Fedora Core 1 Update: samba-3.0.4-1.FC1
by Jay Fenlason
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-123
2004-06-10
---------------------------------------------------------------------
Product : Fedora Core 1
Name : samba
Version : 3.0.4
Release : 1.FC1
Summary : The Samba SMB server.
Description :
Samba is the protocol by which a lot of PC-related machines share
files, printers, and other information (such as lists of available
files and printers). The Windows NT, OS/2, and Linux operating systems
support this natively, and add-on packages can enable the same thing
for DOS, Windows, VMS, UNIX of all kinds, MVS, and more. This package
provides an SMB server that can be used to provide network services to
SMB (sometimes called "Lan Manager") clients. Samba uses NetBIOS over
TCP/IP (NetBT) protocols and does NOT need the NetBEUI (Microsoft Raw
NetBIOS frame) protocol.
---------------------------------------------------------------------
Update Information:
This update has been avaliable in testing for a while without complaints, so
I'v sent it to fedora-updates.
Note that Samba-3.0.4 still has a few know bugs, most of which should be fixed
by the upcoming samba-3.0.5 release.
---------------------------------------------------------------------
* Thu May 13 2004 Jay Fenlason <fenlason(a)redhat.com> 3.0.4-1.FC1
- New upstream version 3.0.4
- Merge many fixes from other branches as described below:
- Upgrade to samba-3.0.4, which includes upstream fixes for
bugzilla #114436, (probably also #116936)
- Move locase.dat, upcase.dat and valid.dat from -client to -common
Closes bugzilla #122749
- Added samba-3.0.4-smb.conf patch to make printing work better ootb.
Closes bugzilla #122527
- Change all requires lines to include an explicit epoch. This closes
bugzilla #102715
- Remove smbgetrc.5 man page, since we don't ship smbget.
- updated spec file to make libsmbclient.so executable. This closes
bugzilla #121356
- Updated configure line to remove --with-fhs and to explicitly set all
the directories that --with-fhs was setting. We were overriding most of
them anyway. This closes #118598
- add krb5-devel to buildrequires, fixes #116560
- Add patch from Miloslav Trmac (mitr(a)volny.cz) to allow non-root to run
"service smb status". This fixes #116559
- Change all requires lines to list an explicit epoch. Closes #102715
- Add an explicit Epoch so that 0 is defined.
- Changed all requires lines to include an explicit epoch. This closes
bugzilla #102715
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
8eb45f84aa62e8e22404354f2e49910a SRPMS/samba-3.0.4-1.FC1.src.rpm
3f50ad449d0be72549728ca928487635 i386/samba-3.0.4-1.FC1.i386.rpm
2591180492b35b7721bf782f5d2adabb i386/samba-client-3.0.4-1.FC1.i386.rpm
5d5862074aa671acd79cfe65d5fecddb i386/samba-common-3.0.4-1.FC1.i386.rpm
85460e3cc8d676fcf42e8b4928a9b665 i386/samba-swat-3.0.4-1.FC1.i386.rpm
50d2cc36e44da6b0b3fc88b554b84e2c i386/debug/samba-debuginfo-3.0.4-1.FC1.i386.rpm
507269e8ca37a519f72aafa58269ddaa x86_64/samba-3.0.4-1.FC1.x86_64.rpm
eb285e59cd427a9adaddb08b4e42374b x86_64/samba-client-3.0.4-1.FC1.x86_64.rpm
a3e27788a4c84157792edef703651af3 x86_64/samba-common-3.0.4-1.FC1.x86_64.rpm
0e71a36547b37b5dc526abf370da2679 x86_64/samba-swat-3.0.4-1.FC1.x86_64.rpm
dc211152fe276a38caeb64869f6ae932 x86_64/debug/samba-debuginfo-3.0.4-1.FC1.x86_64.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
19 years, 10 months
Fedora Core 1 Update: vim-6.2.532-1
by Karsten Hopp
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-147
2004-06-09
---------------------------------------------------------------------
Product : Fedora Core 1
Name : vim
Version : 6.2.532
Release : 1
Summary : The VIM editor.
