[SECURITY] Fedora 18 Update: python-djblets-0.7.21-1.fc18
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-18911
2013-10-11 22:51:43
--------------------------------------------------------------------------------
Name : python-djblets
Product : Fedora 18
Version : 0.7.21
Release : 1.fc18
URL : http://www.review-board.org
Summary : A collection of useful classes and functions for Django
Description :
A collection of useful classes and functions for Django
--------------------------------------------------------------------------------
Update Information:
Review Board 1.6.19 and 1.7.15 fix a few issues in the API where users could access certain data they should not have been able to access, if using the Local Sites feature, invite-only groups, or private repositories. It also fixes cases with invite-only groups where the group name and list of private review requests would show up on some pages (though the review requests themselves were not accessible).
These issues do not affect most of the installations out there, but we strongly recommend upgrading anyway. There are no known cases of anyone exploiting these bugs, and in fact we discovered these internally while building new tools to test for security vulnerabilities in our codebase.
There are also some other bug fixes, and important changes needed for extensions that provide their own REST APIs.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 13 2013 Patrick Uiterwijk <puiterwijk(a)gmail.com> - 0.7.21-1
- New upstream bugfix release 0.7.21
- http://downloads.reviewboard.org/releases/Djblets/0.7/Djblets-0.7.21.NEWS
- Added a has_list_access_permissions function, which is used to
determine access to a list resource.
* Fri Oct 11 2013 Stephen Gallagher <sgallagh(a)redhat.com> - 0.7.20-1
- New upstream bugfix release 0.7.20
- http://downloads.reviewboard.org/releases/Djblets/0.7/Djblets-0.7.20.NEWS
- Fixed regression with pagination on the datagrid
* Thu Oct 10 2013 Stephen Gallagher <sgallagh(a)redhat.com> - 0.7.19-1
- New upstream security release 0.7.19
- http://downloads.reviewboard.org/releases/Djblets/0.7/Djblets-0.7.19.NEWS
- Resolves: CVE-2013-4409
- Resolves unsanitized eval() vulnerability
* Mon Sep 23 2013 Stephen Gallagher <sgallagh(a)redhat.com> - 0.7.18-1
- New upstream security release 0.7.18
- http://downloads.reviewboard.org/releases/Djblets/0.7/Djblets-0.7.18.NEWS
- Web API resource lists are now more careful about access permissions.
* Thu Aug 15 2013 Stephen Gallagher <sgallagh(a)redhat.com> - 0.7.17-1
- New upstream release 0.7.17
- http://downloads.reviewboard.org/releases/Djblets/0.7/Djblets-0.7.17.NEWS
* Mon Jul 29 2013 Stephen Gallagher <sgallagh(a)redhat.com> - 0.7.16-1
- New upstream release 0.7.16
- This release contains security fixes in the datagrid
- JavaScript:
* autoSizeTextArea now cleans up its hidden proxy elements when destroyed.
* inlineEditor can be told not to focus a textarea by default by setting
'focusOnOpen' to false.
* modalBox can place itself in an element other than <body> by setting the
'container' option to the element.
* modalBox takes a 'boxID' option that, if specified, will set the ID of
the modalBox element.
* funcQueue now takes an optional context parameter for callback functions.
- djblets.datagrid:
* Data pulled from the database and rendered into cells are always escaped
now.
* Columns can now specify an image_class instead of an image_url.
* Added a JavaScript reload() function that can be called on a datagrid
element to trigger a dynamic reload from the server.
- djblets.extensions:
* Extensions can now specify their list of app directories.
* Extensions can now specify the author's URL.
* Improved the look and feel for extension configuration.
* Improved the functionality for extension configuration.
* Improved the list of available extensions.
* Mon Jun 3 2013 Stephen Gallagher <sgallagh(a)redhat.com> - 0.7.15-1
- New upstream release 0.7.15
- djblets.log:
* Added enhanced request logging
- djblets.siteconfig:
* Changing and loading the site_static_url setting will now actually cause
static media files to be loaded from that URL
- JavaScript:
* inlineEditor now emits a "cancel" event when pressing OK without any
modifications. Previously, there was no indication that it had finished.
* inlineEditor's "complete" event now has the initialValue parameter (which
comes after the new value) set correctly. Previously, it was always the
same as the value, making it hard to determine if anything had changed.
* $.fn.html() now works with setting empty strings.
- djblets.gravatars:
* Added get_gravatar_url_for_email
- djblets.webapi:
* The cache of known URI templates for a RootResource now works properly
when the path leading to the RootResource can change
* When serializing an object while using ?expand, any QuerySet will be
converted to a list. This prevents any changes from happening between
serializing and rendering
* Added a "is_webapi_handler" attribute to WebAPIResource
- djblets.extensions:
* Extension classes can now define a 'metadata' variable to override the
package's metadata. This uses standard PyPI metadata fields. Using this,
single Python package can provide several extensions.
* TemplateHooks subclasses can now override a new render_to_string function
to do their own processing and rendering, instead of simply rendering
the provided template_name.
* The template_name parameter to TemplateHook is now optional.
