test November 2006

test@lists.fedoraproject.org

141 participants
284 discussions

[SECURITY] Fedora Core 5 Test Update: openldap-2.3.30-1.fc5
by Jay Fenlason 01 Dec '06

01 Dec '06

--------------------------------------------------------------------- Fedora Test Update Notification FEDORA-2006-1356 2006-11-30 --------------------------------------------------------------------- Product : Fedora Core 5 Name : openldap Version : 2.3.30 Release : 1.fc5 Summary : The configuration files, libraries, and documentation for OpenLDAP. Description : OpenLDAP is an open source suite of LDAP (Lightweight Directory Access Protocol) applications and development tools. LDAP is a set of protocols for accessing directory services (usually phone book style information, but other information is possible) over the Internet, similar to the way DNS (Domain Name System) information is propagated over the Internet. The openldap package contains configuration files, libraries, and documentation for OpenLDAP. --------------------------------------------------------------------- Update Information: Because the upgrade scriptlets in the previous openldap-servers rpm are broken, you will need to use extra care when installing this update. Before you begin the upgrade, you should make a copy of all the files in your /var/lib/ldap directory. After the upgrade, you should clear out any files left in that directory by the upgrade process, and restore your original files. Upgrades from 2.3.30-1.fc5 to a later version will not have this problem. --------------------------------------------------------------------- * Fri Nov 17 2006 Jay Fenlason <fenlason(a)redhat.com> 2.3.30-1.fc5 - New upstream release - Backport fixes from rawhide for bz#185821: adding slapd_multimaster to the configure options bz#190383: openldap 2.3 packages contain the administrator's guide for 2.2 bz#204593: service ldap fails after having added entries to ldap bz#199322: RFE: perform cleanup in ldap.init - Include the gethostbyname_r patch - include the correct guide.html - Fix the upgrade logic, so that upgrades from 2.3.30 to newer versions won't leave junk in /var/lib/ldap if it was empty, and correctly generates/uses the upgrade.ldif file otherwise. Note that upgrades *to* 2.3.30 will have to be done carefully, because the half of the upgrade logic in the 2.3.19-4 rpms is broken, and will mess up the upgrade. --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/testing/5/ ade3b9411b725657c9c8f85144f9ce1caf4596fa SRPMS/openldap-2.3.30-1.fc5.src.rpm ade3b9411b725657c9c8f85144f9ce1caf4596fa noarch/openldap-2.3.30-1.fc5.src.rpm 370b0fe13388e2d7c6058396902d8cbd9a161733 ppc/openldap-clients-2.3.30-1.fc5.ppc.rpm 8281d6a46475025e1a979378d68f07c1abc8013c ppc/openldap-servers-sql-2.3.30-1.fc5.ppc.rpm 6fc8b778cf228d802deef960f351fc0ae648a2e1 ppc/debug/openldap-debuginfo-2.3.30-1.fc5.ppc.rpm f42bf87845a203d0c7154c818133f67baea80d36 ppc/openldap-servers-2.3.30-1.fc5.ppc.rpm cb52144effc06b6abcbd6b030c9464e46fbf620b ppc/openldap-2.3.30-1.fc5.ppc.rpm 30ab907b242d8b902c25560c375aca1d1e290944 ppc/openldap-devel-2.3.30-1.fc5.ppc.rpm 9662005afc6ebd253c1d38a84d1c54672d87582c ppc/compat-openldap-2.3.30_2.2.29-1.fc5.ppc.rpm 849e9a996ad930da8c190191f91f725e1d1037c1 x86_64/openldap-servers-sql-2.3.30-1.fc5.x86_64.rpm 1b6c455af0e38ccfc6428996d2a2cdf5139caa3d x86_64/compat-openldap-2.3.30_2.2.29-1.fc5.x86_64.rpm 4bbaeb244226a193df3ae38493ac82eede95e582 x86_64/openldap-servers-2.3.30-1.fc5.x86_64.rpm 293e8a46755a27753e336e28848927a5372abf15 x86_64/openldap-2.3.30-1.fc5.x86_64.rpm 1d0b907410116c3620415d0f04d87943d997fa34 x86_64/openldap-devel-2.3.30-1.fc5.x86_64.rpm 48293324f768785be9d67f73942aaa036b0f70b5 x86_64/openldap-clients-2.3.30-1.fc5.x86_64.rpm 5885dc617af3fca1db2cb3a35143e998659d6660 x86_64/debug/openldap-debuginfo-2.3.30-1.fc5.x86_64.rpm dd6a898300f38af85181cbeaf68fdf28971a3545 i386/openldap-servers-sql-2.3.30-1.fc5.i386.rpm af9d2c79040d39c21cea3a26fc34ca0d98d92203 i386/openldap-clients-2.3.30-1.fc5.i386.rpm 4aa577be9351b85bce13be9468f6a036657ca3c2 i386/compat-openldap-2.3.30_2.2.29-1.fc5.i386.rpm c6d9b5572a97ec7e350f53b71217c83da756c89a i386/openldap-servers-2.3.30-1.fc5.i386.rpm ea1beb79e1193ddcb5aa9e2069bb57f0a80374b2 i386/debug/openldap-debuginfo-2.3.30-1.fc5.i386.rpm 31b406dff68ee967f938ded78039340ab0621917 i386/openldap-2.3.30-1.fc5.i386.rpm fc139f59d7aa4370a7b4663d402abc363a32c315 i386/openldap-devel-2.3.30-1.fc5.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://fedora.redhat.com/docs/yum/. ---------------------------------------------------------------------

2 1

GMA x3000
by Justin Conover 30 Nov '06

30 Nov '06

Has anyone tested this with xorg 7.1? What driver would it use? How does it compare to <whatever> ;) Looking at getting another desktop system and deciding between that and nvidia.

2 2

OT question (but related): Which video card for dual DVI display?
by EB 30 Nov '06

30 Nov '06

Forum- Excuse me if this is a bit off topic, but I have a need for a machine that runs FC6 and has a dual DVI display. I'll be assembling this machine from scratch. Can anyone suggest a video adapter? Kindest regards, Ewin NB: If you want to just reply to me, please use: ewinb (at) chrusos.com

3 3

[SECURITY] Fedora Core 6 Test Update: openldap-2.3.30-1.fc6.1
by Jay Fenlason 30 Nov '06

