Public SourceMage Discussion List

[Vlad Glagolev <stealth AT sourcemage.org>]

Stable grimoire version 0.61-6 has been released!

This is yet another security update of 0.61 stable branch.

The tarballs have been signed and uploaded to our server and will be
propogating out to the mirrors within six hours.

To download the grimoire manually, get
http://codex.sourcemage.org/stable.tar.bz2 or specifically
http://codex.sourcemage.org/stable-0.61.tar.bz2 .

GPG signatures are available at
http://codex.sourcemage.org/stable.tar.bz2.asc or
http://codex.sourcemage.org/stable-0.61.tar.bz2.asc .

Following updates were integrated[0]:

Florian Franzmann (1):
      shell-term-fm/rxvt-unicode: perform check_self if perl is cast     
(cherry picked from commit 126bd6bc75c446a8fd1f7448ede727861309e5b8)

Ismael Luceno (3):
      firefox: Avoid buggy GCC 4.6 AVX code generation     (cherry picked 
from commit 416645109a3858772005fbdae6c7bd8ec5f9f817)
      seahorse: depends on gcr     (cherry picked from commit 
863db5ec4dc0570a7e7b7147c5ecc440a4b51e01)
      pidgin: explicitly link against libX11

Ladislav Hagara (12):
      php 5.3.16, SECURITY_PATCH=19     (cherry picked from commit 
8448e37bc858aa8b56592dffdd5960508679928c)
      linux 3.5.3     (cherry picked from commit 
9cf4cdf3d42bf1fccd8a88a67ab68da4327f916d)
      firefox 15.0, SECURITY_PATCH=52     (cherry picked from commit 
8ea7dbac4c254a3225674a44b2508c3b9cd73341)
      seamonkey 2.12, SECURITY_PATCH=45     (cherry picked from commit 
2184f35a31d2a80511cb254979fdaec16b804a3b)
      linux 3.5.4     (cherry picked from commit 
19b5be54834f534d3377d73054fe21833bd9548c)
      firefox 15.0.1, SECURITY_PATCH=53     (cherry picked from commit 
9fda08c06852eb17f8e3062dce548b08fbda47ac)
      webkitgtk 1.8.3, SECURITY_PATCH=7     (cherry picked from commit 
fd6f63468a11dbaf6a9367a0893c1be52c569cd4)
      webkitgtk3 1.8.3, SECURITY_PATCH=3     (cherry picked from commit 
a506982c5145eea467ce0dfa45b56d053586d42c)
      xfce4-settings needs garcon
      linux 3.6     (cherry picked from commit 
e736cc1882acd810bcca5b27d442815c3a37786d)
      wireshark 1.8.3, SECURITY_PATCH=39     (cherry picked from commit 
4ef53de40badadf9c9ee5191559b9c15f4248e84)
      php 5.3.17     (cherry picked from commit 
09f23e0216e1517aded7b365989131538e1ffd6d)

Remko van der Vossen (3):
      rxvt: depend on specific libs instead of xorg-libs     (cherry picked 
from commit 18a64c0afba33ca803d3b69bd6c08aa3fdb4feda)
      xdm: make xdm install config files to etc     (cherry picked from 
commit 86ecceba2f86250736686c866af11a33f2115eb1)
      rxvt: fix depends chaining     (cherry picked from commit 
db4ef5799aa78609869eb7ed14a3a3ec77157443)

Sukneet Basuta (2):
      lua: if x86_64, force fPIC CFLAG     (cherry picked from commit 
46e6e242329849ccdc741bb309bb1154951df9e1)
      lua: fix x86_64 check in BUILD     (cherry picked from commit 
0955d0d4ab4b8a9129d3c9c6f2ba7dbcd92fc13c)

Thomas Orgis (1):
      wpa_supplicant: fix qt4/gui switch     (cherry picked from commit 
db3fe9e22529e8a2bd237d263d581c6b481cda74)

Treeve Jelbert (4):
      libmpc: => 1.0     (cherry picked from commit 
9f99e86f03a20089dfe81f9fd6142eb502a46286)
      libmpc: => 1.0.1, fixes CVE-2012-3386     (cherry picked from commit 
b6db18fdec1cfbfdf7af5be93f61be9d92b10009)
      patch-2.7 - fixes CVE-2010-4651     (cherry picked from commit 
e67ebad36c7af058ad972a1b451c8ffdbb9d8ebd)
      tiff-4.0.3 - security - fixes CVE-2012-3401     (cherry picked from 
commit ef0b213bdc1e95b14d89ecc7ba3f5d422012f72b)

