package-announce April 2007

package-announce@lists.fedoraproject.org

32 participants
76 discussions

Fedora Core 6 Update: squid-2.6.STABLE12-1.fc6
by Martin Bacovsky 05 Apr '07

05 Apr '07

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2007-412 2007-04-05 --------------------------------------------------------------------- Product : Fedora Core 6 Name : squid Version : 2.6.STABLE12 Release : 1.fc6 Summary : The Squid proxy caching server. Description : Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DNS lookups, supports non-blocking DNS lookups, and implements negative caching of failed requests. Squid consists of a main server program squid, a Domain Name System lookup program (dnsserver), a program for retrieving FTP data (ftpget), and some management and client tools. --------------------------------------------------------------------- Update Information: This package should provide an upgrade to squid-2.6.STABLE12 --------------------------------------------------------------------- * Mon Apr 2 2007 Martin Bacovsky <mbacovsk(a)redhat.com> - 7:2.6.STABLE12-1 - update to the latest upsteram --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/ 22bc69d27332ee7d6e47e0a02c074dedd8ede4fb SRPMS/squid-2.6.STABLE12-1.fc6.src.rpm 22bc69d27332ee7d6e47e0a02c074dedd8ede4fb noarch/squid-2.6.STABLE12-1.fc6.src.rpm 070c2234bf99991d29ff6e287f4797b3140062d5 ppc/debug/squid-debuginfo-2.6.STABLE12-1.fc6.ppc.rpm 0276e9419d96aa767e2a9cf893031ca4543a4605 ppc/squid-2.6.STABLE12-1.fc6.ppc.rpm bc8a45049eccab879d0fa8c32d383264cc5c49af x86_64/squid-2.6.STABLE12-1.fc6.x86_64.rpm c20e44cfdc7f9d01747a55dfbfbda8b4d607222b x86_64/debug/squid-debuginfo-2.6.STABLE12-1.fc6.x86_64.rpm e168dd16d473a0518c67096741ba15a7ca041b05 i386/debug/squid-debuginfo-2.6.STABLE12-1.fc6.i386.rpm 078abae0bc6cffc714a85ce343901c7049e7566b i386/squid-2.6.STABLE12-1.fc6.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://fedora.redhat.com/docs/yum/. ---------------------------------------------------------------------

1 0

[SECURITY] Fedora Core 5 Update: evolution-2.6.3-2.fc5
by Matthew Barnes 04 Apr '07

