Fedora EPEL 5 updates-testing report

updates at fedoraproject.org updates at fedoraproject.org
Tue Jan 11 17:00:37 UTC 2011


The following Fedora EPEL 5 Security updates need testing:

    https://admin.fedoraproject.org/updates/libsndfile-1.0.17-4.el5
    https://admin.fedoraproject.org/updates/wordpress-2.8.6-3.el5
    https://admin.fedoraproject.org/updates/wordpress-mu-2.9.2-2.el5
    https://admin.fedoraproject.org/updates/perl-Convert-UUlib-1.34-1.el5
    https://admin.fedoraproject.org/updates/Django-1.1.3-1.el5
    https://admin.fedoraproject.org/updates/perl-CGI-Simple-1.112-2.el5


The following builds have been pushed to Fedora EPEL 5 updates-testing

    ReviewBoard-1.5.2-20.el5
    perl-Net-STOMP-Client-0.9.5-1.el5
    perl-NetPacket-1.0.1-1.el5
    python-djblets-0.6.7-12.el5
    snoopy-1.7.9-1.el5

Details about builds:


================================================================================
 ReviewBoard-1.5.2-20.el5 (FEDORA-EPEL-2011-0054)
 Web-based code review tool
--------------------------------------------------------------------------------
Update Information:

- python-djblets
- djblets.datagrid:
-    The datagrids now use a RequestContext when rendering cells, allowing
-    the columns or templates to access data from context processors.



- ReviewBoard
- Important Updates
-     Users using existing WSGI configurations must update their configuration
-     for authentication with the new API to work.
- New Features
-     Added SSH key management for SSH-backed repositories
-     Authentication failures when setting up repositories are now more useful
-     Added our own SSH replacement for standardizing on behavior and working
-     around OpenSSH limitations
-     The Repository page in the administration UI now talks about API Tokens
-     and links to the GitHub Account page for Git repositories, making it
-     easier to set up a GitHub repository
- API Fixes
-     Fixed logging in on requests using HTTP Basic Auth
-     Fixed wrong responses when performing a request requiring authentication
-     as an anonymous user
-     Fixed anonymous access to the API when anonymous access is enabled
-     Fixed replies to screenshot comments in the new web API
-     Fixed removing screenshots from review requests
-     Changed the request when doing a HTTP PUT on a review request draft
-     Fixed search queries in /api/users/
- Bug Fixes
-     Fixed a problem with SSH host checking on Git repositories
-     Fixed support for private GitHub repositories
-     The API Token for GitHub repositories are now extracted properly in the
-     Repository page in the administration UI
-     Fixed extra whitespace highlight toggling
-     Images on the dashboard are now cached, reducing the number of requests
-     made to the server
-     Disabled auto-complete and default values for the repository
-     username/password fields
-     Support for Amazon S3 now works again with new versions of Django
-     Storages
-     Authentication with the new API now works with new Apache+wsgi setups
-     Fixed some rewrite rule for fastcgi
-     Fix 404 errors with newly generated lighttpd.conf files
-     Fixed errrors when passing a non-integer value for ?show_submitted= on
-     the dashboard or other review request listings
-     Fixed a crash when attempting to log SSH-related problems
-     The contributed svn-hook-postcommit-review script wasn't parsing the
-     base path correctly
- Release Notes
-     http://www.reviewboard.org/docs/releasenotes/dev/reviewboard/1.5.2/

--------------------------------------------------------------------------------
ChangeLog:

