rawhide report: 20040819 changes

[Build System]

New package krb5-auth-dialog
	Kerberos 5 authentication dialog


 
Updated Packages:

GConf2-2.7.91-1
---------------
* Wed Aug 18 2004 Mark McLoughlin <markmc(a)redhat.com&gt; 2.7.91-1

- Update to 2.7.91

Pyrex-0.9.2.1-2
---------------
* Wed Aug 18 2004 John (J5) Palmieri <johnp(a)redhat.com&gt; - 0:0.9.2.1-2

- Added Steve Grubb's spec file patch (RH Bug #130200)

anaconda-10.0.2-0.20040818214815
--------------------------------
* Wed Aug 18 2004 Anaconda team <bugzilla(a)redhat.com&gt;

- built new version from CVS

* Thu Jun 03 2004 Jeremy Katz <katzj(a)redhat.com&gt;

- require system-logos and anaconda-help, obsolete anaconda-images

* Fri Apr 30 2004 Jeremy Katz <katzj(a)redhat.com&gt;

- Update description, remove prereq on stuff that was only needed 
  for reconfig mode


binutils-2.15.91.0.2-8
----------------------
* Mon Aug 16 2004 Jakub Jelinek <jakub(a)redhat.com&gt; 2.15.91.0.2-8

- fix linker segfaults on input objects with SHF_LINK_ORDER with
  incorrect sh_link (H.J.Lu, Nick Clifton, #130198, BZ #290)

* Mon Aug 16 2004 Jakub Jelinek <jakub(a)redhat.com&gt; 2.15.91.0.2-7

- resolve all undefined ppc64 .* syms to the function bodies through
  .opd, not just those used in brach instructions (Alan Modra)

compat-gcc-8-3.3.4.2
--------------------
* Wed Aug 18 2004 Jakub Jelinek  <jakub(a)redhat.com&gt; 8-3.3.4.2

- update from gcc-3_3-branch
  - PRs bootstrap/15194, c++/11946, c/15549, c++/16175, libgfortran/15930,
	libstdc++/11352, middle-end/16790, rtl-optimization/14700,
	rtl-optimization/14782, target/12602, target/13250, target/13926,
	target/15186, target/15202, target/15647, target/16459, target/16494,
	target/16559
- avoid making silly copies in convert_move (Jeff Law)
- make sure all files in libgcj*.jar have identical timestamps
  accross all the architectures (#128431)
- one more gcj -C fix to make sure .class files are identical between
  32-bit and 64-bit targets (#128431)
- put jumptables for .gnu.linkonce.t.* sections into .gnu.linkonce.r.*
  sections instead of .rodata (#129574, PR c++/16276)
- rtti linkonce fix (H.J.Lu, PR c++/16276)
- avoid building multilib libjava's - they shouldn't be needed for packaging
  and otherwise we would need all of Gtk+ installed as both 32-bit and
  64-bit development environment
- don't use SSE prefetch instructions if -mcpu= is a CPU with
  SSE prefetch, but -march= is not i686+ and -msse{2,3} is not given
  either (#127375)
- make even multilib libstdc++.so's versioned
- on ppc{,64} fix crtsavres.o, so that there are no misaligned instructions

dbus-0.22-4
-----------
* Wed Aug 18 2004 John (J5) Palmieri <johnp(a)redhat.com&gt;

- Added Steve Grubb's spec file patch (RH Bug #130201)

dia-0.94-2
----------
* Wed Aug 18 2004 Dan Williams <dcbw(a)redhat.com&gt;

- Update to 0.94-pre6
- Fix RH #110738

* Thu Jul 22 2004 Dan Williams <dcbw(a)redhat.com&gt;

- Update to 0.94-pre1
- Add BuildRequires: libpng-devel (RH #125287)

* Fri Jun 25 2004 Dan Williams <dcbw(a)redhat.com&gt;

- Update to 0.93


docbook-utils-0.6.14-4
----------------------
* Thu Aug 19 2004 Tim Waugh <twaugh(a)redhat.com&gt; 0.6.14-4

- Apply CVS patch to protect spaces in jw (bug #130329).