04 Apr '07

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2007-404 2007-04-04 --------------------------------------------------------------------- Product : Fedora Core 5 Name : evolution Version : 2.6.3 Release : 2.fc5 Summary : GNOME's next-generation groupware suite Description : Evolution is the GNOME mailer, calendar, contact manager and communications tool. The tools which make up Evolution will be tightly integrated with one another and act as a seamless personal information-management tool. --------------------------------------------------------------------- Update Information: This update fixes a security flaw that allowed a specially crafted shared memo to execute arbitrary code. --------------------------------------------------------------------- * Mon Apr 2 2007 Matthew Barnes <mbarnes(a)redhat.com> - 2.6.3-2.fc5 - CVE-2007-1002 (Shared memo categories format string vulnerability) * Mon Aug 7 2006 Matthew Barnes <mbarnes(a)redhat.com> - 2.6.3-1.fc5.5 - Rebuild * Fri Aug 4 2006 Matthew Barnes <mbarnes(a)redhat.com> - 2.6.3-1.fc5.4 - Require evolution-data-server 1.6.3. * Wed Aug 2 2006 Matthew Barnes <mbarnes(a)redhat.com> - 2.6.3-1.fc5.3 - Remove evo-calendar-print-with-pango-7.patch (fixed upstream). - Remove patch for RH bug #150458 (fixed upstream). - Clean up spec file, renumber patches. * Wed Aug 2 2006 Matthew Barnes <mbarnes(a)redhat.com> - 2.6.3-1.fc5.2 - Remove patch for RH bug #167157, as it fixed it the wrong way. * Wed Aug 2 2006 Matthew Barnes <mbarnes(a)redhat.com> - 2.6.3-1.fc5.1 - Update to 2.6.3 - No longer packaging unused patches. * Sat Jul 29 2006 Matthew Barnes <mbarnes(a)redhat.com> - 2.6.2-1.fc5.7 - Add patch for RH bug #167157. * Wed Jun 7 2006 Matthias Clasen <mclasen(a)redhat.com> - 2.6.2-1.fc5.6 - Rebuild * Tue Jun 6 2006 Jesse Keating <jkeating(a)redhat.com> - 2.6.2-1.fc5.5 - Bump eds version requires * Tue Jun 6 2006 Adam Jackson <ajackson(a)redhat.com> - 2.6.2-1.fc5.3 - ExcludeArch on s390{,x} because it's broken, and it's not shipped in FC5 on those arches anyway. * Tue Jun 6 2006 Adam Jackson <ajackson(a)redhat.com> - 2.6.2-1.fc5.2 - Rebuild to hopefully fix build deps. * Tue May 30 2006 Matthew Barnes <mbarnes(a)redhat.com> - 2.6.2-1.fc5.1 - Update to 2.6.2 - Remove NSS/NSPR chunk from evolution-2.5.2-no-gnome-common.patch (fixed upstream) and rename to version 2.6.2. --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/ 86b2b80ae1fa4df610ae01a30d4e113f7c629548 SRPMS/evolution-2.6.3-2.fc5.src.rpm 86b2b80ae1fa4df610ae01a30d4e113f7c629548 noarch/evolution-2.6.3-2.fc5.src.rpm 7822ba6e91d839c66e638c4130bcb1b6d9ccb1cf ppc/evolution-devel-2.6.3-2.fc5.ppc.rpm 036d3ad4be94d75dbaf105e410912dd02428b390 ppc/evolution-2.6.3-2.fc5.ppc.rpm 8f4ef58dc1a5915d981a6de4be3dda1add096397 ppc/debug/evolution-debuginfo-2.6.3-2.fc5.ppc.rpm 92963eeedfb1870dc36820f8149ec62a845ac3ee x86_64/evolution-2.6.3-2.fc5.x86_64.rpm 7795f09e5159aa2aaef19da9b103e6b37a123aac x86_64/debug/evolution-debuginfo-2.6.3-2.fc5.x86_64.rpm 5c99f30e04c86d27c7fd7582abef0e577ec8d131 x86_64/evolution-devel-2.6.3-2.fc5.x86_64.rpm e7fa54bd487227a8451592aa7031f54f30249f75 i386/debug/evolution-debuginfo-2.6.3-2.fc5.i386.rpm 1a55bf5eff254f665aca9f4688838bf4a2ccb9a8 i386/evolution-devel-2.6.3-2.fc5.i386.rpm d569b81757845e0b941752b768b5fcfd9d534e64 i386/evolution-2.6.3-2.fc5.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://fedora.redhat.com/docs/yum/. ---------------------------------------------------------------------

1 0

[SECURITY] Fedora Core 6 Update: evolution-2.8.3-2.fc6
by Matthew Barnes 04 Apr '07

04 Apr '07

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2007-393 2007-04-04 --------------------------------------------------------------------- Product : Fedora Core 6 Name : evolution Version : 2.8.3 Release : 2.fc6 Summary : GNOME's next-generation groupware suite Description : Evolution is the GNOME mailer, calendar, contact manager and communications tool. The tools which make up Evolution will be tightly integrated with one another and act as a seamless personal information-management tool. --------------------------------------------------------------------- Update Information: This update fixes a security flaw that allowed a specially crafted shared memo to execute arbitrary code. --------------------------------------------------------------------- * Thu Mar 29 2007 Matthew Barnes <mbarnes(a)redhat.com> - 2.8.3-2.fc6 - CVE-2007-1002 (Shared memo categories format string vulnerability) --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/ f0f3c4a7d5d16df7ddafd08bba14e8fadafa25f6 SRPMS/evolution-2.8.3-2.fc6.src.rpm f0f3c4a7d5d16df7ddafd08bba14e8fadafa25f6 noarch/evolution-2.8.3-2.fc6.src.rpm 986e4976ea1950a6f211e8c4f9a2842222638444 ppc/evolution-2.8.3-2.fc6.ppc.rpm d7df2f9125da9d316f4b19460cdd77edc26ba93b ppc/evolution-devel-2.8.3-2.fc6.ppc.rpm f91481176b34643e4c39f301b795c350d3610306 ppc/debug/evolution-debuginfo-2.8.3-2.fc6.ppc.rpm ff7dfbffd37f4f8d89e7ddba1f57852d5f7bea25 x86_64/debug/evolution-debuginfo-2.8.3-2.fc6.x86_64.rpm adbbfcedabe5a1bf3153b17827717901b687e6cd x86_64/evolution-devel-2.8.3-2.fc6.x86_64.rpm 4855d88dd67ac683de6239fca4f7a7eaa905d6aa x86_64/evolution-2.8.3-2.fc6.x86_64.rpm 73ce0e247c5f53fd66dad1f5b4f993f39ce2a345 i386/evolution-devel-2.8.3-2.fc6.i386.rpm a68bd20c0b01e8a099fcb14f680b0fdb7deaba69 i386/debug/evolution-debuginfo-2.8.3-2.fc6.i386.rpm 8e2055a7376fc23d45364d08bf38de877dcc0fba i386/evolution-2.8.3-2.fc6.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://fedora.redhat.com/docs/yum/. ---------------------------------------------------------------------

