry picked from commit dd16e2f2ecba26fae01a14a64780e46299c0bca3)
      curl: improve -DPIC in CFLAGS fix
      thunderbird: version 17.0.6, fix up dependencies     (cherry picked 
from commit 33facd2957a0563f78fc6320df53598467de687e)
      firefox: fix up dependencies     (cherry picked from commit 
337601ab079565f1d997a19f8d0abe9c1422ae06)
      openssl: workaround for bug #556
      libxslt: only trigger check_self if optional dep enabled     (cherry 
picked from commit 0a000c95d92d9e9c51a6927dd370bdbd68301fab)

Robin Cook (2):
      uptimed: update to 0.3.17 and added patch for current autotools     
(cherry picked from commit ae65b703697347feba8ab8af184cf145246d051b)
      clamav: fix sourceforge url     (cherry picked from commit 
bdace96357ffb207986080bf2a4825e3f65faa0a)

Sukneet Basuta (1):
      qt4: PATCHLEVEL++     * PRE_BUILD, 
qt-everywhere-opensource-src-4.8.4-QTBUG-22829.patch: patch to fix moc for 
builds that depend on BOOST 1.53     (cherry picked from commit 
30f0a2e1dcd8d6941c1bdedbcd2a5498ade14f19)

Treeve Jelbert (21):
      pciutils: => 3.1.10     (cherry picked from commit 
d74bce978d039148b1db611e01e0a61dc1fcb2d3)
      clamav: => 0.97.6     (cherry picked from commit 
a6ea1efd94c5158742a8eab8fddadd172dcbff24)
      clamav: => 0.97.7     (cherry picked from commit 
0cab1f19e1c4260e3729440adaea8517a7e1c9e0)
      clamav: => 0.97.8  SECURITY FIX     (cherry picked from commit 
1ead94a2cd28a5c458cae97238418bd8dcc9b1f0)
      firebird25: => 2.5.2.26540-0  SECURITY FIX     (cherry picked from 
commit c0b567210c02f1eef95d9deb53d11da4103e56ec)
      krb5: => 1.11     (cherry picked from commit 
5975672465feced47c325f7d688fa4a21a9c5cf9)
      krb5: => 1.11.1  SECURTIY PATCH - fix CVE-2013-1415     (cherry picked 
from commit 2ee2aa26894a9720ffa2cc070b20746e8aa106b0)
      curl: => 7.28.0     (cherry picked from commit 
febd10153b8ceb9129ab5832c9bf45b0b6753c92)
      curl: => 7.28.1     (cherry picked from commit 
d531ae7577b30084b49de3bd04f98140aa793dcf)
      curl - add support for polarssl     (cherry picked from commit 
4a617ac7b01d933ffc71072748abd877e897020b)
      curl - add krb5 (GSSAPI) support     (cherry picked from commit 
c757d19fb3d75e492df6b1c1bf18b54b53d87cdf)
      curl-7.30.0  - SECURITY FIX     (cherry picked from commit 
182aed0ff2c5573c7e3c83bd0345ad9f3d7424b8)
      python3: => 3.3.0     (cherry picked from commit 
204dd070285c070830a8235d46296c068c60f65e)
      Python-3.3.1 - SECURITY fix     (cherry picked from commit 
9dcd8b8e4d1f7e5e5edf8c6cd34c76d9ae931d2d)
      openjpeg: => 1.5.1     (cherry picked from commit 
6e01f411b98919188aee1f5d0bed0c1b5bd849ab)
      libxml2: => 2.9.0     (cherry picked from commit 
7841015f7f751b8bc919f51a6227abed2010ce7a)
      krb5: => 1.11.2     (cherry picked from commit 
b7df4f0337c16006c6c22df278f6d82999aceac0)
      perl-error: => 0.17018     (cherry picked from commit 
2696a82b18106c051c9135662cc8c7c34bfaf3e7)
      polarssl: => 1.2.6     (cherry picked from commit 
4545df3ff06a5ed7ccec5f6bdf22b348a7511d92)
      polarssl: => 1.2.7     (cherry picked from commit 
a3f9ef78b5152aa2444dc8db7bd602b4d3f7ad49)
      polarssl-1.2.8  SECURITY fix     (cherry picked from commit 
46888a0bf8ce42a4544f6615ddb395a54ec098e4)