* The Django template loader cache is now reset when syncing extension
settings or enabling/disabling an extension
* Mon Apr 22 2013 Stephen Gallagher <sgallagh(a)redhat.com> - 0.7.12-1
- New upstream release 0.7.12
- djblets.datagrid:
* Massively speed up datagrid rendering
- djblets.extensions:
* Added an install_extension function to ExtensionManager
- djblets.util.fields:
* CounterField now allows incrementing/decrementing by values other than 1
- djblets.util.templatetags:
* The thumbnail and crop_image template tags now work with Django Storage
backends
* Added a save_image_to_storage function in djblets_images that makes it
easy to save image data to Storage backends
- djblets.webapi:
* Resources now consider both Last Modified and ETag headers simultaneously
when determining if a cached payload is still valid. Previously, if the
Last Modified timestamps were the same, the ETag check would fail
* Wed Apr 10 2013 Stephen Gallagher <sgallagh(a)redhat.com> - 0.7.11-2
- Guarantee that Djblets builds against the correct version of Django
* Thu Feb 21 2013 Stephen Gallagher <sgallagh(a)redhat.com> - 0.7.11-1
- New upstream release 0.7.11
- djblets.util.fields:
* CounterField was failing to use the initializers for brand new
instances of a model, defaulting to None instead
- General:
* Require Django 1.4.5 as a minimum
- djblets.extensions:
* "config/" and "db/" links for extensions are now generated
properly when specifying a custom SITE_ROOT
- djblets.log:
* Added an Admin UI setting for changing log levels
- djblets.siteconfig:
* Added new 'list-siteconfig', 'get-siteconfig', and 'set-siteconfig'
management commands for manipulating siteconfig configuration
from the shell
* Thu Feb 7 2013 Stephen Gallagher <sgallagh(a)redhat.com> - 0.7.9-2
- Fix version requirement to protect against django-pipeline 1.3.0
* Mon Jan 28 2013 Stephen Gallagher <sgallagh(a)redhat.com> - 0.7.9-1
- New upstream release 0.7.9
- JavaScript:
* modalBoxes now use z-indexes of 99 and 100 for the box and content,
instead of 11000 and 11001.
- djblets.datagrid:
* Columns data by way of field access can now span field relationships.
- djblets.extensions:
* Fixed a failure when clearing extension info.
- djblets.siteconfig:
* When loading the stored timezone, we're now longer setting
os.environ['TZ'] to that timezone. Instead, we're just activating
that timezone for Django only.
- djblets.webapi:
* Fixed a bug where list resources that had an unknown ID in the URL
could end up throwing an exception instead of returning a 404.
* Thu Dec 20 2012 Stephen Gallagher <sgallagh(a)redhat.com> - 0.7.8-1
- New upstream release 0.7.8
- JavaScript:
* Fixed a crash when enabling/disabling an inlineEditor without an edit
icon.
* Wed Dec 19 2012 Stephen Gallagher <sgallagh(a)redhat.com> - 0.7.7-1
- New upstream release 0.7.7
- djblets.datagrid:
* Fixed a possible XSS exploit in datagrids
* Failures during rendering the datagrid now results in a traceback
- JavaScript:
* The second display of an inlineEditor no longer breaks the size of the
editor
* Thu Dec 13 2012 Stephen Gallagher <sgallagh(a)redhat.com> - 0.7.6-1
- New upstream release 0.7.6
- General:
- * Django 1.4.2 is now required
- * All admin-related templates have been changed to better fit the admin
template structure and styles. This includes siteconfig and logs.
- djblets.extensions:
- * Extension lists and state are now synchronized across
threads/processes/servers
- * Extension subclasses now must capture all variable arguments
(*args, **kwargs) and pass them to the parent constructor
- * URLHook, admin URLs, and API resource URLs are all now added and removed
properly when an extension is enabled or disabled
- djblets.util:
- * Cache keys are now bound to the SITE_ROOT, if one is set, to prevent
leakage across instances
- * Added DynamicURLResolver in djblets.util.urlresolvers
- djblets.util.cache:
- * Added normalize_cache_backend
- djblets.webapi:
- * API handler functions that specify allow_unknown=True in
@webapi_request_fields can now retrieve all extra fields as an
'extra_fields' argument
- * Added unregister_resource_for_model
- djblets.siteconfig:
- * The stored cache_backend setting is now deserialized into
settings.CACHES['backend']
- * Fixed a couple missing imports
- * Siteconfig now handles old-style CACHE_BACKEND values and new-style
CACHES[cachename] dictionaries in the 'cache_backend' setting
- JavaScript:
- * The jQuery dependency has been updated to 1.8.2, and jQuery-UI to 1.8.24
- * inlineEditor's animation speed has increased, and is now customizable
through options.fadeSpeedMS
- * inlineEditor now does a better job of matching the parent container's
bounds
- * inlineEditor no longer activates when simply selecting text
- * Added a $.fn.retinaGravatar function that, on Retina-capable displays,
requests a larger gravatar for the given URL specified in an <img/>\
- * inlineEditor now supports changing an "enabled" option, allowing editors
to start out enabled or disabled, or dynamically change that state
* Wed Oct 3 2012 Stephen Gallagher <sgallagh(a)redhat.com> - 0.7.2-1
- New upstream release 0.7.2
- Drop upstreamed patch to use system feedparser
- General:
- Styled all admin UI templates to add a "title" class to <h1> page
titles. This affects extensions, log viewer, and siteconfig.
- djblets.log:
- Fixed the columns to match the style of other admin UI columns.
- djblets.pipeline:
- Our 'bless' compiler is now compatible with the latest versions
of pipeline
- JavaScript:
- modalBox's positioning is now properly centered
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1016596 - CVE-2013-4410 ReviewBoard: access-control problems with REST API
https://bugzilla.redhat.com/show_bug.cgi?id=1016596
[ 2 ] Bug #1016599 - CVE-2013-4411 ReviewBoard: URL processing allows unauthorized users to view review lists
https://bugzilla.redhat.com/show_bug.cgi?id=1016599
[ 3 ] Bug #1016601 - CVE-2013-4409 python-djblets: unsanitized eval() vulnerability
https://bugzilla.redhat.com/show_bug.cgi?id=1016601
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update python-djblets' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 5 months
[SECURITY] Fedora 18 Update: ReviewBoard-1.7.16-2.fc18
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-18911
2013-10-11 22:51:43
--------------------------------------------------------------------------------
Name : ReviewBoard
Product : Fedora 18
Version : 1.7.16
Release : 2.fc18
URL : http://www.review-board.org
Summary : Web-based code review tool
Description :
Review Board is a powerful web-based code review tool that offers
developers an easy way to handle code reviews. It scales well from small
projects to large companies and offers a variety of tools to take much
of the stress and time out of the code review process.
