Public SourceMage Discussion List

[Vlad Glagolev <stealth AT sourcemage.org>]

Since our long-waiting 0.61 is delayed for a bit, here's yet another
security update of 0.60 stable branch.

The tarballs have been signed and uploaded to our server and will be
propogating out to the mirrors within six hours.

To download the grimoire manually, get
http://codex.sourcemage.org/stable.tar.bz2 or specifically
http://codex.sourcemage.org/stable-0.60.tar.bz2 .

GPG signatures are available at
http://codex.sourcemage.org/stable.tar.bz2.asc or
http://codex.sourcemage.org/stable-0.60.tar.bz2.asc .

Following updates were integrated[0]:

Arjan Bouter (3):
      transcode: added missing dependencies, made ffmpeg and libmpeg2 
optional     and completed xvid options     (cherry picked from commit 
de122ae47a71da895ba9ec05c0d88973ab1c10fc)
      xvid: added INSTALL for a symlink to fix building transcode with xvid   
  support     (cherry picked from commit 
16fce786f1a8873648ced9c11a5633aa0ea66106)
      openldap: removed sluprd and ldbm as they are removed by upstream.     
added comments to various backends and added some missing ones     added 
overlay support, made cleartext and crypt passwords optional.

Florian Franzmann (1):
      chat-im/pidgin: added -lm to LIBS     (cherry picked from commit 
7605e2e8bed0db98e2289dbcfe9a7e0b18d9607f)

Julien ROZO (2):
      pidgin: added a patch to fix compilation issue with glib2 2.31.x     
(cherry picked from commit 66dd669b1c040178538fe10d825b3f08fea7dad0)
      pidgin: updated version to 2.10.2, SECURITY_PATCH=13     removed patch 
for glib 2.31, integrated upstream     (cherry picked from commit 
4d2ea7a8b2ccbd15b42cef0bbc4711391e0aed6b)

Justin Boffemmyer (1):
      chat-im/pidgin: non-optional depends on intltool

Ladislav Hagara (10):
      freetype2 2.4.8, SECURITY_PATCH=6, CVE-2011-3439     (cherry picked 
from commit 325c47035035ec8646202a44f71c6680aeea4951)
      freetype2 2.4.9, SECURITY_PATCH=7     (cherry picked from commit 
0e99a5fbd9bee8bb5b3b8c50328b90b96e7d494b)
      libgdata 0.8.0     (cherry picked from commit 
b72c8bed3e074e4f350c5e677a1c35528499825e)
      libgdata 0.10.1     (cherry picked from commit 
2767a9d5961302744804b97d0d0ed0ae9d175374)
      libgdata 0.10.2, SECURITY_PATCH=1     (cherry picked from commit 
4bddb2d839002d3adb319e49900d553cf92c0849)
      openssl 0.9.8u, 1.0.0h, SECURITY_PATCH=16     (cherry picked from 
commit 9a00e108a21855743e20612d30a62b7fb2a3a99a)
      openldap 2.4.28     (cherry picked from commit 
6fbfe2b1806790905552e038a3813f6045627d8b)
      openldap 2.4.30     (cherry picked from commit 
215fcd898f3a136117c49cabd478b821d4453b0b)
      wireshark 1.6.6, SECURITY_PATCH=35     (cherry picked from commit 
d048baa6978f32587453915ed37cdbc46183c3e8)
      libzip 0.10     (cherry picked from commit 
e1ab319715de4e38fe58f4e3074ad843fea70db9)

Sukneet Basuta (1):
      pidgin: => 2.10.1     SECURITY_PATCH=12, CVE-2011-3594 & CVE-2011-4601  
   (cherry picked from commit fef48c12bf5b0a58550d6a3f639355196756cbd1)

Tommy Boatman (1):
      quagga: added "y" to zebra to force unattended cast     (cherry picked 
from commit d6b97ef6cd59fc0808f5c1128aefa64cf6f95caa)

Treeve Jelbert (2):
      freetype2: => 2.4.7     (cherry picked from commit 
4b240a10e03ea6b259c4a6d5a7179dd3833dbca6)
      libzip: => 0.10.1   security fixes     (cherry picked from commit 
2e62f8bbb06ad0d033b3fc913e2d9e15a360cb73)

Vlad Glagolev (10):
      ipset: killed typo     (cherry picked from commit 
19b3c183c426253c361f59f4ac4ba8ec5af02009)
      openldap: => 2.4.30 (stable) [security]     (cherry picked from commit 
c0ae79bd2189acd1d203f16b3ec134af825f85bb)
      libxslt: security update     (cherry picked from commit 
ab75567f521ef45b4c8a4808c70a83ad41de44f2)
      nginx: => 1.1.10 (devel)     (cherry picked from commit 
3a35a5622329c1576846913e63d6fa98595a6367)
      nginx: => 1.0.11 (stable), 1.1.12 (devel)     (cherry picked from 
commit bc55e2a1cc5ac577badd6c590eba8075d06b339d)
      nginx: => 1.0.12 (stable), 1.1.14 (devel)     (cherry picked from 
commit a695cead64f00fa8d6caebdf549b2634ee2a9892)
      nginx: => 1.0.14 (stable), 1.1.17 (devel) [security]     (cherry picked 
from commit 2c842ffc22bf2a26e0d4a98d910366db41659f12)
      quagga: => 0.99.20.1 (security)     (cherry picked from commit 
ea3530050e10ec9df5c0b885e6351f3dbc6adafb)
      quagga: fixed hashsum; for some strange reason DETAILS wasn't copied 
from /var/lib/sorcery/codex/test.git     (cherry picked from commit 
76fce3dbc094630e4424cff2d7a1f5baaac05b56)
      VERSION: 0.60-9

[0] Generated: 'git shortlog --no-merges stable-0.60-8..stable-0.60-9'

-- 
Dont wait to die to find paradise...
--
Cheerz,
Vlad "Stealth" Glagolev

Attachment: pgp9f50JvbNN9.pgp
Description: PGP signature