[Mageia-dev] Freeze push: postgresql-(8.4,9.0,9.1,9.2)

2013-04-04 Thread FundaWang
Hello, Could postgresql-(8.4,9.0,9.1,9.2) be pushed to fix several security Vulnerabilities? CVE-2013-1899, CVE-2013-1900, CVE-2013-1901 Regards.

[Mageia-dev] Freeze push: opera-12.15

2013-04-04 Thread FundaWang
Hello, Could opera-12.15 be pushed? It fixed several security problems as stated here: http://www.opera.com/docs/changelogs/unified/1215/ Regards.

[Mageia-dev] Freeze push: ffmpeg, mplayer

2013-04-04 Thread FundaWang
Hello, Could ffmpeg 1.1.4 be pushed into both core and tainted? It fixed a lot of security vulnerabilities: http://www.ffmpeg.org/security.html Please note that mplayer is needed to be rebuilt against latest ffmpeg also, in both core and tainted. Regards.

[Mageia-dev] Freeze push: firefox, firefox-l10n, thunderbird, thunderbird-l10n

2013-04-02 Thread FundaWang
Hello, Could firefox, firefox-l10n, thunderbird, thunderbird-l10n 17.0.5esr be pushed for several CVE issues? Regards.

[Mageia-dev] Freeze push: sqlite3-3.7.16.1

2013-03-31 Thread FundaWang
Hello, Could somebody push sqlite3-3.7.16.1, which fixed a bug in the query optimizer that was introduced as part of version 3.7.15. Regards.

Re: [Mageia-dev] Freeze push: rails-3.2.13

2013-03-24 Thread FundaWang
Could somebody push ruby-mail also? It is required by newly uploaded ruby-actionmailer. From: fundaw...@fundawang.name To: mageia-dev@mageia.org Date: Sat, 23 Mar 2013 16:13:22 + Subject: [Mageia-dev] Freeze push: rails-3.2.13 Hello, Could

[Mageia-dev] Freeze push: rails-3.2.13

2013-03-23 Thread FundaWang
Hello, Could following RubyOnRails 3.2.13 packages be pushed to fix CVE-2013-(1854-1857) ? ruby-actionmailer ruby-actionpack ruby-activemodel ruby-activerecord ruby-activeresource ruby-activesupport ruby-rails ruby-railties Thanks.

[Mageia-dev] Freeze push: qgis-1.8.0

2013-03-21 Thread FundaWang
Hello, Could somebody push qgis 1.8.0 into cauldron? It should be uploaded in the period of alpha testing with other gis software. Currently we have qgis 1.7.4 which cannot be built against current toolchain. Regards.

Re: [Mageia-dev] Freeze Push: Virtualbox 4.2.10

2013-03-20 Thread FundaWang
Date: Tue, 19 Mar 2013 22:53:07 +0100 From: lists.jjo...@free.fr To: mageia-dev@mageia.org Subject: Re: [Mageia-dev] Freeze Push: Virtualbox 4.2.10 Em 19-03-2013 22:50, Thomas Spuhler escreveu: zezinho, on a side note, I have a lot of problem withe

[Mageia-dev] Freeze push: sqlite3-3.7.16

2013-03-20 Thread FundaWang
Hello, Could somebody push sqlite3 3.7.16 into cauldron? There was one important bug fix that addresses an incorrect query result that could have occurred in a three-way join where the join constraints compared INTEGER columns to TEXT columns. This issue had been in the code for time out of mind

[Mageia-dev] Freeze push: firefox, firefox-l10n, thunderbird, thunderbird-l10n

2013-03-11 Thread FundaWang
Hello, Could somebody pushing firefox, firefox-l10n, thunderbird and thunderbird-l10n 17.0.4esr for CVE-2013-0787 (use-after-free in nsHTMLEditor when using execCommand)? Thanks.

Re: [Mageia-dev] Freeze push: x11-server-1.13.3 (was RE: x11 server 1.3.3 for mga3?)

2013-03-11 Thread FundaWang
: thierry.vign...@gmail.com Date: Sat, 9 Mar 2013 14:10:15 +0100 To: mageia-dev@mageia.org Subject: Re: [Mageia-dev] x11 server 1.3.3 for mga3? On 9 March 2013 11:06, FundaWang fundaw...@fundawang.name wrote: Hello, Currently we have x11-server 1.13.2.902 in cauldron, is the version

[Mageia-dev] Freeze push: x11-server-1.13.3 (was RE: x11 server 1.3.3 for mga3?)

