Fedora Core 3 Update: gnumeric-1.2.13-10
by Caolán McNamara
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-565
2004-12-22
---------------------------------------------------------------------
Product : Fedora Core 3
Name : gnumeric
Version : 1.2.13
Release : 10
Summary : A spreadsheet program for GNOME.
Description :
Gnumeric is a spreadsheet program for the GNOME GUI desktop
environment.
---------------------------------------------------------------------
* Tue Dec 21 2004 Caolan McNamara <caolanm(a)redhat.com> 1.2.13-10
- #rh133662# printer font fallback
* Fri Dec 17 2004 Caolan McNamara <caolanm(a)redhat.com> 1.2.13-9.fc3
- dubious python lib dir for 64bit
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/
31289194013e33ad27e1e0674c838258 SRPMS/gnumeric-1.2.13-10.src.rpm
e873bae7684b7991fbc70e531578d0bd x86_64/gnumeric-1.2.13-10.x86_64.rpm
6756da64b5139b28fcb08416a5ffeb78
x86_64/gnumeric-devel-1.2.13-10.x86_64.rpm
f6f2f86bf0a5c9a88155e640d422ecad
x86_64/debug/gnumeric-debuginfo-1.2.13-10.x86_64.rpm
d9ccd3f2b5328b156390dcfdf5ee1e44 i386/gnumeric-1.2.13-10.i386.rpm
acb2478256f86be82cc21dd39e657598 i386/gnumeric-devel-1.2.13-10.i386.rpm
b67a3d42e0d53ab16967663af3a11e4d
i386/debug/gnumeric-debuginfo-1.2.13-10.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
19 years, 4 months
Fedora Core 3 Update: selinux-policy-targeted-1.17.30-2.58
by Daniel J Walsh
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-566
2004-12-21
---------------------------------------------------------------------
Product : Fedora Core 3
Name : selinux-policy-targeted
Version : 1.17.30
Release : 2.58
Summary : SELinux targeted policy configuration
Description :
Security-enhanced Linux is a patch of the Linux® kernel and a number
of utilities with enhanced security functionality designed to add
mandatory access controls to Linux. The Security-enhanced Linux
kernel contains new architectural components originally developed to
improve the security of the Flask operating system. These
architectural components provide general support for the enforcement
of many kinds of mandatory access control policies, including those
based on the concepts of Type Enforcement®, Role-based Access
Control, and Multi-level Security.
This package contains the SELinux example policy configuration along
with the Flask configuration information and the application
configuration files.
---------------------------------------------------------------------
Update Information:
Several updates to fix problems with Apache, Squid, postgresql
---------------------------------------------------------------------
* Tue Dec 21 2004 Dan Walsh <dwalsh(a)redhat.com> 1.17.30-2.58
- Back port changes for apache_macros.te file to support php execing ls
* Tue Dec 21 2004 Dan Walsh <dwalsh(a)redhat.com> 1.17.30-2.57
- Add general domain access to squid
* Mon Dec 20 2004 Dan Walsh <dwalsh(a)redhat.com> 1.17.30-2.56
- Allow nscd to use random_device_t
- Change initdb to run under postgresql_t
* Mon Dec 20 2004 Dan Walsh <dwalsh(a)redhat.com> 1.17.30-2.55
- Allow windbind to create files in samba directories.
- Allow sendmail to read urandom
* Fri Dec 17 2004 Dan Walsh <dwalsh(a)redhat.com> 1.17.30-2.54
- Fixes for ldconfig
* Fri Dec 17 2004 Dan Walsh <dwalsh(a)redhat.com> 1.17.30-2.53
- Bump for FC3
* Fri Dec 17 2004 Dan Walsh <dwalsh(a)redhat.com> 1.17.30-2.52
- Add emul patch
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/
3fe6f4ef5505eb496d3c4e6f29d43292
SRPMS/selinux-policy-targeted-1.17.30-2.58.src.rpm
beb942d064baf5e59a1438482502c336
x86_64/selinux-policy-targeted-1.17.30-2.58.noarch.rpm
2be781efe590df6319e23fc590e2996f
x86_64/selinux-policy-targeted-sources-1.17.30-2.58.noarch.rpm
beb942d064baf5e59a1438482502c336
i386/selinux-policy-targeted-1.17.30-2.58.noarch.rpm
2be781efe590df6319e23fc590e2996f
i386/selinux-policy-targeted-sources-1.17.30-2.58.noarch.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
19 years, 4 months
[SECURITY] Fedora Core 2 Update: php-4.3.10-2.4
by Joe Orton
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-567
2004-12-21
---------------------------------------------------------------------
Product : Fedora Core 2
Name : php
Version : 4.3.10
Release : 2.4
Summary : The PHP HTML-embedded scripting language. (PHP: Hypertext Preprocessor)
Description :
PHP is an HTML-embedded scripting language. PHP attempts to make it
easy for developers to write dynamically generated webpages. PHP also
offers built-in database integration for several commercial and
non-commercial database management systems, so writing a
database-enabled webpage with PHP is fairly simple. The most common
use of PHP coding is probably as a replacement for CGI scripts. The
mod_php module enables the Apache Web server to understand and process
the embedded PHP language in Web pages.
---------------------------------------------------------------------
Update Information:
This update includes the latest release of PHP 4.3, including fixes
for security issues in the unserializer (CVE CAN-2004-1019), exif
image parsing (CVE CAN-2004-1065), and form upload parsing (CVE
CAN-2004-0958 and CAN-2004-0959).