1 0

Fedora Core 6 Update: perl-XML-Twig-3.29-1.fc6
by Robin Norwood 04 Apr '07

04 Apr '07

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2007-403 2007-04-04 --------------------------------------------------------------------- Product : Fedora Core 6 Name : perl-XML-Twig Version : 3.29 Release : 1.fc6 Summary : A perl module for processing huge XML documents in tree mode Description : This module provides a way to process XML documents. It is build on top of XML::Parser. XML::Twig offers a tree interface to the document, while allowing you to output the parts of it that have been completely processed. It allows minimal resource (CPU and memory) usage by building the tree only for the parts of the documents that need actual processing, through the use of the twig_roots and twig_print_outside_roots options. --------------------------------------------------------------------- Update Information: Update to the latest XM::Twig - 3.29. --------------------------------------------------------------------- * Sun Apr 1 2007 Robin Norwood <rnorwood(a)redhat.com> - 3.29-1 - Resolves: rhbz#230037 - New version: 3.29 - Remove obsolete patch --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/ b12cfac153e5cba32c042c6d86fc810a49a3553a SRPMS/perl-XML-Twig-3.29-1.fc6.src.rpm b12cfac153e5cba32c042c6d86fc810a49a3553a noarch/perl-XML-Twig-3.29-1.fc6.src.rpm 368cbae44946d68c2d9e9d712c076978c3d3706e ppc/perl-XML-Twig-3.29-1.fc6.noarch.rpm 368cbae44946d68c2d9e9d712c076978c3d3706e x86_64/perl-XML-Twig-3.29-1.fc6.noarch.rpm 368cbae44946d68c2d9e9d712c076978c3d3706e i386/perl-XML-Twig-3.29-1.fc6.noarch.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://fedora.redhat.com/docs/yum/. ---------------------------------------------------------------------

1 0

[SECURITY] Fedora Core 5 Update: openssh-4.3p2-4.12.fc5
by Miloslav Trmač 03 Apr '07