30 Nov '06

--------------------------------------------------------------------- Fedora Test Update Notification FEDORA-2006-1357 2006-11-30 --------------------------------------------------------------------- Product : Fedora Core 6 Name : openldap Version : 2.3.30 Release : 1.fc6.1 Summary : The configuration files, libraries, and documentation for OpenLDAP. Description : OpenLDAP is an open source suite of LDAP (Lightweight Directory Access Protocol) applications and development tools. LDAP is a set of protocols for accessing directory services (usually phone book style information, but other information is possible) over the Internet, similar to the way DNS (Domain Name System) information is propagated over the Internet. The openldap package contains configuration files, libraries, and documentation for OpenLDAP. --------------------------------------------------------------------- Update Information: Because the upgrade scriptlets in the previous openldap-servers rpm are broken, you will need to use extra care when installing this update. Before you begin the upgrade, you should make a copy of all the files in your /var/lib/ldap directory. After the upgrade, you should clear out any files left in that directory by the upgrade process, and restore your original files. Upgrades from 2.3.30-1.fc5 to a later version will not have this problem. --------------------------------------------------------------------- * Tue Nov 28 2006 Jay Fenlason <fenlason(a)redhat.com> 2.3.30-1.fc6.1 - Fix the upgrade logic, so that upgrades from 2.3.30 to newer versions won't leave junk in /var/lib/ldap if it was empty, and correctly generates/uses the upgrade.ldif file otherwise. Note that upgrades *to* 2.3.30 will have to be done carefully, because the half of the upgrade logic in the 2.3.27-4 rpms is broken, and will mess up the upgrade. - Add more database file types to check for in ldap.init * Thu Nov 16 2006 Jay Fenlason <fenlason(a)redhat.com> 2.3.30-1.fc6 - New upstream version * Sun Oct 1 2006 Jesse Keating <jkeating(a)redhat.com> - 2.3.27-4 - rebuilt for unwind info generation, broken in gcc-4.1.1-21 * Mon Sep 18 2006 Jay Fenlason <fenlason(a)redhat.com> 2.3.27-3 - Include --enable-multimaster to close bz#185821: adding slapd_multimaster to the configure options - Upgade guide.html to the correct one for openladp-2.3.27, closing bz#190383: openldap 2.3 packages contain the administrator's guide for 2.2 - Remove the quotes from around the slaptestflags in ldap.init This closes one part of bz#204593: service ldap fails after having added entries to ldap - include __db.* in the list of files to check ownership of in ldap.init, as suggested in bz#199322: RFE: perform cleanup in ldap.init * Fri Aug 25 2006 Jay Fenlason <fenlason(a)redhat.com> 2.3.27-2 - New upstream release - Include the gethostbyname_r patch so that nss_ldap won't hang on recursive attemts to ldap_initialize. * Wed Jul 12 2006 Jesse Keating <jkeating(a)redhat.com> - 2.3.24-2.1 - rebuild * Wed Jun 7 2006 Jay Fenlason <fenlason(a)redhat.com> 2.3.24-2 - New upstream version * Thu Apr 27 2006 Jay Fenlason <fenlason(a)redhat.com> 2.3.21-2 - Upgrade to 2.3.21 - Add two upstream patches for db-4.4.20 * Mon Feb 13 2006 Jay Fenlason <fenlason(a)redhat.com> 2.3.19-4 - Re-fix ldap.init * Fri Feb 10 2006 Jesse Keating <jkeating(a)redhat.com> - 2.3.19-3.1 - bump again for double-long bug on ppc(64) * Thu Feb 9 2006 Jay Fenlason <fenlason(a)redhat.com> 2.3.19-3 - Modify the ldap.init script to call runuser correctly. * Tue Feb 7 2006 Jesse Keating <jkeating(a)redhat.com> - 2.3.19-2.1 - rebuilt for new gcc4.1 snapshot and glibc changes * Tue Jan 10 2006 Jay Fenlason <fenlason(a)redhat.com> 2.3.19-2 - Upgrade to 2.3.19, which upstream now considers stable - Modify the -config.patch, ldap.init, and this spec file to put the pid file and args file in an ldap-owned openldap subdirectory under /var/run. - Move back_sql* out of /usr/sbin/openldap , which requires hand-moving slapd and slurpd to _sbindir, and recreating symlinks by hand. - Retire openldap-2.3.11-ads.patch, which went upstream. - Update the ldap.init script to run slaptest as the ldap user rather than as root. This solves bz#150172 Startup failure after database problem - Add to the servers post and preun scriptlets so that on preun, the database is slapcatted to /var/lib/ldap/upgrade.ldif and the database files are saved to /var/lib/ldap/rpmorig. On post, if /var/lib/ldap/upgrade.ldif exists, it is slapadded. This means that on upgrades from 2.3.16-2 to higher versions, the database files may be automatically upgraded. Unfortunatly, because of the changes to the preun scriptlet, users have to do the slapcat, etc by hand when upgrading to 2.3.16-2. Also note that the /var/lib/ldap/rpmorig files need to be removed by hand because automatically removing your emergency fallback files is a bad idea. - Upgrade internal bdb to db-4.4.20. For a clean upgrade, this will require that users slapcat their databases into a temp file, move /var/lib/ldap someplace safe, upgrade the openldap rpms, then slapadd the temp file. * Fri Dec 9 2005 Jesse Keating <jkeating(a)redhat.com> - rebuilt * Mon Nov 21 2005 Jay Fenlason <fenlason(a)redhat.com> 2.3.11-3 - Remove Requires: cyrus-sasl and cyrus-sasl-md5 from openldap- and compat-openldap- to close bz#173313 Remove exlicit 'Requires: cyrus-sasl" + 'Requires: cyrus-sasl-md5' * Thu Nov 10 2005 Jay Fenlason <fenlason(a)redhat.com> 2.3.11-2 - Upgrade to 2.3.11, which upstream now considers stable. - Switch compat-openldap to 2.2.29 - remove references to nss_ldap_build from the spec file - remove references to 2.0 and 2.1 from the spec file. - reorganize the build() function slightly in the spec file to limit the number of redundant and conflicting options passedto configure. - Remove the attempt to hardlink ldapmodify and ldapadd together, since the current make install make ldapadd a symlink to ldapmodify. - Include the -ads patches to allow SASL binds to an Active Directory server to work. Nalin <nalin(a)redhat.com> wrote the patch, based on my broken first attempt. * Thu Nov 10 2005 Tomas Mraz <tmraz(a)redhat.com> 2.2.29-3 - rebuilt against new openssl * Mon Oct 10 2005 Jay Fenlason <fenlason(a)redhat.com> 2.2.29-2 - New upstream version. * Thu Sep 29 2005 Jay Fenlason <fenlason(a)redhat.com> 2.2.28-2 - Upgrade to nev upstream version. This makes the 2.2.*-hop patch obsolete. * Mon Aug 22 2005 Jay Fenlason <fenlason(a)redhat.com> 2.2.26-2 - Move the slapd.pem file to /etc/pki/tls/certs and edit the -config patch to match to close bz#143393 Creates certificates + keys at an insecure/bad place - also use _sysconfdir instead of hard-coding /etc * Thu Aug 11 2005 Jay Fenlason <fenlason(a)redhat.com> - Add the tls-fix-connection-test patch to close bz#161991 openldap password disclosure issue - add the hop patches to prevent infinite looping when chasing referrals. OpenLDAP ITS #3578 * Fri Aug 5 2005 Nalin Dahyabhai <nalin(a)redhat.com> - fix typo in ldap.init (call $klist instead of klist, from Charles Lopes) * Thu May 19 2005 Nalin Dahyabhai <nalin(a)redhat.com> 2.2.26-1 - run slaptest with the -u flag if no id2entry db files are found, because you can't check for read-write access to a non-existent database (#156787) - add /etc/openldap/cacerts, which authconfig sets as the TLS_CACERTDIR path in /etc/openldap/ldap.conf now - use a temporary wrapper script to launch slapd, in case we have arguments with embedded whitespace (#158111) * Wed May 4 2005 Nalin Dahyabhai <nalin(a)redhat.com> - update to 2.2.26 (stable 20050429) - enable the lmpasswd scheme - print a warning if slaptest fails, slaptest -u succeeds, and one of the directories listed as the storage location for a given suffix in slapd.conf contains a readable file named __db.001 (#118678) * Tue Apr 26 2005 Nalin Dahyabhai <nalin(a)redhat.com> 2.2.25-1 - update to 2.2.25 (release) * Tue Apr 26 2005 Nalin Dahyabhai <nalin(a)redhat.com> 2.2.24-1 - update to 2.2.24 (stable 20050318) - export KRB5_KTNAME in the init script, in case it was set in the sysconfig file but not exported * Tue Mar 1 2005 Nalin Dahyabhai <nalin(a)redhat.com> 2.2.23-4 - prefer libresolv to libbind * Tue Mar 1 2005 Nalin Dahyabhai <nalin(a)redhat.com> 2.2.23-3 - add bind-libbind-devel and libtool-ltdl-devel buildprereqs * Tue Mar 1 2005 Tomas Mraz <tmraz(a)redhat.com> 2.2.23-2 - rebuild with openssl-0.9.7e * Mon Jan 31 2005 Nalin Dahyabhai <nalin(a)redhat.com> 2.2.23-1 - update to 2.2.23 (stable-20050125) - update notes on upgrading from earlier versions - drop slapcat variations for 2.0/2.1, which choke on 2.2's config files * Tue Jan 4 2005 Nalin Dahyabhai <nalin(a)redhat.com> 2.2.20-1 - update to 2.2.20 (stable-20050103) - warn about unreadable krb5 keytab files containing "ldap" keys - warn about unreadable TLS-related files - own a ref to subdirectories which we create under %{_libdir}/tls * Tue Nov 2 2004 Nalin Dahyabhai <nalin(a)redhat.com> 2.2.17-0 - rebuild * Thu Sep 30 2004 Nalin Dahyabhai <nalin(a)redhat.com> - update to 2.2.17 (stable-20040923) (#135188) - move nptl libraries into arch-specific subdirectories on %{ix86} boxes - require a newer glibc which can provide nptl libpthread on i486/i586 * Tue Aug 24 2004 Nalin Dahyabhai <nalin(a)redhat.com> - move slapd startup to earlier in the boot sequence (#103160) - update to 2.2.15 (stable-20040822) - change version number on compat-openldap to include the non-compat version from which it's compiled, otherwise would have to start 2.2.15 at release 3 so that it upgrades correctly * Thu Aug 19 2004 Nalin Dahyabhai <nalin(a)redhat.com> 2.2.13-2 - build a separate, static set of libraries for openldap-devel with the non-standard ntlm bind patch applied, for use by the evolution-connector package (#125579), and installing them under %{evolution_connector_prefix} (/usr/lib/evolution-openldap) - provide openldap-evolution-devel = %{version}-%{release} in openldap-devel so that evolution-connector's source package can require a version of openldap-devel which provides what it wants * Mon Jul 26 2004 Nalin Dahyabhai <nalin(a)redhat.com> - update administrator guide * Wed Jun 16 2004 Nalin Dahyabhai <nalin(a)redhat.com> 2.2.13-1 - add compat-openldap subpackage - default to bdb, as upstream does, gambling that we're only going to be on systems with nptl now * Tue Jun 15 2004 Nalin Dahyabhai <nalin(a)redhat.com> 2.2.13-0 - preliminary 2.2.13 update - move ucdata to the -servers subpackage where it belongs * Tue Jun 15 2004 Nalin Dahyabhai <nalin(a)redhat.com> 2.1.30-1 - build experimental sql backend as a loadable module * Tue Jun 15 2004 Elliot Lee <sopwith(a)redhat.com> - rebuilt * Tue May 18 2004 Nalin Dahyabhai <nalin(a)redhat.com> 2.1.30-0 - update to 2.1.30 * Thu May 13 2004 Thomas Woerner <twoerner(a)redhat.com> 2.1.29-3 - removed rpath - added pie patch: slapd and slurpd are now pie - requires libtool >= 1.5.6-2 (PIC libltdl.a) * Fri Apr 16 2004 Nalin Dahyabhai <nalin(a)redhat.com> 2.1.29-2 - move rfc documentation from main to -devel (#121025) * Wed Apr 14 2004 Nalin Dahyabhai <nalin(a)redhat.com> 2.1.29-1 - rebuild * Tue Apr 6 2004 Nalin Dahyabhai <nalin(a)redhat.com> 2.1.29-0 - update to 2.1.29 (stable 20040329) * Mon Mar 29 2004 Nalin Dahyabhai <nalin(a)redhat.com> - don't build servers with --with-kpasswd, that option hasn't been recognized since 2.1.23 * Tue Mar 2 2004 Elliot Lee <sopwith(a)redhat.com> 2.1.25-5.1 - rebuilt * Mon Feb 23 2004 Tim Waugh <twaugh(a)redhat.com> 2.1.25-5 - Use ':' instead of '.' as separator for chown. * Fri Feb 13 2004 Elliot Lee <sopwith(a)redhat.com> - rebuilt * Tue Feb 10 2004 Nalin Dahyabhai <nalin(a)redhat.com> 2.1.25-4 - remove 'reload' from the init script -- it never worked as intended (#115310) * Wed Feb 4 2004 Nalin Dahyabhai <nalin(a)redhat.com> 2.1.25-3 - commit that last fix correctly this time * Tue Feb 3 2004 Nalin Dahyabhai <nalin(a)redhat.com> 2.1.25-2 - fix incorrect use of find when attempting to detect a common permissions error in the init script (#114866) * Fri Jan 16 2004 Nalin Dahyabhai <nalin(a)redhat.com> - add bug fix patch for DB 4.2.52 * Thu Jan 8 2004 Nalin Dahyabhai <nalin(a)redhat.com> 2.1.25-1 - change logging facility used from daemon to local4 (#112730, reversing #11047) BEHAVIOR CHANGE - SHOULD BE MENTIONED IN THE RELEASE NOTES. * Wed Jan 7 2004 Nalin Dahyabhai <nalin(a)redhat.com> - incorporate fix for logic quasi-bug in slapd's SASL auxprop code (Dave Jones) * Thu Dec 18 2003 Nalin Dahyabhai <nalin(a)redhat.com> - update to 2.1.25, now marked STABLE * Thu Dec 11 2003 Jeff Johnson <jbj(a)jbj.org> 2.1.22-9 - update to db-4.2.52. * Thu Oct 23 2003 Nalin Dahyabhai <nalin(a)redhat.com> 2.1.22-8 - add another section to the ABI note for the TLS libdb so that it's marked as not needing an executable stack (from Arjan Van de Ven) * Thu Oct 16 2003 Nalin Dahyabhai <nalin(a)redhat.com> 2.1.22-7 - force bundled libdb to not use O_DIRECT by making it forget that we have it * Wed Oct 15 2003 Nalin Dahyabhai <nalin(a)redhat.com> - build bundled libdb for slapd dynamically to make the package smaller, among other things - on tls-capable arches, build libdb both with and without shared posix mutexes, otherwise just without - disable posix mutexes unconditionally for db 4.0, which shouldn't need them for the migration cases where it's used - update to MigrationTools 45 * Thu Sep 25 2003 Jeff Johnson <jbj(a)jbj.org> 2.1.22-6.1 - upgrade db-4.1.25 to db-4.2.42. * Fri Sep 12 2003 Nalin Dahyabhai <nalin(a)redhat.com> 2.1.22-6 - drop rfc822-MailMember.schema, merged into upstream misc.schema at some point * Wed Aug 27 2003 Nalin Dahyabhai <nalin(a)redhat.com> - actually require newer libtool, as was intended back in 2.1.22-0, noted as missed by Jim Richardson * Fri Jul 25 2003 Nalin Dahyabhai <nalin(a)redhat.com> 2.1.22-5 - enable rlookups, they don't cost anything unless also enabled in slapd's configuration file * Tue Jul 22 2003 Nalin Dahyabhai <nalin(a)redhat.com> 2.1.22-4 - rebuild * Thu Jul 17 2003 Nalin Dahyabhai <nalin(a)redhat.com> 2.1.22-3 - rebuild * Wed Jul 16 2003 Nalin Dahyabhai <nalin(a)redhat.com> 2.1.22-2 - rebuild * Tue Jul 15 2003 Nalin Dahyabhai <nalin(a)redhat.com> 2.1.22-1 - build * Mon Jul 14 2003 Nalin Dahyabhai <nalin(a)redhat.com> 2.1.22-0 - 2.1.22 now badged stable - be more aggressive in what we index by default - use/require libtool 1.5 * Mon Jun 30 2003 Nalin Dahyabhai <nalin(a)redhat.com> - update to 2.1.22 * Wed Jun 4 2003 Elliot Lee <sopwith(a)redhat.com> - rebuilt * Tue Jun 3 2003 Nalin Dahyabhai <nalin(a)redhat.com> 2.1.21-1 - update to 2.1.21 - enable ldap, meta, monitor, null, rewrite in slapd * Mon May 19 2003 Nalin Dahyabhai <nalin(a)redhat.com> 2.1.20-1 - update to 2.1.20 * Thu May 8 2003 Nalin Dahyabhai <nalin(a)redhat.com> 2.1.19-1 - update to 2.1.19 * Mon May 5 2003 Nalin Dahyabhai <nalin(a)redhat.com> 2.1.17-1 - switch to db with crypto * Fri May 2 2003 Nalin Dahyabhai <nalin(a)redhat.com> - install the db utils for the bundled libdb as %{_sbindir}/slapd_db_* - install slapcat/slapadd from 2.0.x for migration purposes * Wed Apr 30 2003 Nalin Dahyabhai <nalin(a)redhat.com> - update to 2.1.17 - disable the shell backend, not expected to work well with threads - drop the kerberosSecurityObject schema, the krbName attribute it contains is only used if slapd is built with v2 kbind support * Mon Feb 10 2003 Nalin Dahyabhai <nalin(a)redhat.com> 2.0.27-8 - back down to db 4.0.x, which 2.0.x can compile with in ldbm-over-db setups - tweak SuSE patch to fix a few copy-paste errors and a NULL dereference * Wed Jan 22 2003 Tim Powers <timp(a)redhat.com> - rebuilt * Tue Jan 7 2003 Nalin Dahyabhai <nalin(a)redhat.com> 2.0.27-6 - rebuild * Mon Dec 16 2002 Nalin Dahyabhai <nalin(a)redhat.com> 2.0.27-5 - rebuild * Fri Dec 13 2002 Nalin Dahyabhai <nalin(a)redhat.com> 2.0.27-4 - check for setgid as well * Thu Dec 12 2002 Nalin Dahyabhai <nalin(a)redhat.com> 2.0.27-3 - rebuild * Thu Dec 12 2002 Nalin Dahyabhai <nalin(a)redhat.com> - incorporate fixes from SuSE's security audit, except for fixes to ITS 1963, 1936, 2007, 2009, which were included in 2.0.26. - add two more patches for db 4.1.24 from sleepycat's updates page - use openssl pkgconfig data, if any is available * Mon Nov 11 2002 Nalin Dahyabhai <nalin(a)redhat.com> 2.0.27-2 - add patches for db 4.1.24 from sleepycat's updates page * Mon Nov 4 2002 Nalin Dahyabhai <nalin(a)redhat.com> - add a sample TLSCACertificateFile directive to the default slapd.conf * Tue Sep 24 2002 Nalin Dahyabhai <nalin(a)redhat.com> 2.0.27-1 - update to 2.0.27 * Fri Sep 20 2002 Nalin Dahyabhai <nalin(a)redhat.com> 2.0.26-1 - update to 2.0.26, db 4.1.24.NC * Fri Sep 13 2002 Nalin Dahyabhai <nalin(a)redhat.com> 2.0.25-2 - change LD_FLAGS to refer to /usr/kerberos/lib instead of /usr/kerberos/lib, which might not be right on some arches * Mon Aug 26 