From dam at blastwave.org Wed Jul 2 22:49:16 2008 From: dam at blastwave.org (Dagobert Michelsen) Date: Wed, 2 Jul 2008 22:49:16 +0200 Subject: [csw-users] Testing libxml 2.6.30 In-Reply-To: <20080701134654.P46268@bolthole.com> References: <625385e30806270429p301ca26bw5a87fc5955c8d84f@mail.gmail.com> <625385e30807010114ha061a3s3bfb4bc1af211a22@mail.gmail.com> <20080701085103.K46268@bolthole.com> <5150E988-F804-4A9A-A3D8-55AAEBBD7060@blastwave.org> <20080701134654.P46268@bolthole.com> Message-ID: <867717E4-B37D-47C9-9918-7D624F256B4E@blastwave.org> Hi Everybody, Am 01.07.2008 um 22:46 schrieb Philip Brown: > On Tue, Jul 01, 2008 at 09:37:37PM +0200, Dagobert Michelsen wrote: >> Am 01.07.2008 um 17:51 schrieb Philip Brown: >>> b) take over the libxml2 package and fix it yourself at the heart >>> of the problem. >>> (since this is a loong-standing bug that the current maintainer >>> never seems to get around to fixing.) >> >> Aha, this was one of the occurence where .la-files do harm we talked >> about some time ago. However, there is currently no bug filed against >> libxml2. > > Reguardless, as soon as someone submits a fixed package, I will > accept it. I put these two in testing/: libxml2-2.6.30,REV=2008.07.02-SunOS5.8-i386-CSW.pkg.gz libxml2-2.6.30,REV=2008.07.02-SunOS5.8-sparc-CSW.pkg.gz These packages are build to mimic the existing layout of the package. However, I would prefer splitting this up into the share libraries most packages will need, the developer headers and documentation and the python bindings. Phil, any advice on how to split these? If someone is curious: this package was build with the new GAR multi-ISA-builds and is prepared to produce three separate packages as outlined above: Thanks! -- Dago From a.cervellin at acm.org Fri Jul 4 23:03:43 2008 From: a.cervellin at acm.org (Alessio) Date: Fri, 04 Jul 2008 23:03:43 +0200 Subject: [csw-users] /testing seamonkey 1.1.10 Message-ID: <486E902F.6040203@acm.org> Seamonkey 1.1.10 is now available on http://www.blastwave.org/testing This is a security & stability fix release. The following is the rough changelog: 90584 charset=... must be applied to non-MIME Subject:/From:/To:/etc. fields 236389 Don't set type/creator codes for any saved/downloaded files 240261 [1.8 branch] peer-trusted certs can use alt names to spoof 282660 Crash [@ jsds_NotifyPendingDeadScripts] ds->script is null 286661 can't install extensions over ssl, fails with message "Download error" 305073 FIREFOX caused an invalid page fault [@ MSVCRT.DLL + 0xd16a] 308429 make tooMuchGC dynamic (runtime gczeal option) 323508 Favicon (error icon) in Bookmark not updated 334514 FrameArena::~FrameArena should assert that it's empty 347367 crash when print preview is opened on a certain file styled with meda=print [@ BasicTableLayoutStrategy::CalcPctAdjTableWidth] 356378 "invalid getter usage" or assertion failure with "var x; x getter= function () { };" 371292 Crash [@ js_AtomToPrintableString] 378027 Printing crash [@ nsCellMap::GetCellInfoAt] Exception: EXC_BAD_INSTRUCTION (0x0002) 380833 Crash during GC after uneval (involves E4X, mysterious sharp variable) 390295 Searchplugin with digit in url cuts off url 390788 Accessing innerWidth of a tabbrowser contentWindow throws NS_ERROR_XPC_SECURITY_MANAGER_VETO 391178 Crash [@ nsCSSFrameConstructor::FindFrameWithContent] with XUL trees, position:fixed 397093 Faulty .properties file results in uninitialized memory being used 401188 Thread-unsafe updates to sub-atomic rt->gc{Poke,Zeal} 403059 Dropdown list for "File Selected Message" is double spaced; arrows are missing. 411433 file location URL in directory listing should be HTML escaped 413161 nsIPrincipal needs a stricter origin 414982 Use gcZeal setting in nsJSEnvironment, as we once did with WAY_TOO_MUCH_GC 416282 Seamonkey/xpfe needs patch for bug 376473 416751 rich text editor no longer in designmode when navigating back 417957 Setting mail.auth_login and mail.server.default.auth_login to false breaks IMAP after restart 417994 navigator object does not fully reflect user agent settings 418128 Yet another GC hazard with ++/-- in js_Interpret 418356 [FIX]It's unsafe to use mozIJSSubScriptLoader.loadSubScript() with non-chrome urls or chrome urls whose scheme/host part contain uppercase characters 418645 Visible Region Notify message does not work when scrolling client window 419350 [ia64] build failure using gcc 4.3 419846 Non-chrome XUL documents can load chrome scripts from the fastload file 421622 XMLHttpRequest from chrome content clears Referer header 421689 Mozilla won't build with XCode 3.1 421715 canvas.2dcontext.putImageData(array[undefined]) causes a crash [@ JS_GetProperty] 422118 Crash reading malformed zip [@nsZipArchive::BuildFileList] 423042 js.c Print should flush 423182 changes the default MOZ_ZIP_FORMAT from .tar.gz to .zip 423541 Arbitrary file upload via originalTarget and DOM Range 424291 Crash [@ nsCellMap::SetNextSibling] while trying to print 425576 Crash on login to Excite Japan Blog (exblog.jp) after updating to Firefox 2.0.0.13 [@ js_MarkGCThing] 425594 new branch top crash [@ js_GC] maybe also crash [@ js_MarkGCThing][@js_GetGCThingFlags] 426628 Land dynamic gczeal on 1.8 branch 427185 JS Assertion from hell with gczeal 2 427216 Make tools menu popup match other applications 428606 New version of JEP (0.9.6.4), please land on trunk and branch 428669 Crash testcase for bug 425576 428672 XSS using an event handler attached to the outer window 429731 Changing new tab preference to home page in new profile results in chrome://navigator-region/locale/region.properties 430814 Crash [@ nsStyleContext::GetStyleDisplay] while trying to print 431184 Composer badly handles XHTML documents 431489 js_DecompileCode should not print if Decompile failed 431819 IMAP/POP/SMTP/LDAP with SSL client auth, Thunderbird repeatedly prompts for client certificate 432311 branch landing of bug#351476 (conversion of line endings in browser/EULA) 432591 Fix for bug 428672 can be circumvented by using XUL element 433328 XSS using