--------------------------------------------------------------------------------
Update Information:
Review Board 1.6.19 and 1.7.15 fix a few issues in the API where users could access certain data they should not have been able to access, if using the Local Sites feature, invite-only groups, or private repositories. It also fixes cases with invite-only groups where the group name and list of private review requests would show up on some pages (though the review requests themselves were not accessible).
These issues do not affect most of the installations out there, but we strongly recommend upgrading anyway. There are no known cases of anyone exploiting these bugs, and in fact we discovered these internally while building new tools to test for security vulnerabilities in our codebase.
There are also some other bug fixes, and important changes needed for extensions that provide their own REST APIs.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Oct 13 2013 Patrick Uiterwijk <puiterwijk(a)gmail.com> - 1.7.16-2
- Update Djblets version
* Sun Oct 13 2013 Patrick Uiterwijk <puiterwijk(a)redhat.com> - 1.7.15-2
- New upstream bugfix release 1.7.16
- Fixes a breakage when accessing the Review Group Users resource
- Fixes pagination in dashboard and similar pages
* Thu Oct 10 2013 Stephen Gallagher <sgallagh(a)redhat.com> - 1.7.15-1
- New upstream security release 1.7.15
- http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.15/
- Resolves: CVE-2013-4410
- Fixes access-control problems with REST API
- Resolves: CVE-2013-4411
- Fixes URL processing allowing unauthorized users to view review lists
* Mon Sep 23 2013 Stephen Gallagher <sgallagh(a)redhat.com> - 1.7.14-1
- New upstream security release 1.7.14
- http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.14/
- Some API resources were accessible even if their parent resources were not,
due to a missing check. In most cases, this was harmless, but it can affect
those using access control on groups or review requests.
* Thu Aug 15 2013 Stephen Gallagher <sgallagh(a)redhat.com> - 1.7.13-2
- New upstream release 1.7.13
- http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.13/
- Starting with this release, sites will automatically be upgraded if they are
listed in the text file /etc/reviewboard/sites by the path to their site,
one per line.
* Mon Jul 29 2013 Stephen Gallagher <sgallagh(a)redhat.com> - 1.7.12-1
- New upstream release 1.7.12
- http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.12/
- Security Fixes:
* Function names in diff headers are no longer rendered as HTML.
* If a user’s full name contained HTML, the Submitters list would render it
as HTML, without escaping it. This was an XSS vulnerability.
* The default Apache configuration is now more strict with how it serves up
file attachments. This does not apply to existing installations. See
http://support.beanbaginc.com/support/solutions/articles/110173-securing-...
for details.
* Uploaded files are now renamed to include a hash, preventing users from
uploading malicious filenames, and making filenames unguessable.
* Recaptcha support has been updated to use the new URLs provided by
Google.
- New Features:
* Added a X-ReviewRequest-Repository header for e-mails.
- Extension Improvements:
* Extensions can now specify their list of app directories.
* Extensions can now specify the author’s URL.
* Improved the look and feel for extension configuration.
* Improved the functionality for extension configuration.
* Improved the list of available extensions.
- Bug Fixes:
* Fixed the “Show Whitespace Changes” toggle.
* Fixed compatibility with modern versions of django-storages.
* Draft comments on file attachments are no longer shown to all users.
* Fixed issues with console windows appearing when invoking Clear Case
requests on Python 2.7.x and Windows 7.
* Review requests on Local Sites are now guaranteed to have the proper ID.
* Fixed starring review requests on Local Sites.
* Thu Jun 27 2013 Stephen Gallagher <sgallagh(a)redhat.com> - 1.7.11-1
- New upstream release 1.7.11
- http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.11/
- Bug Fixes:
* Fixed compatibility with Python 2.5
* Fixed the drop-down arrow by Support and the account name on older
versions of Internet Explorer
* Mon Jun 24 2013 Stephen Gallagher <sgallagh(a)redhat.com> - 1.7.10-1
- New upstream release 1.7.10
- http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.10/
- Security Updates:
* Fixed an XSS vulnerability where users could trigger script errors under
certain conditions in auto-complete widgets
- Web API Changes:
* Added n ?order-by=<fieldname> query parameter for comment resources,
allowing ordering by fields such as line numbers (for diff comments)
* Added a filename field to screenshot resources, which provides the base
filename (without path) of the screenshot
* Added a review_url field to screenshot resources, which provides the URL
to the screenshot review page
* Added a thumbnail_url field to screenshot comment resources, which
provides the URL to the snippet of the screenshot being commented on
* Added a link_text field to file attachment comment resources, which shows
the text for any link pointing to the file. This may differ depending on
the comment
* Added a review_url field to file attachment comment resources, which
provides the URL to the review page for the file
* Added a thumbnail_html field to file attachment comment resources, which
provides HTML for rendering the thumbnail of the portion of the file
being rendered, if any
- UI Changes:
* Improved the look and feel of the issue summary table. It’s cleaner and
no longer looks odd with long comment text
- Bug Fixes:
* Fixed periodic but harmless JavaScript errors when removing elements with
relative timestamps
* Editing or reordering dashboard columns no longer breaks after the
dashboard reloads
* Relative timestamps in the dashboard no longer break after the dashboard
reloads
* The maximum size of the timezone has increased, allowing for longer
timezone strings
* Mon Jun 3 2013 Stephen Gallagher <sgallagh(a)redhat.com> - 1.7.9-1
- New upstream release 1.7.9