2002 Nalin Dahyabhai <nalin(a)redhat.com> 2.0.25-1 - update to 2.0.25 "stable", ldbm-over-gdbm (putting off migration of LDBM slapd databases until we move to 2.1.x) - use %{_smp_mflags} when running make - update to MigrationTools 44 - enable dynamic module support in slapd * Thu May 16 2002 Nalin Dahyabhai <nalin(a)redhat.com> 2.0.23-5 - rebuild in new environment * Wed Feb 20 2002 Nalin Dahyabhai <nalin(a)redhat.com> 2.0.23-3 - use the gdbm backend again * Mon Feb 18 2002 Nalin Dahyabhai <nalin(a)redhat.com> 2.0.23-2 - make slapd.conf read/write by root, read by ldap * Sun Feb 17 2002 Nalin Dahyabhai <nalin(a)redhat.com> - fix corner case in sendbuf fix - 2.0.23 now marked "stable" * Tue Feb 12 2002 Nalin Dahyabhai <nalin(a)redhat.com> 2.0.23-1 - update to 2.0.23 * Fri Feb 8 2002 Nalin Dahyabhai <nalin(a)redhat.com> 2.0.22-2 - switch to an internalized Berkeley DB as the ldbm back-end (NOTE: this breaks access to existing on-disk directory data) - add slapcat/slapadd with gdbm for migration purposes - remove Kerberos dependency in client libs (the direct Kerberos dependency is used by the server for checking {kerberos} passwords) * Fri Feb 1 2002 Nalin Dahyabhai <nalin(a)redhat.com> 2.0.22-1 - update to 2.0.22 * Sat Jan 26 2002 Florian La Roche <Florian.LaRoche(a)redhat.de> 2.0.21-5 - prereq chkconfig for server subpackage * Fri Jan 25 2002 Nalin Dahyabhai <nalin(a)redhat.com> 2.0.21-4 - update migration tools to version 40 * Wed Jan 23 2002 Nalin Dahyabhai <nalin(a)redhat.com> 2.0.21-3 - free ride through the build system * Wed Jan 16 2002 Nalin Dahyabhai <nalin(a)redhat.com> 2.0.21-2 - update to 2.0.21, now earmarked as STABLE * Wed Jan 16 2002 Nalin Dahyabhai <nalin(a)redhat.com> 2.0.20-2 - temporarily disable optimizations for ia64 arches - specify pthreads at configure-time instead of letting configure guess * Mon Jan 14 2002 Nalin Dahyabhai <nalin(a)redhat.com> - and one for Raw Hide * Mon Jan 14 2002 Nalin Dahyabhai <nalin(a)redhat.com> 2.0.20-0.7 - build for RHL 7/7.1 * Mon Jan 14 2002 Nalin Dahyabhai <nalin(a)redhat.com> 2.0.20-1 - update to 2.0.20 (security errata) * Thu Dec 20 2001 Nalin Dahyabhai <nalin(a)redhat.com> 2.0.19-1 - update to 2.0.19 * Tue Nov 6 2001 Nalin Dahyabhai <nalin(a)redhat.com> 2.0.18-2 - fix the commented-out replication example in slapd.conf * Fri Oct 26 2001 Nalin Dahyabhai <nalin(a)redhat.com> 2.0.18-1 - update to 2.0.18 * Mon Oct 15 2001 Nalin Dahyabhai <nalin(a)redhat.com> 2.0.17-1 - update to 2.0.17 * Wed Oct 10 2001 Nalin Dahyabhai <nalin(a)redhat.com> - disable kbind support (deprecated, and I suspect unused) - configure with --with-kerberos=k5only instead of --with-kerberos=k5 - build slapd with threads * Thu Sep 27 2001 Nalin Dahyabhai <nalin(a)redhat.com> 2.0.15-2 - rebuild, 2.0.15 is now designated stable * Fri Sep 21 2001 Nalin Dahyabhai <nalin(a)redhat.com> 2.0.15-1 - update to 2.0.15 * Mon Sep 10 2001 Nalin Dahyabhai <nalin(a)redhat.com> 2.0.14-1 - update to 2.0.14 * Fri Aug 31 2001 Nalin Dahyabhai <nalin(a)redhat.com> 2.0.12-1 - update to 2.0.12 to pull in fixes for setting of default TLS options, among other things - update to migration tools 39 - drop tls patch, which was fixed better in this release * Tue Aug 21 2001 Nalin Dahyabhai <nalin(a)redhat.com> 2.0.11-13 - install saucer correctly * Thu Aug 16 2001 Nalin Dahyabhai <nalin(a)redhat.com> - try to fix ldap_set_options not being able to set global options related to TLS correctly * Thu Aug 9 2001 Nalin Dahyabhai <nalin(a)redhat.com> - don't attempt to create a cert at install-time, it's usually going to get the wrong CN (#51352) * Mon Aug 6 2001 Nalin Dahyabhai <nalin(a)redhat.com> - add a build-time requirement on pam-devel - add a build-time requirement on a sufficiently-new libtool to link shared libraries to other shared libraries (which is needed in order for prelinking to work) * Fri Aug 3 2001 Nalin Dahyabhai <nalin(a)redhat.com> - require cyrus-sasl-md5 (support for DIGEST-MD5 is required for RFC compliance) by name (follows from #43079, which split cyrus-sasl's cram-md5 and digest-md5 modules out into cyrus-sasl-md5) * Fri Jul 20 2001 Nalin Dahyabhai <nalin(a)redhat.com> - enable passwd back-end (noted by Alan Sparks and Sergio Kessler) * Wed Jul 18 2001 Nalin Dahyabhai <nalin(a)redhat.com> - start to prep for errata release * Fri Jul 6 2001 Nalin Dahyabhai <nalin(a)redhat.com> - link libldap with liblber * Wed Jul 4 2001 Than Ngo <than(a)redhat.com> 2.0.11-6 - add symlink liblber.so libldap.so and libldap_r.so in /usr/lib * Tue Jul 3 2001 Nalin Dahyabhai <nalin(a)redhat.com> - move shared libraries to /lib - redo init script for better internationalization (#26154) - don't use ldaprc files in the current directory (#38402) (patch from hps(a)intermeta.de) - add BuildPrereq on tcp wrappers since we configure with --enable-wrappers (#43707) - don't overflow debug buffer in mail500 (#41751) - don't call krb5_free_creds instead of krb5_free_cred_contents any more (#43159) * Mon Jul 2 2001 Nalin Dahyabhai <nalin(a)redhat.com> - make config files noreplace (#42831) * Tue Jun 26 2001 Nalin Dahyabhai <nalin(a)redhat.com> - actually change the default config to use the dummy cert - update to MigrationTools 38 * Mon Jun 25 2001 Nalin Dahyabhai <nalin(a)redhat.com> - build dummy certificate in %post, use it in default config - configure-time shenanigans to help a confused configure script * Wed Jun 20 2001 Nalin Dahyabhai <nalin(a)redhat.com> - tweak migrate_automount and friends so that they can be run from anywhere * Thu May 24 2001 Nalin Dahyabhai <nalin(a)redhat.com> - update to 2.0.11 * Wed May 23 2001 Nalin Dahyabhai <nalin(a)redhat.com> - update to 2.0.10 * Mon May 21 2001 Nalin Dahyabhai <nalin(a)redhat.com> - update to 2.0.9 * Tue May 15 2001 Nalin Dahyabhai <nalin(a)redhat.com> - update to 2.0.8 - drop patch which came from upstream * Fri Mar 2 2001 Nalin Dahyabhai <nalin(a)redhat.com> - rebuild in new environment * Thu Feb 8 2001 Nalin Dahyabhai <nalin(a)redhat.com> - back out pidfile patches, which interact weirdly with Linux threads - mark non-standard schema as such by moving them to a different directory * Mon Feb 5 2001 Nalin Dahyabhai <nalin(a)redhat.com> - update to MigrationTools 36, adds netgroup support * Mon Jan 29 2001 Nalin Dahyabhai <nalin(a)redhat.com> - fix thinko in that last patch * Thu Jan 25 2001 Nalin Dahyabhai <nalin(a)redhat.com> - try to work around some buffering problems * Tue Jan 23 2001 Nalin Dahyabhai <nalin(a)redhat.com> - gettextize the init script * Thu Jan 18 2001 Nalin Dahyabhai <nalin(a)redhat.com> - gettextize the init script * Fri Jan 12 2001 Nalin Dahyabhai <nalin(a)redhat.com> - move the RFCs to the base package (#21701) - update to MigrationTools 34 * Wed Jan 10 2001 Nalin Dahyabhai <nalin(a)redhat.com> - add support for additional OPTIONS, SLAPD_OPTIONS, and SLURPD_OPTIONS in a /etc/sysconfig/ldap file (#23549) * Fri Dec 29 2000 Nalin Dahyabhai <nalin(a)redhat.com> - change automount object OID from 1.3.6.1.1.1.2.9 to 1.3.6.1.1.1.2.13, per mail from the ldap-nis mailing list * Tue Dec 5 2000 Nalin Dahyabhai <nalin(a)redhat.com> - force -fPIC so that shared libraries don't fall over * Mon Dec 4 2000 Nalin Dahyabhai <nalin(a)redhat.com> - add Norbert Klasen's patch (via Del) to fix searches using ldaps URLs (OpenLDAP ITS #889) - add "-h ldaps:///" to server init when TLS is enabled, in order to support ldaps in addition to the regular STARTTLS (suggested by Del) * Mon Nov 27 2000 Nalin Dahyabhai <nalin(a)redhat.com> - correct mismatched-dn-cn bug in migrate_automount.pl * Mon Nov 20 2000 Nalin Dahyabhai <nalin(a)redhat.com> - update to the correct OIDs for automount and automountInformation - add notes on upgrading * Tue Nov 7 2000 Nalin Dahyabhai <nalin(a)redhat.com> - update to 2.0.7 - drop chdir patch (went mainstream) * Thu Nov 2 2000 Nalin Dahyabhai <nalin(a)redhat.com> - change automount object classes from auxiliary to structural * Tue Oct 31 2000 Nalin Dahyabhai <nalin(a)redhat.com> - update to Migration Tools 27 - change the sense of the last simple patch * Wed Oct 25 2000 Nalin Dahyabhai <nalin(a)redhat.com> - reorganize the patch list to separate MigrationTools and OpenLDAP patches - switch to Luke Howard's rfc822MailMember schema instead of the aliases.schema - configure slapd to run as the non-root user "ldap" (#19370) - chdir() before chroot() (we don't use chroot, though) (#19369) - disable saving of the pid file because the parent thread which saves it and the child thread which listens have different pids * Wed Oct 11 2000 Nalin Dahyabhai <nalin(a)redhat.com> - add missing required attributes to conversion scripts to comply with schema - add schema for mail aliases, autofs, and kerberosSecurityObject rooted in our own OID tree to define attributes and classes migration scripts expect - tweak automounter migration script * Mon Oct 9 2000 Nalin Dahyabhai <nalin(a)redhat.com> - try adding the suffix first when doing online migrations - force ldapadd to use simple authentication in migration scripts - add indexing of a few attributes to the default configuration - add commented-out section on using TLS to default configuration * Thu Oct 5 2000 Nalin Dahyabhai <nalin(a)redhat.com> - update to 2.0.6 - add buildprereq on cyrus-sasl-devel, krb5-devel, openssl-devel - take the -s flag off of slapadd invocations in migration tools - add the cosine.schema to the default server config, needed by inetorgperson * Wed Oct 4 2000 Nalin Dahyabhai <nalin(a)redhat.com> - add the nis.schema and inetorgperson.schema to the default server config - make ldapadd a hard link to ldapmodify because they're identical binaries * Fri Sep 22 2000 Nalin Dahyabhai <nalin(a)redhat.com> - update to 2.0.4 * Fri Sep 15 2000 Nalin Dahyabhai <nalin(a)redhat.com> - remove prereq on /etc/init.d (#17531) - update to 2.0.3 - add saucer to the included clients * Wed Sep 6 2000 Nalin Dahyabhai <nalin(a)redhat.com> - update to 2.0.1 * Fri Sep 1 2000 Nalin Dahyabhai <nalin(a)redhat.com> - update to 2.0.0 - patch to build against MIT Kerberos 1.1 and later instead of 1.0.x * Tue Aug 22 2000 Nalin Dahyabhai <nalin(a)redhat.com> - remove that pesky default password - change "Copyright:" to "License:" * Sun Aug 13 2000 Nalin Dahyabhai <nalin(a)redhat.com> - adjust permissions in files lists - move libexecdir from %{_prefix}/sbin to %{_sbindir} * Fri Aug 11 2000 Nalin Dahyabhai <nalin(a)redhat.com> - add migrate_automount.pl to the migration scripts set * Tue Aug 8 2000 Nalin Dahyabhai <nalin(a)redhat.com> - build a semistatic slurpd with threads, everything else without - disable reverse lookups, per email on OpenLDAP mailing lists - make sure the execute bits are set on the shared libraries * Mon Jul 31 2000 Nalin Dahyabhai <nalin(a)redhat.com> - change logging facility used from local4 to daemon (#11047) * Thu Jul 27 2000 Nalin Dahyabhai <nalin(a)redhat.com> - split off clients and servers to shrink down the package and remove the base package's dependency on Perl - make certain that the binaries have sane permissions * Mon Jul 17 2000 Nalin Dahyabhai <nalin(a)redhat.com> - move the init script back * Thu Jul 13 2000 Nalin Dahyabhai <nalin(a)redhat.com> - tweak the init script to only source /etc/sysconfig/network if it's found * Wed Jul 12 2000 Prospector <bugzilla(a)redhat.com> - automatic rebuild * Mon Jul 10 2000 Nalin Dahyabhai <nalin(a)redhat.com> - switch to gdbm; I'm getting off the db merry-go-round - tweak the init script some more - add instdir to @INC in migration scripts * Thu Jul 6 2000 Nalin Dahyabhai <nalin(a)redhat.com> - tweak init script to return error codes properly - change initscripts dependency to one on /etc/init.d * Tue Jul 4 2000 Nalin Dahyabhai <nalin(a)redhat.com> - prereq initscripts - make migration scripts use mktemp * Tue Jun 27 2000 Nalin Dahyabhai <nalin(a)redhat.com> - do condrestart in post and stop in preun - move init script to /etc/init.d * Fri Jun 16 2000 Nalin Dahyabhai <nalin(a)redhat.com> - update to 1.2.11 - add condrestart logic to init script - munge migration scripts so that you don't have to be /usr/share/openldap/migration to run them - add code to create pid files in /var/run * Mon Jun 5 2000 Nalin Dahyabhai <nalin(a)redhat.com> - FHS tweaks - fix for compiling with libdb2 * Thu May 4 2000 Bill Nottingham <notting(a)redhat.com> - minor tweak so it builds on ia64 * Wed May 3 2000 Nalin Dahyabhai <nalin(a)redhat.com> - more minimalistic fix for bug #11111 after consultation with OpenLDAP team - backport replacement for the ldapuser patch * Tue May 2 2000 Nalin Dahyabhai <nalin(a)redhat.com> - fix segfaults from queries with commas in them in in.xfingerd (bug #11111) * Tue Apr 25 2000 Nalin Dahyabhai <nalin(a)redhat.com> - update to 1.2.10 - add revamped version of patch from kos(a)bastard.net to allow execution as any non-root user - remove test suite from %build because of weirdness in the build system * Wed Apr 12 2000 Nalin Dahyabhai <nalin(a)redhat.com> - move the defaults for databases and whatnot to /var/lib/ldap (bug #10714) - fix some possible string-handling problems * Mon Feb 14 2000 Bill Nottingham <notting(a)redhat.com> - start earlier, stop later. * Thu Feb 3 2000 Nalin Dahyabhai <nalin(a)redhat.com> - auto rebuild in new environment (release 4) * Tue Feb 1 2000 Nalin Dahyabhai <nalin(a)redhat.com> - add -D_REENTRANT to make threaded stuff more stable, even though it looks like the sources define it, too - mark *.ph files in migration tools as config files * Fri Jan 21 2000 Nalin Dahyabhai <nalin(a)redhat.com> - update to 1.2.9 * Mon Sep 13 1999 Bill Nottingham <notting(a)redhat.com> - strip files * Sat Sep 11 1999 Bill Nottingham <notting(a)redhat.com> - update to 1.2.7 - fix some bugs from bugzilla (#4885, #4887, #4888, #4967) - take include files out of base package * Fri Aug 27 1999 Jeff Johnson <jbj(a)redhat.com> - missing ;; in init script reload) (#4734). * Tue Aug 24 1999 Cristian Gafton <gafton(a)redhat.com> - move stuff from /usr/libexec to /usr/sbin - relocate config dirs to /etc/openldap * Mon Aug 16 1999 Bill Nottingham <notting(a)redhat.com> - initscript munging * Wed Aug 11 1999 Cristian Gafton <gafton(a)redhat.com> - add the migration tools to the package * Fri Aug 6 1999 Cristian Gafton <gafton(a)redhat.com> - upgrade to 1.2.6 - add rc.d script - split -devel package * Sun Feb 7 1999 Preston Brown <pbrown(a)redhat.com> - upgrade to latest stable (1.1.4), it now uses configure macro. * Fri Jan 15 1999 Bill Nottingham <notting(a)redhat.com> - build on arm, glibc2.1 * Wed Oct 28 1998 Preston Brown <pbrown(a)redhat.com> - initial cut. - patches for signal handling on the alpha --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/testing/6/ 0c29829ceb639a40c364eb593cc4a57030a36f63 SRPMS/openldap-2.3.30-1.fc6.1.src.rpm 0c29829ceb639a40c364eb593cc4a57030a36f63 noarch/openldap-2.3.30-1.fc6.1.src.rpm c55c4a9f8196693ff1e7a983064f69400ede82f6 ppc/openldap-servers-sql-2.3.30-1.fc6.1.ppc.rpm e5257925ba270d89ff6d58bd2e09145b4135fe86 ppc/compat-openldap-2.3.30_2.2.29-1.fc6.1.ppc.rpm 2bbfe4f62e00f87ae3da618fbd0a61b655a6ef37 ppc/debug/openldap-debuginfo-2.3.30-1.fc6.1.ppc.rpm 57b6d15d764b44d5d98e3f7dc4fc029dda2ea922 ppc/openldap-2.3.30-1.fc6.1.ppc.rpm 93e0899e9c7f29281a23eb521964b750230526e7 ppc/openldap-clients-2.3.30-1.fc6.1.ppc.rpm 2bd9318ab2a3973df2b1e968dd524b6f6d647b43 ppc/openldap-servers-2.3.30-1.fc6.1.ppc.rpm 281233829a928ec35b1bd25b70855b1e38a1b9e5 ppc/openldap-devel-2.3.30-1.fc6.1.ppc.rpm 378da804ba443257f01064f600a2edb7d4e90e2d x86_64/debug/openldap-debuginfo-2.3.30-1.fc6.1.x86_64.rpm 9fca89683bed4112f119c50502ba6ef768cc4247 x86_64/openldap-2.3.30-1.fc6.1.x86_64.rpm 232677916f8e114e894d0e88146acbb3c608d4fa x86_64/compat-openldap-2.3.30_2.2.29-1.fc6.1.x86_64.rpm a984a0f4d3ef09e6a4f719c5553388ac16739355 x86_64/openldap-clients-2.3.30-1.fc6.1.x86_64.rpm abf280593684bb1b644f11fe6db0d3065ba53179 x86_64/openldap-servers-sql-2.3.30-1.fc6.1.x86_64.rpm 52900127f8a847c91d4ca8068b0d9295aabd2248 x86_64/openldap-devel-2.3.30-1.fc6.1.x86_64.rpm 4861b4dea5b4d06f712d6204847180605413b39c x86_64/openldap-servers-2.3.30-1.fc6.1.x86_64.rpm 2b4fd452f73a93b24d3f27214fad859693317fc4 i386/debug/openldap-debuginfo-2.3.30-1.fc6.1.i386.rpm b2fc2aa5a5f6ca0d163394dba1332ebc7a3676a7 i386/openldap-devel-2.3.30-1.fc6.1.i386.rpm 9e01e32bc8a46162ffda0ce42237f10ea4e4d5de i386/openldap-servers-2.3.30-1.fc6.1.i386.rpm 4c2f8d0d5eaa95520ff622e460635242f678fba3 i386/compat-openldap-2.3.30_2.2.29-1.fc6.1.i386.rpm 4ab3a90c3652bbd3f436d8ed604eb6af9d05e07c i386/openldap-2.3.30-1.fc6.1.i386.rpm 2fa5a5707b4cbe98d4c42f96805ba60a56856f18 i386/openldap-clients-2.3.30-1.fc6.1.i386.rpm 8b6441de13f5e14b7cdbbc29fa4aec06bad3eb11 i386/openldap-servers-sql-2.3.30-1.fc6.1.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://fedora.redhat.com/docs/yum/. ---------------------------------------------------------------------