Vlad Glagolev (57):
      sqlite: => 3.7.15     (cherry picked from commit 
2649f4cef044d89e71228d592ea158bacbe63b95)
      sqlite: => 3.7.15.1     (cherry picked from commit 
51ccb9bdb08d5c922bf333d970a7eb5249e71144)
      sqlite: => 3.7.15.2     (cherry picked from commit 
b283c6705fd0f81fe21d819e4f0624a8c9294049)
      Revert "Revert "nss 3.14.2""
      seamonkey: updated required versions for nss and sqlite     (cherry 
picked from commit 572a0084aa4e19f059f47b6d35167b6c10110b8f)
      openssl: added recast on x.y -> x.z upgrades     (cherry picked from 
commit a5014b7b3f05779335eef16725773a32675ec17c)
      sudo: => 1.8.5p2     (cherry picked from commit 
d7561ae1818d388c12ff7801bda244be7ee9891d)
      sudo: => 1.8.6p1     (cherry picked from commit 
518477d09db28773683c14a639dc2e75776a7383)
      sudo: => 1.8.6p2     (cherry picked from commit 
ca2beb559c02d723ecc41e42347587582cdf1740)
      sudo: => 1.8.6p3     (cherry picked from commit 
a30fa4065d99223b958838e4cf9b5f37d6b9b6f9)
      sudo: => 1.8.6p4     (cherry picked from commit 
bfdc1ffbbcd7dde10ce90d53f422dd959f061dba)
      sudo: => 1.8.6p5     (cherry picked from commit 
c257c883d6e754132f148f0cacf8d8110a7ec1b6)
      sudo: => 1.8.6p7 (security)     (cherry picked from commit 
a21c642e36b35d8216b1559953b9c20c219edb1b)
      privoxy: => 3.0.21 (security)     (cherry picked from commit 
f8092e46788c3bacf3dd31f0c4ae996ad45084ba)
      added missing 'ratbox' account for ircd-ratbox spell     (cherry picked 
from commit 5bc77d2904f18ad295c66ec316cb5e57c3914d8e)
      roundup: added suggest dependency on native SQLite extension for Python 
    (cherry picked from commit 48fcb9012c99e83aab83c31421ee93fccf55938c)
      isc.gpg: added 189CDBC5 public key (Internet Systems Consortium, Inc. 
(Signing key, 2013) <codesign AT isc.org>)     (cherry picked from commit 
3392c131c8cdd15c1782f279daacb85708bdb4bb)
      dhcp: => 4.2.5     (cherry picked from commit 
752d6178c16b75a818d313bc23a0fdfc8d52dd43)
      dhcp: => 4.2.5-P1 (security)     (cherry picked from commit 
1bfe97e1ea35e4a58f6c9b1452b0509be756d1c8)
      postgresql: => 9.1.9 (security)
      python: => 2.7.4 (security)     (cherry picked from commit 
9cb12a9a91b0ba0314bf5b69dc2e60a677131f83)
      tinc: => 1.0.20     (cherry picked from commit 
86fde813d33630384dbad66c09bb544c3de3e8dd)
      tinc: => 1.0.21 (security)     (cherry picked from commit 
f40664744586daa3193fddc5af1ec2797a9c3d72)
      gajim: fixed compat. with new GTalk API     (cherry picked from commit 
72bce0ed863c0be1f6d71dc5fb06dafc84260bf8)
      ppp: added mppe.h header into build; added missing dependencies     
(cherry picked from commit 15bdff717faf1a1364e286adde3b66b5b3f16206)
      socat: => 1.7.2.2 (security)     (cherry picked from commit 
cccaf4333b5ff9be5347d911f4498ce381e87324)
      wireshark: removed obsolete options and dependencies     (cherry picked 
from commit 0cdb7db79922e859bef706cab8f14555b51f5198)
      openjpeg: fixed 1.5.0 -> 1.5.1 upgrade procedure     (cherry picked 