---------------------------------------------------------------------
* Tue Dec 21 2004 Joe Orton <jorton(a)redhat.com> 4.3.10-2.4
- update to 4.3.10 (#134973, #134976, #135631):
* security fixes for CAN-2004-0958, CAN-2004-0959
* unserializer integer overflows, CAN-2004-1019
* exif image parsing overflow, CAN-2004-1065
- revert use of RTLD_GLOBAL in dlopen() calls (#127518)
- add another FD_SETSIZE workaround (#125258)
- revert upstream default php.ini changes since 4.3.8
- add libgd namespace fixes (#124530)
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/
38edfb5c4e7d80e48cad36edf9e913eb SRPMS/php-4.3.10-2.4.src.rpm
a22bafc119a7797734e229822b06547e x86_64/php-4.3.10-2.4.x86_64.rpm
27783eff866e3bfdc21c7fd55f1ee074 x86_64/php-devel-4.3.10-2.4.x86_64.rpm
3a39de1daf5968d95fd448c9a8e828ac x86_64/php-pear-4.3.10-2.4.x86_64.rpm
57d065191d398e2bf5e7f120edb16b1a x86_64/php-imap-4.3.10-2.4.x86_64.rpm
455727fdab0cc5e663e17e49798390d7 x86_64/php-ldap-4.3.10-2.4.x86_64.rpm
92058f2eb9e69e7bcea782bd192b62d2 x86_64/php-mysql-4.3.10-2.4.x86_64.rpm
b51a9e94030e181f818a9ffa13f9750e x86_64/php-pgsql-4.3.10-2.4.x86_64.rpm
fe0955c89ccde1a7ea7262f63b1e19d1 x86_64/php-odbc-4.3.10-2.4.x86_64.rpm
534bee14e259752b34205f69fe1154fe x86_64/php-snmp-4.3.10-2.4.x86_64.rpm
2c8ce07785064953a6601ab87250db6a x86_64/php-domxml-4.3.10-2.4.x86_64.rpm
da393f75760e8ffbf6112bfb71927c9f x86_64/php-xmlrpc-4.3.10-2.4.x86_64.rpm
66a25b26811a0283501bec4dda66025b x86_64/php-mbstring-4.3.10-2.4.x86_64.rpm
2d5a82279db93b080afef08cce548af8 x86_64/debug/php-debuginfo-4.3.10-2.4.x86_64.rpm
1b3ceb6fb4bb0bbd05c92aec1efad13a i386/php-4.3.10-2.4.i386.rpm
8f9685a4e87435eae2543ab0e70ae956 i386/php-devel-4.3.10-2.4.i386.rpm
56893f09067be4bab725e8b8de72f6b5 i386/php-pear-4.3.10-2.4.i386.rpm
bed7a3018a037c024c35fc448ff426b9 i386/php-imap-4.3.10-2.4.i386.rpm
8ccab4ad5130bcb5718d8e449e712524 i386/php-ldap-4.3.10-2.4.i386.rpm
9a9b97820a029f693a6a14a83e017116 i386/php-mysql-4.3.10-2.4.i386.rpm
071e96181e24fca3a38b2a680cf1d5c0 i386/php-pgsql-4.3.10-2.4.i386.rpm
47d4beeb30cd032904341bbad9e9158f i386/php-odbc-4.3.10-2.4.i386.rpm
39cedd45d34ad1b2d85902169bed5b29 i386/php-snmp-4.3.10-2.4.i386.rpm
79f5b45c4176d46004c9118d459c83ae i386/php-domxml-4.3.10-2.4.i386.rpm
f53752308cc7058ec829a21ebb9ea7d3 i386/php-xmlrpc-4.3.10-2.4.i386.rpm
e151913faeecbeaf4e6549e03151e644 i386/php-mbstring-4.3.10-2.4.i386.rpm
63020b5ede3e55d1aeaf48365e2be374 i386/debug/php-debuginfo-4.3.10-2.4.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
19 years, 4 months
[SECURITY] Fedora Core 3 Update: php-4.3.10-3.2
by Joe Orton
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-568
2004-12-21
---------------------------------------------------------------------
Product : Fedora Core 3
Name : php
Version : 4.3.10
Release : 3.2
Summary : The PHP HTML-embedded scripting language. (PHP: Hypertext Preprocessor)
Description :
PHP is an HTML-embedded scripting language. PHP attempts to make it
easy for developers to write dynamically generated webpages. PHP also
offers built-in database integration for several commercial and
non-commercial database management systems, so writing a
database-enabled webpage with PHP is fairly simple. The most common
use of PHP coding is probably as a replacement for CGI scripts. The
mod_php module enables the Apache Web server to understand and process
the embedded PHP language in Web pages.
---------------------------------------------------------------------
This update includes the latest release of PHP 4.3, including fixes
for security issues in the unserializer (CVE CAN-2004-1019) and exif
image parsing (CVE CAN-2004-1065).