Vlad Glagolev (40):
      openntpd: actually regenerate configure script after patching     
(cherry picked from commit 30911dc91efde2393849543e42d1f0ee6132bcab)
      postgresql: => 9.1.5 (security)     (cherry picked from commit 
5897ecc86fa8ef7dfd9dceca60ac88e19b75f750)
      xvid: actually install the symlink     (cherry picked from commit 
2d85143b7c842631e96a78a89345401a6f68bbbe)
      fping: => 3.2     (cherry picked from commit 
82f0ee6c3584b44bab5f78fd333ec0f3dcbf85e6)
      php: updated backports+security patches to 20120808 for legacy (5.2) 
branch     (cherry picked from commit 
14cc18f76fc193f694e28df0034069016dc70fb8)
      django: => 1.4     (cherry picked from commit 
d6416abbb520e4b8b0eedcaf56459936a7df6537)
      django: => 1.4.1 (security)     (cherry picked from commit 
4faf596efeb6e56ba0e64fc683293aa7af74d2c8)
      net-snmp: prevent linking with itself (old libs) on update     (cherry 
picked from commit 24e084ffb446980a90a2f47205c518b17d6f3989)
      evince: added runtime depends on gsettings-desktop-schemas     (cherry 
picked from commit 36b6526bf622d670f1b3c95bc0b6882865fcd77f)
      php: updated backports+security patches to 20120826 for legacy (5.2) 
branch     (cherry picked from commit 
d3a94899626a3557924c5a87395ed20db34d05a9)
      linux: => 3.0.42 (lts), 3.2.28 (lts), 3.4.10 (lts)     (cherry picked 
from commit 6ee2514488e8475d734a8bb2f84f888f741cf2c7)
      lua: => 5.2.1     (cherry picked from commit 
259d54a1d69b83fc2ef9eef8bd496d6dd56a1785)
      lua: dynamically link liblua.so with libdl.so     (cherry picked from 
commit 744bee0d4a4fe3e851361c535b3d7b0543c6853b)
      fwknop: => 2.0.3 (security)     (cherry picked from commit 
6dd0f31d87554572ca3be6d23dd288f48058f825)
      fwknop: fixed a bug for command type access message (introduced in 
2.0.1)     (cherry picked from commit 
0a6efb16f308760828dd47c0059799c68ce979be)
      masqmail: corrected default config installation     (cherry picked from 
commit 47320c197ce9c7c2ab7c5a29b6c22bc6e438c428)
      tor: => 0.2.2.39 (security)     (cherry picked from commit 
5ee4dcacd5dd6abeac05e4d5e543871fc1e9aedd)
      freeradius: => 2.2.0 (security)     (cherry picked from commit 
4b327fd8a5066fa1194b6586c8e373a1934bee84)
      dhcp: => 4.2.4-P2 (security)     (cherry picked from commit 
fefd0e45389c51b579c12120473ddc893ecbe879)
      bind-tools: => 9.9.1-P3 (security)     (cherry picked from commit 
9b9b0e97fbf6d23f6b1768585c1c8a4efac2ed4c)
      bind: => 9.8.3-P3 (security)     (cherry picked from commit 
34ec181237d971e20f56af48f915f81b54e81e30)
      optipng: => 0.7.2     (cherry picked from commit 
3ea7478470b005146c58a739d1c9c0bc9a6843b2)
      optipng: => 0.7.3 (security)     (cherry picked from commit 
29ff4e5a32dd351d05871c96f0483503ec02b5c1)
      sqlite: => 3.7.12     (cherry picked from commit 
f10464ff6bea09cd90dd439841b5c23b4be466ef)
      sqlite: => 3.7.12.1     (cherry picked from commit 
ab9c9ff83b227852053fa7c8a6050377656675d6)
      seamonkey: => 2.12.1     (cherry picked from commit 
ac84f6b387d4eeed576515f3cf505af305eb2229)
      xorg-server: => 1.8.2 (NOTE: goes only for master branch)     (cherry 
picked from commit 495a69e47c940308fad78cd0242bfe0d3cf43237)
      xen: fixed XSA-19 (CVE-2012-4411)     (cherry picked from commit 
6b2823eb0386456ba6e7bbfa12ef9a9aaa1b6481)
      apache22: => 2.2.23 (security)     (cherry picked from commit 
104e71705f4fe162ef5ff89264ea40063cde07d8)
      exim: fixed urls, dropped outdated & broken     (cherry picked from 
commit 0ecbdb63ee5a24f2e71e8a89eb1626e479507752)
      tiff: added libtiff.so.4 symlink for skype compat and corrected GL 
optional dependency     (cherry picked from commit 
4592d5d422d3fb0ee9a4689d63b696a484c08f19)
      postgresql: => 9.1.6
      linux: => 3.5.5 (lts)     (cherry picked from commit 
3584f89d79a7b0340e3e91df1707aa412a2eff8e)
      linux: => 3.4.12 (lts)     (cherry picked from commit 
700bd966265a3c3d36713b93ae16a8488c5a135f)
      linux: => 3.2.30 (lts)     (cherry picked from commit 
b48f3c4689d6c6caf3202ae4cfd56ec732ebd978)
      linux: => 3.0.44 (lts)     (cherry picked from commit 
a51ad14bc905d25ca0c73d1ca7bdba6ad3cdb707)
      libxslt: => 1.1.27 (security)     (cherry picked from commit 
4980d9f710b5406fd80ea15ecb9a5ecf6bb4cc23)
      php: updated backports+security patches to 20120924 (legacy branch)     
(cherry picked from commit 658fed6e4b62800b50a279d7fe3cd3609191873f)
      php: fixed build with ext. pcre >=8.30 (legacy)     (cherry picked from 
commit 1f1e4fc840baf6da8e23d104a5b01487bcfb2f8a)
      VERSION: 0.61-6

[0] Generated: 'git shortlog --no-merges stable-0.61-5..stable-0.61-6'

-- 
Dont wait to die to find paradise...
--
Cheerz,
Vlad "Stealth" Glagolev

Attachment: pgpxkuSDyI_7R.pgp
Description: PGP signature