Saturday, March 6, 2010

Security Update: Thunderbird

Another updates coming through today with one security update related to Thunderbird. Other packages gets rebuild due to upgrade on curl and many other packages. This batch also introduce fixes for mesa, bash-completion, and gnuplot.

Here's the latest -Current development:
Sat Mar 6 06:46:22 UTC 2010
a/aaa_elflibs-13.013-i486-4.txz: Rebuilt.
Updated libcurl.so.4.2.0.

d/git-1.7.0.1-i486-1.txz: Upgraded.

l/apr-1.3.9-i486-1.txz: Upgraded.

l/apr-util-1.3.9-i486-2.txz: Rebuilt.

l/raptor-1.4.21-i486-1.txz: Upgraded.

n/alpine-2.00-i486-3.txz: Rebuilt.

n/autofs-5.0.5-i486-1.txz: Upgraded.

n/curl-7.20.0-i486-1.txz: Upgraded.

n/dirmngr-1.0.3-i486-2.txz: Rebuilt.

n/gnupg-1.4.10-i486-1.txz: Upgraded.

n/gnupg2-2.0.14-i486-2.txz: Rebuilt.

n/gpgme-1.2.0-i486-1.txz: Upgraded.

n/httpd-2.2.14-i486-2.txz: Rebuilt.

n/libassuan-1.0.5-i486-1.txz: Upgraded.

n/libgcrypt-1.4.5-i486-1.txz: Upgraded.

n/libksba-1.0.7-i486-1.txz: Upgraded.

n/php-5.2.13-i486-1.txz: Upgraded.

n/pinentry-0.8.0-i486-1.txz: Upgraded.

x/mesa-7.7-i486-2.txz: Rebuilt.
Recompiled with an upstream fix for a crash in driNewRenderbuffer().
Thanks to David Houlden for the bug report.

x/xf86-input-penmount-1.4.1-i486-1.txz: Upgraded.

x/xf86-video-ati-6.12.5-i486-1.txz: Upgraded.

xap/gnuplot-4.2.6-i486-1.txz: Rebuilt.
This was compiled with the wrong $ARCH.
Thanks again to Mikhail Zotov for spotting the problem.

xap/mozilla-thunderbird-3.0.3-i686-1.txz: Upgraded.
This upgrade fixes some more security bugs.
For more information, see:
http://www.mozilla.org/security/known-vulnerabilities/thunderbird30.html
(* Security fix *)

extra/bash-completion/bash-completion-1.1-noarch-2.txz: Rebuilt.
Patched to recognize bash-4.