---------------------------------------------------------------------
* Tue Dec 21 2004 Joe Orton <jorton(a)redhat.com> 4.3.10-3.2
- fix umask patch (#143286)
* Wed Dec 15 2004 Joe Orton <jorton(a)redhat.com> 4.3.10-3.1
- update to 4.3.10, including security fixes (#141135):
* unserializer integer overflows, CAN-2004-1019
* exif image parsing overflow, CAN-2004-1065
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/
445609a1342e91f32320fa5864bda37b SRPMS/php-4.3.10-3.2.src.rpm
657606317c0a9ed5bcf37f06dba42538 x86_64/php-4.3.10-3.2.x86_64.rpm
5ddda1be3f052f3cb409cf73363be2ae x86_64/php-devel-4.3.10-3.2.x86_64.rpm
9163bfe74081828227f757b133b076fc x86_64/php-pear-4.3.10-3.2.x86_64.rpm
80b7bf655541e14064c2bd6eaa311077 x86_64/php-imap-4.3.10-3.2.x86_64.rpm
e7e92d9b5bd9ea4a245eba6a39ee2536 x86_64/php-ldap-4.3.10-3.2.x86_64.rpm
eae6fbeb1108970cd8fd9a7a38d32a9a x86_64/php-mysql-4.3.10-3.2.x86_64.rpm
88dcfa1990eb7bdbdd92715dace2c03e x86_64/php-pgsql-4.3.10-3.2.x86_64.rpm
05966b8d09a58702ba43c9be149ecbaa x86_64/php-odbc-4.3.10-3.2.x86_64.rpm
34cdb5151b5da048f7470170bfb31978 x86_64/php-snmp-4.3.10-3.2.x86_64.rpm
df3d6d00a6949d17495c8b99eac5f7c9 x86_64/php-domxml-4.3.10-3.2.x86_64.rpm
7422b0dc974e702a4c96eeecf11ec761 x86_64/php-xmlrpc-4.3.10-3.2.x86_64.rpm
c1d70465ed28e238c4a09cbcb356b209 x86_64/php-mbstring-4.3.10-3.2.x86_64.rpm
16a82e15b0e5b3b16fc5eda47133b2f6 x86_64/php-ncurses-4.3.10-3.2.x86_64.rpm
eea5e17b82709e33619fa4959db5c766 x86_64/php-gd-4.3.10-3.2.x86_64.rpm
b969eb4dc267a438bb7eb742e6c20f2b x86_64/debug/php-debuginfo-4.3.10-3.2.x86_64.rpm
f510eb1784120ca41c69d7adc189852b i386/php-4.3.10-3.2.i386.rpm
d5f291074444c1dc04f36cedf7395a06 i386/php-devel-4.3.10-3.2.i386.rpm
652ca5be92e965c23150c9c58f875a5c i386/php-pear-4.3.10-3.2.i386.rpm
11399157471806b342090305ef29c474 i386/php-imap-4.3.10-3.2.i386.rpm
190d53059632b6b80b9f757742ae9a60 i386/php-ldap-4.3.10-3.2.i386.rpm
6fc5c6d4a9326e2bb7208573fead0510 i386/php-mysql-4.3.10-3.2.i386.rpm
5c88f752e470135c5c665ef8fb1284d9 i386/php-pgsql-4.3.10-3.2.i386.rpm
4b0eb8f79673794cf6a677cbc3ae255d i386/php-odbc-4.3.10-3.2.i386.rpm
a4f62eb0dd02593f9529b141bde10676 i386/php-snmp-4.3.10-3.2.i386.rpm
3591ab4da5e4efe7cd1e1876d589b173 i386/php-domxml-4.3.10-3.2.i386.rpm
0ddcc0fe3c79a2545d8bb2235837044c i386/php-xmlrpc-4.3.10-3.2.i386.rpm
1eae4104b33ee7021403025865de92e0 i386/php-mbstring-4.3.10-3.2.i386.rpm
c7fb403a6374fdb70adbadc62eb022cf i386/php-ncurses-4.3.10-3.2.i386.rpm
606c76b1b4e9b0fdd6de1a093ce3190b i386/php-gd-4.3.10-3.2.i386.rpm
864a01494e29026096135b3229363025 i386/debug/php-debuginfo-4.3.10-3.2.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
19 years, 4 months
[SECURITY] Fedora Core 3 Update: krb5-1.3.6-2
by Nalin Dahyabhai
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-564
2004-12-21
---------------------------------------------------------------------
Product : Fedora Core 3
Name : krb5
Version : 1.3.6
Release : 2
Summary : The Kerberos network authentication system.
Description :
Kerberos V5 is a trusted-third-party network authentication system,
which can improve your network's security by eliminating the insecure
practice of cleartext passwords.
A heap based buffer overflow bug was found in the administration
library of Kerberos 1.3.5 and earlier. This overflow in the password
history handling code could allow an authenticated remote attacker to
execute commands on a realm's master Kerberos KDC. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned
the name CAN-2004-1189 to this issue.
Additionally a temporary file bug was found in the Kerberos
krb5-send-pr command. It is possible that an attacker could create a
specially crafted temporary file that could allow an arbitrary file
to be overwritten which the victim has write access to. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned
the name CAN-2004-0971 to this issue.