2013-03-10 Thread FundaWang
From: thierry.vign...@gmail.com Date: Sat, 9 Mar 2013 14:10:15 +0100 To: mageia-dev@mageia.org Subject: Re: [Mageia-dev] x11 server 1.3.3 for mga3? On 9 March 2013 11:06, FundaWang fundaw...@fundawang.name wrote: Hello, Currently we have x11

[Mageia-dev] x11 server 1.3.3 for mga3?

2013-03-09 Thread FundaWang
Hello, Currently we have x11-server 1.13.2.902 in cauldron, is the version targeted with mga3 be 1.13.x stable? If yes, then we should upgrade to 1.13.3 now. Thanks.

Re: [Mageia-dev] Freeze push: fbreader

2013-03-07 Thread FundaWang
From: fundaw...@fundawang.name To: mageia-dev@mageia.org Subject: Freeze push: fbreader Date: Mon, 4 Mar 2013 10:13:58 + Hello, Could somebody push fbreader into cauldron? It hasn't been built since mga1, and now I fixed it by only providing

Re: [Mageia-dev] Freeze push: fgrun-1.7.0, abiword-docs-2.9.4

2013-03-07 Thread FundaWang
From: fundaw...@fundawang.name To: mageia-dev@mageia.org Subject: Freeze push: fgrun-1.7.0, abiword-docs-2.9.4 Date: Mon, 4 Mar 2013 02:04:48 + Hello, Could somebody push fgrun into cauldron core/release? It does not build against current

[Mageia-dev] Freeze push: fbreader

2013-03-04 Thread FundaWang
Hello, Could somebody push fbreader into cauldron? It hasn't been built since mga1, and now I fixed it by only providing qt4 interface. Regards.

[Mageia-dev] Freeze push: fgrun-1.7.0, abiword-docs-2.9.4

2013-03-03 Thread FundaWang
Hello, Could somebody push fgrun into cauldron core/release? It does not build against current simgear. And, abiword-docs does not build previously. BTW, pls wipe fgrun and abiword-docs from core/updates_testing. Regards.

Re: [Mageia-dev] Freeze push: gargoyle-free 2011.1

2013-03-01 Thread FundaWang
pong?

Re: [Mageia-dev] Freeze push: gargoyle-free 2011.1

2013-02-27 Thread FundaWang
ping?

[Mageia-dev] Freeze push: gargoyle-free 2011.1

2013-02-26 Thread FundaWang
Hello, Could somebody push gargoyle-free 2011.1 into cauldron? Currently we have  20090825, which more than 4 years old, all the other distros (debian, gentoo) are shipping 2011.1 in recent releases. I've synced the sources from debian to make it more free. Regards.

Re: [Mageia-dev] Freeze push: ruby 1.9.3-p392

2013-02-25 Thread FundaWang
Date: Mon, 25 Feb 2013 17:47:20 +0100 From: cazzaniga.san...@gmail.com To: mageia-dev@mageia.org Subject: Re: [Mageia-dev] Freeze push: ruby 1.9.3-p392 Le 25/02/2013 17:44, David Walser a écrit : FundaWang fundawang@... writes: Hello, Could

[Mageia-dev] Freeze push: ruby 1.9.3-p392

2013-02-24 Thread FundaWang
Hello, Could somebody push ruby 1.9.3-p392 into cauldron? It fixed CVE-2013-0269 and another security problem. Thanks.

[Mageia-dev] Freeze push: thunderbird, thunderbird-l10n

2013-02-20 Thread FundaWang
Hello, Could thunderbird and thunderbird-l10n 17.0.3 esr be pushed into cauldron? Regards.

[Mageia-dev] Freeze push: drupal 7.20

2013-02-20 Thread FundaWang
Hello, Drupal 7.20 was released to fix a critical security problem[1]. Could somebody push it into cauldon? Thanks. [1] http://drupal.org/SA-CORE-2013-002 Drupal core - Denial of service

[Mageia-dev] Freeze push: firefox, firefox-l10n

2013-02-16 Thread FundaWang
Hello, Could firefox and firefox-l10n 17.0.3esr be pushed? See you.

