mingw August 2013

mingw@lists.fedoraproject.org

12 participants
82 discussions

[mingw-glib2] Update to 2.37.5
by Erik van Pienbroek 01 Aug '13

01 Aug '13

commit 910b6f445ce81c278ab2cbc091c527d13a68059b Author: Erik van Pienbroek <epienbro(a)fedoraproject.org> Date: Thu Aug 1 20:22:40 2013 +0200 Update to 2.37.5 mingw-glib2.spec | 5 ++++- sources | 2 +- 2 files changed, 5 insertions(+), 2 deletions(-) --- diff --git a/mingw-glib2.spec b/mingw-glib2.spec index eea49ec..9db5cdf 100644 --- a/mingw-glib2.spec +++ b/mingw-glib2.spec @@ -1,7 +1,7 @@ %?mingw_package_header Name: mingw-glib2 -Version: 2.37.4 +Version: 2.37.5 Release: 1%{?dist} Summary: MinGW Windows GLib2 library @@ -282,6 +282,9 @@ find $RPM_BUILD_ROOT -name "*.la" -delete %changelog +* Thu Aug 1 2013 Erik van Pienbroek <epienbro(a)fedoraproject.org> - 2.37.5-1 +- Update to 2.37.5 + * Wed Jul 10 2013 Erik van Pienbroek <epienbro(a)fedoraproject.org> - 2.37.4-1 - Update to 2.37.4 diff --git a/sources b/sources index effe0bb..9870583 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -614f3b63ea1f012c5ed370bf3e101872 glib-2.37.4.tar.xz +ae110277607867cd980aa57a7f56ca96 glib-2.37.5.tar.xz

1 0

File glib-2.37.5.tar.xz uploaded to lookaside cache by epienbro
by Erik van Pienbroek 01 Aug '13

01 Aug '13

A file has been added to the lookaside cache for mingw-glib2: ae110277607867cd980aa57a7f56ca96 glib-2.37.5.tar.xz

1 0

[Bug 870455] cmake FindQt4 cannot find MinGW qconfig.pri
by Red Hat Bugzilla 01 Aug '13

01 Aug '13

https://bugzilla.redhat.com/show_bug.cgi?id=870455 --- Comment #10 from Fedora End Of Life <endoflife(a)fedoraproject.org> --- Fedora 17 changed to end-of-life (EOL) status on 2013-07-30. Fedora 17 is no longer maintained, which means that it will not receive any further security or bug fix updates. As a result we are closing this bug. If you can reproduce this bug against a currently maintained version of Fedora please feel free to reopen this bug against that version. Thank you for reporting this bug and we are sorry it could not be fixed. -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=tCfIJusy6Y&a=cc_unsubscribe

1 0

[Bug 870455] cmake FindQt4 cannot find MinGW qconfig.pri
by Red Hat Bugzilla 01 Aug '13

01 Aug '13

https://bugzilla.redhat.com/show_bug.cgi?id=870455 Fedora End Of Life <endoflife(a)fedoraproject.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |CLOSED Resolution|--- |WONTFIX Last Closed| |2013-08-01 14:05:05 -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=A4MQD1hK2R&a=cc_unsubscribe

1 0

[Bug 822312] -fstack-protector-all results in dynamic dependency on libssp-0.dll
by Red Hat Bugzilla 01 Aug '13

01 Aug '13

https://bugzilla.redhat.com/show_bug.cgi?id=822312 --- Comment #8 from Fedora End Of Life <endoflife(a)fedoraproject.org> --- Fedora 17 changed to end-of-life (EOL) status on 2013-07-30. Fedora 17 is no longer maintained, which means that it will not receive any further security or bug fix updates. As a result we are closing this bug. If you can reproduce this bug against a currently maintained version of Fedora please feel free to reopen this bug against that version. Thank you for reporting this bug and we are sorry it could not be fixed. -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=omIp1CVkih&a=cc_unsubscribe

1 0

[Bug 822312] -fstack-protector-all results in dynamic dependency on libssp-0.dll
by Red Hat Bugzilla 01 Aug '13

01 Aug '13

https://bugzilla.redhat.com/show_bug.cgi?id=822312 Fedora End Of Life <endoflife(a)fedoraproject.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |CLOSED Resolution|--- |WONTFIX Last Closed| |2013-08-01 13:03:21 -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=XkHv9cxA58&a=cc_unsubscribe

1 0

[Bug 858915] New: CVE-2011-3102 libxml: An off-by-one out-of-bounds write by XPointer part evaluation [fedora-all]
by Red Hat Bugzilla 01 Aug '13