---------------------------------------------------------------------
* Mon Dec 20 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.6-2
- rebuild
* Mon Dec 20 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.6-1
- update to 1.3.6, which includes the previous fix
* Mon Dec 20 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.5-8
- apply fix from Tom Yu for MITKRB5-SA-2004-004 (CAN-2004-1189)
* Fri Dec 17 2004 Martin Stransky <stransky(a)redhat.com> 1.3.5-7
- fix deadlock during file transfer via rsync/krsh
- thanks goes to James Antil for hint
* Fri Nov 26 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.5-6
- rebuild
* Mon Nov 22 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.5-3
- fix predictable-tempfile-name bug in krb5-send-pr (CAN-2004-0971, #140036)
* Tue Nov 16 2004 Nalin Dahyabhai <nalin(a)redhat.com>
- silence compiler warning in kprop by using an in-memory ccache with a fixed
name instead of an on-disk ccache with a name generated by tmpnam()
* Tue Nov 16 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.5-2
- fix globbing patch port mode (#139075)
* Mon Nov 01 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.5-1
- fix segfault in telnet due to incorrect checking of gethostbyname_r result
codes (#129059)
* Fri Oct 15 2004 Nalin Dahyabhai <nalin(a)redhat.com>
- remove rc4-hmac:norealm and rc4-hmac:onlyrealm from the default list of
supported keytypes in kdc.conf -- they produce exactly the same keys as
rc4-hmac:normal because rc4 string-to-key ignores salts
- nuke kdcrotate -- there are better ways to balance the load on KDCs, and
the SELinux policy for it would have been scary-looking
- update to 1.3.5, mainly to include MITKRB5SA 2004-002 and 2004-003
* Tue Aug 31 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.4-7
- rebuild
* Tue Aug 24 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.4-6
- rebuild
* Tue Aug 24 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.4-5
- incorporate revised fixes from Tom Yu for CAN-2004-0642, CAN-2004-0644,
CAN-2004-0772
* Mon Aug 23 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.4-4
- rebuild
* Mon Aug 23 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.4-3
- incorporate fixes from Tom Yu for CAN-2004-0642, CAN-2004-0772
(MITKRB5-SA-2004-002, #130732)
- incorporate fixes from Tom Yu for CAN-2004-0644 (MITKRB5-SA-2004-003, #130732)
* Tue Jul 27 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.4-2
- fix indexing error in server sorting patch (#127336)
* Tue Jun 15 2004 Elliot Lee <sopwith(a)redhat.com>
- rebuilt
* Mon Jun 14 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.4-0.1
- update to 1.3.4 final
* Mon Jun 07 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.4-0
- update to 1.3.4 beta1
- remove MITKRB5-SA-2004-001, included in 1.3.4
* Mon Jun 07 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.3-8
- rebuild
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/
620af2cfdc4ac6329926ad39a46fa4a9 SRPMS/krb5-1.3.6-2.src.rpm
53f0d19182e4c3e1f2ad3d0ab023ac1e x86_64/krb5-devel-1.3.6-2.x86_64.rpm
c002f669da7a6eba997ea83b3f17da57 x86_64/krb5-libs-1.3.6-2.x86_64.rpm
bd80d207a93e61b0cf6877d5e5e11634 x86_64/krb5-server-1.3.6-2.x86_64.rpm
69eb76fca82bbd33049fdd5a7bdd4054 x86_64/krb5-workstation-1.3.6-2.x86_64.rpm
9b91a519f8f7581bf4ff23f884bde437 x86_64/debug/krb5-debuginfo-1.3.6-2.x86_64.rpm
8bb027a8f492b2526a591fbcd2cd2a6d x86_64/krb5-libs-1.3.6-2.i386.rpm
52b6f59f74267da95713cff9c17bced0 i386/krb5-devel-1.3.6-2.i386.rpm
8bb027a8f492b2526a591fbcd2cd2a6d i386/krb5-libs-1.3.6-2.i386.rpm
29ea7f4419753069975fa4cb001a9df3 i386/krb5-server-1.3.6-2.i386.rpm
f90428f6202b73bfda93c794be17386a i386/krb5-workstation-1.3.6-2.i386.rpm
9a7f84a93c22830e73b359107912db25 i386/debug/krb5-debuginfo-1.3.6-2.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
19 years, 4 months
[SECURITY] Fedora Core 2 Update: krb5-1.3.6-1
by Nalin Dahyabhai
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-563
2004-12-21
---------------------------------------------------------------------
Product : Fedora Core 2
Name : krb5
Version : 1.3.6
Release : 1
Summary : The Kerberos network authentication system.
Description :
Kerberos V5 is a trusted-third-party network authentication system,
which can improve your network's security by eliminating the insecure
practice of cleartext passwords.
A heap based buffer overflow bug was found in the administration
library of Kerberos 1.3.5 and earlier. This overflow in the password
history handling code could allow an authenticated remote attacker to
execute commands on a realm's master Kerberos KDC. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned
the name CAN-2004-1189 to this issue.
Additionally a temporary file bug was found in the Kerberos
krb5-send-pr command. It is possible that an attacker could create a
specially crafted temporary file that could allow an arbitrary file
to be overwritten which the victim has write access to. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned
the name CAN-2004-0971 to this issue.