03 Apr '07

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2007-395 2007-04-03 --------------------------------------------------------------------- Product : Fedora Core 5 Name : openssh Version : 4.3p2 Release : 4.12.fc5 Summary : The OpenSSH implementation of SSH protocol versions 1 and 2 Description : SSH (Secure SHell) is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forwarded over the secure channel. OpenSSH is OpenBSD's version of the last free version of SSH, bringing it up to date in terms of security and features, as well as removing all patented algorithms to separate libraries. This package includes the core files necessary for both the OpenSSH client and server. To make this package useful, you should also install openssh-clients, openssh-server, or both. --------------------------------------------------------------------- * Fri Mar 30 2007 Miloslav Trmac <mitr(a)redhat.com> - 4.3p2-4.12 - Fix an information leak in Kerberos password authentication (CVE-2006-5052) Resolves: #234640 * Fri Nov 10 2006 Tomas Mraz <tmraz(a)redhat.com> - 4.3p2-4.11 - CVE-2006-5794 - properly detect failed key verify in monitor (#214641) - kill all ssh sessions when stop is called in halt or reboot runlevel (#213008) - remove -TERM option from killproc so we don't race on sshd restart (#213490) * Mon Oct 2 2006 Tomas Mraz <tmraz(a)redhat.com> - 4.3p2-4.10 - improve gssapi-no-spnego patch (#208102) - CVE-2006-4924 - prevent DoS on deattack detector (#207957) - CVE-2006-5051 - don't call cleanups from signal handler (#208459) * Wed Sep 13 2006 Tomas Mraz <tmraz(a)redhat.com> - 4.3p2-4.1 - sync with FC6 version - build for FC5 * Wed Aug 23 2006 Tomas Mraz <tmraz(a)redhat.com> - 4.3p2-9 - don't report duplicate syslog messages, use correct local time (#189158) - don't allow spnego as gssapi mechanism (from upstream) - fixed memleaks found by Coverity (from upstream) - allow ip options except source routing (#202856) (patch by HP) * Tue Aug 8 2006 Tomas Mraz <tmraz(a)redhat.com> - 4.3p2-8 - drop the pam-session patch from the previous build (#201341) - don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594) * Thu Jul 20 2006 Tomas Mraz <tmraz(a)redhat.com> - 4.3p2-7 - dropped old ssh obsoletes - call the pam_session_open/close from the monitor when privsep is enabled so it is always called as root (patch by Darren Tucker) * Mon Jul 17 2006 Tomas Mraz <tmraz(a)redhat.com> - 4.3p2-6 - improve selinux patch (by Jan Kiszka) - upstream patch for buffer append space error (#191940) - fixed typo in configure.ac (#198986) - added pam_keyinit to pam configuration (#198628) - improved error message when askpass dialog cannot grab keyboard input (#198332) - buildrequires xauth instead of xorg-x11-xauth - fixed a few rpmlint warnings * Wed Jul 12 2006 Jesse Keating <jkeating(a)redhat.com> - 4.3p2-5.1 - rebuild * Fri Apr 14 2006 Tomas Mraz <tmraz(a)redhat.com> - 4.3p2-5 - don't request pseudoterminal allocation if stdin is not tty (#188983) --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/ 49a0f04ff39103ca6633df0dc7c8675df017d8cd SRPMS/openssh-4.3p2-4.12.fc5.src.rpm 49a0f04ff39103ca6633df0dc7c8675df017d8cd noarch/openssh-4.3p2-4.12.fc5.src.rpm f695b07aedd02e76bc7f8d1a4ae457f5b484a3af ppc/openssh-4.3p2-4.12.fc5.ppc.rpm 0a5cd836fa70c740b29f68a88b1b8e858f066d1f ppc/debug/openssh-debuginfo-4.3p2-4.12.fc5.ppc.rpm ac93ac9b25c3ab5116381bcd625648fa85c1edfc ppc/openssh-clients-4.3p2-4.12.fc5.ppc.rpm ca64ff05c6d7259e7c7ab521aee98d8b64cd7c57 ppc/openssh-askpass-4.3p2-4.12.fc5.ppc.rpm 9c8d538b586029bd7175e2c27281d5cb5d353db3 ppc/openssh-server-4.3p2-4.12.fc5.ppc.rpm f26b84014a8d4c500f82cd4e723bdd740f9d0966 x86_64/openssh-4.3p2-4.12.fc5.x86_64.rpm 4cdabc66ec4f01b04ca0c4a08c0a2b348c51ec6e x86_64/openssh-server-4.3p2-4.12.fc5.x86_64.rpm 359bb446bb1ae94980c88e90ef3fa7ad3cc385a4 x86_64/openssh-clients-4.3p2-4.12.fc5.x86_64.rpm aea197e6daee743926b13b797ca3ade0904d4ef4 x86_64/openssh-askpass-4.3p2-4.12.fc5.x86_64.rpm 5d7cc4bbbcbf234cbcf5cb467a8ac89501c4fd15 x86_64/debug/openssh-debuginfo-4.3p2-4.12.fc5.x86_64.rpm 40c1eb6b49deb3d6571f0a634c06cdbbbe9dbf08 i386/openssh-server-4.3p2-4.12.fc5.i386.rpm 040f2997e5dc10d593425bae9b412c9bffe98717 i386/openssh-askpass-4.3p2-4.12.fc5.i386.rpm 863f9d7fcdf757af0bf37054d649d249a7c5acca i386/openssh-clients-4.3p2-4.12.fc5.i386.rpm a9f0cf8528b4e59e3b67e457c86b82a7f3851eb7 i386/debug/openssh-debuginfo-4.3p2-4.12.fc5.i386.rpm 9e44452820b0d0e66e0c8ac09d8d44381733e90a i386/openssh-4.3p2-4.12.fc5.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://fedora.redhat.com/docs/yum/. ---------------------------------------------------------------------

1 0

[SECURITY] Fedora Core 6 Update: openssh-4.3p2-19.fc6
by Miloslav Trmač 03 Apr '07