from commit 49b6df0e34229121d45373b62463949bcb95f071)
      memcached: => 1.4.14     (cherry picked from commit 
fadf42d26d125f06289ea7dafc8aea9d625b9092)
      memcached: => 1.4.15     (cherry picked from commit 
97faee97b1550d622373705da676006531df07cf)
      memcached: added security update info for 1.4.15 release     (cherry 
picked from commit 9ca1eafa06bd3f99961075e85443da975f362f48)
      ruby-1.9: => 1.9.3-p429 (security)     (cherry picked from commit 
d0b2a8845b6be48afe9de249aec2b7f2dcbf9e3f)
      libxslt: added security info for 1.1.28 release     (cherry picked from 
commit da211ed95365d0f106ba73e2cb9cd3a799e7a1f6)
      libxml2: => 2.9.1 (security)     (cherry picked from commit 
0a19f66be0775b8c437ee5f1aac70513523a8934)
      mongodb: => 2.0.9 (security)     (cherry picked from commit 
cfb320c43c1d4d294cd9961f961faf989b928a02)
      py-bcrypt: => 0.3 (security)     (cherry picked from commit 
52ed8b07d87347df9ba79ad3fdf259a9408d10f0)
      firefox: fix HISTORY entry during merge
      linux: => 3.0.82 (lts)     (cherry picked from commit 
d03cb7ed945113e18ed7dc908aa960be8e87ce3f)
      linux: => 3.7.10 (eol)     (cherry picked from commit 
b960c100e2d3fbc3adac9d25fc28a56ccb7f6aa3)
      linux: => 3.8.13 (eol)     (cherry picked from commit 
47d95864b316a0f424939a0b23565eac4d10c068)
      linux: => 3.2.47 (lts)     (cherry picked from commit 
51176ae216deabac934419c83d1d644c083b81c5)
      linux: => 3.4.49 (lts)     (cherry picked from commit 
9f07a4a94d72bd3c72c65276d2c2d58403890539)
      krb5: => 1.11.3 (security)     (cherry picked from commit 
889e98f9ea300fbf87149567949e48fd1d4bba1a)
      xen: => 4.1.5 (security)     (cherry picked from commit 
cc08fe1d8ccc4282a8d425c11c0916446e475ac3)
      dbus: => 1.4.26 (security)
      curl: => 7.31.0 (security)     (cherry picked from commit 
77cae0a41d0f6ca52610d0f79a21f8eb94e92385)
      linux: => 3.4.50 (lts)
      linux: => 3.0.83 (lts)
      mongodb: fixed build with boost 1.50+     (cherry picked from commit 
c92092de06c5a357015e6caa2f3b70f47df8f9c2)
      redis: => 2.6.10     (cherry picked from commit 
6dffb336ec18911cddd78931c48cadaa700ecbb5)
      redis: => 2.6.13     (cherry picked from commit 
b7a12df7321d201938e199991226f131b66791b7)
      ruby-1.9: => 1.9.3-p448 (security)     (cherry picked from commit 
52fe5ee71671097146fa882b96b5fbb2b43139a9)
      ruby-1.8: => 1.8.7-p374 (security)     (cherry picked from commit 
d0d3f2e36450829d9c270beb4bc81e7513fc66ea)
      linux: => 3.0.84 (lts)     (cherry picked from commit 
309372a862c7c032fd878439e6b1062eb9b98045)
      linux: => 3.2.48 (lts)     (cherry picked from commit 
b5b135fa8e2f4645068b4e3799afcd3883d0730e)
      linux: => 3.4.51 (lts)     (cherry picked from commit 
430684f8265fbb4e50617bc76367e2844efd481e)
      VERSION: 0.61-20

[0] Generated: 'git shortlog --no-merges stable-0.61-19..stable-0.61-20'

-- 
Dont wait to die to find paradise...
--
Cheerz,
Vlad "Stealth" Glagolev

Attachment: pgpiVC8s3M0ue.pgp
Description: PGP signature