Description :
VIM (VIsual editor iMproved) is an updated and improved version of the
vi editor. Vi was the first real screen-based editor for UNIX, and is
still very popular. VIM improves on vi by adding new features:
multiple windows, multi-level undo, block highlighting and more.
---------------------------------------------------------------------
Update Information:
This update upgrades vim to the latest patchlevel which fixes a lot of
minor issues described in README.patches. It also removes
the dependency between vim-minimal and vim-common.
Bugzilla entries fixed with this update: #123205,#110033
---------------------------------------------------------------------
* Tue Jun 01 2004 Karsten Hopp <karsten(a)redhat.de> 6.2.532-1
- patchlevel 532
- include vimrc in vim-minimal (#123205)
- add gvim icons (#110033)
* Wed Apr 07 2004 Karsten Hopp <karsten(a)redhat.de> 6.2.457-1
- patchlevel 457
* Fri Mar 26 2004 Karsten Hopp <karsten(a)redhat.de> 6.2.403-1
- patchlevel 403
* Thu Mar 18 2004 Karsten Hopp <karsten(a)redhat.de> 6.2.380-1
- patchlevel 380
* Mon Mar 08 2004 Karsten Hopp <karsten(a)redhat.de> 6.2.327-1
- patchlevel 327
* Wed Mar 03 2004 Karsten Hopp <karsten(a)redhat.de> 6.2.311-1
- patchlevel 311
* Mon Mar 01 2004 Karsten Hopp <karsten(a)redhat.de> 6.2.294-1
- patchlevel 294
* Fri Feb 13 2004 Elliot Lee <sopwith(a)redhat.com>
- rebuilt
* Wed Feb 11 2004 Karsten Hopp <karsten(a)redhat.de> 6.2.253-1
- patchlevel 253
- disable netbeans
* Thu Jan 29 2004 Karsten Hopp <karsten(a)redhat.de> 6.2.214-1
- Patchlevel 214
* Mon Jan 26 2004 Dan Walsh <dwalsh(a)redhat.com> 1:6.2.195-5
- Fix call to is_selinux_enabled()
* Sat Jan 24 2004 Karsten Hopp <karsten(a)redhat.de> 6.2.195-4
- fix perl requirement
* Fri Jan 23 2004 Dan Walsh <dwalsh(a)redhat.com> 1:6.2.195-3
- Only attempt to change context if it is different
* Thu Jan 22 2004 Karsten Hopp <karsten(a)redhat.de> 6.2.195-1
- update to patchlevel 195
- enable ppc64 build
* Mon Jan 12 2004 Karsten Hopp <karsten(a)redhat.de> 6.2.180-2
- vim-enhanced requires perl >= 5.8.2 (#111592)
* Mon Jan 12 2004 Karsten Hopp <karsten(a)redhat.de> 6.2.180-1
- Patchlevel 180
- update spec.vim, use g:packager instead of {Packager} macro
* Tue Jan 06 2004 Dan Walsh <dwalsh(a)redhat.com> 1:6.2.154-7
- Enable selinux support for vim-minimal
* Wed Dec 17 2003 Dan Walsh <dwalsh(a)redhat.com> 1:6.2.154-6
- Enable selinux support
* Thu Dec 04 2003 Karsten Hopp <karsten(a)redhat.de> 1:6.2.154-5
- rebuild with new perl
* Wed Dec 03 2003 Karsten Hopp <karsten(a)redhat.de> 1:6.2.154-4
- fix sh.vim syntax file (#104312)
* Tue Dec 02 2003 Karsten Hopp <karsten(a)redhat.de> 1:6.2.154-3
- perl interface was disabled when perl had thread support.
