---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2003-033
2003-12-23
---------------------------------------------------------------------
Name : bash
Version : 2.05b
Release : 34
Summary : The GNU Bourne Again shell (bash) version 2.05b.
Description :
The GNU Bourne Again shell (Bash) is a shell or command language
interpreter that is compatible with the Bourne shell (sh). Bash
incorporates useful features from the Korn shell (ksh) and the C shell
(csh). Most sh scripts can be run by bash without modification. This
package (bash) contains bash version 2.05b, which improves POSIX
compliance over previous versions. However, many old shell scripts
will depend upon the behavior of bash 1.14, which is included in the
bash1 package. Bash is the default shell for Red Hat Linux. It is
popular and powerful, and you'll probably end up using it.
---------------------------------------------------------------------
Update Information:
When interactively editing a command line with UTF-8 encoding, the GNU
bash shell can be very inefficient (bug #102353, bug #110777). A
method for speeding up UTF-8 processing in bash has been incorporated
in this updated package.
Other bugs fixed in this package include bug #83776 (bash.info
problem), bug #109269 (apply official patches) and bug #111171 (build
requirements).
---------------------------------------------------------------------
* Tue Dec 09 2003 Tim Waugh <twaugh(a)redhat.com> 2.05b-34
- Build requires texinfo (bug #111171).
* Fri Nov 28 2003 Tim Waugh <twaugh(a)redhat.com> 2.05b-33
- Speed up UTF-8 command-line redrawing in the common case (bug #102353,
bug #110777).
* Thu Nov 06 2003 Tim Waugh <twaugh(a)redhat.com> 2.05b-32
- Apply upstream patches (bug #109269 among others).
* Fri Oct 31 2003 Tim Waugh <twaugh(a)redhat.com>
- Fix bash.info (bug #83776).
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
bae66d30ed5dc617aebf8b789cd43310 SRPMS/bash-2.05b-34.src.rpm
157ae32e56458f8598312aa93443c4e1 i386/bash-2.05b-34.i386.rpm
71365bb5518026bc1506ced00c5bcdf8 i386/debug/bash-debuginfo-2.05b-34.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2003-028
2003-12-23
---------------------------------------------------------------------
Name : gphoto2
Version : 2.1.3
Release : 1
Summary : Software for accessing digital cameras
Description :
The gPhoto2 project is a universal, free application and library
framework that lets you download images from several different
digital camera models, including the newer models with USB
connections. Note that
a) for some older camera models you must use the old "gphoto" package.
b) for USB mass storage models you must use the driver in the kernel
This package contains
i) the library that digital camera applications can use
ii) the command-line utility gphoto2
Other (GUI) frontends are available separately.
---------------------------------------------------------------------
Update Information:
New packages are available for gPhoto2, in order to fix bug #111415.
---------------------------------------------------------------------
* Wed Dec 03 2003 Tim Waugh <twaugh(a)redhat.com> 2.1.3-1
- 2.1.3.
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
bf6c539ba20a5b9c9fca56b9c2009129 SRPMS/gphoto2-2.1.3-1.src.rpm
5a60997b59a10caa20310e71bf395368 i386/gphoto2-2.1.3-1.i386.rpm
4b599b9e3e6a972b1db1bcd7fc8c2020 i386/gphoto2-devel-2.1.3-1.i386.rpm
1c23c35c0d9cb16a51e92110bb3f9d37 i386/debug/gphoto2-debuginfo-2.1.3-1.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2003-021
2003-12-19
---------------------------------------------------------------------
Name : binutils
Version : 2.14.90.0.6
Release : 4
Summary : A GNU collection of binary utilities.
Description :
Binutils is a collection of binary utilities, including ar (for
creating, modifying and extracting from archives), as (a family of GNU
assemblers), gprof (for displaying call graph profile data), ld (the
GNU linker), nm (for listing symbols from object files), objcopy (for
copying and translating object files), objdump (for displaying
information from object files), ranlib (for generating an index for
the contents of an archive), size (for listing the section sizes of an
object or archive file), strings (for listing printable strings from
files), strip (for discarding symbols), and addr2line (for converting
addresses to file and line).
---------------------------------------------------------------------
Update Information:
An assembler parsing bug has been discovered in binutils released
in Fedora Core 1. The bug affects at least Linux kernel versions
2.5.63 and later, where
nr_syscalls=(.-sys_call_table)/4
line set nr_syscalls incorrectly to (.-sys_call_table) when assembled
by binutils 2.14.90.0.1 and later.