- http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.9/
- API Changes:
* Added new blocks and depends_on fields to the Review Request resource
- Bug Fixes:
* Fixed the max_length of the new HostingServiceAccount.hosting_url field
* Fixed the documentation for the cgit configuration for Git
* Fixed the cgit URL for Fedora Hosted
* Mon Jun 3 2013 Stephen Gallagher <sgallagh(a)redhat.com> - 1.7.8.1-1
- New upstream release 1.7.8.1
- http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.8.1/
- Bug Fixes:
* Fixed a regression with saving repositories that don't use hosting
services
- Misc. Changes:
* Compatibility changes for the upcoming PDF review plugin
- New upstream release 1.7.8
- http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.8/
- New Features:
* Added Depends On and Blocks fields to review requests
* Added an improved support page
* Added the ability to set where Get Support takes users
* Added improved logging for many operations
- Performance Improvements:
* Reduced the upload time for many new diffs
* The templates used for rendering the various pages are now cached after
the first render, speeding up the rendering for any future renders. We've
seen speedups of ~100-120ms for review request pages
- Usability Improvements:
* The review request actions are now larger, making them more visible and
easier to hit, particularly on touch screens
* Clicking Fixed, Drop or Re-open now keeps the page in the same scroll
position
* The dashboard now reloads dynamically, without reloading the entire page
* The comment dialog now tells you when you can't make a comment (due to
being logged out or reviewing something that's part of a draft
- API Changes
* Fixed deleting pending replies to comments
* Fixed some issues returning certain lists of data
- Extensibility Improvements:
* Extensions can now customize their metadata directly in the Extension
class
* TemplateHooks can now render their own content by overriding
render_to_string()
* NavigationBarHook can now take a url_name parameter specifying the URL
name to link to
* Review UIs can now specify the link and link text for any comments on a
review by overriding get_comment_link_url() and get_comment_link_text()
* Custom hosting services can now be registered/unregistered by extensions
by using register_hosting_service() and unregister_hosting_service()
(from reviewboard.hostingsvcs.service)
* Added the ability to more easily write hosting services support that
works for self-installable services
- Bug Fixes:
* Added missing repository validation for Mercurial repositories
* Fixed replying to comments on file attachments that have since been
removed
* Fixed the display of the upload dialogs when viewing a file attachment
* Comments on file attachments in e-mails now link to the correct review UI
handling the file
* Worked around rare issues where a reset of the Open An Issue default for
a user would cause pages to break
- Misc Changes:
* E-mails now show the user’s full name instead of just their first name
* The New Review Request page now mentions RBTools instead of just
post-review
* Mon Apr 22 2013 Stephen Gallagher <sgallagh(a)redhat.com> - 1.7.7.1-1
- New upstream release 1.7.7.1
- http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.7.1/
- Bug Fixes:
* Fixed a problem with generating config files when creating a new site
installations
- New upstream release 1.7.7
- http://www.reviewboard.org/docs/releasenotes/reviewboard/1.7.7/
- New Features:
* The configured SSH key can now be deleted
* Added support for working against a GitHub OAuth application
- Performance Improvements:
* Uploading a diff with a parent diff will no longer attempt to process any
files in the parent diff that aren't in the main diff
* Sped up rendering times for the Dashboard, All Review Requests page, and
the user/groups pages
- Web API Improvements:
* Fixed a breakage with updating comments when the issue_status field
wasn't provided
* Improved caching logic to not claim a cached payload is valid when the
client reports a matching Last Modified timestamp but not a matching
ETag
- Bug Fixes:
* Specifying a port in a SSH URL for a repository will now connect on that
port
* Fixed broken links to file attachments when using Local Sites
* Review request e-mails now show the right ID in the subject for Local
Sites
* Fixed Python path issues when spawning processes
* Fixed a rare breakage when saving repositories
* Fixed the cookie path when using site directories
* When installing a site, database hosts now accept a port in the format of
hostname:port
* Fixed visual glitches with some rounded corners in the UI
* Wed Apr 10 2013 Stephen Gallagher <sgallagh(a)redhat.com> - 1.7.6-4
- Add explicit BuildRequires: python-django14
* Wed Apr 10 2013 Stephen Gallagher <sgallagh(a)redhat.com> - 1.7.6-3
- Change to explicit requirement on python-django14
- Resolves: rhbz#950411 - Change requires to python-django14
* Thu Mar 21 2013 Stephen Gallagher <sgallagh(a)redhat.com> - 1.7.6-2
- Replace references of id2= with id= for cgit
- Use file blobs rather than plaintext representation with Fedora
Hosted cgit repositories
* Thu Feb 21 2013 Stephen Gallagher <sgallagh(a)redhat.com> - 1.7.6-1
- New upstream release 1.7.6
- http://www.reviewboard.org/docs/releasenotes/dev/reviewboard/1.7.6/
- Fedora-specific: removed versioning requirement on paramiko; it's no longer
needed
- Security Updates:
* We now require Django 1.4.5, which fixes a few security vulnerabilities
- New Features:
* Added Perforce ticket-based authentication
* Added a setting for choosing Review Board log levels
- Web API Changes:
* Added API support for querying and manipulating default reviewers
* Repositories deleted through the Web API are now only archived if they
have any associated review requests
- Bug Fixes:
* Fixed fetching files with FedoraHosted
* Fixed some cases where URLs to user pages were incorrect, especially on
subdirectory installs and local sites
* We try harder now to set the PYTHONPATH for subprocesses, which should
fix some issues fetching files over Subversion
* The Administration UI dashboard widgets no longer cache their data too