---------------------------------------------------------------------
* Mon Dec 20 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.6-1
- update to 1.3.6, which includes the previous fix
* Mon Dec 20 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.5-8
- apply fix from Tom Yu for MITKRB5-SA-2004-004 (CAN-2004-1189)
* Fri Dec 17 2004 Martin Stransky <stransky(a)redhat.com> 1.3.5-7
- fix deadlock during file transfer via rsync/krsh
- thanks goes to James Antil for hint
* Fri Nov 26 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.5-6
- rebuild
* Mon Nov 22 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.5-3
- fix predictable-tempfile-name bug in krb5-send-pr (CAN-2004-0971, #140036)
* Tue Nov 16 2004 Nalin Dahyabhai <nalin(a)redhat.com>
- silence compiler warning in kprop by using an in-memory ccache with a fixed
name instead of an on-disk ccache with a name generated by tmpnam()
* Tue Nov 16 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.5-2
- fix globbing patch port mode (#139075)
* Mon Nov 01 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.5-1
- fix segfault in telnet due to incorrect checking of gethostbyname_r result
codes (#129059)
* Fri Oct 15 2004 Nalin Dahyabhai <nalin(a)redhat.com>
- remove rc4-hmac:norealm and rc4-hmac:onlyrealm from the default list of
supported keytypes in kdc.conf -- they produce exactly the same keys as
rc4-hmac:normal because rc4 string-to-key ignores salts
- nuke kdcrotate -- there are better ways to balance the load on KDCs, and
the SELinux policy for it would have been scary-looking
- update to 1.3.5, mainly to include MITKRB5SA 2004-002 and 2004-003
* Tue Aug 31 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.4-7
- rebuild
* Tue Aug 24 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.3.4-6
- rebuild
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/
bb1c7d3306da401a8162189277ca1cad SRPMS/krb5-1.3.6-1.src.rpm
d825b1f0975f6f6a025eaf4b674a0793 x86_64/krb5-devel-1.3.6-1.x86_64.rpm
b496e0d27c48eaca71e468322a3ca555 x86_64/krb5-libs-1.3.6-1.x86_64.rpm
9c410337f39d59ee8860b32499cdb54b x86_64/krb5-server-1.3.6-1.x86_64.rpm
a524c1d52a7eca353114db7028c5bbc7 x86_64/krb5-workstation-1.3.6-1.x86_64.rpm
186c7300eca2536d2b84be68c8496ce1 x86_64/debug/krb5-debuginfo-1.3.6-1.x86_64.rpm
16ca27d33cea69c09f58dbe5facc6770 x86_64/krb5-libs-1.3.6-1.i386.rpm
10342208c7139a8813e8258e1df006da i386/krb5-devel-1.3.6-1.i386.rpm
16ca27d33cea69c09f58dbe5facc6770 i386/krb5-libs-1.3.6-1.i386.rpm
90f808b51955d1c63d07ad9819177897 i386/krb5-server-1.3.6-1.i386.rpm
4b2cfb50548f335bfdeca765d9d6312c i386/krb5-workstation-1.3.6-1.i386.rpm
05dc28d1fb4c0aff6788f921059f1419 i386/debug/krb5-debuginfo-1.3.6-1.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
19 years, 4 months
Fedora Core 3 Update: glibc-2.3.4-2.fc3
by Jakub Jelinek
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-570
2004-12-21
---------------------------------------------------------------------
Product : Fedora Core 3
Name : glibc
Version : 2.3.4
Release : 2.fc3
Summary : The GNU libc libraries.
Description :
The glibc package contains standard libraries which are used by
multiple programs on the system. In order to save disk space and
memory, as well as to make upgrading easier, common system code is
kept in one place and shared between programs. This particular package
contains the most important sets of shared libraries: the standard C
library and the standard math library. Without these two libraries, a
Linux system will not function.
---------------------------------------------------------------------
* Sun Dec 19 2004 Jakub Jelinek <jakub(a)redhat.com> 2.3.4-2.fc3
- work around rpm bug some more, this time by copying
iconvconfig to iconvconfig.%{_target_cpu}.
* Sun Dec 19 2004 Jakub Jelinek <jakub(a)redhat.com> 2.3.4-1
- update from CVS
- glibc 2.3.4 release
- add -o and --nostdlib options to iconvconfig
- if /sbin/ldconfig doesn't exist when running
glibc_post_upgrade.%{_target_cpu}, just don't attempt to run it.
This can happen during first install of bi-arch glibc and the
other arch glibc's %post wil run /sbin/ldconfig (#143326)
- use -o and --nostdlib options to create all needed
gconv-modules.cache files on bi-arch setups
* Sun Dec 19 2004 Jakub Jelinek <jakub(a)redhat.com> 2.3.3-99
- rebuilt
* Sat Dec 18 2004 Jakub Jelinek <jakub(a)redhat.com> 2.3.3-98
- add .%{_target_cpu} to glibc_post_upgrade, only run telinit u
if /sbin/init is the same ELF class and machine as
glibc_post_upgrade.%{_target_cpu} and similarly with