---------------------------------------------------------------------
* Mon Nov 24 2003 Jakub Jelinek <jakub(a)redhat.com> 2.14.90.0.6-4
- fix assembly parsing of foo=(.-bar)/4 (Alan Modra)
- fix IA-64 assembly parsing of (p7) hint @pause
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
405b1229a3c3963277c47a3c6f48d612 SRPMS/binutils-2.14.90.0.6-4.src.rpm
47829701efcf6e5f8748d90606af0a3f i386/binutils-2.14.90.0.6-4.i386.rpm
b70c7202dd525c3585235732b4f05999 i386/debug/binutils-debuginfo-2.14.90.0.6-4.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2003-015
2003-12-19
---------------------------------------------------------------------
Name : sed
Version : 4.0.8
Release : 2
Summary : A GNU stream text editor.
Description :
The sed (Stream EDitor) editor is a stream or batch (non-interactive)
editor. Sed takes text as input, performs an operation or set of
operations on the text and outputs the modified text. The operations
that sed performs (substitutions, deletions, insertions, etc.) can be
specified in a script file or from the command line.
---------------------------------------------------------------------
Update Information:
Sed in Fedora Core 1 (and earlier distributions) was not using fastmap
for regular expressions. Fastmap can speed up regular expression
searching a lot, in some cases as much as 10 times.
---------------------------------------------------------------------
* Fri Nov 14 2003 Jakub Jelinek <jakub(a)redhat.com> 4.0.8-2
- enable --without-included-regex again
- use fastmap for regex searching
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
1adc5cfdc2c2649185014d447f328289 SRPMS/sed-4.0.8-2.src.rpm
6f26b193075e6673094a8b3d2f666c48 i386/sed-4.0.8-2.i386.rpm
cf58ea014488472fa32b60b4dbb70108 i386/debug/sed-debuginfo-4.0.8-2.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2003-039
2003-12-19
---------------------------------------------------------------------
Name : dia
Version : 0.92.2
Release : 1
Summary : A diagram drawing program.
Description :
The Dia drawing program is designed to be like the Windows(TM) Visio
program. Dia can be used to draw different types of diagrams, and
includes support for UML static structure diagrams (class diagrams),
entity relationship modeling, and network diagrams. Dia can load and
save diagrams to a custom file format, can load and save in .xml format,
and can export to PostScript(TM).
---------------------------------------------------------------------
Update Information:
Update to version 0.92.2.
Lots of new features in this version, including support for auto-routing
of zig-zag lines. For details, check out the news at:
http://www.lysator.liu.se/~alla/dia/
---------------------------------------------------------------------
* Tue Dec 09 2003 Alexander Larsson <alexl(a)redhat.com> 1:0.92.2-1
- update to 0.92.2
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
312e024582216b50563337ec397d03b8 SRPMS/dia-0.92.2-1.src.rpm
8b369422cffaf9c9e04bf91159522fdd i386/dia-0.92.2-1.i386.rpm
c9321280df9ecafde7fba9a3402ffcda
i386/debug/dia-debuginfo-0.92.2-1.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2003-029
2003-12-18
---------------------------------------------------------------------
Name : gnucash
Version : 1.8.8
Release : 1
Summary : GnuCash is an application to keep track of your finances.
Description :
GnuCash is a personal finance manager. A check-book like register GUI
allows you to enter and track bank accounts, stocks, income and even
currency trades. The interface is designed to be simple and easy to
use, but is backed with double-entry accounting principles to ensure
balanced books.
---------------------------------------------------------------------
Update Information:
This is an update to the latest stable version of gnucash. From the
upstream release notes:
The GnuCash team is pleased to announce the release of stable version 1.8.8.
What's New in GnuCash 1.8.8?
o HBCI - Improve error message when receiving zero balance from bank.
o Add account template for Swiss German businesses "KMU" by Tom Winterhalder
o Add *big* account template for German businesses "SKR04" by Betina Schmidt
o Add Catalan and Turkish translation, Updated German, Italian, Czech, Greek and Dutch translations.
o Add Turkish account template. Updated Greek account templates.
o Remove debian scripts
o Add a comment about minimum string length
o Fix the ISO_DATELEN to be "long enough"
o Fix handling of HBCI direct debits (fix wrong textkey). Fix and initially implement handling of multiple banks/users/customers.
o Fixed extremly stupid, old bug that causes weird HBCI errors. Improved user messages.
o Refactor some GUI code. Improve user messages.
o BillTermDecRef should have been BillTermIncRef when setting new bill term.
o Applied Frank Pavageau's patch regarding capital gains to handle split transactions.
o Don't make a timespec with tv_sec == 0. Fixes some tests on the alpha platform.