[Mageia-dev] Freeze push: rpmdrake

2013-02-16 Thread FundaWang
Hello, Could rpmdrake 5.40.2 be pushed? It involved all the latest rpm group changes proposal in mga3. Thanks.

Re: [Mageia-dev] Broken ibus-anthy on Mageia2?

2013-02-13 Thread FundaWang
Please file a bug and assign it to me. From: jehan.marmott...@gmail.com Date: Wed, 13 Feb 2013 16:38:32 +0900 To: mageia-dev@mageia.org Subject: [Mageia-dev] Broken ibus-anthy on Mageia2? Hello, I don't remember any recent update on ibus or anthy

Re: [Mageia-dev] oxygen-gtk2-1.3.2-1

2013-02-13 Thread FundaWang
Date: Wed, 13 Feb 2013 14:01:44 +0100 From: h...@oxygen-icons.org To: mageia-dev@mageia.org Subject: [Mageia-dev] oxygen-gtk2-1.3.2-1 Hello folks, could someone build and upload oxygen-gtk2-1.3.2.1 from the tarball at:

[Mageia-dev] Freeze push: ruby-json

2013-02-12 Thread FundaWang
Hello, Could ruby-json-1.7.7 be pushed to fix CVE-2013-0269? Thanks.

[Mageia-dev] Freeze push: Rails 3.2.13

2013-02-12 Thread FundaWang
Hello, Could following RubyOnRails 3.2.13 packages be pushed to fix CVE-2013-0276? ruby-actionmailer ruby-actionpack ruby-activemodel ruby-activerecord ruby-activeresource ruby-activesupport ruby-rails ruby-railties Thanks.

[Mageia-dev] Freeze push: ffmpeg-1.1.2

2013-02-12 Thread FundaWang
Hello, Let's push ffmpeg-1.1.2 to cauldron core and tainted, for following CVE issues: CVE-2013-0862, CVE-2013-0863, CVE-2013-0864, CVE-2013-0865, CVE-2013-0866, CVE-2013-0867,CVE-2013-0868, CVE-2013-0869, CVE-2013-0860, CVE-2013-0861. Regards.

Re: [Mageia-dev] Freeze push: ffmpeg-1.1.2

2013-02-12 Thread FundaWang
From: fundaw...@fundawang.name To: mageia-dev@mageia.org Date: Tue, 12 Feb 2013 11:36:21 + Subject: [Mageia-dev] Freeze push: ffmpeg-1.1.2 Hello, Let's push ffmpeg-1.1.2 to cauldron core and tainted, for following CVE issues: CVE-2013-0862,

Re: [Mageia-dev] Freeze push: Rails 3.2.13

2013-02-12 Thread FundaWang
From: fundaw...@fundawang.name To: mageia-dev@mageia.org Date: Tue, 12 Feb 2013 09:15:03 + Subject: [Mageia-dev] Freeze push: Rails 3.2.13 Hello, Could following RubyOnRails 3.2.13 packages be pushed to fix CVE-2013-0276? ruby-actionmailer

Re: [Mageia-dev] Freeze push: Rails 3.2.13

2013-02-12 Thread FundaWang
From: fundaw...@fundawang.name To: mageia-dev@mageia.org Date: Tue, 12 Feb 2013 09:15:03 + Subject: [Mageia-dev] Freeze push: Rails 3.2.13 Hello, Could following RubyOnRails 3.2.13 packages be pushed to fix CVE-2013-0276? ruby-actionmailer

Re: [Mageia-dev] freeze push: gnutls

2013-02-11 Thread FundaWang
Date: Mon, 11 Feb 2013 10:28:52 +0100 From: guillomovi...@gmail.com To: mageia-dev@mageia.org Subject: [Mageia-dev] freeze push: gnutls 3.1.8 is a bugfix release. Nope, it is a security bugfix release. -- BOFH excuse #336: the xy axis in the

[Mageia-dev] Freeze push: postgresql

2013-02-08 Thread FundaWang
Hello, Could postgresql(8.4, 9.0, 9.1, 9.2) be pushed? They fixes a denial-of-service (DOS) vulnerability (CVE-2013-0255). Regards. [1]: http://www.postgresql.org/about/news/1446/

[Mageia-dev] Freeze push: postgresql-jdbc

2013-02-08 Thread FundaWang
Hello, Could newer version of postgresql-jdbc be pushed? We currently have 9.0 series of postgresql-jdbc, but it won't build against latest java tool stack. Considering we are promoting postgresql 9.2 in mga3, same series of jdbcd driver might be more acceptable. Regards. BTW, you may want to

