The following Fedora EPEL 5 Security updates need testing:
https://admin.fedoraproject.org/updates/libsndfile-1.0.17-4.el5
https://admin.fedoraproject.org/updates/wordpress-2.8.6-3.el5
https://admin.fedoraproject.org/updates/wordpress-mu-2.9.2-2.el5
https://admin.fedoraproject.org/updates/perl-Convert-UUlib-1.34-1.el5
https://admin.fedoraproject.org/updates/Django-1.1.3-1.el5
https://admin.fedoraproject.org/updates/perl-CGI-Simple-1.112-2.el5
The following builds have been pushed to Fedora EPEL 5 updates-testing
ReviewBoard-1.5.2-20.el5
perl-Net-STOMP-Client-0.9.5-1.el5
perl-NetPacket-1.0.1-1.el5
python-djblets-0.6.7-12.el5
snoopy-1.7.9-1.el5
Details about builds:
================================================================================
ReviewBoard-1.5.2-20.el5 (FEDORA-EPEL-2011-0054)
Web-based code review tool
--------------------------------------------------------------------------------
Update Information:
- python-djblets
- djblets.datagrid:
- The datagrids now use a RequestContext when rendering cells, allowing
- the columns or templates to access data from context processors.
- ReviewBoard
- Important Updates
- Users using existing WSGI configurations must update their configuration
- for authentication with the new API to work.
- New Features
- Added SSH key management for SSH-backed repositories
- Authentication failures when setting up repositories are now more useful
- Added our own SSH replacement for standardizing on behavior and working
- around OpenSSH limitations
- The Repository page in the administration UI now talks about API Tokens
- and links to the GitHub Account page for Git repositories, making it
- easier to set up a GitHub repository
- API Fixes
- Fixed logging in on requests using HTTP Basic Auth
- Fixed wrong responses when performing a request requiring authentication
- as an anonymous user
- Fixed anonymous access to the API when anonymous access is enabled
- Fixed replies to screenshot comments in the new web API
- Fixed removing screenshots from review requests
- Changed the request when doing a HTTP PUT on a review request draft
- Fixed search queries in /api/users/
- Bug Fixes
- Fixed a problem with SSH host checking on Git repositories
- Fixed support for private GitHub repositories
- The API Token for GitHub repositories are now extracted properly in the
- Repository page in the administration UI
- Fixed extra whitespace highlight toggling
- Images on the dashboard are now cached, reducing the number of requests
- made to the server
- Disabled auto-complete and default values for the repository
- username/password fields
- Support for Amazon S3 now works again with new versions of Django
- Storages
- Authentication with the new API now works with new Apache+wsgi setups
- Fixed some rewrite rule for fastcgi
- Fix 404 errors with newly generated lighttpd.conf files
- Fixed errrors when passing a non-integer value for ?show_submitted= on
- the dashboard or other review request listings
- Fixed a crash when attempting to log SSH-related problems
- The contributed svn-hook-postcommit-review script wasn't parsing the
- base path correctly
- Release Notes
-
http://www.reviewboard.org/docs/releasenotes/dev/reviewboard/1.5.2/
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 10 2011 Stephen Gallagher <sgallagh(a)redhat.com> - 1.5.2-20
- Add message to upgrade script to alert users that manual edits may be
- required if using mod_wsgi
* Mon Jan 10 2011 Stephen Gallagher <sgallagh(a)redhat.com> - 1.5.2-19
- Important Updates
- Users using existing WSGI configurations must update their configuration
- for authentication with the new API to work.