* Tue Jun 15 2004 Elliot Lee <sopwith(a)redhat.com&gt;

- rebuilt

eog-2.7.1-1
-----------
* Thu Aug 19 2004 Christopher Aillon <caillon(a)redhat.com&gt; 2.7.1-1

- Update to 2.7.1

esound-0.2.35-1
---------------
* Wed Aug 18 2004 John (J5) Palmieri <johnp(a)redhat.com&gt;

- update to 0.2.35

file-roller-2.7.4-1
-------------------
* Wed Aug 18 2004 Christopher Aillon <caillon(a)redhat.com&gt; 2.7.4-0

- Update to 2.7.4

firstboot-1.3.18-1
------------------
* Thu Jul 15 2004 Adrian Likins <alikins(a)redhat.com&gt; - 1.3.17-1

* allow screens to catch a signal when they are shown

gedit-2.7.91-1
--------------
* Wed Aug 18 2004 Dan Williams <dcbw(a)redhat.com&gt; 1:2.7.91-1

- Update to 2.7.91

ghostscript-7.07-31
-------------------
* Wed Aug 18 2004 Tim Waugh <twaugh(a)redhat.com&gt; 7.07-31

- Only ship gsx in the gtk subpackage.

* Fri Aug 06 2004 Tim Waugh <twaugh(a)redhat.com&gt;

- Run /sbin/ldconfig in %post/%postun.
- Stricter requirements for the main package in the subpackages.

gnome-applets-2.7.2-1
---------------------
* Wed Aug 18 2004 Mark McLoughlin <markmc(a)redhat.com&gt; 2.7.2-1

- Update to 2.7.2

gnome-desktop-2.7.91-1
----------------------
* Wed Aug 18 2004 Mark McLoughlin <markmc(a)redhat.com&gt; 2.7.91-1

- Update to 2.7.91

gnome-mag-0.11.4-1
------------------
* Wed Aug 18 2004 Colin Walters <walters(a)redhat.com&gt; 0.11.4-1

- Update to 0.11.4

gnome-netstatus-2.7.91-1
------------------------
* Wed Aug 18 2004 Mark McLoughlin <markmc(a)redhat.com&gt; 2.7.91-1

- Update to 2.7.91

gnome-panel-2.7.91-1
--------------------
* Wed Aug 18 2004 Mark McLoughlin <markmc(a)redhat.com&gt; 2.7.91-1

- Update to 2.7.91

gnome-session-2.7.4-3
---------------------
* Wed Aug 18 2004 Ray Strode <rstrode(a)redhat.com&gt; 2.7.4-3

- Change folder name from "autostart" to more aptly named
  "session-upgrades" from suggestion by Colin Walters.
- put non-upstream gconf key in rh_extensions

* Wed Aug 18 2004 Ray Strode <rstrode(a)redhat.com&gt; 2.7.4-2

- Provide drop-a-desktop-file method of adding programs
  to the user's session.

gnome-utils-2.7.90-1
--------------------
* Thu Aug 19 2004 Christopher Aillon <caillon(a)redhat.com&gt; 1.2.7.90-1

- Update to gnome-utils 2.7.90
- Update to zenity 2.7.90
- Update to gcalctool 5.5.0
- Call update-desktop-database for gfloppy

gnomemeeting-1.0.2-8
--------------------
* Wed Aug 18 2004 Daniel Reed <djr(a)redhat.com&gt; 1.0.2-8

- remove ExcludeArch

gnopernicus-0.9.9-1
-------------------
* Wed Aug 18 2004 Colin Walters <walters(a)redhat.com&gt; 0.9.9-1