01 Aug '13

https://bugzilla.redhat.com/show_bug.cgi?id=858915 Bug ID: 858915 Keywords: Security, SecurityTracking Blocks: 822109 (CVE-2011-3102) QA Contact: extras-qa(a)fedoraproject.org Severity: low Version: 17 Priority: low CC: drizt(a)land.ru, erik-fedora(a)vanpienbroek.nl, fedora-mingw(a)lists.fedoraproject.org, lfarkas(a)lfarkas.org, rjones(a)redhat.com, veillard(a)redhat.com Assignee: rjones(a)redhat.com Summary: CVE-2011-3102 libxml: An off-by-one out-of-bounds write by XPointer part evaluation [fedora-all] Regression: --- Story Points: --- Classification: Fedora OS: Linux Reporter: huzaifas(a)redhat.com Type: --- Documentation: --- Hardware: All Mount Type: --- Status: NEW Component: mingw32-libxml2 Product: Fedora This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected Fedora versions. For comments that are specific to the vulnerability please use bugs filed against "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When creating a Bodhi update request, please include this bug ID and the bug IDs of this bug's parent bugs filed against the "Security Response" product (the top-level CVE bugs). Please mention the CVE IDs being fixed in the RPM changelog when available. Bodhi update submission link: https://admin.fedoraproject.org/updates/new/?type_=security&bugs=822109 Please note: this issue affects multiple supported versions of Fedora. Only one tracking bug has been filed; please ensure that it is only closed when all affected versions are fixed. [bug automatically created by: add-tracking-bugs] -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 835863] CVE-2012-2807 libxml2 (64-bit): Multiple integer overflows, leading to DoS or possibly other unspecified impact
by Red Hat Bugzilla 01 Aug '13

01 Aug '13

https://bugzilla.redhat.com/show_bug.cgi?id=835863 Bug 835863 depends on bug 858915, which changed state. Bug 858915 Summary: CVE-2011-3102 CVE-2012-2807 mingw32-libxml2 various flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=858915 What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |WONTFIX -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=ra1bnufgml&a=cc_unsubscribe

1 0

[Bug 989847] Review Request: mingw-plibc - MinGW package for plibc
by Red Hat Bugzilla 01 Aug '13

01 Aug '13

https://bugzilla.redhat.com/show_bug.cgi?id=989847 Erik van Pienbroek <erik-fedora(a)vanpienbroek.nl> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |erik-fedora(a)vanpienbroek.nl --- Comment #2 from Erik van Pienbroek <erik-fedora(a)vanpienbroek.nl> --- I'm afraid Kevin's observation is correct. The printf.c in plibc does contain traces of dietlibc code. This can also be seen in the comments at the beginning of http://plibc.svn.sourceforge.net/viewvc/plibc/trunk/plibc/src/printf.c?revi… which contain this comment: /* Stolen from Felix von Leitners "diet libc" 0.28 */ I didn't check the scanf.c in plibc but I guess the same also applies there. This looks like a licensing violation by plibc as it contains pieces of code from dietlibc which is GPLv2 while the plibc library itself is LGPLv2+. Before we can allow this package in Fedora the offending code has to be removed upstream. -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=7U2kocHOQA&a=cc_unsubscribe

1 0

[Bug 882064] New: CVE-2012-5134 libxml2: Heap-buffer-underflow in xmlParseAttValueComplex [fedora-all]
by Red Hat Bugzilla 01 Aug '13

01 Aug '13

Product: Fedora https://bugzilla.redhat.com/show_bug.cgi?id=882064 Bug ID: 882064 Summary: CVE-2012-5134 libxml2: Heap-buffer-underflow in xmlParseAttValueComplex [fedora-all] Product: Fedora Version: 17 Component: mingw32-libxml2 Keywords: Security, SecurityTracking Severity: high Priority: high Reporter: huzaifas(a)redhat.com Blocks: 880466 (CVE-2012-5134) This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected versions of Fedora. For comments that are specific to the vulnerability please use bugs filed against the "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When creating a Bodhi update request, please use the bodhi submission link noted in the next comment(s). This will include the bug IDs of this tracking bug as well as the relevant top-level CVE bugs. Please also mention the CVE IDs being fixed in the RPM changelog and the Bodhi notes field when available. Please note: this issue affects multiple supported versions of Fedora. Only one tracking bug has been filed; please ensure that it is only closed when all affected versions are fixed. [bug automatically created by: add-tracking-bugs] -- You are receiving this mail because: You are on the CC list for the bug.

1 4

← Newer
1
2
3
4
5
6
7
8
9
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

mingw August 2013