condrestarting sshd (#143046)
* Fri Dec 17 2004 Jakub Jelinek <jakub(a)redhat.com> 2.3.3-97
- update from CVS
- fix ppc64 getcontext and swapcontext (BZ#610)
- sparc/sparc64 fixes
* Wed Dec 15 2004 Jakub Jelinek <jakub(a)redhat.com> 2.3.3-96
- update from CVS
- fix i686 __USE_STRING_INLINES strncat
- make sure ppc/ppc64 maintain correct stack alignment
across clone
* Wed Dec 15 2004 Jakub Jelinek <jakub(a)redhat.com> 2.3.3-95
- export nis_domain_of_r from libnsl.so again which was
unintentionally lost
* Wed Dec 15 2004 Jakub Jelinek <jakub(a)redhat.com> 2.3.3-93
- update from CVS
- ppc/ppc64 clone without CLONE_THREAD getpid () adjustement
- fix MALLOC_CHECK_={1,2,3} for non-contiguous main arena
(BZ#457)
- fix sysconf (_POSIX_V6_*) for other ABI environments in
bi-arch setups
- s390/s390x clone without CLONE_THREAD getpid () adjustement
* Tue Dec 14 2004 Jakub Jelinek <jakub(a)redhat.com> 2.3.3-92
- update from CVS
- fix /usr/libexec/getconf filenames generation
* Tue Dec 14 2004 Jakub Jelinek <jakub(a)redhat.com> 2.3.3-91
- update from CVS
- double buffer size in getXXbyYY or getXXent on ERANGE
instead of adding BUFLEN (#142617)
- avoid busy loop in malloc if another thread is doing fork
(#142214)
- some more realloc corruption checks
- fix getconf _POSIX_V6_WIDTH_RESTRICTED_ENVS output,
tweak /usr/libexec/getconf/ filenames
* Fri Dec 10 2004 Jakub Jelinek <jakub(a)redhat.com> 2.3.3-90
- update from CVS
- regex speedups
- use | cat in ldd if running under bash3+ to allow running
it on binaries that are not through SELinux allowed to access
console or tty
- add __NR_waitid defines for alpha and ia64
* Wed Dec 08 2004 Jakub Jelinek <jakub(a)redhat.com> 2.3.3-89
- update from CVS
- fix clone2 on ia64
- avoid tst-timer5 failing with linuxthreads implementation
- if __libc_enable_secure, disallow mode != normal
- change ldd script to imply -r when -u is used, properly
propagate return value and handle suid binaries
* Tue Dec 07 2004 Jakub Jelinek <jakub(a)redhat.com> 2.3.3-88
- update from CVS
- disregard LD_SHOW_AUXV and LD_DYNAMIC_WEAK if __libc_enable_secure
- disregard LD_DEBUG if __libc_enable_secure in normal mode
if /suid-debug doesn't exist
- fix fseekpos after ungetc
- avoid reading bytes before start of buffers in regex's
check_dst_limits_calc_pos_1 (#142060)
- make getpid () working with clone/clone2 without CLONE_THREAD
(so far on i386/x86_64/ia64 only)
- move /usr/libexec/getconf/* to glibc from glibc-common
- make /usr/libexec/getconf directory owned by glibc package
* Fri Dec 03 2004 Jakub Jelinek <jakub(a)redhat.com> 2.3.3-87
- update from CVS
- build libpthread_nonshared.a objects with -fPIC on s390/s390x
- fix mktime with < 0 or > 59 tm_sec on entry
- remove nonnull attribute for realpath
- add $(make-target-directory) for errlist-compat.c rule
(hopefully fix #141404)
- add testcase for ungetc bug
- define _POSIX_{,THREAD_}CPUTIME to 0 on all Linux arches
* Tue Nov 30 2004 Jakub Jelinek <jakub(a)redhat.com> 2.3.3-86
- update from CVS
- some posix_opt.h fixes
- fix strtold use of unitialized memory (#141000)
- some more bugfixes for bugs detected by valgrind
- rebuilt with GCC >= 3.4.3-5 to avoid packed stack layout
on s390{,x} (#139678)
* Fri Nov 26 2004 Jakub Jelinek <jakub(a)redhat.com> 2.3.3-85
- update from CVS
- support -v specification in getconf
- fix sysconf (_SC_LFS64_CFLAGS) etc.
- avoid thread stack aliasing issues on EM64T (#140803)
- move /usr/include/nptl headers from nptl-devel
to glibc-headers, so that even NPTL specific programs
can be built bi-arch without problems
* Wed Nov 24 2004 Jakub Jelinek <jakub(a)redhat.com> 2.3.3-84
- update from CVS
- fix memory leak in getaddrinfo if using nscd (#139559)
- handle large lines in /etc/hosts and /etc/networks
(#140378)
- add nonnull attributes to selected dirent.h and dlfcn.h
functions
* Sun Nov 21 2004 Jakub Jelinek <jakub(a)redhat.com> 2.3.3-83
- update from CVS
- add deprecated and/or nonnull attribute to some signal.h
functions
- speed up tzset () by only using stat instead of open/fstat
when calling tzset for the second and following time if
/etc/localtime has not changed
- fix tgamma (BZ #552)
* Sat Nov 20 2004 Jakub Jelinek <jakub(a)redhat.com> 2.3.3-82
- update from CVS
- some malloc () checking
- libpthread.a object dependency cleanups (#115157)
- <bits/socket.h> fix for -std=c89 -pedantic-errors (#140132)
* Fri Nov 19 2004 Jakub Jelinek <jakub(a)redhat.com> 2.3.3-81
- don't use chunksize in <= 2 * SIZE_SZ free () checks
* Fri Nov 19 2004 Jakub Jelinek <jakub(a)redhat.com> 2.3.3-80