* Thu Nov 27 2003 Karsten Hopp <karsten(a)redhat.de> 1:6.2.154-2
- fix date in specfile changelog entries
* Thu Nov 13 2003 Karsten Hopp <karsten(a)redhat.de> 1:6.2.154-1
- Patchlevel 154
- vim-minimal doesn't really require vim-common to run, removed dependency
(#109819)
* Mon Nov 10 2003 Karsten Hopp <karsten(a)redhat.de> 1:6.2.149-1
- Patchlevel 149
- fix fstab syntax file (Robert G. (Doc) Savage)
- lots of updates for syntax files, macros, documentation
- disable vimnotvi patch so that vim's behaviour matches documentation
- clean up vimrc
* Thu Nov 06 2003 Karsten Hopp <karsten(a)redhat.de> 1:6.2.145-1
- rebuild with new Python
- Patchlevel 145
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
a1cfa8066c6d4cba49a689e766bd5617 SRPMS/vim-6.2.532-1.src.rpm
b7f840c961ad6d94be0a6095e146b8dd i386/vim-common-6.2.532-1.i386.rpm
c1696f6e6434e4f23417adcfdb250546 i386/vim-minimal-6.2.532-1.i386.rpm
9ffc06d3e55f31b66b54c759f48f82b5 i386/vim-enhanced-6.2.532-1.i386.rpm
f387be955d5ce332dd6499a4a0a60030 i386/vim-X11-6.2.532-1.i386.rpm
dc0ff79e887a0c7c1808304deac23850 i386/debug/vim-debuginfo-6.2.532-1.i386.rpm
58fc482824ff923fa2321e231d641c7a x86_64/vim-common-6.2.532-1.x86_64.rpm
91e9a3847658046029020d013b5fa1cd x86_64/vim-minimal-6.2.532-1.x86_64.rpm
a9611095549c680ccfab734d88350262 x86_64/vim-enhanced-6.2.532-1.x86_64.rpm
d37423f9b30ba4a077e225918d719352 x86_64/vim-X11-6.2.532-1.x86_64.rpm
d62a957e277b998015ecddb39935c729 x86_64/debug/vim-debuginfo-6.2.532-1.x86_64.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
--
Karsten Hopp <karsten(a)redhat.de> GPG 1024D/70ABD02C
Fingerprint D2D4 3B6B 2DE4 464C A432 210A DFF8 A140 70AB D02C
Red Hat Deutschland, Hauptstaetter Str.58
70178 Stuttgart, Tel.+49-711-96437-0, Fax +49-711-96437-111
19 years, 10 months
[SECURITY] Fedora Core 2 Update: squid-2.5.STABLE5-4.fc2
by Jay Fenlason
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-164
2004-06-09
---------------------------------------------------------------------
Product : Fedora Core 2
Name : squid
Version : 2.5.STABLE5
Release : 4.fc2
Summary : The Squid proxy caching server.
Description :
Squid is a high-performance proxy caching server for Web clients,
supporting FTP, gopher, and HTTP data objects. Unlike traditional
caching software, Squid handles all requests in a single,
non-blocking, I/O-driven process. Squid keeps meta data and especially
hot objects cached in RAM, caches DNS lookups, supports non-blocking
DNS lookups, and implements negative caching of failed requests.
Squid consists of a main server program squid, a Domain Name System
lookup program (dnsserver), a program for retrieving FTP data
(ftpget), and some management and client tools.
---------------------------------------------------------------------
* Mon Jun 07 2004 Jay Fenlason <fenlason(a)redhat.com> 7:2.5.STABLE3-4.fc2
- Backport security fix for ntlm auth helper (CAN-2004-0541).
* Thu Apr 08 2004 Jay Fenlason <fenlason(a)redhat.com> 7:2.5.STABLE5-3
- Fix the -pipe patch to have the correct name of the winbind pipe.
