I've cleared the low-hanging fruit again and handled the ones I can handle, clearing out most of the in-progress ones.
The rest of these need someone to step up and take responsibility for them if they're gonna get done. Thanks to all that have helped so far. ......... updated initial message below ........ There are several packages that need security updates that either have not been built yet, or there are some issues that need help and/or input from packagers. Please help out with these where you can. I'll try to organize these into categories and give a little info on them so it's easy to see if you can and want to help. Web apps -------- ocsinventory - Mageia 1 package needs to be updated or patched (patches available from MDV) https://bugs.mageia.org/show_bug.cgi?id=5252 https://bugs.mageia.org/show_bug.cgi?id=2129 mediawiki - versions we have are at or nearing EOL upstream, probably should be updated. Oliver Burger is working on this. https://bugs.mageia.org/show_bug.cgi?id=3448 drupal - update built, issues found by QA need fixing. Oliver Burger is working on this. https://bugs.mageia.org/show_bug.cgi?id=5844 roundcubemail - issues fixed upstream in 0.8.1, or 0.7.3 + patch from Fedora https://bugs.mageia.org/show_bug.cgi?id=7246 zabbix - issues fixed in 1.8.15 upstream, two possible patches linked in bug https://bugs.mageia.org/show_bug.cgi?id=7277 GNOME software -------------- empathy - XSS issues fixed upstream in 3.2.1 (only Mageia 1 is affected) https://bugs.mageia.org/show_bug.cgi?id=7008 libvirt - patches available from RedHat https://bugs.mageia.org/show_bug.cgi?id=6526 libgnomesu - re-diffing the patch might be non-trivial since OpenSuSE has many other patches too https://bugs.mageia.org/show_bug.cgi?id=7068 gjs - doesn't rebuild against xulrunner in Mageia 1, but doesn't seem to be used by anything https://bugs.mageia.org/show_bug.cgi?id=6382 Games ----- openarena, alienarena - affected by DoS bug in quake3 engine. Juan Luis Baptiste is working on this. https://bugs.mageia.org/show_bug.cgi?id=5496 Java-related ------------ java-1.7.0-openjdk - IcedTea needs updated in Mageia 2 https://bugs.mageia.org/show_bug.cgi?id=7278 jruby - fixed upstream in 1.6.5.1 https://bugs.mageia.org/show_bug.cgi?id=6742 poi - In progress by D Morgan. Additional updates pending. https://bugs.mageia.org/show_bug.cgi?id=6011 apache-commons-compress - In progress by D Morgan. Mageia 1 updates pending. https://bugs.mageia.org/show_bug.cgi?id=6331 apache-commons-daemon - fixed upstream in 1.0.7 (only Mageia 1 is affected) https://bugs.mageia.org/show_bug.cgi?id=7004 Ruby-related ------------ Several security issues, one possible packaging issue https://bugs.mageia.org/show_bug.cgi?id=6487 No response has been received from packagers yet ------------------------------------------------ openafs - patches available from Debian, plus a newer version is in Mageia 1 than Mageia 2 https://bugs.mageia.org/show_bug.cgi?id=7085 openswan - patches are available from RedHat, one needs re-diffing https://bugs.mageia.org/show_bug.cgi?id=7095 tor - issues fixed upstream in 0.2.2.34 and 0.2.2.38 https://bugs.mageia.org/show_bug.cgi?id=5351 erlang - issue fixed in R14B03 (only Mageia 1 is affected) https://bugs.mageia.org/show_bug.cgi?id=7062 fuse - patches available from RedHat (only Mageia 1 is affected) https://bugs.mageia.org/show_bug.cgi?id=7063 blender - patch available from Fedora (only Mageia 1 is affected) https://bugs.mageia.org/show_bug.cgi?id=7065 libvoikko - issue fixed in 3.2.1 (only Mageia 1 is affected) https://bugs.mageia.org/show_bug.cgi?id=7067 php-ZendFramework - issues fixed upstream in 1.11.6 (only Mageia 1 is affected) https://bugs.mageia.org/show_bug.cgi?id=7083 abrt/libreport/btparser - should probably be upgraded to newer versions available from RedHat https://bugs.mageia.org/show_bug.cgi?id=6523 sos - 62 patches available from Fedora https://bugs.mageia.org/show_bug.cgi?id=6525 x11-server - upstream diffs linked by RedHat, maybe patches available from Ubuntu or Gentoo, plus other security issues fixed by RH/OpenSuSE/Ubuntu https://bugs.mageia.org/show_bug.cgi?id=6744 In progress (help needed to finish) ----------------------------------- xen - more patches need applied in Mageia 1 and Mageia 2 branches https://bugs.mageia.org/show_bug.cgi?id=6931