1 0

Spamassassin & Spamass-Milter Problem
by Chris Edwards 30 Nov '06

30 Nov '06

Hello All! This is my first post to this list so please let me know if I have posted this to the wrong list. I have been running with spamassassin & spamass-milter sucsessfully for several months. After the last update I am having issues with spam not getting scored. Does anyone have any clue where I should go next? Thanks! Chris Edwards Log Entry... >Nov 30 10:20:03 gandalf spamass-milter[3602]: Could not extract score >from <> Yum Update Log... >Nov 28 11:53:24 Updated: spamassassin.i386 3.1.7-1.fc5 Nov 27 11:39:03 >Updated: clamav-data.i386 0.88.6-1.fc5 Nov 27 11:39:04 Updated: >clamav-lib.i386 0.88.6-1.fc5 Nov 27 11:39:25 Updated: >clamav-milter.i386 0.88.6-1.fc5 Nov 27 11:39:28 Updated: >clamav-server.i386 0.88.6-1.fc5 Nov 27 11:39:57 Updated: clamav.i386 >0.88.6-1.fc5 Nov 27 11:40:05 Updated: clamav-update.i386 0.88.6-1.fc5 >Nov 27 11:40:05 Updated: clamav-devel.i386 0.88.6-1.fc5 Part of Header... >X-Virus-Scanned: ClamAV 0.88.6/2263/Thu Nov 30 01:51:08 2006 on >gandalf.ctdx.net >X-Virus-Status: Clean >X-Spam-Report: > * 3.0 SC_TOP200_88 A relay is listed in the Top200 SpamCop listing > * 1.0 MIME_QP_LONG_LINE RAW: MIME_QP_LONG_LINE > * 2.0 SARE_RAND_5 SARE_RAND_5 > * 1.5 SARE_RAND_5B SARE_RAND_5B >X-Spam-Checker-Version: SpamAssassin 3.1.7 (2006-10-05) on >gandalf.ctdx.net ...No Score Abandon what is unskillful. -- the Buddha In general, few men have belief in themselves-and of those few some are endowed with it as a useful blindness or partial obscuration of intellect (what would they perceive if they could see to the bottom of themselves!). The others must first acquire the belief for themselves: everything good, clever, or great that they do, is first of all an argument against the skeptic that dwells in them: the question is how to convince or persuade this skeptic, and for that purpose genius almost is needed. They are signally dissatisfied with themselves. -- Nietzsche

1 0

[SECURITY] Fedora Core 6 Test Update: openldap-2.3.30-1.fc6.1
by Jay Fenlason 30 Nov '06

30 Nov '06

1 0

[SECURITY] Fedora Core 5 Test Update: openldap-2.3.30-1.fc5
by Jay Fenlason 30 Nov '06