03 Apr '07

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2007-394 2007-04-03 --------------------------------------------------------------------- Product : Fedora Core 6 Name : openssh Version : 4.3p2 Release : 19.fc6 Summary : The OpenSSH implementation of SSH protocol versions 1 and 2 Description : SSH (Secure SHell) is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forwarded over the secure channel. OpenSSH is OpenBSD's version of the last free version of SSH, bringing it up to date in terms of security and features, as well as removing all patented algorithms to separate libraries. This package includes the core files necessary for both the OpenSSH client and server. To make this package useful, you should also install openssh-clients, openssh-server, or both. --------------------------------------------------------------------- * Fri Mar 30 2007 Miloslav Trmac <mitr(a)redhat.com> - 4.3p2-19 - Fix an information leak in Kerberos password authentication (CVE-2006-5052) Resolves: #234640 --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/ d618e0405fe5c50e50da6dc6449f4ced65081ba1 SRPMS/openssh-4.3p2-19.fc6.src.rpm d618e0405fe5c50e50da6dc6449f4ced65081ba1 noarch/openssh-4.3p2-19.fc6.src.rpm 1697767b4acf1c6a0609d470f3572e89200b0d71 ppc/openssh-server-4.3p2-19.fc6.ppc.rpm 7ddb1f517b02a3d0c98783e9d3c33dccae348293 ppc/debug/openssh-debuginfo-4.3p2-19.fc6.ppc.rpm 7ad95447da9c547b89b5a15562fe7117ebaebaee ppc/openssh-clients-4.3p2-19.fc6.ppc.rpm 4c89e898fb29c6e166f42b182efbaeef7630fc92 ppc/openssh-4.3p2-19.fc6.ppc.rpm 31bd98a19c8b4ccb38be4586decc1c9233e31b27 ppc/openssh-askpass-4.3p2-19.fc6.ppc.rpm 95bc316b1e4b99571254d340682507decff04287 x86_64/debug/openssh-debuginfo-4.3p2-19.fc6.x86_64.rpm 8346de69721d4c978193955e219bf1142d0af059 x86_64/openssh-4.3p2-19.fc6.x86_64.rpm 9affce96ef52316a2ed2015ccf18c522dbbde365 x86_64/openssh-server-4.3p2-19.fc6.x86_64.rpm 5d47c4b61e157d097e1509b8ad83e195ca9a66e3 x86_64/openssh-clients-4.3p2-19.fc6.x86_64.rpm ceb817ca910998d4dbd903eace783d1f827f33ec x86_64/openssh-askpass-4.3p2-19.fc6.x86_64.rpm daaf9660fc0109f8619304405249fb7a0ac508f6 i386/openssh-4.3p2-19.fc6.i386.rpm c6d9ff90ddea33556c1913e2c34abf8e8d6bf1a7 i386/debug/openssh-debuginfo-4.3p2-19.fc6.i386.rpm d573f33d72e5b1f63e4f3d6e208eca93dd328c09 i386/openssh-askpass-4.3p2-19.fc6.i386.rpm e53a2d9e831e94e9047d3f781a1d73d23abbf7ef i386/openssh-clients-4.3p2-19.fc6.i386.rpm 2c8a19e422f368c6a344d43579bae4945bfdf194 i386/openssh-server-4.3p2-19.fc6.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://fedora.redhat.com/docs/yum/. ---------------------------------------------------------------------

