[SECURITY] Fedora 20 Update: boinc-client-7.2.33-2.git1994cc8.fc20

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-23734
2013-12-21 01:16:06
--------------------------------------------------------------------------------

Name        : boinc-client
Product     : Fedora 20
Version     : 7.2.33
Release     : 2.git1994cc8.fc20
URL         : http://boinc.berkeley.edu/
Summary     : The BOINC client core
Description :
The Berkeley Open Infrastructure for Network Computing (BOINC) is an open-
source software platform which supports distributed computing, primarily in
the form of "volunteer" computing and "desktop Grid" computing.  It is well
suited for problems which are often described as "trivially parallel".  BOINC
is the underlying software used by projects such as SETI at home, Einstein at Home,
ClimatePrediciton.net, the World Community Grid, and many other distributed
computing projects.

This package installs the BOINC client software, which will allow your
computer to participate in one or more BOINC projects, using your spare
computer time to search for cures for diseases, model protein folding, study
global warming, discover sources of gravitational waves, and many other types
of scientific and mathematical research.

--------------------------------------------------------------------------------
Update Information:

*Updates Boinc to 7.2.33.
*Remove the "Can't connect to boinc-client" notify at startup.
*Fix "GPU not detected" problem.
*Fix security vulnerability #957811

**Please note for "GPU not detected" bug**
If you still have this problem after updating, you need to run boinc with your user, not with boinc user.
To do that, add your user to boinc group:
'useradd -G boinc <your_username>'

Disable boinc daemon:
'systemctl disable boinc-client.service'
'systemctl stop boinc-client.service'

Change directory and files permissions:
'chmod -R g+rw /var/lib/boinc'
'chmod g+rw /var/log/boinc*'

Logout and login again.
Now run boinc using this command (under your user):
'/usr/bin/boinc_gpu'
If you want to autostart boinc after login you need to configure your DE to do that. See instruction specific to your DE on how to do that.

--------------------------------------------------------------------------------
ChangeLog:

* Tue Dec 17 2013 Mattia Verga <mattia.verga at tiscali.it> - 7.2.33-2.git1994cc8
- Change default attribute of /var/lib/boinc to give write permission to boinc group
- Fix systemd requires as described in guidelines
* Tue Dec 17 2013 Mattia Verga <mattia.verga at tiscali.it> - 7.2.33-1.git1994cc8
- Update to 7.2.33
- Removed no more needed X11 patch
- Removed boinc manager notification patch see bug #990693
- Add patch to fix Italian locale dir
- Enabled parallel make
- Removed boincmgr wrap
- Fix checkin_notes
- Added boinc_gpu wrapper to fix GPU detection (see instruction on how to use it)
- Build now requires mariadb-devel instead of mysql-devel as actual default for Fedora
- Fix trim script for new directory and not remove html dir for build error
- Remove scripts for update from sysV to systemd
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #957771 - CVE-2013-2298 boinc-client: Multiple stack overflow flaws when parsing XML files
        https://bugzilla.redhat.com/show_bug.cgi?id=957771
  [ 2 ] Bug #957795 - boinc-client: Format string flaw by writing account file
        https://bugzilla.redhat.com/show_bug.cgi?id=957795
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update boinc-client' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------