30 Nov '06

1 0

Fedora Core 6 Test Update: openssh-4.3p2-14.fc6
by Tomas Mraz 30 Nov '06

30 Nov '06

--------------------------------------------------------------------- Fedora Test Update Notification FEDORA-2006-1366 2006-11-30 --------------------------------------------------------------------- Product : Fedora Core 6 Name : openssh Version : 4.3p2 Release : 14.fc6 Summary : The OpenSSH implementation of SSH protocol versions 1 and 2 Description : SSH (Secure SHell) is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forwarded over the secure channel. OpenSSH is OpenBSD's version of the last free version of SSH, bringing it up to date in terms of security and features, as well as removing all patented algorithms to separate libraries. This package includes the core files necessary for both the OpenSSH client and server. To make this package useful, you should also install openssh-clients, openssh-server, or both. --------------------------------------------------------------------- Update Information: Fixes, hopefully now without regressions, a problem where pam_session_close was not called correctly. Also fixes a minor problem with gssapi authentication. --------------------------------------------------------------------- * Thu Nov 30 2006 Tomas Mraz <tmraz(a)redhat.com> - 4.3p2-14 - fix gssapi with DNS loadbalanced clusters (#216857) * Tue Nov 28 2006 Tomas Mraz <tmraz(a)redhat.com> - 4.3p2-13 - improved pam_session patch so it doesn't regress, the patch is necessary for the pam_session_close to be called correctly as uid 0 * Fri Nov 10 2006 Tomas Mraz <tmraz(a)redhat.com> - 4.3p2-10.0 - CVE-2006-5794 - properly detect failed key verify in monitor (#214642) - kill all ssh sessions when stop is called in halt or reboot runlevel (#213008) - remove -TERM option from killproc so we don't race on sshd restart (#213490) * Mon Oct 2 2006 Tomas Mraz <tmraz(a)redhat.com> - 4.3p2-10 - improve gssapi-no-spnego patch (#208102) - CVE-2006-4924 - prevent DoS on deattack detector (#207957) - CVE-2006-5051 - don't call cleanups from signal handler (#208459) * Wed Aug 23 2006 Tomas Mraz <tmraz(a)redhat.com> - 4.3p2-9 - don't report duplicate syslog messages, use correct local time (#189158) - don't allow spnego as gssapi mechanism (from upstream) - fixed memleaks found by Coverity (from upstream) - allow ip options except source routing (#202856) (patch by HP) * Tue Aug 8 2006 Tomas Mraz <tmraz(a)redhat.com> - 4.3p2-8 - drop the pam-session patch from the previous build (#201341) - don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594) * Thu Jul 20 2006 Tomas Mraz <tmraz(a)redhat.com> - 4.3p2-7 - dropped old ssh obsoletes - call the pam_session_open/close from the monitor when privsep is enabled so it is always called as root (patch by Darren Tucker) * Mon Jul 17 2006 Tomas Mraz <tmraz(a)redhat.com> - 4.3p2-6 - improve selinux patch (by Jan Kiszka) - upstream patch for buffer append space error (#191940) - fixed typo in configure.ac (#198986) - added pam_keyinit to pam configuration (#198628) - improved error message when askpass dialog cannot grab keyboard input (#198332) - buildrequires xauth instead of xorg-x11-xauth - fixed a few rpmlint warnings * Wed Jul 12 2006 Jesse Keating <jkeating(a)redhat.com> - 4.3p2-5.1 - rebuild * Fri Apr 14 2006 Tomas Mraz <tmraz(a)redhat.com> - 4.3p2-5 - don't request pseudoterminal allocation if stdin is not tty (#188983) * Thu Mar 2 2006 Tomas Mraz <tmraz(a)redhat.com> - 4.3p2-4 - allow access if audit is not compiled in kernel (#183243) * Fri Feb 24 2006 Tomas Mraz <tmraz(a)redhat.com> - 4.3p2-3 - enable the subprocess in chroot to send messages to system log - sshd should prevent login if audit call fails * Tue Feb 21 2006 Tomas Mraz <tmraz(a)redhat.com> - 4.3p2-2 - print error from scp if not remote (patch by Bjorn Augustsson #178923) * Mon Feb 13 2006 Tomas Mraz <tmraz(a)redhat.com> - 4.3p2-1 - new version * Fri Feb 10 2006 Jesse Keating <jkeating(a)redhat.com> - 4.3p1-2.1 - bump again for double-long bug on ppc(64) * Mon Feb 6 2006 Tomas Mraz <tmraz(a)redhat.com> - 4.3p1-2 - fixed another place where syslog was called in signal handler - pass locale environment variables to server, accept them there (#179851) * Wed Feb 1 2006 Tomas Mraz <tmraz(a)redhat.com> - 4.3p1-1 - new version, dropped obsolete patches * Tue Dec 20 2005 Tomas Mraz <tmraz(a)redhat.com> - 4.2p1-10 - hopefully make the askpass dialog less confusing (#174765) * Fri Dec 9 2005 Jesse Keating <jkeating(a)redhat.com> - rebuilt * Tue Nov 22 2005 Tomas Mraz <tmraz(a)redhat.com> - 4.2p1-9 - drop x11-ssh-askpass from the package - drop old build_6x ifs from spec file - improve gnome-ssh-askpass so it doesn't reveal number of passphrase characters to person looking at the display - less hackish fix for the __USE_GNU problem * Fri Nov 18 2005 Nalin Dahyabhai <nalin(a)redhat.com> - 4.2p1-8 - work around missing gccmakedep by wrapping makedepend in a local script - remove now-obsolete build dependency on "xauth" * Thu Nov 17 2005 Warren Togami <wtogami(a)redhat.com> - 4.2p1-7 - xorg-x11-devel -> libXt-devel - rebuild for new xauth location so X forwarding works - buildreq audit-libs-devel - buildreq automake for aclocal - buildreq imake for xmkmf - -D_GNU_SOURCE in flags in order to get it to build Ugly hack to workaround openssh defining __USE_GNU which is not allowed and causes problems according to Ulrich Drepper fix this the correct way after FC5test1 * Wed Nov 9 2005 Jeremy Katz <katzj(a)redhat.com> - 4.2p1-6 - rebuild against new openssl * Fri Oct 28 2005 Tomas Mraz <tmraz(a)redhat.com> 4.2p1-5 - put back the possibility to skip SELinux patch - add patch for user login auditing by Steve Grubb * Tue Oct 18 2005 Dan Walsh <dwalsh(a)redhat.com> 4.2p1-4 - Change selinux patch to use get_default_context_with_rolelevel in libselinux. * Thu Oct 13 2005 Tomas Mraz <tmraz(a)redhat.com> 4.2p1-3 - Update selinux patch to use getseuserbyname * Fri Oct 7 2005 Tomas Mraz <tmraz(a)redhat.com> 4.2p1-2 - use include instead of pam_stack in pam config - use fork+exec instead of system in scp - CVE-2006-0225 (#168167) - upstream patch for displaying authentication errors * Tue Sep 6 2005 Tomas Mraz <tmraz(a)redhat.com> 4.2p1-1 - upgrade to a new upstream version * Tue Aug 16 2005 Tomas Mraz <tmraz(a)redhat.com> 4.1p1-5 - use x11-ssh-askpass if openssh-askpass-gnome is not installed (#165207) - install ssh-copy-id from contrib (#88707) * Wed Jul 27 2005 Tomas Mraz <tmraz(a)redhat.com> 4.1p1-4 - don't deadlock on exit with multiple X forwarded channels (#152432) - don't use X11 port which can't be bound on all IP families (#163732) * Wed Jun 29 2005 Tomas Mraz <tmraz(a)redhat.com> 4.1p1-3 - fix small regression caused by the nologin patch (#161956) - fix race in getpeername error checking (mindrot #1054) * Thu Jun 9 2005 Tomas Mraz <tmraz(a)redhat.com> 4.1p1-2 - use only pam_nologin for nologin testing * Mon Jun 6 2005 Tomas Mraz <tmraz(a)redhat.com> 4.1p1-1 - upgrade to a new upstream version - call pam_loginuid as a pam session module * Mon May 16 2005 Tomas Mraz <tmraz(a)redhat.com> 4.0p1-3 - link libselinux only to sshd (#157678) * Mon Apr 4 2005 Tomas Mraz <tmraz(a)redhat.com> 4.0p1-2 - fixed Local/RemoteForward in ssh_config.5 manpage - fix fatal when Local/RemoteForward is used and scp run (#153258) - don't leak user validity when using krb5 authentication * Thu Mar 24 2005 Tomas Mraz <tmraz(a)redhat.com> 4.0p1-1 - upgrade to 4.0p1 - remove obsolete groups patch * Wed Mar 16 2005 Elliot Lee <sopwith(a)redhat.com> - rebuilt * Mon Feb 28 2005 Nalin Dahyabhai <nalin(a)redhat.com> 3.9p1-12 - rebuild so that configure can detect that krb5_init_ets is gone now * Mon Feb 21 2005 Tomas Mraz <tmraz(a)redhat.com> 3.9p1-11 - don't call syslog in signal handler - allow password authentication when copying from remote to remote machine (#103364) * Wed Feb 9 2005 Tomas Mraz <tmraz(a)redhat.com> - add spaces to messages in initscript (#138508) * Tue Feb 8 2005 Tomas Mraz <tmraz(a)redhat.com> 3.9p1-10 - enable trusted forwarding by default if X11 forwarding is required by user (#137685 and duplicates) - disable protocol 1 support by default in sshd server config (#88329) - keep the gnome-askpass dialog above others (#69131) * Fri Feb 4 2005 Tomas Mraz <tmraz(a)redhat.com> - change permissions on pam.d/sshd to 0644 (#64697) - patch initscript so it doesn't kill opened sessions if the sshd daemon isn't running anymore (#67624) * Mon Jan 3 2005 Bill Nottingham <notting(a)redhat.com> 3.9p1-9 - don't use initlog * Mon Nov 29 2004 Thomas Woerner <twoerner(a)redhat.com> 3.9p1-8.1 - fixed PIE build for all architectures * Mon Oct 4 2004 Nalin Dahyabhai <nalin(a)redhat.com> 3.9p1-8 - add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option to enable display of a vendor patch level during version exchange (#120285) - configure with --disable-strip to build useful debuginfo subpackages * Mon Sep 20 2004 Bill Nottingham <notting(a)redhat.com> 3.9p1-7 - when using gtk2 for askpass, don't buildprereq gnome-libs-devel * Tue Sep 14 2004 Nalin Dahyabhai <nalin(a)redhat.com> 3.9p1-6 - build * Mon Sep 13 2004 Nalin Dahyabhai <nalin(a)redhat.com> - disable ACSS support * Thu Sep 2 2004 Daniel Walsh <dwalsh(a)redhat.com> 3.9p1-5 - Change selinux patch to use get_default_context_with_role in libselinux. * Thu Sep 2 2004 Daniel Walsh <dwalsh(a)redhat.com> 3.9p1-4 - Fix patch * Bad debug statement. * Handle root/sysadm_r:kerberos * Thu Sep 2 2004 Daniel Walsh <dwalsh(a)redhat.com> 3.9p1-3 - Modify Colin Walter's patch to allow specifying rule during connection * Tue Aug 31 2004 Daniel Walsh <dwalsh(a)redhat.com> 3.9p1-2 - Fix TTY handling for SELinux * Tue Aug 24 2004 Daniel Walsh <dwalsh(a)redhat.com> 3.9p1-1 - Update to upstream * Sun Aug 1 2004 Alan Cox <alan(a)redhat.com> 3.8.1p1-5 - Apply buildreq fixup patch (#125296) * Tue Jun 15 2004 Daniel Walsh <dwalsh(a)redhat.com> 3.8.1p1-4 - Clean up patch for upstream submission. * Tue Jun 15 2004 Elliot Lee <sopwith(a)redhat.com> - rebuilt * Wed Jun 9 2004 Daniel Walsh <dwalsh(a)redhat.com> 3.8.1p1-2 - Remove use of pam_selinux and patch selinux in directly. * Mon Jun 7 2004 Nalin Dahyabhai <nalin(a)redhat.com> 3.8.1p1-1 - request gssapi-with-mic by default but not delegation (flag day for anyone who used previous gssapi patches) - no longer request x11 forwarding by default * Thu Jun 3 2004 Daniel Walsh <dwalsh(a)redhat.com> 3.6.1p2-36 - Change pam file to use open and close with pam_selinux * Tue Jun 1 2004 Nalin Dahyabhai <nalin(a)redhat.com> 3.8.1p1-0 - update to 3.8.1p1 - add workaround from CVS to reintroduce passwordauth using pam * Tue Jun 1 2004 Daniel Walsh <dwalsh(a)redhat.com> 3.6.1p2-35 - Remove CLOSEXEC on STDERR * Tue Mar 16 2004 Daniel Walsh <dwalsh(a)redhat.com> 3.6.1p2-34 * Wed Mar 03 2004 Phil Knirsch <pknirsch(a)redhat.com> 3.6.1p2-33.30.1 - Built RHLE3 U2 update package. * Wed Mar 3 2004 Daniel Walsh <dwalsh(a)redhat.com> 3.6.1p2-33 - Close file descriptors on exec * Mon Mar 1 2004 Thomas Woerner <twoerner(a)redhat.com> 3.6.1p2-32 - fixed pie build * Thu Feb 26 2004 Daniel Walsh <dwalsh(a)redhat.com> 3.6.1p2-31 - Add restorecon to startup scripts * Thu Feb 26 2004 Daniel Walsh <dwalsh(a)redhat.com> 3.6.1p2-30 - Add multiple qualified to openssh * Mon Feb 23 2004 Daniel Walsh <dwalsh(a)redhat.com> 3.6.1p2-29 - Eliminate selinux code and use pam_selinux * Fri Feb 13 2004 Elliot Lee <sopwith(a)redhat.com> - rebuilt * Mon Jan 26 2004 Daniel Walsh <dwalsh(a)redhat.com> 3.6.1p2-27 - turn off pie on ppc * Mon Jan 26 2004 Daniel Walsh <dwalsh(a)redhat.com> 3.6.1p2-26 - fix is_selinux_enabled * Wed Jan 14 2004 