Security bugs are reported here via bugzilla

[Andrew Stitt <afrayedknot AT thefrayedknot.armory.com>]

Forwarding this to sm-security as well.

Please update as gpg verification was not working properly.
For the paranoid, verify the tarball with the signature by hand.

----- Forwarded message from Andrew Stitt 
<afrayedknot AT thefrayedknot.armory.com> -----

X-Spam-Level: 
X-Spam-Status: No, score=-1.1 required=5.0 tests=AWL autolearn=ham 
        version=3.1.0
Delivered-To: afrayedknot AT thefrayedknot.armory.com
Delivered-To: sm-discuss AT lists.ibiblio.org
Date: Thu, 17 Nov 2005 07:41:11 -0800
From: Andrew Stitt <afrayedknot AT thefrayedknot.armory.com>
To: sm-announce AT lists.ibiblio.org
User-Agent: Mutt/1.4.2i
Cc: sm-users AT lists.ibiblio.org, sm-discuss AT lists.ibiblio.org
Subject: [SM-Discuss] Sorcery 1.13.2 Released!

This is a bugfix release, it fixes an issue with leapforward urls, a
cosmetic error in scribbler, a bug in the code that looks for the best
default answer for depends providers, and a problem with gpg verification.

Here is the ChangeLog:

2005-11-16 Andrew Stitt <astitt AT sourcemage.org>
        * libgpg: fix coding error that causes gpg failures to be ignored

2005-11-10 Andrew Stitt <astitt AT sourcemage.org>
        * libdepends: fix issue with picking the best default answer
          in dependency queries, bug 10073
        * scribbler: fix bug 10056, missing backquote on a message,
          patch from Eric Sandall.

2005-11-04 Andrew Stitt <astitt AT sourcemage.org>
        * libsummon: dont use leapforward url for tree downloads, bug 10062





_______________________________________________
SM-Discuss mailing list
SM-Discuss AT lists.ibiblio.org
http://lists.ibiblio.org/mailman/listinfo/sm-discuss


----- End forwarded message -----

Attachment: pgpuYnctMqXN_.pgp
Description: PGP signature