---------------------------------------------------------------------
* Tue Dec 02 2003 Bill Nottingham <notting(a)redhat.com> 1.8.8-1
- update to 1.8.8
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
2e45adeba661f5675010c498fe82b9fe SRPMS/gnucash-1.8.8-1.src.rpm
d1f51a5775d3b5704db25630d4e99506 i386/gnucash-1.8.8-1.i386.rpm
8d23cec98b7fa382c383421ade9daf8b i386/gnucash-backend-postgres-1.8.8-1.i386.rpm
06b35a769768d68f2b8eb36b82a50053 i386/debug/gnucash-debuginfo-1.8.8-1.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2003-040
2003-12-18
---------------------------------------------------------------------
Name : ethereal
Version : 0.10.0a
Release : 0.1
Summary : Network traffic analyzer
Description : Ethereal is a network traffic analyzer for Unix-ish
operating systems.
This package lays base for libpcap, a packet capture and filtering
library, contains command-line utilities, contains plugins and
documentation for ethereal. A graphical user interface is packaged
separately to GTK+ package.
---------------------------------------------------------------------
Update Information:
Serious issues have been discovered in the following protocol dissectors:
* Selecting "Match->Selected" or "Prepare->Selected" for a
malformed SMB packet could cause a segmentation fault.
* It is possible for the Q.931 dissector to dereference a null
pointer when reading a malformed packet.
Impact:
Both vulnerabilities will make the Ethereal application crash. The Q.931
vulnerability also affects Tethereal. It is not known if either
vulnerability can be used to make Ethereal or Tethereal run arbitrary code.
Resolution:
Upgrade to 0.10.0.
If you are running a version prior to 0.10.0 and you cannot upgrade, you
can disable the SMB and Q.931 protocol dissectors by selecting
Edit->Protocols... and deselecting them from the list.
---------------------------------------------------------------------
* Wed Dec 17 2003 Phil Knirsch <pknirsch(a)redhat.com> 0.10.0a-0.1
- Update to latest upstream version 0.10.0a
- Fixed plugins problem.
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
5ac28be19cc9b3113b6c339aed1c5f33 SRPMS/ethereal-0.10.0a-0.1.src.rpm
5e295a50ac358b0edd4828d39da04a9e i386/ethereal-0.10.0a-0.1.i386.rpm
8b0add410bf1e84f44f1e93c91a29596 i386/ethereal-gnome-0.10.0a-0.1.i386.rpm
0cf3428ab5d3ec2fdf8b415d79b5d9db
i386/debug/ethereal-debuginfo-0.10.0a-0.1.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
--
Philipp Knirsch | Tel.: +49-711-96437-470
Development | Fax.: +49-711-96437-111
Red Hat GmbH | Email: Phil Knirsch <phil(a)redhat.de>
Hauptstaetterstr. 58 | Web: http://www.redhat.de/
D-70178 Stuttgart
Motd: You're only jealous cos the little penguins are talking to me.
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2003-034
2003-12-15
---------------------------------------------------------------------
Name : lftp
Version : 2.6.10
Release : 1
Summary : A sophisticated file transfer program
Description :
LFTP is a sophisticated ftp/http file transfer program. Like bash, it
has job control and uses the readline library for input. It has
bookmarks, built-in mirroring, and can transfer several files in
parallel. It is designed with reliability in mind.
---------------------------------------------------------------------
Update Information:
Ulf Härnhammar found a remotely-triggerable buffer overflow in lftp.
An attacker could create a carefully crafted directory on a website
such that, if a user connects to that directory using the lftp client
and subsequently issues a 'ls' or 'rels' command, the attacker could
execute arbitrary code on the users machine. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned
the name CAN-2003-0963 to this issue.
Users of lftp are advised to upgrade to these erratum packages, which
upgrade lftp to a version which is not vulnerable to this issue.
Red Hat would like to thank Ulf Härnhammar for discovering and
alerting us to this issue.
This update notification is being re-issued to correct the advisory
ID and issue date. The update packages themselves are unchanged.