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/
b735863f8f52314d1ff9981c85ea56b2 SRPMS/squid-2.5.STABLE5-4.fc2.src.rpm
4d80ef2db40a68a7ba2ecffdec9d3372 i386/squid-2.5.STABLE5-4.fc2.i386.rpm
779417acbbfe0e022bc1525d9faae339 i386/debug/squid-debuginfo-2.5.STABLE5-4.fc2.i386.rpm
c8c1bc2cd95f892ce602e3e38e9e7823 x86_64/squid-2.5.STABLE5-4.fc2.x86_64.rpm
fcb5484591641424a956b23c97614963 x86_64/debug/squid-debuginfo-2.5.STABLE5-4.fc2.x86_64.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
19 years, 10 months
[SECURITY] Fedora Core 1 Update: squid-2.5.STABLE3-2.fc1
by Jay Fenlason
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-163
2004-06-09
---------------------------------------------------------------------
Product : Fedora Core 1
Name : squid
Version : 2.5.STABLE3
Release : 2.fc1
Summary : The Squid proxy caching server.
Description :
Squid is a high-performance proxy caching server for Web clients,
supporting FTP, gopher, and HTTP data objects. Unlike traditional
caching software, Squid handles all requests in a single,
non-blocking, I/O-driven process. Squid keeps meta data and especially
hot objects cached in RAM, caches DNS lookups, supports non-blocking
DNS lookups, and implements negative caching of failed requests.
Squid consists of a main server program squid, a Domain Name System
lookup program (dnsserver), a program for retrieving FTP data
(ftpget), and some management and client tools.
---------------------------------------------------------------------
* Mon Jun 07 2004 Jay Fenlason <fenlason(a)redhat.com>
7:2.5.STABLE3-2.fc1
- Backport patch for CAN-2004-0541: buffer overflow in ntlm auth
helper.
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
ac5bbb825c3ab5223b1b26f162f24c19 SRPMS/squid-2.5.STABLE3-2.fc1.src.rpm
28f6216478b102cbddcf6de38ea8f126 i386/squid-2.5.STABLE3-2.fc1.i386.rpm
c8fb3a9ddc44e0e8d01a092993877ed7 i386/debug/squid-debuginfo-2.5.STABLE3-2.fc1.i386.rpm
e034b4a07c0e00a285f115be6ac63cfa x86_64/squid-2.5.STABLE3-2.fc1.x86_64.rpm
6a4992a5d0244b297ddc9ca44a312541 x86_64/debug/squid-debuginfo-2.5.STABLE3-2.fc1.x86_64.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
19 years, 10 months
[SECURITY] Fedora Core 2 Update: squirrelmail-1.4.3-1
by Gary Benson
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-160
2004-06-09
---------------------------------------------------------------------
Product : Fedora Core 2
Name : squirrelmail
Version : 1.4.3
Release : 1
Summary : SquirrelMail webmail client
Description :
SquirrelMail is a standards-based webmail package written in PHP4. It
includes built-in pure PHP support for the IMAP and SMTP protocols, and
all pages render in pure HTML 4.0 (with no Javascript) for maximum
compatibility across browsers. It has very few requirements and is very
easy to configure and install. SquirrelMail has all the functionality
you would want from an email client, including strong MIME support,
address books, and folder manipulation.
---------------------------------------------------------------------
Update Information:
An SQL injection flaw was found in SquirrelMail version 1.4.2 and
earlier. If SquirrelMail is configured to store user addressbooks in
the database, a remote attacker could use this flaw to execute
arbitrary SQL statements. The Common Vulnerabilities and Exposures
project has assigned the name CAN-2004-0521 to this issue.
A number of cross-site scripting (XSS) flaws in SquirrelMail version
1.4.2 and earlier could allow remote attackers to execute scripts as
other web users. The Common Vulnerabilities and Exposures project
(cve.mitre.org) has assigned the names CAN-2004-0519 and CAN-2004-0520
to these issues.
This update includes the SquirrelMail version 1.4.3a which is not
vulnerable to these issues.