- update from CVS
- with -D_FORTIFY_SOURCE=2, prevent missing %N$ formats
- for -D_FORTIFY_SOURCE=2 and %n in writable format string,
issue special error message instead of using the buffer overflow
detected one
- speedup regex searching with REG_NOSUB, add RE_NO_SUB,
speedup searching with nested subexps (BZ #544)
- block SIGCANCEL in NPTL timer_* helper thread
- further free () checking
* Tue Nov 16 2004 Jakub Jelinek <jakub(a)redhat.com> 2.3.3-79
- update from CVS
- fix free () checking
- move /etc/default/nss into glibc-common (hopefully fix #132392)
* Mon Nov 15 2004 Jakub Jelinek <jakub(a)redhat.com> 2.3.3-78
- update from CVS
- fix LD_DEBUG=statistics
- issue error message before aborting in __chk_fail ()
- some more free () checking
* Fri Nov 12 2004 Jakub Jelinek <jakub(a)redhat.com> 2.3.3-77
- update from CVS
- speedup regex on palindromes (BZ #429)
- fix NPTL set{,e,re,res}[ug]id, so that even if making process
less priviledged all threads change their credentials successfully
* Wed Nov 10 2004 Jakub Jelinek <jakub(a)redhat.com> 2.3.3-76
- update from CVS
- fix regcomp crash (#138439)
- fix ftell{,o,o64} (#137885)
- robustification of nscd to cope with corrupt databases (#137140)
- fix NPTL with pthread_exit immediately after pthread_create (BZ #530)
- some regex optimizations
* Tue Nov 02 2004 Jakub Jelinek <jakub(a)redhat.com> 2.3.3-75
- update from CVS
- mktime cleanups (BZ #487, #473)
- unique comments in free(3) check error messages
- adjust some x86_64 headers for -m32 (#129712)
- object size checking support even with GCC-3.4.2-RH >= 3.4.2-8
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/
b9d9a53421760db0bfa4287af7dabd10 SRPMS/glibc-2.3.4-2.fc3.src.rpm
3797cf1598ad7f1afe3c8b5434b33581 x86_64/glibc-2.3.4-2.fc3.x86_64.rpm
82d5329a1b9da8400a113431c468c4fd x86_64/glibc-devel-2.3.4-2.fc3.x86_64.rpm
16f9a39225f786ca09b92e45c9ea6fa8 x86_64/glibc-headers-2.3.4-2.fc3.x86_64.rpm
bd4d9f2d45f33b13c713c76624b5a22d x86_64/nptl-devel-2.3.4-2.fc3.x86_64.rpm
1e2ea4610d4c9cb1488f4d742541ad76 x86_64/glibc-profile-2.3.4-2.fc3.x86_64.rpm
192a0ed6462c27057623b468a66f0b02 x86_64/glibc-common-2.3.4-2.fc3.x86_64.rpm
a18664c4582ba8313b6c9c78c33d74d5 x86_64/nscd-2.3.4-2.fc3.x86_64.rpm
b4472b6af7139f8d2d9b6202b934da05 x86_64/glibc-utils-2.3.4-2.fc3.x86_64.rpm
a1e20f21ce8437710f07abbe290b1792 x86_64/debug/glibc-debuginfo-2.3.4-2.fc3.x86_64.rpm
360920d49265f6623976f50835bdfd37 x86_64/glibc-2.3.4-2.fc3.i386.rpm
af7bacacfc4dc4aeedc848ef34f6b961 x86_64/glibc-devel-2.3.4-2.fc3.i386.rpm
60d25e598f3d8ea02cb3f47ea3436aa3 x86_64/glibc-2.3.4-2.fc3.i686.rpm
360920d49265f6623976f50835bdfd37 i386/glibc-2.3.4-2.fc3.i386.rpm
af7bacacfc4dc4aeedc848ef34f6b961 i386/glibc-devel-2.3.4-2.fc3.i386.rpm
18937796c5fe5c73c07db0e9050ad04b i386/glibc-headers-2.3.4-2.fc3.i386.rpm
20c66b909fc128d9a5fbff58e9c9e5ec i386/nptl-devel-2.3.4-2.fc3.i386.rpm
0da2de0adf69a0c5bd897d65ec046fbe i386/glibc-profile-2.3.4-2.fc3.i386.rpm
d97bf76cf3cd06b08f309f1a60cb5f34 i386/glibc-common-2.3.4-2.fc3.i386.rpm
e72ff3f5aac989861efd9ad5d01cdb64 i386/nscd-2.3.4-2.fc3.i386.rpm
3628f0b5fcf60c0df181b0c4d18897cc i386/glibc-utils-2.3.4-2.fc3.i386.rpm
85cc069c9ea5a3bb5647e3fc0da32c0e i386/debug/glibc-debuginfo-2.3.4-2.fc3.i386.rpm
f813c98752abb3146ac9e4761bda0a04 i386/debug/glibc-debuginfo-common-2.3.4-2.fc3.i386.rpm
60d25e598f3d8ea02cb3f47ea3436aa3 i386/glibc-2.3.4-2.fc3.i686.rpm
f7b95123d76f1a57a7a87ad7c1ad13b0 i386/nptl-devel-2.3.4-2.fc3.i686.rpm
46a6db14ba84b09ff8f839959eae7d1c i386/debug/glibc-debuginfo-2.3.4-2.fc3.i686.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
19 years, 4 months
[SECURITY] Fedora Core 3 Update: samba-3.0.10-1.fc3
by Jay Fenlason
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-562
2004-12-20
---------------------------------------------------------------------
Product : Fedora Core 3
Name : samba
Version : 3.0.10
Release : 1.fc3
Summary : The Samba SMB server.
Description :
Samba is the suite of programs by which a lot of PC-related machines
share files, printers, and other information (such as lists of available
files and printers). The Windows NT, OS/2, and Linux operating systems
support this natively, and add-on packages can enable the same thing
for DOS, Windows, VMS, UNIX of all kinds, MVS, and more. This package
provides an SMB server that can be used to provide network services to
SMB (sometimes called "Lan Manager") clients. Samba uses NetBIOS over
TCP/IP (NetBT) protocols and does NOT need the NetBEUI (Microsoft Raw
NetBIOS frame) protocol.