1 0

[SECURITY] Fedora Core 5 Update: krb5-1.4.3-5.4
by Nalin Dahyabhai 03 Apr '07

03 Apr '07

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2007-409 2007-04-03 --------------------------------------------------------------------- Product : Fedora Core 5 Name : krb5 Version : 1.4.3 Release : 5.4 Summary : The Kerberos network authentication system. Description : Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of cleartext passwords. --------------------------------------------------------------------- Update Information: This update incorporates fixes for MITKRB5-SA-2007-001 (unauthorized access via telnetd), MITKRB5-SA-2007-002 (buffer overflow in KDC and kadmind logging), and MITKRB5-SA-2007-003 (double-free in kadmind). --------------------------------------------------------------------- * Tue Apr 3 2007 Nalin Dahyabhai <nalin(a)redhat.com> 1.4.3-5.4 - add patch to correct unauthorized access via krb5-aware telnet daemon (#229782, CVE-2007-0956) - add patch to fix buffer overflow in krb5kdc and kadmind (#231528, CVE-2007-0957) - add patch to fix double-free in kadmind (#231537, CVE-2007-1216) * Tue Jan 9 2007 Nalin Dahyabhai <nalin(a)redhat.com> 1.4.3-5.3 - apply patch from Tom Yu to fix MITKRB-SA-2006-002 (CVE-2006-6143) * Fri Aug 18 2006 Nalin Dahyabhai <nalin(a)redhat.com> 1.4.3-5.2 - switch to the updated patch for MITKRB-SA-2006-001 * Tue Aug 8 2006 Nalin Dahyabhai <nalin(a)redhat.com> 1.4.3-5.1 - apply patch to address MITKRB-SA-2006-001 (CVE-2006-3084) * Fri Apr 14 2006 Stepan Kasal <skasal(a)redhat.com> - 1.4.3-5 - Fix formatting typo in kinit.1 (krb5-kinit-man-typo.patch) --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/ aa93427c2746f1bbbe8efe23a5c5467c60d30e08 SRPMS/krb5-1.4.3-5.4.src.rpm aa93427c2746f1bbbe8efe23a5c5467c60d30e08 noarch/krb5-1.4.3-5.4.src.rpm 48c9018cddb73d08ffb00a90f9881c2aa5903d23 ppc/debug/krb5-debuginfo-1.4.3-5.4.ppc.rpm cbe7dd65e1789a36643d3f8cf14e99baed64deb5 ppc/krb5-devel-1.4.3-5.4.ppc.rpm 7e3358bcebb4905cd6a1f56d123605b73cd34e76 ppc/krb5-libs-1.4.3-5.4.ppc.rpm 61b890d957e9bcf7c07f63a191dba10035d68214 ppc/krb5-workstation-1.4.3-5.4.ppc.rpm ff67a4115d83936cd8f6d081f5d46b0184977495 ppc/krb5-server-1.4.3-5.4.ppc.rpm dc8a46dc68d7ee109980da5aabb6fe79d0f083d6 x86_64/krb5-workstation-1.4.3-5.4.x86_64.rpm db80ab276f2ad2d0a5ecd609628927b3a9f5696f x86_64/krb5-server-1.4.3-5.4.x86_64.rpm 539cf0842e40bd7f7e8ae894c2754c77aea19359 x86_64/krb5-libs-1.4.3-5.4.x86_64.rpm 71bb8fd479ef11d7214f34c98e133351fbda6517 x86_64/krb5-devel-1.4.3-5.4.x86_64.rpm cc6002aab53682ca0168717b93044c732f2767d1 x86_64/debug/krb5-debuginfo-1.4.3-5.4.x86_64.rpm d6ac9c92d1c2588ee2c2a11aad0120dc8295d0de i386/krb5-devel-1.4.3-5.4.i386.rpm 5a3a187cb31db326e73458697ac87122df6ed7f5 i386/debug/krb5-debuginfo-1.4.3-5.4.i386.rpm 442af2e9753cf1910e5aa307b55403dd92654204 i386/krb5-server-1.4.3-5.4.i386.rpm 5bc9cfe4e938a4739ef76dd946bab8c66abf579a i386/krb5-workstation-1.4.3-5.4.i386.rpm e5fe201c7b63323c6c2a96a0cb5b4176db84407f i386/krb5-libs-1.4.3-5.4.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://fedora.redhat.com/docs/yum/. ---------------------------------------------------------------------

1 0

[SECURITY] Fedora Core 6 Update: krb5-1.5-21
by Nalin Dahyabhai 03 Apr '07

03 Apr '07

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2007-408 2007-04-03 --------------------------------------------------------------------- Product : Fedora Core 6 Name : krb5 Version : 1.5 Release : 21 Summary : The Kerberos network authentication system. Description : Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of cleartext passwords. --------------------------------------------------------------------- Update Information: This update incorporates fixes for MITKRB5-SA-2007-001 (unauthorized access via telnetd), MITKRB5-SA-2007-002 (buffer overflow in KDC and kadmind logging), and MITKRB5-SA-2007-003 (double-free in kadmind). --------------------------------------------------------------------- * Thu Mar 15 2007 Nalin Dahyabhai <nalin(a)redhat.com> 1.5-21 - add patch to fix buffer overflow in krb5kdc and kadmind (#231528, CVE-2007-0957) - add patch to fix double-free in kadmind (#231537, CVE-2007-1216) * Tue Feb 27 2007 Nalin Dahyabhai <nalin(a)redhat.com> - 1.5-20 - temporarily back out %post changes, fix for #143289 for security update - add patch to correct unauthorized access via krb5-aware telnet daemon (#229782, CVE-2007-0956) * Thu Jan 25 2007 Nalin Dahyabhai <nalin(a)redhat.com> - 1.5-19 - refrain from killing any lingering members of our child's process group when logging that the child process has exited (Jose Plans, #143289) * Mon Jan 22 2007 Nalin Dahyabhai <nalin(a)redhat.com> - 1.5-18 - make use of install-info more failsafe (Ville Skyttä, #223704) * Tue Jan 16 2007 Nalin Dahyabhai <nalin(a)redhat.com> - 1.5-17 - move to using pregenerated PDF docs to cure multilib conflicts (#222721) * Fri Jan 12 2007 Nalin Dahyabhai <nalin(a)redhat.com> - 1.5-16 - update backport of the preauth module interface (part of #194654) --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/ cc068f79cd7fe62667147cba0b96659ddce60b5b SRPMS/krb5-1.5-21.src.rpm cc068f79cd7fe62667147cba0b96659ddce60b5b noarch/krb5-1.5-21.src.rpm 98c8b325ddb13f3757fb349cd87c3d61c8eec9bf ppc/krb5-workstation-1.5-21.ppc.rpm 9a20b89bdcfabf503926c17b69f09ab345a86ac3 ppc/krb5-devel-1.5-21.ppc.rpm bca3beecb2eb73065de7f79982d3190e50fe5b6b ppc/krb5-server-1.5-21.ppc.rpm 411eecd8de23dd486abd96de14b6b45a0fcb481a ppc/krb5-libs-1.5-21.ppc.rpm 7f423433186622ec45cbff24892e58fd3eb08cd9 ppc/debug/krb5-debuginfo-1.5-21.ppc.rpm a3138abb663b94999499bcc2ffc392710f4782f5 x86_64/debug/krb5-debuginfo-1.5-21.x86_64.rpm 412873d0d6b2ba5b4ac7a60bab868541286ac376 x86_64/krb5-server-1.5-21.x86_64.rpm 59475786c6a7c9702099257fdbd30e1657641da8 x86_64/krb5-workstation-1.5-21.x86_64.rpm 90766b552742d35290b7ac7dca280c1284a5e131 x86_64/krb5-devel-1.5-21.x86_64.rpm 479e1ae2c82899660cc4bcaa8d30fa6b2ad4a32c x86_64/krb5-libs-1.5-21.x86_64.rpm 5440d096e7f74e242c5c2974018f926f2b47e6b9 i386/krb5-workstation-1.5-21.i386.rpm 662953e86cd6f2f9ef8c7b5bf71bb5c76259186a i386/debug/krb5-debuginfo-1.5-21.i386.rpm 6b9fda6d658e97f95a1728e63cbd08b8c8586bed i386/krb5-libs-1.5-21.i386.rpm 4659fe73d50c5542f50bdcf231022fecbfdb677e i386/krb5-server-1.5-21.i386.rpm 5cda24bfe886b33745524085308cf379ae16c216 i386/krb5-devel-1.5-21.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://fedora.redhat.com/docs/yum/. ---------------------------------------------------------------------