- Update to 0.9.9
- Remove compile patch
- Handle move of brlmon to /usr/libexec

gok-0.11.6-1
------------
* Mon Aug 16 2004 Colin Walters <walters(a)redhat.com&gt; 0.11.6-1

- Update to 0.11.6

gpdf-2.7.90-2
-------------
* Wed Aug 18 2004 Dan Williams <dcbw(a)redhat.com&gt; 2.7.90-2

- Fix crashes on mailto: links (RH #127803)

* Wed Aug 18 2004 Dan Williams <dcbw(a)redhat.com&gt; 2.7.90-1

- Update to 2.7.90

gthumb-2.4.1-1
--------------
* Wed Aug 11 2004 Christopher Aillon <caillon(a)redhat.com&gt; 2.4.1-1

- Update to 2.4.1

gtkhtml2-2.6.2-1
----------------
* Wed Aug 18 2004 David Malcolm <dmalcolm(a)redhat.com&gt; - 2.6.2-1

- updated from 2.6.0 to 2.6.2

hal-0.2.97-2
------------
* Wed Aug 18 2004 John (J5) Palmieri <johnp(a)redhat.com&gt; 0.2.97-2

- Add stopgap patch to remove suid from mount flags (RH Bug #130290)

hal-cups-utils-0.4.0-1
----------------------
* Wed Aug 18 2004 John (J5) Palmieri <johnp(a)redhat.com&gt;

- Updated to 0.4.0

initscripts-7.62-1
------------------
* Thu Aug 19 2004 Bill Nottingham <notting(a)redhat.com&gt; 7.62-1

- fix up resolv.conf munging (#129921)
- use rngd if available
- run start_udev if necessary (#120605)
- readonly root updates (#129893, <markmc(a)redhat.com>)
- ifup-wireless: quote key (#129930)
- remove rawdevices (#130048)
- handle binfmt_misc in rc.sysinit for the case where it's built in (#129954)
- remove mkkerneldoth
- don't remove linguas in lang.* (part of #9733)
- fix nfs unmounting (#129765)
- fix URL (#129433)

kernel-2.6.8-1.524
------------------
* Fri Aug 13 2004 Arjan van de Ven <arjanv(a)redhat.com&gt;

- 2.6.8-rc4-bk3
- split execshield up some more

* Fri Aug 13 2004 Dave Jones <davej(a)redhat.com&gt;

- Update SCSI whitelist again with some more card readers.

kernel-utils-2.4-12.1.142
-------------------------
* Wed Aug 18 2004 Bill Nottingham <notting(a)redhat.com&gt;

- move rngd to /sbin
- patch rngd to use /dev/hw_crypto by default, not /dev/hwcrypto

libIDL-0.8.4-1
--------------
* Wed Aug 18 2004 Mark McLoughlin <markmc(a)redhat.com&gt; 0.8.4-1

- Update to 0.8.4

libgnomecups-0.1.10-1
---------------------
* Wed Aug 18 2004 Colin Walters <walters(a)redhat.com&gt; 0.1.10-1

- Update to 0.1.10
- Remove upstreamed patch libgnomecups-0.1.9-error.patch
- Remove upstreamed patch libgnomecups-0.1.9-get-attributes-from-host.patch
- Remove upstreamed patch libgnomecups-0.1.9-notify-remove.patch
- Remove upstreamed patch libgnomecups-0.1.9-attributes.patch

libgsf-1.10.0-1
---------------
* Wed Aug 18 2004 Caolan McNamara <caolanm(a)redhat.com&gt; 1.10.0-1

- upgrade to 1.10.0

libwnck-2.7.91-1
----------------
* Wed Aug 18 2004 Mark McLoughlin <markmc(a)redhat.com&gt; 2.7.91-1

- Update to 2.7.91

lvm2-2.00.20-2
--------------
* Tue Aug 17 2004 Jeremy Katz <katzj(a)redhat.com&gt; - 2.00.20-2

