#acl PaulHowarth:read,write,admin,revert,delete All:read === Monday 14th June 2010 === ==== Fedora Project ==== * Raised [[RedHatBugzilla:603717|Bug #603717]] about GTK tear-off menus not working in Fedora 13 (originally discovered as a `bluefish` issue) * Updated `perl-Package-Stash` in Rawhide (`dist-f14-perltest` tag) to 0.04 (`get_package_symbol` now doesn't autovivify stash entries; a new method `get_or_add_package_symbol` can now be used for that behaviour) ==== Local Packages ==== * Updated `moin` (1.8) to 1.8.8: * Fixed XSS issues (see [[MoinMoin:MoinMoinBugs/1.9.2UnescapedInputForThemeAddMsg]]) * Fixed XSS in `Despam` action ([[CVE:2010-0828|CVE-2010-0828]]) * `wikiutil.clean_input`: avoid crash if it gets `str` type * Add `RenderAsDocbook` to `actions_excluded` if we have no `python-xml` * `AttachFile._build_filelist`: verifies `readonl`y flag for `unzip` file link * `attachUrl`: fix wrongly generated tickets (e.g. for `AttachList` macro) * Disable usage of `dircache`, deprecate `dc*` functions * Remove all calls to `filesys.dc*` (`dclistdir`, `dcdisable`) * Fixed crash, see [[MoinMoin:MoinMoinPatch/IncludeMacroWithDocBookFormatter]] * Avoid hardly recoverable crashes if `#format` specification is invalid * Fixed `info` action: `AttachFile` sub-actions that needed a ticket did not work * `auth.ldap_login`: add `report_invalid_credentials` parameter * Updated `perl-Package-Stash` as per the Fedora package * Updated `perl-Test-LeakTrace` to 0.11 (fix false-positive related to XS code - [[CPAN:5813|CPAN RT #58133]]) ----