---------------------------------------------------------------------
* Mon Jun 07 2004 Gary Benson <gbenson(a)redhat.com> 1.4.3-1
- upgrade to 1.4.3a.
- retain stuff after version when adding release to it.
* Wed Jun 02 2004 Gary Benson <gbenson(a)redhat.com>
- upgrade to 1.4.3.
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/
1a985829cd9b532953d8235083aa9ff2 SRPMS/squirrelmail-1.4.3-1.src.rpm
b76007bdb6f2a926d46cc6099e66a45d i386/squirrelmail-1.4.3-1.noarch.rpm
b76007bdb6f2a926d46cc6099e66a45d x86_64/squirrelmail-1.4.3-1.noarch.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
19 years, 10 months
[SECURITY] Fedora Core 1 Update: squirrelmail-1.4.3-0.f1.1
by Gary Benson
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-159
2004-06-09
---------------------------------------------------------------------
Product : Fedora Core 1
Name : squirrelmail
Version : 1.4.3
Release : 0.f1.1
Summary : SquirrelMail webmail client
Description :
SquirrelMail is a standards-based webmail package written in PHP4. It
includes built-in pure PHP support for the IMAP and SMTP protocols, and
all pages render in pure HTML 4.0 (with no Javascript) for maximum
compatibility across browsers. It has very few requirements and is very
easy to configure and install. SquirrelMail has all the functionality
you would want from an email client, including strong MIME support,
address books, and folder manipulation.
---------------------------------------------------------------------
Update Information:
An SQL injection flaw was found in SquirrelMail version 1.4.2 and
earlier. If SquirrelMail is configured to store user addressbooks in
the database, a remote attacker could use this flaw to execute
arbitrary SQL statements. The Common Vulnerabilities and Exposures
project has assigned the name CAN-2004-0521 to this issue.
A number of cross-site scripting (XSS) flaws in SquirrelMail version
1.4.2 and earlier could allow remote attackers to execute scripts as
other web users. The Common Vulnerabilities and Exposures project
(cve.mitre.org) has assigned the names CAN-2004-0519 and CAN-2004-0520
to these issues.
This update includes the SquirrelMail version 1.4.3a which is not
vulnerable to these issues.
---------------------------------------------------------------------
* Mon Jun 07 2004 Gary Benson <gbenson(a)redhat.com> 1.4.3-0.f1.1
- upgrade to 1.4.3a.
- retain stuff after version when adding release to it.
* Wed Jun 02 2004 Gary Benson <gbenson(a)redhat.com>
- upgrade to 1.4.3.
* Fri Feb 13 2004 Elliot Lee <sopwith(a)redhat.com>
- rebuilt.
* Wed Jan 21 2004 Gary Benson <gbenson(a)redhat.com> 1.4.2-2
- fix calendar plugin breakage (#113902).
* Thu Jan 08 2004 Gary Benson <gbenson(a)redhat.com> 1.4.2-1
- upgrade to 1.4.2.
- tighten up permissions on /etc/squirrelmail/config.php (#112774).
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
be17fbe0ab2c017c9f8aafc407c3fb68 SRPMS/squirrelmail-1.4.3-0.f1.1.src.rpm
4c8288b42458e69e656230afd2a4a38f i386/squirrelmail-1.4.3-0.f1.1.noarch.rpm
4c8288b42458e69e656230afd2a4a38f x86_64/squirrelmail-1.4.3-0.f1.1.noarch.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
19 years, 10 months
Fedora Core 2 Update: bison-1.875c-1
by Roland McGrath
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-157
2004-06-07
---------------------------------------------------------------------
Product : Fedora Core 2
Name : bison
Version : 1.875c
Release : 1
Summary : A GNU general-purpose parser generator.