---------------------------------------------------------------------
* Fri Dec 12 2003 Nalin Dahyabhai <nalin(a)redhat.com> 2.6.10-1
- update to 2.6.10, which folds in the previous patches
- configure with --with-debug so that we get useful debug info
* Tue Dec 09 2003 Nalin Dahyabhai <nalin(a)redhat.com> 2.6.9-1
- include patch based on patch from Ulf Härnhammar to fix unsafe use of
sscanf when reading http directory listings (CAN-2003-0963)
- include patch based on patch from Ulf Härnhammar to fix compile warnings
modified based on input from Solar Designer
* Mon Dec 08 2003 Nalin Dahyabhai <nalin(a)redhat.com>
- update to 2.6.9
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
b36e31c19e088ee086afc9c42dacd471 SRPMS/lftp-2.6.10-1.src.rpm
1a6ab3a0b3df685cc1354bf4740a7201 i386/lftp-2.6.10-1.i386.rpm
7c70562d0c91db1b15d21d0f56f32ea0 i386/debug/lftp-debuginfo-2.6.10-1.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2003-025
2003-12-12
---------------------------------------------------------------------
Name : lftp
Version : 2.6.10
Release : 1
Summary : A sophisticated file transfer program
Description :
LFTP is a sophisticated ftp/http file transfer program. Like bash, it
has job control and uses the readline library for input. It has
bookmarks, built-in mirroring, and can transfer several files in
parallel. It is designed with reliability in mind.
---------------------------------------------------------------------
Update Information:
Ulf Härnhammar found a remotely-triggerable buffer overflow in lftp.
An attacker could create a carefully crafted directory on a website
such that, if a user connects to that directory using the lftp client
and subsequently issues a 'ls' or 'rels' command, the attacker could
execute arbitrary code on the users machine. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned
the name CAN-2003-0963 to this issue.
Users of lftp are advised to upgrade to these erratum packages, which
upgrade lftp to a version which is not vulnerable to this issue.
Red Hat would like to thank Ulf Härnhammar for discovering and
alerting us to this issue.
---------------------------------------------------------------------
* Fri Dec 12 2003 Nalin Dahyabhai <nalin(a)redhat.com> 2.6.10-1
- update to 2.6.10, which folds in the previous patches
- configure with --with-debug so that we get useful debug info
* Tue Dec 09 2003 Nalin Dahyabhai <nalin(a)redhat.com> 2.6.9-1
- include patch based on patch from Ulf Härnhammar to fix unsafe use of
sscanf when reading http directory listings (CAN-2003-0963)
- include patch based on patch from Ulf Härnhammar to fix compile warnings
modified based on input from Solar Designer
* Mon Dec 08 2003 Nalin Dahyabhai <nalin(a)redhat.com>
- update to 2.6.9
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
b36e31c19e088ee086afc9c42dacd471 SRPMS/lftp-2.6.10-1.src.rpm
1a6ab3a0b3df685cc1354bf4740a7201 i386/lftp-2.6.10-1.i386.rpm
7c70562d0c91db1b15d21d0f56f32ea0 i386/debug/lftp-debuginfo-2.6.10-1.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2003-011
2003-12-12
---------------------------------------------------------------------
Name : redhat-config-printer
Version : 0.6.79.2
Release : 1
Summary : A printer configuration backend/frontend combination.
Description :
The printconf utility is a printer configuration and filtration system
based on magicfilter (the alchemist data library) and the foomatic
filter system. It rebuilds local print configuration and spool
directories from data sources at lpd init time, and is integrated to
use the multi-sourced features of the alchemist data library.
---------------------------------------------------------------------
Update Information:
Packages fixing a bug concerning printer sharing in the Printing
configuration tool are now available.
---------------------------------------------------------------------
* Wed Nov 19 2003 Tim Waugh <twaugh(a)redhat.com> 0.6.79.2-1
- 0.6.79.2:
- Another attempt to fix bug #109942.
* Thu Nov 13 2003 Tim Waugh <twaugh(a)redhat.com> 0.6.79.1-1
- 0.6.79.1:
- More sharing fixes (bug #109942).
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
8e948ec34bf3ebed240ae21636f0f8d3 SRPMS/redhat-config-printer-0.6.79.2-1.src.rpm
2371cb63c6e2f616e1382ab5e670cee9 i386/redhat-config-printer-0.6.79.2-1.i386.rpm
fd0c120a21f3d1f13b640ff0f9162b71 i386/redhat-config-printer-gui-0.6.79.2-1.i386.rpm
cf9c57f98d25d1c2f627d8adb0caa29e i386/debug/redhat-config-printer-debuginfo-0.6.79.2-1.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------