aggressively
* Fixed showing the error box when entering an invalid reviewer
* Fixed config/ and db/ links for extensions, when in a subdirectory
install
* The Manual Updates page for the media upload directory no longer points
to a non-existant wiki page
* Thu Feb 7 2013 Stephen Gallagher <sgallagh(a)redhat.com> - 1.7.5-1
- New upstream release 1.7.5
- http://www.reviewboard.org/docs/releasenotes/dev/reviewboard/1.7.5/
- New Features:
* Added a nicer, human-readable view of diffs in the FileDiff tables in the
administration UI
* The repository name is now included in review request e-mails
- Compatibility Fixes:
* We now require django-pipeline 1.2.24, which restores our compatibility
with Python 2.5 and fixes some errors when loading pages
* Our list of supported timezones should now be consistent across all
installs, since we now require a specific, modern version of pytz
(Packager's note: this is an upstream change only. In Fedora we have
always relied on the system pytz)
- Bug Fixes:
* The entire thumbnail for file attachments are now clickable, making it
easier to download the file or reach the review page
* Users are no longer locked out of their review requests when assigned to
private groups they don’t have access to
* The Hide whitespace changes toggle was broken on many browsers, causing a
JavaScript error
* Searching for a user in the quick search field and then clicking the user
once again navigates to the user’s page
* The review request counts in the dashboard no longer show “None” for new
users when using Local Sites
* Thu Jan 31 2013 Stephen Gallagher <sgallagh(a)redhat.com> - 1.7.4-1
- New upstream release 1.7.4
- http://www.reviewboard.org/docs/releasenotes/dev/reviewboard/1.7.4/
- Bug Fixes:
* Fixed a JavaScript error in Internet Explorer and Firefox 3.x involving
the console object being undefined
* Fixed the diff viewer’s changed file listings when using Windows file
paths
* Mon Jan 28 2013 Stephen Gallagher <sgallagh(a)redhat.com> - 1.7.3-1
- New upstream release 1.7.3
- http://www.reviewboard.org/docs/releasenotes/dev/reviewboard/1.7.3/
- New Features:
* Add optional support for sending e-mails when closing review requests
- Compatibility Updates:
* The new support for Perforce moved files has changed
RBTools 0.4.3 will now require Review Board 1.7.3 at a minimum.
* Review Board now works with SVN diffs generated in many non-C locales
- Web API Changes:
* Added a scmtools.perforce.moved_files capability to indicate moved file
support for Perforce
- Bug Fixes:
* SMTP servers saved with additional whitespace will now have that
whitespace stripped, in order to prevent lookup failures.
* Fixed a crash when running a search index
* The listed creation time for a review request now reflects when it was
first published, not when the initial draft was first created
* The "Add Comment" button on file attachment thumbnails is no longer shown
if not logged in
* Fixed a bug allowing for publishing blank review requests after filling
in the field and then deleting them
* Fixed an occasional crash when viewing a diff when displaying a function
or class header on the left-hand side but when there was none on the
right-hand side
* Fixed a breakage on some systems when checking the Mercurial version
* The Summary field no longer overlaps text when wrapping
* Fixed the review ID column when using Local Sites
* Using a custom SITE_ROOT with a development server setup no longer breaks
all static media
* Fixed the capitalization of the "VersionOne" bug tracker entry
* Using ClearCase on Windows 7 should no longer cause console windows to
pop up
* Fixed loading blank comments in the diff viewer
* Thu Jan 17 2013 Stephen Gallagher <sgallagh(a)redhat.com> - 1.7.2-1
- New upstream release 1.7.2
- http://www.reviewboard.org/docs/releasenotes/dev/reviewboard/1.7.2/
- New Features:
- Added bug tracker support for VersionOne
- Added support for ssl:-prefixed P4PORTs for Perforce 2012.1+
- Added support for moved file handling for Perforce
- Bug Fixes:
- Fixed an HTML escaping issue when listing filenames in the diff viewer
- Fixed the display of the static media instructions in rb-site
- Attempting to install on Python 2.4 will now display a helpful error before
failing, instead of a cryptic error
- Fixed the display of file attachment names in review request change
descriptions that don’t have captions
- Fixed the default file-based cache path used when creating a new site
- The Review Board Activity widget in the administration UI will now clear
the data shown when the datasets are unselected
- Fixed capitalization of the navigation bar entries to be consistent
- Fixed the link to the PyLucene documentation in the General Settings page
- Fixed default Apache configuration files to be explicit in enabling
FollowSymLinks
- Fixed timezone warnings when running the search index command
* Fri Dec 21 2012 Stephen Gallagher <sgallagh(a)redhat.com> - 1.7.1-2
- Add missing runtime dependencies
* Wed Dec 19 2012 Stephen Gallagher <sgallagh(a)redhat.com> - 1.7.1-1
- New upstream release 1.7.1
- http://www.reviewboard.org/docs/releasenotes/dev/reviewboard/1.7/
- http://www.reviewboard.org/docs/releasenotes/dev/reviewboard/1.7.0.1/
- http://www.reviewboard.org/docs/releasenotes/dev/reviewboard/1.7.1/
* Thu Dec 13 2012 Stephen Gallagher <sgallagh(a)redhat.com> - 1.7-5.rc1
- Update to upstream release candidate 1.7rc1
- http://www.reviewboard.org/docs/releasenotes/dev/reviewboard/1.7-rc-1/
* Wed Oct 3 2012 Stephen Gallagher <sgallagh(a)redhat.com> - 1.7-4.beta2
- Disable building documentation
* Wed Oct 3 2012 Stephen Gallagher <sgallagh(a)redhat.com> - 1.7-3.beta2
- Disable JavaScript minification until python-slimit is available
* Wed Oct 3 2012 Stephen Gallagher <sgallagh(a)redhat.com> - 1.7-2.beta2
- New upstream release 1.7 beta2
- New Features:
- Introduced a new style for Review Board
- Performance Improvements:
- We’ve updated our dependency on jQuery to the latest version. We’ve been
on an old one for quite a while, and there have been many performance
improvements since. The site’s responsiveness should be a little faster
now.