1 0

Fedora Core 6 Update: cups-1.2.10-3.fc6
by Tim Waugh 03 Apr '07

03 Apr '07

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2007-239 2007-04-03 --------------------------------------------------------------------- Product : Fedora Core 6 Name : cups Version : 1.2.10 Release : 3.fc6 Summary : Common Unix Printing System Description : The Common UNIX Printing System provides a portable printing layer for UNIX® operating systems. It has been developed by Easy Software Products to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces. --------------------------------------------------------------------- Update Information: New version. --------------------------------------------------------------------- * Tue Apr 3 2007 Tim Waugh <twaugh(a)redhat.com> 1:1.2.10-3 - Relay printer-state-message values in the IPP backend (STR #2109). * Mon Apr 2 2007 Tim Waugh <twaugh(a)redhat.com> 1:1.2.10-2 - Don't clear printer-state-reasons after job completion (STR #2323). * Thu Mar 29 2007 Tim Waugh <twaugh(a)redhat.com> - LSPP: Updated patch for line-wrapped labels (bug #228107). * Tue Mar 20 2007 Tim Waugh <twaugh(a)redhat.com> 1:1.2.10-1 - 1.2.10. * Fri Mar 16 2007 Tim Waugh <twaugh(a)redhat.com> 1:1.2.9-1 - 1.2.9. * Wed Mar 14 2007 Tim Waugh <twaugh(a)redhat.com> 1:1.2.8-5 - Applied patch for STR #2288 (bug #231992). * Tue Mar 6 2007 Tim Waugh <twaugh(a)redhat.com> 1:1.2.8-4 - Use new log file if logrotate rotates the logs (bug #215023). * Fri Mar 2 2007 Tim Waugh <twaugh(a)redhat.com> 1:1.2.8-3 - Updated LSPP patch (bug #229673). * Mon Feb 26 2007 Tim Waugh <twaugh(a)redhat.com> 1:1.2.8-2 - Applied fix for STR #2264 (bug #230116). * Wed Feb 14 2007 Tim Waugh <twaugh(a)redhat.com> 1:1.2.8-1 - 1.2.8. --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/ cc133fe7d7abf1927936c478ff43ff3dd80c0b7c SRPMS/cups-1.2.10-3.fc6.src.rpm cc133fe7d7abf1927936c478ff43ff3dd80c0b7c noarch/cups-1.2.10-3.fc6.src.rpm 5b0b3aeac84896c7abbe56e9e3b3067d4a2500c7 ppc/debug/cups-debuginfo-1.2.10-3.fc6.ppc.rpm 0430ada2f72b847791f7762914f72cbe3bd2275f ppc/cups-lpd-1.2.10-3.fc6.ppc.rpm df625cf7906ddef64e89b1d1e39b1b54dd9e3371 ppc/cups-libs-1.2.10-3.fc6.ppc.rpm 429209e29758e1e7272a4c88d18c284f93addee3 ppc/cups-devel-1.2.10-3.fc6.ppc.rpm e6f44e763d20c054618bcc8797cf7447f7dfd503 ppc/cups-1.2.10-3.fc6.ppc.rpm a8c476f61717a904779e76f596769a4b255822e7 x86_64/cups-devel-1.2.10-3.fc6.x86_64.rpm 0a47ed2989a782a935f89bbdefcc38f91af63759 x86_64/cups-lpd-1.2.10-3.fc6.x86_64.rpm 1e266629f15c2ab0a5961c4e374ecf9f04bb8575 x86_64/debug/cups-debuginfo-1.2.10-3.fc6.x86_64.rpm 352d6acd1fdf0888141798873ef853819b446282 x86_64/cups-libs-1.2.10-3.fc6.x86_64.rpm fceae968289bc2fe1c05f409f32b5a774014bfdc x86_64/cups-1.2.10-3.fc6.x86_64.rpm c9a40ef42be85d99d106a5ef04141310a7325a45 i386/cups-libs-1.2.10-3.fc6.i386.rpm 1a4a71ee52396c21460d6747591bea99aaa88e75 i386/cups-1.2.10-3.fc6.i386.rpm 90823c14e849d8262dec44137a62e1596211db29 i386/cups-devel-1.2.10-3.fc6.i386.rpm 109020feebd18bc9cd4189e43ccd0c8413f587c2 i386/debug/cups-debuginfo-1.2.10-3.fc6.i386.rpm e035a4baab725177ad21af3495200155ce131b57 i386/cups-lpd-1.2.10-3.fc6.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://fedora.redhat.com/docs/yum/. ---------------------------------------------------------------------