Description :
Bison is a general purpose parser generator that converts a grammar
description for an LALR(1) context-free grammar into a C program to
parse that grammar. Bison can be used to develop a wide range of
language parsers, from ones used in simple desk calculators to complex
programming languages. Bison is upwardly compatible with Yacc, so any
correctly written Yacc grammar should work with Bison without any
changes. If you know Yacc, you shouldn't have any trouble using
Bison. You do need to be very proficient in C programming to be able
to use Bison. Bison is only needed on systems that are used for
development.
If your system will be used for C development, you should install
Bison.
---------------------------------------------------------------------
* Fri Jun 04 2004 Roland McGrath <roland(a)redhat.com> 1.875c-1
- new upstream version (fixes bug #116823)
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/
583a0bd37ea65a1815df05f28176c06c SRPMS/bison-1.875c-1.src.rpm
7cb8b237d58e62ba57fc8e48c87692f9 i386/bison-1.875c-1.i386.rpm
10eb16f26c380b6800511bdb63e3c0ef i386/debug/bison-debuginfo-1.875c-1.i386.rpm
7b019b597cc6686ecdc6f30fe0cb70e7 x86_64/bison-1.875c-1.x86_64.rpm
0bf1dfcbaf143e7ffe4e17b79112b5a1 x86_64/debug/bison-debuginfo-1.875c-1.x86_64.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
19 years, 10 months
[SECURITY] Fedora Core 2 Update: krb5-1.3.3-7
by Nalin Dahyabhai
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-150
2004-06-04
---------------------------------------------------------------------
Product : Fedora Core 2
Name : krb5
Version : 1.3.3
Release : 7
Summary : The Kerberos network authentication system.
Description :
Kerberos V5 is a trusted-third-party network authentication system,
which can improve your network's security by eliminating the insecure
practice of cleartext passwords.
---------------------------------------------------------------------
Update Information:
Bugs have been fixed in the krb5_aname_to_localname library function.
Specifically, buffer overflows were possible for all Kerberos
versions up to and including 1.3.3. The krb5_aname_to_localname
function translates a Kerberos principal name to a local account
name, typically a UNIX username. This function is frequently used
when performing authorization checks.
If configured with mappings from particular Kerberos principals to
particular UNIX user names, certain functions called by
krb5_aname_to_localname will not properly check the lengths of
buffers used to store portions of the principal name. If configured
to map principals to user names using rules, krb5_aname_to_localname
would consistently write one byte past the end of a buffer allocated
from the heap. The Common Vulnerabilities and Exposures project
(cve.mitre.org) has assigned the name CAN-2004-0523 to this issue.
Only configurations which enable the explicit mapping or rules-based
mapping functionality of krb5_aname_to_localname() are vulnerable.
These configurations are not the default.
---------------------------------------------------------------------
* Fri Jun 04 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.3-7
- rebuild
* Fri Jun 04 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.3-6
- apply updated patch from MITKRB5-SA-2004-001 (revision 2004-06-02)
* Tue Jun 01 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.3-5
- rebuild
* Tue Jun 01 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.3-4
- apply patch from MITKRB5-SA-2004-001 (#125001)
* Wed May 12 2004 Thomas Woerner <twoerner(a)redhat.com> 1.3.3-3
- removed rpath
* Thu Apr 15 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.3-2
- re-enable large file support, fell out in 1.3-1
- patch rcp to use long long and %lld format specifiers when reporting file
sizes on large files
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/
437540335f79da1cbbc18d164e6215c0 SRPMS/krb5-1.3.3-7.src.rpm
cd6c377ee71fc3ac7a2ed1451632bc99 i386/krb5-devel-1.3.3-7.i386.rpm
4a4a06a0dd0bddb0bf9aefc35825029c i386/krb5-libs-1.3.3-7.i386.rpm
f857845fde8315c8d6416e5d7befc605 i386/krb5-server-1.3.3-7.i386.rpm
84cc98e232f3834450b450d44dd9374a i386/krb5-workstation-1.3.3-7.i386.rpm
1ee42664e020e7fa5a4a1c8202aabdee i386/debug/krb5-debuginfo-1.3.3-7.i386.rpm
6dbdb3334974c1735a044deb2632e3a6 x86_64/krb5-devel-1.3.3-7.x86_64.rpm
864422b001ad11e0468ed53cbe6276fe x86_64/krb5-libs-1.3.3-7.x86_64.rpm
606c96ce4814f686a99d7231aa5a6080 x86_64/krb5-server-1.3.3-7.x86_64.rpm
ad1573302d8702c705608d5f2803362d x86_64/krb5-workstation-1.3.3-7.x86_64.rpm
6409ec2efcf54640e58451b32efb270a x86_64/debug/krb5-debuginfo-1.3.3-7.x86_64.rpm
4a4a06a0dd0bddb0bf9aefc35825029c x86_64/krb5-libs-1.3.3-7.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
19 years, 11 months
[SECURITY] Fedora Core 1 Update: krb5-1.3.3-6
by Nalin Dahyabhai
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-149
2004-06-04
---------------------------------------------------------------------
Product : Fedora Core 1
Name : krb5
Version : 1.3.3
Release : 6
Summary : The Kerberos network authentication system.