Daniel Walsh <dwalsh(a)redhat.com> 3.6.1p2-25 - Rebuild to grab shared libselinux * Wed Dec 3 2003 Daniel Walsh <dwalsh(a)redhat.com> 3.6.1p2-24 - turn on selinux * Tue Nov 18 2003 Nalin Dahyabhai <nalin(a)redhat.com> - un#ifdef out code for reporting password expiration in non-privsep mode (#83585) * Mon Nov 10 2003 Nalin Dahyabhai <nalin(a)redhat.com> - add machinery to build with/without -fpie/-pie, default to doing so * Thu Nov 6 2003 David Woodhouse <dwmw2(a)redhat.com> 3.6.1p2-23 - Don't whinge about getsockopt failing (#109161) * Fri Oct 24 2003 Nalin Dahyabhai <nalin(a)redhat.com> - add missing buildprereq on zlib-devel (#104558) * Mon Oct 13 2003 Daniel Walsh <dwalsh(a)redhat.com> 3.6.1p2-22 - turn selinux off * Mon Oct 13 2003 Daniel Walsh <dwalsh(a)redhat.com> 3.6.1p2-21.sel - turn selinux on * Fri Sep 19 2003 Daniel Walsh <dwalsh(a)redhat.com> 3.6.1p2-21 - turn selinux off * Fri Sep 19 2003 Daniel Walsh <dwalsh(a)redhat.com> 3.6.1p2-20.sel - turn selinux on * Fri Sep 19 2003 Nalin Dahyabhai <nalin(a)redhat.com> - additional fix for apparently-never-happens double-free in buffer_free() - extend fix for #103998 to cover SSH1 * Wed Sep 17 2003 Nalin Dahyabhai <nalin(a)redhat.com> 3.6.1p2-19 - rebuild * Wed Sep 17 2003 Nalin Dahyabhai <nalin(a)redhat.com> 3.6.1p2-18 - additional buffer manipulation cleanups from Solar Designer * Wed Sep 17 2003 Daniel Walsh <dwalsh(a)redhat.com> 3.6.1p2-17 - turn selinux off * Wed Sep 17 2003 Daniel Walsh <dwalsh(a)redhat.com> 3.6.1p2-16.sel - turn selinux on * Tue Sep 16 2003 Bill Nottingham <notting(a)redhat.com> 3.6.1p2-15 - rebuild * Tue Sep 16 2003 Bill Nottingham <notting(a)redhat.com> 3.6.1p2-14 - additional buffer manipulation fixes (CAN-2003-0695) * Tue Sep 16 2003 Daniel Walsh <dwalsh(a)redhat.com> 3.6.1p2-13.sel - turn selinux on * Tue Sep 16 2003 Nalin Dahyabhai <nalin(a)redhat.com> 3.6.1p2-12 - rebuild * Tue Sep 16 2003 Nalin Dahyabhai <nalin(a)redhat.com> 3.6.1p2-11 - apply patch to store the correct buffer size in allocated buffers (CAN-2003-0693) - skip the initial PAM authentication attempt with an empty password if empty passwords are not permitted in our configuration (#103998) * Fri Sep 5 2003 Daniel Walsh <dwalsh(a)redhat.com> 3.6.1p2-10 - turn selinux off * Fri Sep 5 2003 Daniel Walsh <dwalsh(a)redhat.com> 3.6.1p2-9.sel - turn selinux on * Tue Aug 26 2003 Daniel Walsh <dwalsh(a)redhat.com> 3.6.1p2-8 - Add BuildPreReq gtk2-devel if gtk2 * Tue Aug 12 2003 Nalin Dahyabhai <nalin(a)redhat.com> 3.6.1p2-7 - rebuild * Tue Aug 12 2003 Nalin Dahyabhai <nalin(a)redhat.com> 3.6.1p2-6 - modify patch which clears the supplemental group list at startup to only complain if setgroups() fails if sshd has euid == 0 - handle krb5 installed in %{_prefix} or elsewhere by using krb5-config * Mon Jul 28 2003 Daniel Walsh <dwalsh(a)redhat.com> 3.6.1p2-5 - Add SELinux patch * Tue Jul 22 2003 Nalin Dahyabhai <nalin(a)redhat.com> 3.6.1p2-4 - rebuild * Mon Jun 16 2003 Nalin Dahyabhai <nalin(a)redhat.com> 3.6.1p2-3 - rebuild * Mon Jun 16 2003 Nalin Dahyabhai <nalin(a)redhat.com> 3.6.1p2-2 - rebuild * Thu Jun 5 2003 Nalin Dahyabhai <nalin(a)redhat.com> 3.6.1p2-1 - update to 3.6.1p2 * Wed Jun 4 2003 Elliot Lee <sopwith(a)redhat.com> - rebuilt * Mon Mar 24 2003 Florian La Roche <Florian.LaRoche(a)redhat.de> - add patch for getsockopt() call to work on bigendian 64bit archs * Fri Feb 14 2003 Nalin Dahyabhai <nalin(a)redhat.com> 3.5p1-6 - move scp to the -clients subpackage, because it directly depends on ssh which is also in -clients (#84329) * Mon Feb 10 2003 Nalin Dahyabhai <nalin(a)redhat.com> 3.5p1-5 - rebuild * Wed Jan 22 2003 Tim Powers <timp(a)redhat.com> - rebuilt * Tue Jan 7 2003 Nalin Dahyabhai <nalin(a)redhat.com> 3.5p1-3 - rebuild * Tue Nov 12 2002 Nalin Dahyabhai <nalin(a)redhat.com> 3.5p1-2 - patch PAM configuration to use relative path names for the modules, allowing us to not worry about which arch the modules are built for on multilib systems * Tue Oct 15 2002 Nalin Dahyabhai <nalin(a)redhat.com> 3.5p1-1 - update to 3.5p1, merging in filelist/perm changes from the upstream spec * Fri Oct 4 2002 Nalin Dahyabhai <nalin(a)redhat.com> 3.4p1-3 - merge * Thu Sep 12 2002 Than Ngo <than(a)redhat.com> 3.4p1-2.1 - fix to build on multilib systems * Thu Aug 29 2002 Curtis Zinzilieta <curtisz(a)redhat.com> 3.4p1-2gss - added gssapi patches and uncommented patch here * Wed Aug 14 2002 Nalin Dahyabhai <nalin(a)redhat.com> 3.4p1-2 - pull patch from CVS to fix too-early free in ssh-keysign (#70009) * Thu Jun 27 2002 Nalin Dahyabhai <nalin(a)redhat.com> 3.4p1-1 - 3.4p1 - drop anon mmap patch * Tue Jun 25 2002 Nalin Dahyabhai <nalin(a)redhat.com> 3.3p1-2 - rework the close-on-exit docs - include configuration file man pages - make use of nologin as the privsep shell optional * Mon Jun 24 2002 Nalin Dahyabhai <nalin(a)redhat.com> 3.3p1-1 - update to 3.3p1 - merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign) - disable gtk2 askpass - require pam-devel by filename rather than by package for erratum - include patch from Solar Designer to work around anonymous mmap failures * Fri Jun 21 2002 Tim Powers <timp(a)redhat.com> - automated rebuild * Fri Jun 7 2002 Nalin Dahyabhai <nalin(a)redhat.com> 3.2.3p1-3 - don't require autoconf any more * Fri May 31 2002 Nalin Dahyabhai <nalin(a)redhat.com> 3.2.3p1-2 - build gnome-ssh-askpass with gtk2 * Tue May 28 2002 Nalin Dahyabhai <nalin(a)redhat.com> 3.2.3p1-1 - update to 3.2.3p1 - merge in spec file changes from upstream * Fri May 17 2002 Nalin Dahyabhai <nalin(a)redhat.com> 3.2.2p1-1 - update to 3.2.2p1 * Fri May 17 2002 Nalin Dahyabhai <nalin(a)redhat.com> 3.1p1-4 - drop buildreq on db1-devel - require pam-devel by package name - require autoconf instead of autoconf253 again * Tue Apr 2 2002 Nalin Dahyabhai <nalin(a)redhat.com> 3.1p1-3 - pull patch from CVS to avoid printing error messages when some of the default keys aren't available when running ssh-add - refresh to current revisions of Simon's patches * Thu Mar 21 2002 Nalin Dahyabhai <nalin(a)redhat.com> 3.1p1-2gss - reintroduce Simon's gssapi patches - add buildprereq for autoconf253, which is needed to regenerate configure after applying the gssapi patches - refresh to the latest version of Markus's patch to build properly with older versions of OpenSSL * Thu Mar 7 2002 Nalin Dahyabhai <nalin(a)redhat.com> 3.1p1-2 - bump and grind (through the build system) * Thu Mar 7 2002 Nalin Dahyabhai <nalin(a)redhat.com> 3.1p1-1 - require sharutils for building (mindrot #137) - require db1-devel only when building for 6.x (#55105), which probably won't work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck - require pam-devel by file (not by package name) again - add Markus's patch to compile with OpenSSL 0.9.5a (from http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're building for 6.x * Thu Mar 7 2002 Nalin Dahyabhai <nalin(a)redhat.com> 3.1p1-0 - update to 3.1p1 * Tue Mar 5 2002 Nalin Dahyabhai <nalin(a)redhat.com> SNAP-20020305 - update to SNAP-20020305 - drop debug patch, fixed upstream * Wed Feb 20 2002 Nalin Dahyabhai <nalin(a)redhat.com> SNAP-20020220 - update to SNAP-20020220 for testing purposes (you've been warned, if there's anything to be warned about, gss patches won't apply, I don't mind) * Wed Feb 13 2002 Nalin Dahyabhai <nalin(a)redhat.com> 3.0.2p1-3 - add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key exchange, authentication, and named key support * Wed Jan 23 2002 Nalin Dahyabhai <nalin(a)redhat.com> 3.0.2p1-2 - remove dependency on db1-devel, which has just been swallowed up whole by gnome-libs-devel * Sat Dec 29 2001 Nalin Dahyabhai <nalin(a)redhat.com> - adjust build dependencies so that build6x actually works right (fix from Hugo van der Kooij) * Tue Dec 4 2001 Nalin Dahyabhai <nalin(a)redhat.com> 3.0.2p1-1 - update to 3.0.2p1 * Fri Nov 16 2001 Nalin Dahyabhai <nalin(a)redhat.com> 3.0.1p1-1 - update to 3.0.1p1 * Tue Nov 13 2001 Nalin Dahyabhai <nalin(a)redhat.com> - update to current CVS (not for use in distribution) * Thu Nov 8 2001 Nalin Dahyabhai <nalin(a)redhat.com> 3.0p1-1 - merge some of Damien Miller <djm(a)mindrot.org> changes from the upstream 3.0p1 spec file and init script * Wed Nov 7 2001 Nalin Dahyabhai <nalin(a)redhat.com> - update to 3.0p1 - update to x11-ssh-askpass 1.2.4.1 - change build dependency on a file from pam-devel to the pam-devel package - replace primes with moduli * Thu Sep 27 2001 Nalin Dahyabhai <nalin(a)redhat.com> 2.9p2-9 - incorporate fix from Markus Friedl's advisory for IP-based authorization bugs * Thu Sep 13 2001 Bernhard Rosenkraenzer <bero(a)redhat.com> 2.9p2-8 - Merge changes to rescue build from current sysadmin survival cd * Thu Sep 6 2001 Nalin Dahyabhai <nalin(a)redhat.com> 2.9p2-7 - fix scp's server's reporting of file sizes, and build with the proper preprocessor define to get large-file capable open(), stat(), etc. (sftp has been doing this correctly all along) (#51827) - configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247) - pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298) - mark profile.d scriptlets as config files (#42337) - refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug - change a couple of log() statements to debug() statements (#50751) - pull cvs patch to add -t flag to sshd (#28611) - clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221) * Mon Aug 20 2001 Nalin Dahyabhai <nalin(a)redhat.com> 2.9p2-6 - add db1-devel as a BuildPrerequisite (noted by Hans Ecke) * Thu Aug 16 2001 Nalin Dahyabhai <nalin(a)redhat.com> - pull cvs patch to fix remote port forwarding with protocol 2 * Thu Aug 9 2001 Nalin Dahyabhai <nalin(a)redhat.com> - pull cvs patch to add session initialization to no-pty sessions - pull cvs patch to not cut off challengeresponse auth needlessly - refuse to do X11 forwarding if xauth isn't there, handy if you enable it by default on a system that doesn't have X installed (#49263) * Wed Aug 8 2001 Nalin Dahyabhai <nalin(a)redhat.com> - don't apply patches to code we don't intend to build (spotted by Matt Galgoci) * Mon Aug 6 2001 Nalin Dahyabhai <nalin(a)redhat.com> - pass OPTIONS correctly to initlog (#50151) * Wed Jul 25 2001 Nalin Dahyabhai <nalin(a)redhat.com> - switch to x11-ssh-askpass 1.2.2 * Wed Jul 11 2001 Nalin Dahyabhai <nalin(a)redhat.com> - rebuild in new environment * Mon Jun 25 2001 Nalin Dahyabhai <nalin(a)redhat.com> - disable the gssapi patch * Mon Jun 18 2001 Nalin Dahyabhai <nalin(a)redhat.com> - update to 2.9p2 - refresh to a new version of the gssapi patch * Thu Jun 7 2001 Nalin Dahyabhai <nalin(a)redhat.com> - change Copyright: BSD to License: BSD - add Markus Friedl's unverified patch for the cookie file deletion problem so that we can verify it - drop patch to check if xauth is present (was folded into cookie patch) - don't apply gssapi patches for the errata candidate - clear supplemental groups list at startup * Fri May 25 2001 Nalin Dahyabhai <nalin(a)redhat.com> - fix an error parsing the new default sshd_config - add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not dealing with comments right * Thu May 24 2001 Nalin Dahyabhai <nalin(a)redhat.com> - add in Simon Wilkinson's GSSAPI patch to give it some testing in-house, to be removed before the next beta cycle because it's a big departure from the upstream version * Thu May 3 2001 Nalin Dahyabhai <nalin(a)redhat.com> - finish marking strings in the init script for translation - modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd at startup (change merged from openssh.com init script, originally by Pekka Savola) - refuse to do X11 forwarding if xauth isn't there, handy if