1 0

Fedora Core 6 Update: procps-3.2.7-8.3.fc6
by Karel Zak 03 Apr '07

03 Apr '07

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2007-405 2007-04-03 --------------------------------------------------------------------- Product : Fedora Core 6 Name : procps Version : 3.2.7 Release : 8.3.fc6 Summary : System and process monitoring utilities. Description : The procps package contains a set of system utilities that provide system information. Procps includes ps, free, skill, pkill, pgrep, snice, tload, top, uptime, vmstat, w, watch and pdwx. The ps command displays a snapshot of running processes. The top command provides a repetitive update of the statuses of running processes. The free command displays the amounts of free and used memory on your system. The skill command sends a terminate command (or another specified signal) to a specified set of processes. The snice command is used to change the scheduling priority of specified processes. The tload command prints a graph of the current system load average to a specified tty. The uptime command displays the current time, how long the system has been running, how many users are logged on, and system load averages for the past one, five, and fifteen minutes. The w command displays a list of the users who are currently logged on and what they are running. The watch program watches a running program. The vmstat command displays virtual memory statistics about processes, memory, paging, block I/O, traps, and CPU activity. The pwdx command reports the current working directory of a process or processes. --------------------------------------------------------------------- * Tue Apr 3 2007 Karel Zak <kzak(a)redhat.com> 3.2.7-8.3 - fix #234546 - 'w' doesn't give correct information about what's being run. - fix #228870 - process `sysctl' is using deprecated sysctl --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/ 20c777005be11f90ffb87af8628ff4c81c0ed41d SRPMS/procps-3.2.7-8.3.fc6.src.rpm 20c777005be11f90ffb87af8628ff4c81c0ed41d noarch/procps-3.2.7-8.3.fc6.src.rpm c1fd8a10444e1eff837c5ba4be9412fc8b86a82c ppc/debug/procps-debuginfo-3.2.7-8.3.fc6.ppc.rpm bbcb4b948e7c22224e121b1c0db3af45a8aecb0b ppc/procps-3.2.7-8.3.fc6.ppc.rpm 66d84c073c034a70e81743814647a7221023024c x86_64/debug/procps-debuginfo-3.2.7-8.3.fc6.x86_64.rpm d3a9bbe734a2d018c6bbdee5f06e303cc8e55c9e x86_64/procps-3.2.7-8.3.fc6.x86_64.rpm 0e5ca196c501f2a15120c2ff0d782e8bcec32a97 i386/procps-3.2.7-8.3.fc6.i386.rpm cefe28e6610a49979f54c45e081da426eb08bdab i386/debug/procps-debuginfo-3.2.7-8.3.fc6.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://fedora.redhat.com/docs/yum/. ---------------------------------------------------------------------

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

package-announce April 2007