Re: [Mageia-dev] Freeze push or not? openssl-1.0.1d

2013-02-08 Thread FundaWang
Date: Fri, 8 Feb 2013 11:13:39 +0100 From: guillomovi...@gmail.com To: mageia-dev@mageia.org Subject: Re: [Mageia-dev] Freeze push or not? openssl-1.0.1d Le 08/02/2013 08:36, FundaWang a écrit : Is this in SVN and ready to go? Let's get this pushed

Re: [Mageia-dev] Freeze push or not? openssl-1.0.1d

2013-02-08 Thread FundaWang
Date: Fri, 8 Feb 2013 11:13:39 +0100 From: guillomovi...@gmail.com To: mageia-dev@mageia.org Subject: Re: [Mageia-dev] Freeze push or not? openssl-1.0.1d Le 08/02/2013 08:36, FundaWang a écrit : Is this in SVN and ready to go? Let's get this pushed

[Mageia-dev] Freeze push: xmds 2.1.2

2013-02-08 Thread FundaWang
Hello, Could xmds-2.1.2 be pushed? Currently we have 1.6.6 which is over 4-year old, and as some of you may have seen, it does not build with currently tool chain anymore. BTW, please kill xmds-1.6.6-5 in build host before submitting. Regards.

Re: [Mageia-dev] Freeze push or not? openssl-1.0.1d

2013-02-07 Thread FundaWang
To: mageia-dev@mageia.org From: luigiwal...@yahoo.com Date: Thu, 7 Feb 2013 21:40:59 + Subject: Re: [Mageia-dev] Freeze push or not? openssl-1.0.1d FundaWang fundawang@... writes: Hello, would pushing openssl 1.0.1d for three CVE security issues

[Mageia-dev] Is it possible running rebuildbot on ruby-* packages?

2013-02-07 Thread FundaWang
Hello, Is it possible running rebuildbot on ruby-* packages? Due to new ruby-rdoc has been imported to fix CVE-2013-0256, all packages shipped rdoc files will need to be rebuilt. Is is possible doing this by umeabot? Regards.

Re: [Mageia-dev] Freeze push: calligra and calligra-l10n

2013-02-06 Thread FundaWang
Date: Wed, 6 Feb 2013 10:00:41 +0100 From: guillomovi...@gmail.com To: mageia-dev@mageia.org Subject: Re: [Mageia-dev] Freeze push: calligra and calligra-l10n Le 06/02/2013 09:38, Guillaume Rousse a écrit : Le 06/02/2013 00:26, FundaWang a écrit

[Mageia-dev] Freeze push: ruby-rdoc

2013-02-06 Thread FundaWang
Hello, Could somebody push ruby-rdoc 3.12.1 into cauldron? It fixed CVE-2013-0256: RDoc documentation generated by rdoc 2.3.0 through rdoc 3.12 and prereleases up to rdoc 4.0.0.preview2.1 are vulnerable to an XSS exploit. This exploit may lead to cookie disclosure to third parties. Regards.

Re: [Mageia-dev] Freeze push: ruby-rdoc

2013-02-06 Thread FundaWang
Date: Wed, 6 Feb 2013 18:46:36 +0100 From: enn...@mageia.org To: mageia-dev@mageia.org Subject: Re: [Mageia-dev] Freeze push: ruby-rdoc Le 06/02/2013 17:23, FundaWang a écrit : Hello, Could somebody push ruby-rdoc 3.12.1 into cauldron? It fixed CVE

[Mageia-dev] Freeze push or not? openssl-1.0.1d

2013-02-06 Thread FundaWang
Hello, would pushing openssl 1.0.1d for three CVE security issues[1] a good idea?  FYI, currently openssl is listed as unmaintained in our packagers' database, but I've seen that guillomovitch are touch this package recently. [1]: http://www.openssl.org/news/secadv_20130205.txt

Re: [Mageia-dev] Freeze push: ruby-rdoc

2013-02-06 Thread FundaWang
...@mageia.org To: mageia-dev@mageia.org Subject: Re: [Mageia-dev] Freeze push: ruby-rdoc Le 06/02/2013 17:23, FundaWang a écrit : Hello, Could somebody push ruby-rdoc 3.12.1 into cauldron? It fixed CVE-2013-0256: RDoc documentation generated by rdoc 2.3.0 through rdoc 3.12 and prereleases up to rdoc

[Mageia-dev] Freeze push: calligra and calligra-l10n

2013-02-05 Thread FundaWang
Hello, Could calligra and calligra-l10n 2.6.0 be pushed into cauldron? We target at 2.6.0 stable in mga3, while we currently have 2.5.93 (AKA 2.6 Rc1) in repository. Regards.