- Bug Fixes:
- Fixed the paths to certain decorational image files
- File attachment comments are no longer missing from the review box
- Fixed problems with issue tracking statuses in the review box
- Fixed wrapping of the text in the change updates
- Admin UI widgets no longer overlap when loading the page
* Mon Aug 6 2012 Stephen Gallagher <sgallagh(a)redhat.com> - 1.7-1.beta1
- New upstream release 1.7 beta1
- http://www.reviewboard.org/docs/releasenotes/dev/reviewboard/1.7-beta-1/
- Compatibility Changes:
- Added a requirement for Django 1.4
- Dropped Python 2.4 support
- New Features:
- Experimental extension support
- New administration UI
- Issue summary table for review requests
- Moved files in a change are better represented in the diff viewer
- Some file attachments are now shown with more detailed previews
- Added a “To Me” column in the dashboard
- Dates and times are now localized to the user’s region
- The review request update bubble now says if the review request was
closed
- E-mails now include the review request ID in the subject header
- Links in the Description and Testing Done text now open in new windows or
tabs
- Required fields on a review request are now marked as required by showing
an asterisk
- Added a “Show changes” link on the change description boxes after
publishing a diff
- Added support for the latest CVS diff file format
- Removed Features:
- The hidden reports feature (accessible at /reports/) has been removed
- Performance Improvements:
- Reduced download time of JavaScript and CSS
- Reduced diff storage and lookups
- Web API Changes:
- Added server capabilities in /api/info/
- Added resources for viewing the original and patched files for a
FileDiff
- Bug Fixes:
- The “Diff Updated” column in the dashboard now actually reflects the last
diff update
- Captions changes for file attachments are now shown on change description
boxes, just like screenshot caption changes
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1016596 - CVE-2013-4410 ReviewBoard: access-control problems with REST API
https://bugzilla.redhat.com/show_bug.cgi?id=1016596
[ 2 ] Bug #1016599 - CVE-2013-4411 ReviewBoard: URL processing allows unauthorized users to view review lists
https://bugzilla.redhat.com/show_bug.cgi?id=1016599
[ 3 ] Bug #1016601 - CVE-2013-4409 python-djblets: unsanitized eval() vulnerability
https://bugzilla.redhat.com/show_bug.cgi?id=1016601
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ReviewBoard' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 5 months
Fedora 19 Update: skeinforge-12.03.14-16.fc19
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-19981
2013-10-25 23:49:36
--------------------------------------------------------------------------------
Name : skeinforge
Product : Fedora 19
Version : 12.03.14
Release : 16.fc19
URL : http://fabmetheus.crsndoo.com/wiki/index.php/Skeinforge
Summary : Converts 3D model into G-Code for RepRap
Description :
Skeinforge is a tool chain composed of Python scripts that converts your
3D model into G-Code instructions for RepRap.
--------------------------------------------------------------------------------
Update Information:
Fix bug in Comb, add features to Cool
--------------------------------------------------------------------------------
ChangeLog:
* Wed Oct 23 2013 Miro Hrončok <mhroncok(a)redhat.com> - 12.03.14-16
- Add patches by Neil Darlow
- Modify launchers a bit
* Sun Aug 25 2013 Miro Hrončok <mhroncok(a)redhat.com> - 12.03.14-15
- Remove the patch to remove hep button
- Added patch to remove Tkinter warning
- Use %{name} instead of the real name
* Sun Aug 4 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 12.03.14-14
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update skeinforge' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 5 months
Fedora 19 Update: lirc-0.9.0-17.fc19
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-19479
2013-10-19 07:32:21
--------------------------------------------------------------------------------
Name : lirc
Product : Fedora 19
Version : 0.9.0
Release : 17.fc19
URL : http://www.lirc.org/
Summary : The Linux Infrared Remote Control package
Description :
LIRC is a package that allows you to decode and send infra-red and
other signals of many (but not all) commonly used remote controls.
Included applications include daemons which decode the received
signals as well as user space applications which allow controlling a
computer with a remote control.
--------------------------------------------------------------------------------
Update Information:
Major update, changelog > 20 lines. Breaks "systemctl start lirc". See README.fedora
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 17 2013 Alec Leamas <leamas.alec(a)nowhere.net> - 0.9.0-17
- Add a udev "Only use lirc" subpackage.
- Revise enabling of lirc protocol.
- Documenting upstream merge request.
- Resurrect contrib/lircs, use systemctl.
- Force creation of /run/lirc after installation.
- Use /lib/tmpfiles.d, not /etc/tmpfiles.d with _tmpfilesdir macro.
* Tue Oct 15 2013 Wolfgang Ulbrich <chat-to-me(a)raveit.de> - 0.9.0-16
- fix build for f18
- remove BR perl, already called in build system
- fix bogus in changelog date
* Thu Oct 10 2013 Alec Leamas <leamas.alec(a)nowhere.net> - 0.9.0-15
- Actually use sysconfig files (881976).
- Modify lirc.service to not fork.
- Add support for iguanaIR driver (#954146).
- Add hardened build flag (955144).
- Use actual systemd macros (850191).