you enable it by default on a system that doesn't have X installed * Wed May 2 2001 Nalin Dahyabhai <nalin(a)redhat.com> - update to 2.9 - drop various patches that came from or went upstream or to or from CVS * Wed Apr 18 2001 Nalin Dahyabhai <nalin(a)redhat.com> - only require initscripts 5.00 on 6.2 (reported by Peter Bieringer) * Sun Apr 8 2001 Preston Brown <pbrown(a)redhat.com> - remove explicit openssl requirement, fixes builddistro issue - make initscript stop() function wait until sshd really dead to avoid races in condrestart * Mon Apr 2 2001 Nalin Dahyabhai <nalin(a)redhat.com> - mention that challengereponse supports PAM, so disabling password doesn't limit users to pubkey and rsa auth (#34378) - bypass the daemon() function in the init script and call initlog directly, because daemon() won't start a daemon it detects is already running (like open connections) - require the version of openssl we had when we were built * Fri Mar 23 2001 Nalin Dahyabhai <nalin(a)redhat.com> - make do_pam_setcred() smart enough to know when to establish creds and when to reinitialize them - add in a couple of other fixes from Damien for inclusion in the errata * Thu Mar 22 2001 Nalin Dahyabhai <nalin(a)redhat.com> - update to 2.5.2p2 - call setcred() again after initgroups, because the "creds" could actually be group memberships * Tue Mar 20 2001 Nalin Dahyabhai <nalin(a)redhat.com> - update to 2.5.2p1 (includes endianness fixes in the rijndael implementation) - don't enable challenge-response by default until we find a way to not have too many userauth requests (we may make up to six pubkey and up to three password attempts as it is) - remove build dependency on rsh to match openssh.com's packages more closely * Sat Mar 3 2001 Nalin Dahyabhai <nalin(a)redhat.com> - remove dependency on openssl -- would need to be too precise * Fri Mar 2 2001 Nalin Dahyabhai <nalin(a)redhat.com> - rebuild in new environment * Mon Feb 26 2001 Nalin Dahyabhai <nalin(a)redhat.com> - Revert the patch to move pam_open_session. - Init script and spec file changes from Pekka Savola. (#28750) - Patch sftp to recognize '-o protocol' arguments. (#29540) * Thu Feb 22 2001 Nalin Dahyabhai <nalin(a)redhat.com> - Chuck the closing patch. - Add a trigger to add host keys for protocol 2 to the config file, now that configuration file syntax requires us to specify it with HostKey if we specify any other HostKey values, which we do. * Tue Feb 20 2001 Nalin Dahyabhai <nalin(a)redhat.com> - Redo patch to move pam_open_session after the server setuid()s to the user. - Rework the nopam patch to use be picked up by autoconf. * Mon Feb 19 2001 Nalin Dahyabhai <nalin(a)redhat.com> - Update for 2.5.1p1. - Add init script mods from Pekka Savola. - Tweak the init script to match the CVS contrib script more closely. - Redo patch to ssh-add to try to adding both identity and id_dsa to also try adding id_rsa. * Fri Feb 16 2001 Nalin Dahyabhai <nalin(a)redhat.com> - Update for 2.5.0p1. - Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass - Resync with parts of Damien Miller's openssh.spec from CVS, including update of x11 askpass to 1.2.0. - Only require openssl (don't prereq) because we generate keys in the init script now. * Tue Feb 13 2001 Nalin Dahyabhai <nalin(a)redhat.com> - Don't open a PAM session until we've forked and become the user (#25690). - Apply Andrew Bartlett's patch for letting pam_authenticate() know which host the user is attempting a login from. - Resync with parts of Damien Miller's openssh.spec from CVS. - Don't expose KbdInt responses in debug messages (from CVS). - Detect and handle errors in rsa_{public,private}_decrypt (from CVS). * Wed Feb 7 2001 Trond Eivind Glomsrxd <teg(a)redhat.com> - i18n-tweak to initscript. * Tue Jan 23 2001 Nalin Dahyabhai <nalin(a)redhat.com> - More gettextizing. - Close all files after going into daemon mode (needs more testing). - Extract patch from CVS to handle auth banners (in the client). - Extract patch from CVS to handle compat weirdness. * Fri Jan 19 2001 Nalin Dahyabhai <nalin(a)redhat.com> - Finish with the gettextizing. * Thu Jan 18 2001 Nalin Dahyabhai <nalin(a)redhat.com> - Fix a bug in auth2-pam.c (#23877) - Gettextize the init script. * Wed Dec 20 2000 Nalin Dahyabhai <nalin(a)redhat.com> - Incorporate a switch for using PAM configs for 6.x, just in case. * Tue Dec 5 2000 Nalin Dahyabhai <nalin(a)redhat.com> - Incorporate Bero's changes for a build specifically for rescue CDs. * Wed Nov 29 2000 Nalin Dahyabhai <nalin(a)redhat.com> - Don't treat pam_setcred() failure as fatal unless pam_authenticate() has succeeded, to allow public-key authentication after a failure with "none" authentication. (#21268) * Tue Nov 28 2000 Nalin Dahyabhai <nalin(a)redhat.com> - Update to x11-askpass 1.1.1. (#21301) - Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290) * Mon Nov 27 2000 Nalin Dahyabhai <nalin(a)redhat.com> - Merge multiple PAM text messages into subsequent prompts when possible when doing keyboard-interactive authentication. * Sun Nov 26 2000 Nalin Dahyabhai <nalin(a)redhat.com> - Disable the built-in MD5 password support. We're using PAM. - Take a crack at doing keyboard-interactive authentication with PAM, and enable use of it in the default client configuration so that the client will try it when the server disallows password authentication. - Build with debugging flags. Build root policies strip all binaries anyway. * Tue Nov 21 2000 Nalin Dahyabhai <nalin(a)redhat.com> - Use DESTDIR instead of %makeinstall. - Remove /usr/X11R6/bin from the path-fixing patch. * Mon Nov 20 2000 Nalin Dahyabhai <nalin(a)redhat.com> - Add the primes file from the latest snapshot to the main package (#20884). - Add the dev package to the prereq list (#19984). - Remove the default path and mimic login's behavior in the server itself. * Fri Nov 17 2000 Nalin Dahyabhai <nalin(a)redhat.com> - Resync with conditional options in Damien Miller's .spec file for an errata. - Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh. * Tue Nov 7 2000 Nalin Dahyabhai <nalin(a)redhat.com> - Update to OpenSSH 2.3.0p1. - Update to x11-askpass 1.1.0. - Enable keyboard-interactive authentication. * Mon Oct 30 2000 Nalin Dahyabhai <nalin(a)redhat.com> - Update to ssh-askpass-x11 1.0.3. - Change authentication related messages to be private (#19966). * Tue Oct 10 2000 Nalin Dahyabhai <nalin(a)redhat.com> - Patch ssh-keygen to be able to list signatures for DSA public key files it generates. * Thu Oct 5 2000 Nalin Dahyabhai <nalin(a)redhat.com> - Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always build PAM authentication in. - Try setting SSH_ASKPASS if gnome-ssh-askpass is installed. - Clean out no-longer-used patches. - Patch ssh-add to try to add both identity and id_dsa, and to error only when neither exists. * Mon Oct 2 2000 Nalin Dahyabhai <nalin(a)redhat.com> - Update x11-askpass to 1.0.2. (#17835) - Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will always find them in the right place. (#17909) - Set the default path to be the same as the one supplied by /bin/login, but add /usr/X11R6/bin. (#17909) - Try to handle obsoletion of ssh-server more cleanly. Package names are different, but init script name isn't. (#17865) * Wed Sep 6 2000 Nalin Dahyabhai <nalin(a)redhat.com> - Update to 2.2.0p1. (#17835) - Tweak the init script to allow proper restarting. (#18023) * Wed Aug 23 2000 Nalin Dahyabhai <nalin(a)redhat.com> - Update to 20000823 snapshot. - Change subpackage requirements from %{version} to %{version}-%{release} - Back out the pipe patch. * Mon Jul 17 2000 Nalin Dahyabhai <nalin(a)redhat.com> - Update to 2.1.1p4, which includes fixes for config file parsing problems. - Move the init script back. - Add Damien's quick fix for wackiness. * Wed Jul 12 2000 Nalin Dahyabhai <nalin(a)redhat.com> - Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok(). * Thu Jul 6 2000 Nalin Dahyabhai <nalin(a)redhat.com> - Move condrestart to server postun. - Move key generation to init script. - Actually use the right patch for moving the key generation to the init script. - Clean up the init script a bit. * Wed Jul 5 2000 Nalin Dahyabhai <nalin(a)redhat.com> - Fix X11 forwarding, from mail post by Chan Shih-Ping Richard. * Sun Jul 2 2000 Nalin Dahyabhai <nalin(a)redhat.com> - Update to 2.1.1p2. - Use of strtok() considered harmful. * Sat Jul 1 2000 Nalin Dahyabhai <nalin(a)redhat.com> - Get the build root out of the man pages. * Thu Jun 29 2000 Nalin Dahyabhai <nalin(a)redhat.com> - Add and use condrestart support in the init script. - Add newer initscripts as a prereq. * Tue Jun 27 2000 Nalin Dahyabhai <nalin(a)redhat.com> - Build in new environment (release 2) - Move -clients subpackage to Applications/Internet group * Fri Jun 9 2000 Nalin Dahyabhai <nalin(a)redhat.com> - Update to 2.2.1p1 * Sat Jun 3 2000 Nalin Dahyabhai <nalin(a)redhat.com> - Patch to build with neither RSA nor RSAref. - Miscellaneous FHS-compliance tweaks. - Fix for possibly-compressed man pages. * Wed Mar 15 2000 Damien Miller <djm(a)ibs.com.au> - Updated for new location - Updated for new gnome-ssh-askpass build * Sun Dec 26 1999 Damien Miller <djm(a)mindrot.org> - Added Jim Knoble's <jmknoble(a)pobox.com> askpass * Mon Nov 15 1999 Damien Miller <djm(a)mindrot.org> - Split subpackages further based on patch from jim knoble <jmknoble(a)pobox.com> * Sat Nov 13 1999 Damien Miller <djm(a)mindrot.org> - Added 'Obsoletes' directives * Tue Nov 9 1999 Damien Miller <djm(a)ibs.com.au> - Use make install - Subpackages * Mon Nov 8 1999 Damien Miller <djm(a)ibs.com.au> - Added links for slogin - Fixed perms on manpages * Sat Oct 30 1999 Damien Miller <djm(a)ibs.com.au> - Renamed init script * Fri Oct 29 1999 Damien Miller <djm(a)ibs.com.au> - Back to old binary names * Thu Oct 28 1999 Damien Miller <djm(a)ibs.com.au> - Use autoconf - New binary names * Wed Oct 27 1999 Damien Miller <djm(a)ibs.com.au> - Initial RPMification, based on Jan "Yenya" Kasprzak's <kas(a)fi.muni.cz> spec. --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/testing/6/ 5ba2f5e7dbf3aa21295281664295d7a097e6a822 SRPMS/openssh-4.3p2-14.fc6.src.rpm 5ba2f5e7dbf3aa21295281664295d7a097e6a822 noarch/openssh-4.3p2-14.fc6.src.rpm 5255f7b7874068dfbb84b43ae369ca03c9c8ed19 ppc/openssh-askpass-4.3p2-14.fc6.ppc.rpm e476705e7b71c69ab1f3b83009941daf99bc245f ppc/openssh-4.3p2-14.fc6.ppc.rpm a93a652eeefe581f4b1fd20eaba918a93e1008e6 ppc/openssh-clients-4.3p2-14.fc6.ppc.rpm 3fb8a5c1ea7bc064319d12f6da3d1754623171d8 ppc/debug/openssh-debuginfo-4.3p2-14.fc6.ppc.rpm 162b93e8e938030e2a856bb58b1a0e3913485f54 ppc/openssh-server-4.3p2-14.fc6.ppc.rpm 75832638867d76e0e40ddda2ac3d4c2a6068c279 x86_64/openssh-askpass-4.3p2-14.fc6.x86_64.rpm 07a4e8135b5e8424e59c4fc4eaebd83b6dfe94d1 x86_64/openssh-4.3p2-14.fc6.x86_64.rpm b67ec373945638c0259f68870a56d94fbf4eeecd x86_64/openssh-clients-4.3p2-14.fc6.x86_64.rpm f46e6d32bf5df4772f5d48b127ce80bf952ca9ae x86_64/openssh-server-4.3p2-14.fc6.x86_64.rpm 0f84228d18fde7731a3c0e749f95a41ecd627984 x86_64/debug/openssh-debuginfo-4.3p2-14.fc6.x86_64.rpm abf41fc341fc1608f626e171eec8ee0fc8c9332c i386/openssh-server-4.3p2-14.fc6.i386.rpm 9ff6bf6188dcbc11550a3a496da478b7ab329ffa i386/debug/openssh-debuginfo-4.3p2-14.fc6.i386.rpm ceb52cdd8c5828635a42a26665b6e312acab8e54 i386/openssh-4.3p2-14.fc6.i386.rpm 16dcb7345a9a7f08c3e7b605b135df8ffa3cb46f i386/openssh-askpass-4.3p2-14.fc6.i386.rpm ca9095f9297de8c160b55ccf9cc1a21630a8ecb8 i386/openssh-clients-4.3p2-14.fc6.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://fedora.redhat.com/docs/yum/. ---------------------------------------------------------------------