- New Features
- Added SSH key management for SSH-backed repositories
- Authentication failures when setting up repositories are now more useful
- Added our own SSH replacement for standardizing on behavior and working
- around OpenSSH limitations
- The Repository page in the administration UI now talks about API Tokens
- and links to the GitHub Account page for Git repositories, making it
- easier to set up a GitHub repository
- API Fixes
- Fixed logging in on requests using HTTP Basic Auth
- Fixed wrong responses when performing a request requiring authentication
- as an anonymous user
- Fixed anonymous access to the API when anonymous access is enabled
- Fixed replies to screenshot comments in the new web API
- Fixed removing screenshots from review requests
- Changed the request when doing a HTTP PUT on a review request draft
- Fixed search queries in /api/users/
- Bug Fixes
- Fixed a problem with SSH host checking on Git repositories
- Fixed support for private GitHub repositories
- The API Token for GitHub repositories are now extracted properly in the
- Repository page in the administration UI
- Fixed extra whitespace highlight toggling
- Images on the dashboard are now cached, reducing the number of requests
- made to the server
- Disabled auto-complete and default values for the repository
- username/password fields
- Support for Amazon S3 now works again with new versions of Django
- Storages
- Authentication with the new API now works with new Apache+wsgi setups
- Fixed some rewrite rule for fastcgi
- Fix 404 errors with newly generated lighttpd.conf files
- Fixed errrors when passing a non-integer value for ?show_submitted= on
- the dashboard or other review request listings
- Fixed a crash when attempting to log SSH-related problems
- The contributed svn-hook-postcommit-review script wasn't parsing the
- base path correctly
- Release Notes
-
http://www.reviewboard.org/docs/releasenotes/dev/reviewboard/1.5.2/
--------------------------------------------------------------------------------
================================================================================
perl-Net-STOMP-Client-0.9.5-1.el5 (FEDORA-EPEL-2011-0052)
STOMP object oriented client module
--------------------------------------------------------------------------------
Update Information:
This update to 0.9.5 from 0.9.3 includes the following enhancements:
* Added Net::STOMP::Client::Tutorial
* Added STOMP 1.1 support (experimental).
* Made login and passcode optional in the CONNECT frame.
* Added more tests, some optionally using a broker connection.
* Improved the documentation.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 10 2011 Steve Traylen <steve.traylen(a)cern.ch> - 0.9.5-1
- New upstream 0.9.5
* Tue Dec 21 2010 Marcela Maslanova <mmaslano(a)redhat.com> - 0.9.2-3
- 661697 rebuild for fixing problems with vendorach/lib
* Tue Aug 24 2010 Adam Tkac <atkac redhat com> - 0.9.2-2
- rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #667318 - Upgrade to new upstream version
https://bugzilla.redhat.com/show_bug.cgi?id=667318
--------------------------------------------------------------------------------
================================================================================
perl-NetPacket-1.0.1-1.el5 (FEDORA-EPEL-2011-0051)
Assemble/disassemble network packets at the protocol level
--------------------------------------------------------------------------------
Update Information:
New Package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #573848 - Review Request: perl-NetPacket - Modules to assemble/disassemble
network packets at the protocol level
https://bugzilla.redhat.com/show_bug.cgi?id=573848
--------------------------------------------------------------------------------
================================================================================
python-djblets-0.6.7-12.el5 (FEDORA-EPEL-2011-0054)
A collection of useful classes and functions for Django
--------------------------------------------------------------------------------
Update Information:
- python-djblets
- djblets.datagrid:
- The datagrids now use a RequestContext when rendering cells, allowing
- the columns or templates to access data from context processors.
- ReviewBoard
- Important Updates
- Users using existing WSGI configurations must update their configuration
- for authentication with the new API to work.