- Clean up some nowadays not used directives.
- Run autoreconf by default (926082).
- Cleanup some obsoleted autotools usage, two new patches.
- Deactivate other decoders on start (923978).
- Filter away docdir dependencies.
- Remove obsolete F8 upgrade Obsoletes: (sic!).
- Fix inconsistent/duplicate /usr/share/lirc in %files.
- Add %doc (notably COPYING) to remotes subpackage.
- Claim /etc/lirc.
- Update to latest upstream (10 patches).
- Use /var and /etc instead of %{_sysconfdir} and %{localstatedir}.
- Removed obsolete code to move config files to /etc/lirc in %post.
- Renamed main systemd service: lirc.service -> lircd.service.
- Added socket activation support.
- Don't claim temporary files in /run/lirc, they are just transient.
- Initiate lircd.conf, lircmd.conf from external template.
- Bumping release, 14 is published.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #881976 - The lirc package installs /etc/sysconfig/lirc but does not seem to use it
https://bugzilla.redhat.com/show_bug.cgi?id=881976
[ 2 ] Bug #955144 - lirc package should be built with PIE flags
https://bugzilla.redhat.com/show_bug.cgi?id=955144
[ 3 ] Bug #926082 - lirc: Does not support aarch64 in f19 and rawhide
https://bugzilla.redhat.com/show_bug.cgi?id=926082
[ 4 ] Bug #954146 - RFE: please add iguanaIR driver support
https://bugzilla.redhat.com/show_bug.cgi?id=954146
[ 5 ] Bug #850191 - Introduce new systemd-rpm macros in lirc spec file
https://bugzilla.redhat.com/show_bug.cgi?id=850191
[ 6 ] Bug #923978 - Starting lirc with the native systemd service does not deactivate other decoders
https://bugzilla.redhat.com/show_bug.cgi?id=923978
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update lirc' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 5 months
Fedora 19 Update: golang-bitbucket-kardianos-osext-0-0.4.hg364fb577de68.fc19
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-19255
2013-10-18 18:05:43
--------------------------------------------------------------------------------
Name : golang-bitbucket-kardianos-osext
Product : Fedora 19
Version : 0
Release : 0.4.hg364fb577de68.fc19
URL : http://bitbucket.org/kardianos/osext
Summary : Extensions to the standard Go OS package
Description :
Extensions to the standard Go OS package
This package provides extensions to the standard Go OS package,
including Executable, which returns an absolute path which can
be used to re-invoke the current program, and ExecutableFolder,
which returns the directory containing the same.
--------------------------------------------------------------------------------
Update Information:
removed double quotes from Provides.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1020121 - remove double quotes from provides
https://bugzilla.redhat.com/show_bug.cgi?id=1020121
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update golang-bitbucket-kardianos-osext' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 5 months
Fedora 19 Update: go-bindata-0-0.4.git79847ab.fc19
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-19494
2013-10-19 07:33:00
--------------------------------------------------------------------------------
Name : go-bindata
Product : Fedora 19
Version : 0
Release : 0.4.git79847ab.fc19
URL : http://github.com/jteeuwen/go-bindata
Summary : A small utility which generates Go code from any file
Description :
A small utility which generates Go code from any file
This tool converts any file into managable Go source code. Useful for
embedding binary data into a go program. The file data is optionally gzip
compressed before being converted to a raw byte slice.
--------------------------------------------------------------------------------
Update Information:
initial upload.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1018542 - Review Request: go-bindata - A small utility which generates Go code from any file
https://bugzilla.redhat.com/show_bug.cgi?id=1018542
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update go-bindata' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 5 months
Fedora 19 Update: felix-scr-generator-1.8.2-1.fc19
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-19575
2013-10-20 23:55:29
--------------------------------------------------------------------------------
Name : felix-scr-generator
Product : Fedora 19
Version : 1.8.2
Release : 1.fc19
URL : http://felix.apache.org/
Summary : Descriptor Generator Implementation
Description :
Provides the implementation to generate Declarative Services and Metatype
Service descriptors from Java 5 Annotations and/or JavaDoc tags.
--------------------------------------------------------------------------------
Update Information:
Initial import (#1002705).
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1002705 - Review Request: felix-scr-generator - Descriptor Generator Implementation
https://bugzilla.redhat.com/show_bug.cgi?id=1002705
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update felix-scr-generator' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 5 months
Fedora 18 Update: postgresql-9.2.5-1.fc18
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-19316
2013-10-18 18:07:55
--------------------------------------------------------------------------------
Name : postgresql
Product : Fedora 18
Version : 9.2.5
Release : 1.fc18
URL : http://www.postgresql.org/
Summary : PostgreSQL client programs
Description :
PostgreSQL is an advanced Object-Relational database management system (DBMS).
The base postgresql package contains the client programs that you'll need to
access a PostgreSQL DBMS server, as well as HTML documentation for the whole
system. These client programs can be located on the same machine as the
PostgreSQL server, or on a remote machine that accesses a PostgreSQL server
over a network connection. The PostgreSQL server can be found in the
postgresql-server sub-package.