* Mon Jan 10 2011 Stephen Gallagher <sgallagh at redhat.com> - 1.5.2-20
- Add message to upgrade script to alert users that manual edits may be
- required if using mod_wsgi
* Mon Jan 10 2011 Stephen Gallagher <sgallagh at redhat.com> - 1.5.2-19
- Important Updates
-     Users using existing WSGI configurations must update their configuration
-     for authentication with the new API to work.
- New Features
-     Added SSH key management for SSH-backed repositories
-     Authentication failures when setting up repositories are now more useful
-     Added our own SSH replacement for standardizing on behavior and working
-     around OpenSSH limitations
-     The Repository page in the administration UI now talks about API Tokens
-     and links to the GitHub Account page for Git repositories, making it
-     easier to set up a GitHub repository
- API Fixes
-     Fixed logging in on requests using HTTP Basic Auth
-     Fixed wrong responses when performing a request requiring authentication
-     as an anonymous user
-     Fixed anonymous access to the API when anonymous access is enabled
-     Fixed replies to screenshot comments in the new web API
-     Fixed removing screenshots from review requests
-     Changed the request when doing a HTTP PUT on a review request draft
-     Fixed search queries in /api/users/
- Bug Fixes
-     Fixed a problem with SSH host checking on Git repositories
-     Fixed support for private GitHub repositories
-     The API Token for GitHub repositories are now extracted properly in the
-     Repository page in the administration UI
-     Fixed extra whitespace highlight toggling
-     Images on the dashboard are now cached, reducing the number of requests
-     made to the server
-     Disabled auto-complete and default values for the repository
-     username/password fields
-     Support for Amazon S3 now works again with new versions of Django
-     Storages
-     Authentication with the new API now works with new Apache+wsgi setups
-     Fixed some rewrite rule for fastcgi
-     Fix 404 errors with newly generated lighttpd.conf files
-     Fixed errrors when passing a non-integer value for ?show_submitted= on
-     the dashboard or other review request listings
-     Fixed a crash when attempting to log SSH-related problems
-     The contributed svn-hook-postcommit-review script wasn't parsing the
-     base path correctly
- Release Notes
-     http://www.reviewboard.org/docs/releasenotes/dev/reviewboard/1.5.2/
--------------------------------------------------------------------------------


================================================================================
 perl-Net-STOMP-Client-0.9.5-1.el5 (FEDORA-EPEL-2011-0052)
 STOMP object oriented client module
--------------------------------------------------------------------------------
Update Information:

This update to 0.9.5 from 0.9.3 includes the following enhancements:
* Added Net::STOMP::Client::Tutorial
* Added STOMP 1.1 support (experimental).
* Made login and passcode optional in the CONNECT frame.
* Added more tests, some optionally using a broker connection.
* Improved the documentation.
--------------------------------------------------------------------------------
ChangeLog:

* Mon Jan 10 2011 Steve Traylen <steve.traylen at cern.ch> - 0.9.5-1
- New upstream 0.9.5
* Tue Dec 21 2010 Marcela Maslanova <mmaslano at redhat.com> - 0.9.2-3
- 661697 rebuild for fixing problems with vendorach/lib
* Tue Aug 24 2010 Adam Tkac <atkac redhat com> - 0.9.2-2
- rebuild
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #667318 - Upgrade to new upstream version
        https://bugzilla.redhat.com/show_bug.cgi?id=667318
--------------------------------------------------------------------------------


================================================================================
 perl-NetPacket-1.0.1-1.el5 (FEDORA-EPEL-2011-0051)
 Assemble/disassemble network packets at the protocol level
--------------------------------------------------------------------------------
Update Information:

New Package
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #573848 - Review Request: perl-NetPacket - Modules to assemble/disassemble network packets at the protocol level
        https://bugzilla.redhat.com/show_bug.cgi?id=573848
--------------------------------------------------------------------------------


================================================================================
 python-djblets-0.6.7-12.el5 (FEDORA-EPEL-2011-0054)
 A collection of useful classes and functions for Django
--------------------------------------------------------------------------------
Update Information:

- python-djblets
- djblets.datagrid:
-    The datagrids now use a RequestContext when rendering cells, allowing
-    the columns or templates to access data from context processors.



- ReviewBoard
- Important Updates
-     Users using existing WSGI configurations must update their configuration
-     for authentication with the new API to work.
- New Features
-     Added SSH key management for SSH-backed repositories
-     Authentication failures when setting up repositories are now more useful
-     Added our own SSH replacement for standardizing on behavior and working
-     around OpenSSH limitations
-     The Repository page in the administration UI now talks about API Tokens
-     and links to the GitHub Account page for Git repositories, making it
-     easier to set up a GitHub repository
- API Fixes
-     Fixed logging in on requests using HTTP Basic Auth
-     Fixed wrong responses when performing a request requiring authentication
-     as an anonymous user
-     Fixed anonymous access to the API when anonymous access is enabled
-     Fixed replies to screenshot comments in the new web API
-     Fixed removing screenshots from review requests
-     Changed the request when doing a HTTP PUT on a review request draft
-     Fixed search queries in /api/users/
- Bug Fixes
-     Fixed a problem with SSH host checking on Git repositories
-     Fixed support for private GitHub repositories
-     The API Token for GitHub repositories are now extracted properly in the
-     Repository page in the administration UI
-     Fixed extra whitespace highlight toggling
-     Images on the dashboard are now cached, reducing the number of requests
-     made to the server
-     Disabled auto-complete and default values for the repository
-     username/password fields
-     Support for Amazon S3 now works again with new versions of Django
-     Storages
-     Authentication with the new API now works with new Apache+wsgi setups
-     Fixed some rewrite rule for fastcgi
-     Fix 404 errors with newly generated lighttpd.conf files
-     Fixed errrors when passing a non-integer value for ?show_submitted= on
-     the dashboard or other review request listings
-     Fixed a crash when attempting to log SSH-related problems
-     The contributed svn-hook-postcommit-review script wasn't parsing the
-     base path correctly
- Release Notes
-     http://www.reviewboard.org/docs/releasenotes/dev/reviewboard/1.5.2/