- New Features
- Added SSH key management for SSH-backed repositories
- Authentication failures when setting up repositories are now more useful
- Added our own SSH replacement for standardizing on behavior and working
- around OpenSSH limitations
- The Repository page in the administration UI now talks about API Tokens
- and links to the GitHub Account page for Git repositories, making it
- easier to set up a GitHub repository
- API Fixes
- Fixed logging in on requests using HTTP Basic Auth
- Fixed wrong responses when performing a request requiring authentication
- as an anonymous user
- Fixed anonymous access to the API when anonymous access is enabled
- Fixed replies to screenshot comments in the new web API
- Fixed removing screenshots from review requests
- Changed the request when doing a HTTP PUT on a review request draft
- Fixed search queries in /api/users/
- Bug Fixes
- Fixed a problem with SSH host checking on Git repositories
- Fixed support for private GitHub repositories
- The API Token for GitHub repositories are now extracted properly in the
- Repository page in the administration UI
- Fixed extra whitespace highlight toggling
- Images on the dashboard are now cached, reducing the number of requests
- made to the server
- Disabled auto-complete and default values for the repository
- username/password fields
- Support for Amazon S3 now works again with new versions of Django
- Storages
- Authentication with the new API now works with new Apache+wsgi setups
- Fixed some rewrite rule for fastcgi
- Fix 404 errors with newly generated lighttpd.conf files
- Fixed errrors when passing a non-integer value for ?show_submitted= on
- the dashboard or other review request listings
- Fixed a crash when attempting to log SSH-related problems
- The contributed svn-hook-postcommit-review script wasn't parsing the
- base path correctly
- Release Notes
-
http://www.reviewboard.org/docs/releasenotes/dev/reviewboard/1.5.2/
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 10 2011 Stephen Gallagher <sgallagh(a)redhat.com> - 0.6.7-12
- New upstream release 0.6.7
- djblets.datagrid:
- The datagrids now use a RequestContext when rendering cells, allowing
- the columns or templates to access data from context processors.
- djblets.siteconfig:
- The form body of a siteconfig settings page can now be replaced.
- It's now stored in the "form_content" block.
- SiteConfigurationManager no longer crashes if trying to clear
- the cache for a SiteConfiguration that no longer exists.
- djblets.testing:
- The Selenium test suite has been updated to support Django 1.2's
- multi-database support. Previously, fixtures would fail to load
- if using the new settings.DATABASES variable.
- djblets.util:
- The @augment_method_from decorator wasn't properly calling up the
- decorator chain, preventing some decorators from being invoked. This
- has been fixed to ensure all decorators are called.
-
- djblets.webapi:
- Due to the @augment_method_from breakage listed above, webapi
- decorators could fail to add their own checks, causing various
- problems in field checking and authentication. This is now fixed.
- The Permission Denied (HTTP 403) errors being returned weren't
- sufficient for clients that weren't authenticated. Now, an
- unauthenticated client will instead see Not Logged In (HTTP 401)
- errors.
-
- The HTTP_AUTHORIZATION header is now checked on all requests. When
- provided by the client, it will be used for authentication. This
- means that clients can now force a login from their very first
- request on, instead of requiring a HTTP 401 Unauthorized being
- sent out first.
-
- This will also prevent multiple logins across different requests
- from the same client, when the HTTP_AUTHORIZATION header is passed
- on each request. This makes requests less heavy-weight and prevents
- the last_login timestamp on the User from being updated on each
- request.
-
- As part of this change, any webapps manually using the
- @webapi_login_required decorator without the new resource code
- will no longer support HTTP Basic auth. However, this was never
- a supported feature anyway, and was more there by accident.
-
- The 'api_format' parameter in requests is now treated specially
- and doesn't trigger any invalid attribute errors during field
- validation.
-
- WebAPIResource.delete now uses get_object instead of fetching
- the object directly, which simplifies the function and guarantees
- that the correct object is used (especially when a resource
- overrides get_object).
-
- Redirects now preserve any special parameters ("callback",
- "_method", "expand", and "api_format") passed to the
request.
- This works around problems in HTTP implementations that don't
- allow the caller to know that redirects occurred (such as major
- browsers), which would lead to this information being stripped and
- the wrong results being returned.
-
- The "expand" parameter for expanding links in payloads is now
- supported for POST and PUT requests.
--------------------------------------------------------------------------------
================================================================================
snoopy-1.7.9-1.el5 (FEDORA-EPEL-2011-0053)
A preload library to send shell commands to syslog
--------------------------------------------------------------------------------
Update Information:
Snoopy 1.7.9 fixes a bug introduced in 1.7.6 where the previous logging of the executable
filename was dropped. The filename is again logged now.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jan 10 2011 Steve Traylen <steve.traylen(a)cern.ch> - 1.7.9-1
- New upstream 1.7.9
--------------------------------------------------------------------------------