- add patch for iSeries viodasd support
- add patch to check file type using stat(2) if d_type == DT_UNKNOWN (#129674)

ncftp-3.1.8-1
-------------
* Mon Aug 09 2004 Karsten Hopp <karsten(a)redhat.de&gt; 3.1.8-1 

- update to version 3.1.8
- new ipv6 patch, but currently disabled due to problems with active-ftp
  (#127553)

net-snmp-5.1.2-1
----------------
* Wed Aug 18 2004 Phil Knirsch <pknirsch(a)redhat.com&gt; 5.1.2-1

- Update to 5.1.2
- Removed net-snmp-5.0.1-initializer patch, included upstream

* Tue Jun 15 2004 Phil Knirsch <pknirsch(a)redhat.com&gt;

- Fixed small bug in snmptrapd initscript (#126000).

openh323-1.13.4-7
-----------------
* Wed Aug 18 2004 Daniel Reed <djr(a)redhat.com&gt; 1.13.4-7

- remove ExcludeArch

planner-0.12-2
--------------
* Wed Aug 18 2004 Warren Togami <wtogami(a)redhat.com&gt; 0.12-2

- BuildReq libtool, gettext, gtk-doc, libgsf-devel, pygtk2-devel

pwlib-1.6.5-11
--------------
* Wed Aug 18 2004 Daniel Reed <djr(a)redhat.com&gt; 1.6.5-11

- remove ExcludeArch

qt-3.3.3-3
----------
* Wed Aug 18 2004 Than Ngo <than(a)redhat.com&gt; 1:3.3.3-3

- add patch to fix dlopen issue (#126422)
- add image handling fix

redhat-artwork-0.97-4
---------------------
* Thu Aug 19 2004 Alexander Larsson <alexl(a)redhat.com&gt; - 0.97-4

- Drop perl dependency in post

* Thu Aug 19 2004 Alexander Larsson <alexl(a)redhat.com&gt; - 0.97-3

- Add required prereqs for post (#125278)

rpmdb-fedora-3-0.20040819
-------------------------

selinux-policy-strict-1.15.16-1
-------------------------------
* Wed Aug 18 2004 Dan Walsh <dwalsh(a)redhat.com&gt; 1.15.16-1

- Update from NSA, fixes for udev

selinux-policy-targeted-1.15.16-1
---------------------------------
* Wed Aug 18 2004 Dan Walsh <dwalsh(a)redhat.com&gt; 1.15.16-1

- Update from NSA, fixes for udev

tcsh-6.13-1
-----------
* Tue Aug 17 2004 Miloslav Trmac <mitr(a)redhat.com&gt; - 6.13-1

- Update to tcsh-6.13.00
- Fix charset headers in some of the translations
- Convert translated messages to LC_CTYPE locale
- Fix automatic dspmbyte setting

vixie-cron-4.1-10
-----------------
* Wed Aug 18 2004 Jason Vas Dias <jvdias(a)redhat.com&gt;  - 4.1.10

- Fixed bug 130102: Restored default behaviour if neither 
- /etc/cron.deny nor /etc/cron.allow exist - 'touch /etc/cron.deny'
- in %post

w3m-el-1.4.3-1
--------------
* Wed Aug 18 2004 Akira TAGOH <tagoh(a)redhat.com&gt; 1.4.3-1

- New upstream release.

webalizer-2.01_10-25
--------------------
* Wed Aug 18 2004 Joe Orton <jorton(a)redhat.com&gt; 2.0_10-25

- rebuild

* Fri Jun 18 2004 Alan Cox <alan(a)redhat.com&gt;

- Added IPv6 patch from PLD c/o Robert Scheck
- Added tests to trap bogus logfiles with negative times/dates
- Fixed leap seconds

xemacs-sumo-20040818-1
----------------------
* Wed Aug 18 2004 Jens Petersen <petersen(a)redhat.com&gt; 20040818-1