--------------------------------------------------------------------------------
ChangeLog:

* Mon Jan 10 2011 Stephen Gallagher <sgallagh at redhat.com> - 0.6.7-12
- New upstream release 0.6.7
- djblets.datagrid:
-    The datagrids now use a RequestContext when rendering cells, allowing
-    the columns or templates to access data from context processors.

- djblets.siteconfig:
-    The form body of a siteconfig settings page can now be replaced.
-    It's now stored in the "form_content" block.

-    SiteConfigurationManager no longer crashes if trying to clear
-    the cache for a SiteConfiguration that no longer exists.

- djblets.testing:
-    The Selenium test suite has been updated to support Django 1.2's
-    multi-database support. Previously, fixtures would fail to load
-    if using the new settings.DATABASES variable.

- djblets.util:
-    The @augment_method_from decorator wasn't properly calling up the
-    decorator chain, preventing some decorators from being invoked. This
-    has been fixed to ensure all decorators are called.
-
- djblets.webapi:
-    Due to the @augment_method_from breakage listed above, webapi
-    decorators could fail to add their own checks, causing various
-    problems in field checking and authentication. This is now fixed.

-    The Permission Denied (HTTP 403) errors being returned weren't
-    sufficient for clients that weren't authenticated. Now, an
-    unauthenticated client will instead see Not Logged In (HTTP 401)
-    errors.
-
-    The HTTP_AUTHORIZATION header is now checked on all requests. When
-    provided by the client, it will be used for authentication. This
-    means that clients can now force a login from their very first
-    request on, instead of requiring a HTTP 401 Unauthorized being
-    sent out first.
-
-    This will also prevent multiple logins across different requests
-    from the same client, when the HTTP_AUTHORIZATION header is passed
-    on each request. This makes requests less heavy-weight and prevents
-    the last_login timestamp on the User from being updated on each
-    request.
-
-    As part of this change, any webapps manually using the
-    @webapi_login_required decorator without the new resource code
-    will no longer support HTTP Basic auth. However, this was never
-    a supported feature anyway, and was more there by accident.
-
-    The 'api_format' parameter in requests is now treated specially
-    and doesn't trigger any invalid attribute errors during field
-    validation.
-
-    WebAPIResource.delete now uses get_object instead of fetching
-    the object directly, which simplifies the function and guarantees
-    that the correct object is used (especially when a resource
-    overrides get_object).
-
-    Redirects now preserve any special parameters ("callback",
-    "_method", "expand", and "api_format") passed to the request.
-    This works around problems in HTTP implementations that don't
-    allow the caller to know that redirects occurred (such as major
-    browsers), which would lead to this information being stripped and
-    the wrong results being returned.
-
-    The "expand" parameter for expanding links in payloads is now
-    supported for POST and PUT requests.
--------------------------------------------------------------------------------


================================================================================
 snoopy-1.7.9-1.el5 (FEDORA-EPEL-2011-0053)
 A preload library to send shell commands to syslog
--------------------------------------------------------------------------------
Update Information:

Snoopy 1.7.9 fixes a bug introduced in 1.7.6 where  the previous logging of the executable filename was dropped. The filename is again logged now.
--------------------------------------------------------------------------------
ChangeLog:

* Mon Jan 10 2011 Steve Traylen <steve.traylen at cern.ch> - 1.7.9-1
- New upstream 1.7.9
--------------------------------------------------------------------------------





More information about the epel-devel-list mailing list