Monday 14th June 2010
Fedora Project
Raised Bug #603717 about GTK tear-off menus not working in Fedora 13 (originally discovered as a bluefish issue)
Updated perl-Package-Stash in Rawhide (dist-f14-perltest tag) to 0.04 (get_package_symbol now doesn't autovivify stash entries; a new method get_or_add_package_symbol can now be used for that behaviour)
Local Packages
Updated moin (1.8) to 1.8.8:
Fixed XSS issues (see MoinMoinBugs/1.9.2UnescapedInputForThemeAddMsg)
Fixed XSS in Despam action (CVE-2010-0828)
wikiutil.clean_input: avoid crash if it gets str type
Add RenderAsDocbook to actions_excluded if we have no python-xml
AttachFile._build_filelist: verifies readonly flag for unzip file link
attachUrl: fix wrongly generated tickets (e.g. for AttachList macro)
Disable usage of dircache, deprecate dc* functions
Remove all calls to filesys.dc* (dclistdir, dcdisable)
Fixed crash, see MoinMoinPatch/IncludeMacroWithDocBookFormatter
Avoid hardly recoverable crashes if #format specification is invalid
Fixed info action: AttachFile sub-actions that needed a ticket did not work
auth.ldap_login: add report_invalid_credentials parameter
Updated perl-Package-Stash as per the Fedora package
Updated perl-Test-LeakTrace to 0.11 (fix false-positive related to XS code - CPAN RT #58133)