- update to 2004-08-18 sumos
  - no longer need to replace xlib and xwem packages
  - cvs.el-history-log.patch is now upstream

xorg-x11-6.7.99.902-1
---------------------
* Wed Aug 18 2004 Mike A. Harris <mharris(a)redhat.com&gt; 6.7.99.902-1

- Update main tarball to CVS export of CVS tag XORG-6_7_99_902 snapshot,
  a.k.a. 6.8.0 RC2
- Removed patches that are now included in upstream sources:
  - xorg-x11-6.8.0-glx-install-dri-modules-in-correct-place.patch

* Mon Aug 16 2004 Mike A. Harris <mharris(a)redhat.com&gt; 6.7.99.901-2

- Set "BuildXprint NO" "BuildXprintClients NO" "BuildXprintLib
YES" so we get
  *only* the Xprint libraries for backward compatibility with existing
  dynamically linked applications.
- Added new "xorg-x11-deprecated-libs", and moved the Xprint runtimes to it
  for backward compatibility for now, until we remove libXp entirely at some
  point in the future.
- Replaced remaining spec file package description references of "XFree86" to
  something X11 implementation neutral.
- Exclude the two new Xprint libraries libXprintAppUtil.a, libXprintUtil.a
  as we do not ship anything that links to them, so do not need them for
  back compat.

* Mon Aug 16 2004 Mike A. Harris <mharris(a)redhat.com&gt; 6.7.99.901-1

- Update main tarball to CVS export of CVS tag XORG-6_7_99_901 snapshot,
  a.k.a. 6.8.0 RC1
- Removed patches that are now included in upstream sources:
  - xorg-x11-6.7.0-mga-storm-sync-fix.patch
  - xorg-x11-6.8.0-ppc64-XorgServer-not-XF86Server-fix.patch
- Update xorg-x11-6.8.0-redhat-custom-startup.patch due to Imakefile change
- Disabled xorg-6.8.0-redhat-libGL-exec-shield-fixes.patch for now, as Xorg
  changes have broken it again and I do not want to port it forward 10 times.
  Once 6.8.0 is finalized, we will port it forward to Mesa CVS and get it
  into the Mesa CVS head *first*, then we will backport it to 6.8.0.  This
  way we do not have to maintain and port this patch once a week.
- Removed unwanted xprint file deletion from specfile as "BuildXprint NO"
  actually works now.
- Added Xevie libraries to file lists.

[Rui Miguel Silva Seabra]

On Thu, 2004-08-19 at 07:40 -0400, Build System wrote:
>  hal-0.2.97-2
>  ------------
>  * Wed Aug 18 2004 John (J5) Palmieri <johnp(a)redhat.com&gt; 0.2.97-2
>  
>  - Add stopgap patch to remove suid from mount flags (RH Bug #130290) 
You are not authorized to access bug #130290.

Bad karma #1: seems like a bad bug
Bad karma #2: WTF? Are you hiding bugs?

I know one can look at the source code, but this feels... weird.

Rui

-- 
+ No matter how much you do, you never do enough -- unknown
+ Whatever you do will be insignificant,
| but it is very important that you do it -- Gandhi
+ So let's do it...?

Please AVOID sending me WORD, EXCEL or POWERPOINT attachments.
See http://www.fsf.org/philosophy/no-word-attachments.html

[Joe Orton]

On Thu, Aug 19, 2004 at 02:31:21PM +0100, Rui Miguel Seabra wrote:
>  On Thu, 2004-08-19 at 07:40 -0400, Build System wrote:
>  > hal-0.2.97-2
>  > ------------
>  > * Wed Aug 18 2004 John (J5) Palmieri <johnp(a)redhat.com&gt; 0.2.97-2
>  > 
>  > - Add stopgap patch to remove suid from mount flags (RH Bug #130290)
>  
>  You are not authorized to access bug #130290.
>  
>  Bad karma #1: seems like a bad bug
>  Bad karma #2: WTF? Are you hiding bugs? 
The bug was filed with the "Security Sensitive" flag set by the
reporter, so is kept confidential by default - I've asked whether it's
OK to clear this since the fix is public now anyway.