1 0

Xen kernel requires pciback built in - not as a module.
by Steven Haigh 30 Nov '06

30 Nov '06

Hi all, I've been playing with Xen a lot lately, however one thing I've noticed is that if you need to pass hardware to a Xen guest, you need to use pciback as a built in option - not as a module. Say you need to have a serial port or USB port or similar to hand it to a Xen DomU (guest), then you need to use pciback in the grub config to get the kernel to ignore the hardware on Dom0 - which allows pciback to grab the hardware and present it to the guest. This is impossible with current Fedora Xen kernels, as pciback is included as a module - and can only pass unassigned hardware (pci cards etc) and NOT things such as USB controllers - as the kernel automatically grabs them on boot. I hope this makes sense :) Anyone have any comments on this? -- Steven Haigh Email: netwiz(a)crc.id.au Web: http://www.crc.id.au Phone: (03) 9017 0597 - 0412 935 897

1 0

rawhide report: 20061130 changes
by Build System 30 Nov '06

30 Nov '06

Updated Packages: avahi-0.6.15-3.fc7 ------------------ * Mon Nov 27 2006 Martin Bacovsky <mbacovsk(a)redhat.com> - 0.6.15-3 - automake-1.10 required for building * Mon Nov 27 2006 Martin Bacovsky <mbacovsk(a)redhat.com> - 0.6.15-2 - automake-1.9 required for building * Fri Nov 24 2006 Martin Bacovsky <mbacovsk(a)redhat.com> - 0.6.15-1 - Upgrade to 0.6.15 - patches revision cpuspeed-1:1.2.1-1.45.fc7 ------------------------- * Wed Nov 29 2006 Jarod Wilson <jwilson(a)redhat.com> - Fix busted config file sourcing * Mon Nov 27 2006 Jarod Wilson <jwilson(a)redhat.com> - Spec tweaks to bring in line with Fedora packaging guidelines - Add docs to package - Mark config file as noreplace - Be sure to stop service before uninstall dbus-glib-0.71-3.fc7 -------------------- * Wed Nov 29 2006 David Zeuthen <davidz(a)redhat.com> - 0.71-3.fc7 - Add dbus-glib-0.70-fix-info-leak.patch - Resolves: #216034 dhcp-12:3.0.5-8.fc7 ------------------- * Wed Nov 29 2006 David Cantrell <dcantrell(a)redhat.com> - 12:3.0.5-8 - Roll md5 patch in to libdhcp4client patch since it's related - Do not overwrite /etc/ntp/step-tickers (#217663) - Resolves: rhbz#217663 * Wed Nov 22 2006 Peter Jones <pjones(a)redhat.com> - 12:3.0.5-7 - Build the MD5 functions we link against. * Thu Nov 16 2006 David Cantrell <dcantrell(a)redhat.com> - 12:3.0.5-6 - Set permission of libdhcp4client.so.1 to 0755 (#215910) gaim-2:2.0.0-0.25.beta5.fc7 --------------------------- * Wed Nov 29 2006 Warren Togami <wtogami(a)redhat.com> - 2:2.0.0-0.25.beta5 - GTK File dialog blanked fix (#217768) - Disable cyrus-sasl-md5 patch, it needs more work * Tue Nov 28 2006 Warren Togami <wtogami(a)redhat.com> - 2:2.0.0-0.24.beta5 - Debian patch 10_text-arrow-keys - Debian patch 11_reread-resolvconf - Jabber cyrus-sasl-md5 plugin crash (#217335 ari, kingant) gnome-panel-2.16.1-8.fc7 ------------------------ * Wed Nov 29 2006 Ray Strode <rstrode(a)redhat.com> - 2.16.1-8 - don't ask user if they want to logout if they've set the preference not to * Wed Nov 29 2006 Stepan Kasal <skasal(a)redhat.com> - 2.16.1-7 - Add BuildRequires: libtool; without it, the aclocal call failed. * Tue Nov 21 2006 Matthias Clasen <mclasen(a)redhat.com> - 2.16.1-6 - Support tracker hunspell-1.1.4-2.fc7 -------------------- isdn4k-utils-3.2-53.fc7 ----------------------- * Wed Nov 29 2006 Karsten Hopp <karsten(a)redhat.com> 3.2-53.fc7 - rebuild with new libpcap kdepim-6:3.5.5-1.fc7 -------------------- * Wed Nov 29 2006 Karsten Hopp <karsten(a)redhat.com> 3.5.5-1.fc7 - rebuild with new pilot-link libs - fix automake version check kdeutils-6:3.5.5-1.fc7 ---------------------- * Wed Nov 29 2006 Karsten Hopp <karsten(a)redhat.com> 3.5.5-1 - rebuild with new net-snmp-libs - fix automake version check kudzu-1.2.64-1 -------------- * Wed Nov 29 2006 Bill Nottingham <notting(a)redhat.com> - 1.2.64-1 - treat qla4xxx devices as HBAs, even if their PCI class is network (#216881) - correctly set device for ttyACM USB devices (#217051, <ak(a)sensi.org>) - don't leak fds in scsi probe (#214878, #191521, #217742) - fix segfault (#217818) libvirt-0.1.9-1.fc7 ------------------- * Wed Nov 29 2006 Daniel Veillard <veillard(a)redhat.com> 0.1.9-1 - better error reporting - python bindings fixes and extensions - add support for shareable drives - add support for non-bridge style networking - hot plug device support - added support for inactive domains - API to dump core of domains - various bug fixes, cleanups and improvements - updated the localization libxslt-1.1.19-1 ---------------- * Wed Nov 29 2006 Daniel Veillard <veillard(a)redhat.com> - upstream release 1.1.19 see http://xmlsoft.org/XSLT/news.html logwatch-7.3.1-7.fc7 -------------------- * Wed Nov 29 2006 Ivana Varekova <varekova(a)redhat.com> 7.3.1-7 - add postfix service patch (#208909) - add vsftpd service patch (#217226) mod_auth_kerb-5.3-3 ------------------- * Wed Nov 29 2006 Joe Orton <jorton(a)redhat.com> 5.3-3 - fix r->user caching (Enrico Scholz, #214207) - update to 5.3 (CVE-2006-5989, #215443) nut-2.0.4-2 ----------- * Wed Nov 29 2006 Karsten Hopp <karsten(a)redhat.com> 2.0.4-2 - rebuild with new net-snmp-libs - disable nut-2.0.1-bad.patch, not required * Tue Nov 21 2006 Than Ngo <than(a)redhat.com> - 2.0.4-1 - add IPv6 support, thanks to Dan KopeÄek (#198394) openoffice.org-1:2.1.0-5.5 -------------------------- * Wed Nov 29 2006 Caolan McNamara <caolanm(a)redhat.com> - 1:2.1.0-5.5 - Resolves: rhbz#217269/rhbz#190515/rhbz#212134 disable sequence by default policycoreutils-1.33.5-4.fc7 ---------------------------- * Wed Nov 29 2006 Dan Walsh <dwalsh(a)redhat.com> 1.33.5-4 - Fixing the Makefile line again to build with LSPP support Resolves: #208838 * Wed Nov 29 2006 Dan Walsh <dwalsh(a)redhat.com> 1.33.5-3 - Don't report errors on restorecond when file system does not support XATTRS Resolves: #217694 rhpxl-0.41-1.fc7 ---------------- * Wed Nov 29 2006 Chris Lumens <clumens(a)redhat.com> 0.41-1 - Trust kudzu to give us the right video driver instead of using readDrivers to trim the list of what's available (#211977). * Mon Nov 06 2006 Adam Jackson <ajackson(a)redhat.com> 0.40-1 - Allow for very large resolutions. (#212695) s390utils-2:1.5.4-2.fc7 ----------------------- * Wed Nov 29 2006 Phil Knirsch <pknirsch(a)redhat.com> 2:1.5.4-2.fc7 - Update to cmsfs-1.1.8c - Included specfile fixes from bugzilla #217718 selinux-policy-2.4.6-1.fc7 -------------------------- * Tue Nov 28 2006 Dan Walsh <dwalsh(a)redhat.com> 2.4.6-1 - Dontaudit appending hal_var_lib files Resolves: #217452 Resolves: #217571 Resolves: #217611 Resolves: #217640 Resolves: #217725 tcpdump-14:3.9.5-1.fc7 ---------------------- * Wed Nov 29 2006 Miroslav Lichvar <mlichvar(a)redhat.com> - 14:3.9.5-1 - split off libpcap and arpwatch (#193657) - update to 3.9.5 - force linking with system libpcap ttmkfdir-3.0.9-24.fc7 --------------------- * Thu Nov 30 2006 Lingning Zhang <lizhang(a)redhat.com> - 3.0.9-24.fc7 - add ttmkfdir-3.0.9-font-scale.patch to fix bug #209102. - Patch from Akira TAGOH. Broken deps for i386 ---------------------------------------------------------- freeradius - 1.1.3-1.i386 requires libsnmp.so.10 Broken deps for ppc64 ---------------------------------------------------------- freeradius - 1.1.3-1.ppc64 requires libsnmp.so.10()(64bit) Broken deps for s390 ---------------------------------------------------------- freeradius - 1.1.3-1.s390 requires libsnmp.so.10 systemtap - 0.5.10-1.fc7.s390 requires kernel >= 0:2.6.9-11 systemtap-runtime - 0.5.10-1.fc7.s390 requires kernel >= 0:2.6.9-11 Broken deps for ia64 ---------------------------------------------------------- freeradius - 1.1.3-1.ia64 requires libsnmp.so.10()(64bit) Broken deps for x86_64 ---------------------------------------------------------- freeradius - 1.1.3-1.x86_64 requires libsnmp.so.10()(64bit) Broken deps for ppc ---------------------------------------------------------- freeradius - 1.1.3-1.ppc requires libsnmp.so.10 Broken deps for s390x ---------------------------------------------------------- freeradius - 1.1.3-1.s390x requires libsnmp.so.10()(64bit)

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

test November 2006