Description :
Kerberos V5 is a trusted-third-party network authentication system,
which can improve your network's security by eliminating the insecure
practice of cleartext passwords.
---------------------------------------------------------------------
Update Information:
Bugs have been fixed in the krb5_aname_to_localname library function.
Specifically, buffer overflows were possible for all Kerberos
versions up to and including 1.3.3. The krb5_aname_to_localname
function translates a Kerberos principal name to a local account
name, typically a UNIX username. This function is frequently used
when performing authorization checks.
If configured with mappings from particular Kerberos principals to
particular UNIX user names, certain functions called by
krb5_aname_to_localname will not properly check the lengths of
buffers used to store portions of the principal name. If configured
to map principals to user names using rules, krb5_aname_to_localname
would consistently write one byte past the end of a buffer allocated
from the heap. The Common Vulnerabilities and Exposures project
(cve.mitre.org) has assigned the name CAN-2004-0523 to this issue.
Only configurations which enable the explicit mapping or rules-based
mapping functionality of krb5_aname_to_localname() are vulnerable.
These configurations are not the default.
---------------------------------------------------------------------
* Fri Jun 04 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.3-6
- apply updated patch from MITKRB5-SA-2004-001 (revision 2004-06-02)
* Tue Jun 01 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.3-5
- rebuild
* Tue Jun 01 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.3-4
- apply patch from MITKRB5-SA-2004-001 (#125001)
* Wed May 12 2004 Thomas Woerner <twoerner(a)redhat.com> 1.3.3-3
- removed rpath
* Thu Apr 15 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.3-2
- re-enable large file support, fell out in 1.3-1
- patch rcp to use long long and %lld format specifiers when reporting file
sizes on large files
* Tue Apr 13 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.3-1
- update to 1.3.3
* Wed Mar 10 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.2-1
- update to 1.3.2
* Mon Mar 08 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.1-12
- rebuild
* Tue Mar 02 2004 Elliot Lee <sopwith(a)redhat.com> 1.3.1-11.1
- rebuilt
* Fri Feb 13 2004 Elliot Lee <sopwith(a)redhat.com> 1.3.1-11
- rebuilt
* Mon Feb 09 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.1-10
- catch krb4 send_to_kdc cases in kdc preference patch
* Mon Feb 02 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.1-9
- remove patch to set TERM in klogind which, combined with the upstream fix in
1.3.1, actually produces the bug now (#114762)
* Mon Jan 19 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.1-8
- when iterating over lists of interfaces which are "up" from getifaddrs(),
skip over those which have no address (#113347)
* Mon Jan 12 2004 Nalin Dahyabhai <nalin(a)redhat.com>
- prefer the kdc which last replied to a request when sending requests to kdcs
* Mon Nov 24 2003 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.1-7