Regards,

joe

[Rui Miguel Silva Seabra]

On Thu, 2004-08-19 at 14:37 +0100, Joe Orton wrote:
>  On Thu, Aug 19, 2004 at 02:31:21PM +0100, Rui Miguel Seabra wrote:
>  > On Thu, 2004-08-19 at 07:40 -0400, Build System wrote:
>  > > hal-0.2.97-2
>  > > ------------
>  > > * Wed Aug 18 2004 John (J5) Palmieri <johnp(a)redhat.com&gt; 0.2.97-2
>  > > 
>  > > - Add stopgap patch to remove suid from mount flags (RH Bug #130290)
>  > 
>  > You are not authorized to access bug #130290.
>  > 
>  > Bad karma #1: seems like a bad bug
>  > Bad karma #2: WTF? Are you hiding bugs?
>  
>  The bug was filed with the "Security Sensitive" flag set by the
>  reporter, so is kept confidential by default - I've asked whether it's
>  OK to clear this since the fix is public now anyway. 
Oh, I see. But this policy is not so good, IMHO.

I hope it is cleared :)

OT: personally I'm in favour of full disclosure, and I won't reply to
anyone trying to make a thread on this, so don't bother to criticize!

Thanks, Rui

-- 
+ No matter how much you do, you never do enough -- unknown
+ Whatever you do will be insignificant,
| but it is very important that you do it -- Gandhi
+ So let's do it...?

Please AVOID sending me WORD, EXCEL or POWERPOINT attachments.
See http://www.fsf.org/philosophy/no-word-attachments.html

[Jeremy Hogan]

On Thu, 2004-08-19 at 09:44, Rui Miguel Seabra wrote:
>  OT: personally I'm in favour of full disclosure, and I won't
> reply to
>  anyone trying to make a thread on this, so don't bother to criticize! 
Man. Now I *have* to reply. But not to criticize. The reason this is, is
to encourage coordinated release across repositories and distros.

Each vendor and many package maintainers do have a security list where
this is fully disclosed (many are cross community/company.) What you
don't want to do is have one launch a fix and have others caught with
their pants down when a script kiddie gets hold of it.  

Full disclosure without full exposure. 

Heh. Me And Jesse Jackson.

--jeremy

[Alan Cox]

On Thu, Aug 19, 2004 at 02:31:21PM +0100, Rui Miguel Seabra wrote:
>  You are not authorized to access bug #130290.
>  
>  Bad karma #1: seems like a bad bug
>  Bad karma #2: WTF? Are you hiding bugs?
>  
>  I know one can look at the source code, but this feels... weird. 
Security tagged bugs always start private.

[Steve G]

> Bad karma #1: seems like a bad bug
> Bad karma #2: WTF? Are you hiding bugs? 
And no mention of applying patch in #130202 so don't expect it to compile. You
may get link errors on gobject.

-Steve Grubb

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com

[David Zeuthen]

On Thu, 2004-08-19 at 07:24 -0700, Steve G wrote:
>  >Bad karma #1: seems like a bad bug
>  >Bad karma #2: WTF? Are you hiding bugs?
>  
>  And no mention of applying patch in #130202 so don't expect it to compile. You
>  may get link errors on gobject.
>   
That patch was for upstream, not the package, will be applied today.

Thanks,
David

[Steve G]

> That patch was for upstream, not the package, will be applied today.
TIA for applying it David. But when a package doesn't compile, even if the patch
needs to go upstream, please apply it. :)

-Steve Grubb


		
_______________________________
Do you Yahoo!?
Win 1 of 4,000 free domain names from Yahoo! Enter now.
http://promotions.yahoo.com/goldrush