--------------------------------------------------------------------------------
Update Information:
update to 9.2.5 minor version per release notes: http://www.postgresql.org/docs/9.2/static/release-9-2-5.html
This update brings several bugfixes and is mostly about pg_upgrade. For more info see the attached bugs.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Oct 17 2013 Jozef Mlich <jmlich(a)redhat.com> - 9.2.5-1
- update to 9.2.5 minor version per release notes:
http://www.postgresql.org/docs/9.2/static/release-9-2-5.html
* Thu Aug 15 2013 Pavel Raiskup <praiskup(a)redhat.com> - 9.2.4-2
- postgresql-setup: don't create whole path to server's data to make sure that
the parent directory has correct permissions (#972425) (pick from fc20)
- backport fix for manual pages (#948933) (pick from fc20)
- fix README.rpm-dist for the bug (#969050) (pick from fc20)
- upgrade: stop old server if perm. problem occur (#896161) (pick from fc20)
* Thu Apr 4 2013 Tom Lane <tgl(a)redhat.com> 9.2.4-1
- Update to PostgreSQL 9.2.4, for various fixes described at
http://www.postgresql.org/docs/9.2/static/release-9-2-4.html
including the fixes for CVE-2013-1899, CVE-2013-1900, CVE-2013-1901
Resolves: #929223, #929255, #929328
- fix build for aarch64
* Tue Mar 19 2013 Karsten Hopp <karsten(a)redhat.com> 9.2.3-2
- add ppc64p7 optimized arch support
* Thu Feb 7 2013 Tom Lane <tgl(a)redhat.com> 9.2.3-1
- Update to PostgreSQL 9.2.3, for various fixes described at
http://www.postgresql.org/docs/9.2/static/release-9-2-3.html
including the fix for CVE-2013-0255
Resolves: #908722
- Make the package build with selinux option disabled
Resolves: #894367
- Include old version of pg_controldata in postgresql-upgrade subpackage
Related: #896161
* Thu Jan 3 2013 Tom Lane <tgl(a)redhat.com> 9.2.2-3
- Prevent creation of TCP socket during pg_upgrade regression test, so that
concurrent RPM builds on the same machine won't fail
Resolves: #891531
- Make sure $PGDATA/pg_log/ gets the right SELinux label in postgresql-setup
Resolves: #891547
* Wed Dec 19 2012 Tom Lane <tgl(a)redhat.com> 9.2.2-2
- Make building of plpython3 dependent on Fedora version, per guidelines
Resolves: #888419
* Thu Dec 6 2012 Tom Lane <tgl(a)redhat.com> 9.2.2-1
- Update to PostgreSQL 9.2.2, for various fixes described at
http://www.postgresql.org/docs/9.2/static/release-9-2-2.html
- Use new systemd install/uninstall trigger macros conditionally,
so that package can still be installed on pre-F18 branches
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #972425 - postgresql-setup initdb does not work if umask=0077 and /var/lib/pgsql is removed
https://bugzilla.redhat.com/show_bug.cgi?id=972425
[ 2 ] Bug #969050 - Misleading documentation, README.rpm-dist
https://bugzilla.redhat.com/show_bug.cgi?id=969050
[ 3 ] Bug #896161 - Upgrading PostgreSQL from 9.1 to 9.2 with pg_upgrade/postgreql-setup fails - invalid status retrieved
https://bugzilla.redhat.com/show_bug.cgi?id=896161
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update postgresql' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 5 months
Fedora 18 Update: collectl-3.6.9-1.fc18
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-19585
2013-10-20 23:55:52
--------------------------------------------------------------------------------
Name : collectl
Product : Fedora 18
Version : 3.6.9
Release : 1.fc18
URL : http://collectl.sourceforge.net
Summary : A utility to collect various Linux performance data
Description :
A utility to collect Linux performance data
--------------------------------------------------------------------------------
Update Information:
- update to upstream version 3.6.9
- update to upstream version 3.6.8
- upstream changelog at http://collectl.sourceforge.net/Releases.html
- update to upstream version 3.6.8
- upstream changelog at http://collectl.sourceforge.net/Releases.html
- update to upstream version 3.6.8
- upstream changelog at http://collectl.sourceforge.net/Releases.html
- update to upstream version 3.6.8
- upstream changelog at http://collectl.sourceforge.net/Releases.html
- update to upstream version 3.6.8
- upstream changelog at http://collectl.sourceforge.net/Releases.html
--------------------------------------------------------------------------------
ChangeLog:
* Sat Oct 19 2013 Dan Horák <dan[at]danny.cz> - 3.6.9-1
- upgrade to upstream version 3.6.9
* Fri Oct 18 2013 Dan Horák <dan[at]danny.cz> - 3.6.8-1
- upgrade to upstream version 3.6.8
* Fri Mar 22 2013 Dan Horák <dan[at]danny.cz> - 3.6.7-1
- upgrade to upstream version 3.6.7
* Wed Feb 13 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 3.6.5-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1020247 - collectl-3.6.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1020247
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update collectl' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 5 months
Fedora 19 Update: ebook-tools-0.2.2-1.fc19
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-19469
2013-10-19 07:32:02
--------------------------------------------------------------------------------
Name : ebook-tools
Product : Fedora 19
Version : 0.2.2
Release : 1.fc19
URL : http://sourceforge.net/projects/ebook-tools/
Summary : Tools for accessing and converting various ebook file formats
Description :
Tools for accessing and converting various ebook file formats.
--------------------------------------------------------------------------------
Update Information:
New upstream release. Fixes a bug causing a segmentation fault when opening invalid/corrupt epub documents.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Oct 18 2013 John5342 <john5342 at, fedoraproject.org> 0.2.2-1
- New upstream release (fixes rhbz:1014443)
- Drop rmhardcoded (-DLIB_SUFFIX now supported directly)
* Wed Aug 21 2013 Remi Collet <rcollet(a)redhat.com> - 0.2.1-5
- rebuild for new libzip
* Sat Aug 3 2013 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0.2.1-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1014443 - [abrt] nepomuk-core-4.11.1-1.fc19: __strlen_sse2: Process /usr/bin/nepomukindexer was killed by signal 11 (SIGSEGV)
https://bugzilla.redhat.com/show_bug.cgi?id=1014443
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ebook-tools' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
10 years, 5 months