- fix combination of --with-netlib and --enable-dns (#82176)
* Tue Nov 18 2003 Nalin Dahyabhai <nalin(a)redhat.com>
- remove libdefault ticket_lifetime option from the default krb5.conf, it is
ignored by libkrb5
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
9a19d200ff0a0d6e6c2029c9fd50653c SRPMS/krb5-1.3.3-6.src.rpm
e03f00a0916359f8a6005e3fc6b6995c i386/krb5-devel-1.3.3-6.i386.rpm
2d0973874755c7e313cfdf04f6860be7 i386/krb5-libs-1.3.3-6.i386.rpm
e4791f4e22a6bb8ab2a7f8fba96a882f i386/krb5-server-1.3.3-6.i386.rpm
720da2c10e2a30d65401425d430ab75d i386/krb5-workstation-1.3.3-6.i386.rpm
d52133ae2dd14a5ffb807236e8c46a46 i386/debug/krb5-debuginfo-1.3.3-6.i386.rpm
f7b3fd343d8831e217265f0355411f32 x86_64/krb5-devel-1.3.3-6.x86_64.rpm
8d9fa0425dae7bb5aad5642239380918 x86_64/krb5-libs-1.3.3-6.x86_64.rpm
5461eb73a8fe388b767670b71dd867c7 x86_64/krb5-server-1.3.3-6.x86_64.rpm
da2a35d9fa2ae594505b959b37abcab4 x86_64/krb5-workstation-1.3.3-6.x86_64.rpm
064b11d2fe16d6f845f850683afabbc4 x86_64/debug/krb5-debuginfo-1.3.3-6.x86_64.rpm
2d0973874755c7e313cfdf04f6860be7 x86_64/krb5-libs-1.3.3-6.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
19 years, 11 months
Fedora Core 1 Update: strace-4.5.4-0.FC1
by Roland McGrath
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-155
2004-06-04
---------------------------------------------------------------------
Product : Fedora Core 1
Name : strace
Version : 4.5.4
Release : 0.FC1
Summary : Tracks and displays system calls associated with a running process.
Description :
The strace program intercepts and records the system calls called and
received by a running process. Strace can print a record of each
system call, its arguments and its return value. Strace is useful for
diagnosing problems and debugging, as well as for instructional
purposes.
Install strace if you need a tool to track the system calls made and
received by a process.
---------------------------------------------------------------------
* Thu Jun 03 2004 Roland McGrath <roland(a)redhat.com> 4.5.4-0.FC1
- rebuilt for FC1 update
* Thu Jun 03 2004 Roland McGrath <roland(a)redhat.com> 4.5.4-1
- new upstream version, more ioctls (#122257), minor fixes
* Fri Apr 16 2004 Roland McGrath <roland(a)redhat.com> 4.5.3-1
- new upstream version, mq_* calls (#120701), -p vs NPTL (#120462), more fixes (#118694, #120541, #118685)
* Tue Mar 02 2004 Elliot Lee <sopwith(a)redhat.com> 4.5.2-1.1
- rebuilt
* Mon Mar 01 2004 Roland McGrath <roland(a)redhat.com> 4.5.2-1
- new upstream version, sched_* calls (#116990), show core flag (#112117)
* Fri Feb 13 2004 Elliot Lee <sopwith(a)redhat.com>
- rebuilt
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
1ea9739391e6d774cf8fdbf3d299dce6 SRPMS/strace-4.5.4-0.FC1.src.rpm
c1dc3d89ab2a0489d65edf3ef05de34a i386/strace-4.5.4-0.FC1.i386.rpm
f4285155472d964081e1a1004c53d4e9 i386/debug/strace-debuginfo-4.5.4-0.FC1.i386.rpm
012891093dd37048ece9506de7379246 x86_64/strace-4.5.4-0.FC1.x86_64.rpm
544509c69b5257c4ae0639df7cad27cc x86_64/debug/strace-debuginfo-4.5.4-0.FC1.x86_64.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
19 years, 11 months