[Mageia-dev] Freeze push: opera 12.14

2013-02-05 Thread FundaWang
Hello, Could opera 12.14 be pushed into cauldron? It addresses a re-occuring crash, allowing users to update two or more extensions at one time. Although it is not a security fix, but considering it was released so quickly after 12.13, I guess it is a big problem from upstream. Regards.

[Mageia-dev] Mariadb 5.5.29?

2013-01-31 Thread FundaWang
Hello, Would pushing mariadb 5.5.29 be a good choice? It seems that there are two many security fixes in this release[1]. [1]: https://kb.askmonty.org/en/mariadb-5529-release-notes/

Re: [Mageia-dev] Mariadb 5.5.29?

2013-01-31 Thread FundaWang
To: mageia-dev@mageia.org From: luigiwal...@yahoo.com Date: Thu, 31 Jan 2013 19:47:59 + Subject: Re: [Mageia-dev] Mariadb 5.5.29? FundaWang fundawang@... writes: Hello, Would pushing mariadb 5.5.29 be a good choice? It seems that there are two

[Mageia-dev] Freeze push: opera-12.13

2013-01-30 Thread FundaWang
Hello, Could somebody push opera 12.13 into cauldron? As before, it fixes a lot of security problems: * Fixed an issue where DOM events manipulation might be used to execute arbitrary code * Fixed an issue where use of SVG clipPaths could allow execution of arbitrary code * Fixed a low

Re: [Mageia-dev] xbmc-12.0 final

2013-01-30 Thread FundaWang
Date: Wed, 30 Jan 2013 20:00:23 -0500 From: c...@eslrahc.com To: mageia-dev@mageia.org Subject: [Mageia-dev] xbmc-12.0 final Currently we have xbmc-12.0rc3. XBMC 12.0 - Frodo came out yesterday. Any chance of getting it in mga3? I guess Anssi will

[Mageia-dev] Freeze push: oxygen-gtk and oxygen-gtk3

2013-01-30 Thread FundaWang
Hello, Could oxygen-gtk and oxygen-gtk3[1] be pushed? They fixed some bugs regarding gnome-shell. As we are the supporting distro of oxygen-gtk, I guess we should push it. Regards. [1]: https://projects.kde.org/news/198

Re: [Mageia-dev] Freeze push: wordpress 3.5.1

2013-01-25 Thread FundaWang
To: mageia-dev@mageia.org From: luigiwal...@yahoo.com Date: Fri, 25 Jan 2013 17:00:29 + Subject: Re: [Mageia-dev] Freeze push: wordpress 3.5.1 FundaWang fundawang@... writes: Could wordpress 3.5.1 be pushed? It addresses the following security

[Mageia-dev] Freeze push: wordpress 3.5.1

2013-01-24 Thread FundaWang
Hello, Could wordpress 3.5.1 be pushed? It addresses the following security issues: * A server-side request forgery vulnerability and remote port scanning using pingbacks. This vulnerability, which could potentially be used to expose information and compromise a site, affects all previous

[Mageia-dev] Freeze push: ruby

2013-01-18 Thread fundawang
Hello, Could somebody push ruby 1.9.3-p374 into cauldron? As said in its changelog, it fixed randomly SEGV problem regarding rails, and it suggested to be updated by upstream, if currenty p362 is being used, which is the current case for cauldron. Thanks.

[Mageia-dev] Freeze push: amarok

2013-01-18 Thread fundawang
Hello, Could amaork 2.7.0 stable be pushed into cauldron? We target at 2.7.x for mga3, and we currently have 2.6 beta version in cauldron. Thanks.

Re: [Mageia-dev] Freeze push: ibus, ibus-anthy

2013-01-16 Thread fundawang
Funda Wang skrev 16.1.2013 15:31: ping? -- Original -- From: Funda Wang