---------------------------------------------------------------------
* Fri Dec 17 2004 Jay Fenlason <fenlason(a)redhat.com> 3.0.10-1.fc3
- New upstream release that closes CAN-2004-1154 bz#142544
- Include the -64bit patch from Nalin. This closes bz#142873
- Update the -logfiles patch to work with 3.0.10
- Create /var/run/winbindd and make it part of the -common rpm to close
bz#142242
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/
c27444726a8d87df46b18787fdacdeb1 SRPMS/samba-3.0.10-1.fc3.src.rpm
b117dd7357e6fb7bf1651c6585ccb6de x86_64/samba-3.0.10-1.fc3.x86_64.rpm
f03e59b0ad4a70d51bdd31fd69d35865 x86_64/samba-client-3.0.10-1.fc3.x86_64.rpm
b3226a6f347cba925f9f5638780c969a x86_64/samba-common-3.0.10-1.fc3.x86_64.rpm
a412163b4718321d09bdf885543e33e1 x86_64/samba-swat-3.0.10-1.fc3.x86_64.rpm
d57e07d3d5371de5cc9657f9e9f0dff1 x86_64/debug/samba-debuginfo-3.0.10-1.fc3.x86_64.rpm
2b990c25694c79b70b67a21811e5be77 x86_64/samba-common-3.0.10-1.fc3.i386.rpm
9907eedb4d82fa30d1358666eee9b136 i386/samba-3.0.10-1.fc3.i386.rpm
318121245141868848921d058debbb38 i386/samba-client-3.0.10-1.fc3.i386.rpm
2b990c25694c79b70b67a21811e5be77 i386/samba-common-3.0.10-1.fc3.i386.rpm
ab552a8dc90879ae70daa119d8d408b2 i386/samba-swat-3.0.10-1.fc3.i386.rpm
9d4d78de6bf854e620ef7f371738001b i386/debug/samba-debuginfo-3.0.10-1.fc3.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
19 years, 4 months
[SECURITY] Fedora Core 2 Update: samba-3.0.10-1.fc2
by Jay Fenlason
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-561
2004-12-20
---------------------------------------------------------------------
Product : Fedora Core 2
Name : samba
Version : 3.0.10
Release : 1.fc2
Summary : The Samba SMB server.
Description :
Samba is the suite of programs by which a lot of PC-related machines
share files, printers, and other information (such as lists of available
files and printers). The Windows NT, OS/2, and Linux operating systems
support this natively, and add-on packages can enable the same thing
for DOS, Windows, VMS, UNIX of all kinds, MVS, and more. This package
provides an SMB server that can be used to provide network services to
SMB (sometimes called "Lan Manager") clients. Samba uses NetBIOS over
TCP/IP (NetBT) protocols and does NOT need the NetBEUI (Microsoft Raw
NetBIOS frame) protocol.
---------------------------------------------------------------------
* Fri Dec 17 2004 Jay Fenlason <fenlason(a)redhat.com> 3.0.10-1.fc2
- New upstream release that closes CAN-2004-1154 bz#142544
- Include the -64bit patch from Nalin. This closes bz#142873
- Update the -logfiles patch to work with 3.0.10
- Create /var/run/winbindd and make it part of the -common rpm to close
bz#142242
- move /var/log/samba to -common
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/
afc9b5acdaedea483c0f092e91941886 SRPMS/samba-3.0.10-1.fc2.src.rpm
7524295f7be60d2e629e019e9ed28d61 x86_64/samba-3.0.10-1.fc2.x86_64.rpm
d030804cf95c6413bdb27882150c8d27 x86_64/samba-client-3.0.10-1.fc2.x86_64.rpm
54087bc4c5aa068f4918a2c0c1765ca9 x86_64/samba-common-3.0.10-1.fc2.x86_64.rpm
903d506a3061ec4879a52444f81db9b8 x86_64/samba-swat-3.0.10-1.fc2.x86_64.rpm
ef4897b4d2978e525871cf703eb68397 x86_64/debug/samba-debuginfo-3.0.10-1.fc2.x86_64.rpm
7d4e075e6af137a2c662f1c0a1b471d2 i386/samba-3.0.10-1.fc2.i386.rpm
7a5bd785a14126740e690ad10d1af6dc i386/samba-client-3.0.10-1.fc2.i386.rpm
47a13cabaed99b4bfd3b0c0a9f254bd0 i386/samba-common-3.0.10-1.fc2.i386.rpm
327ce0e676167768d29ccc246199093d i386/samba-swat-3.0.10-1.fc2.i386.rpm
d364ceafbff0d7f36110091e4ed0e51b i386/debug/samba-debuginfo-3.0.10-1.fc2.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
19 years, 4 months
Fedora Core 3 Update: pam-0.77-66.1
by Tomas Mraz
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-531
2004-12-20
---------------------------------------------------------------------
Product : Fedora Core 3
Name : pam
Version : 0.77
Release : 66.1
Summary : A security tool which provides authentication for applications.
Description :
PAM (Pluggable Authentication Modules) is a system security tool that
allows system administrators to set authentication policy without
having to recompile programs that handle authentication.
---------------------------------------------------------------------
Update Information:
This update resolves various minor bugs of pam package in Fedora Core 3
and adds a new parameter to pam_console_apply to constrain it's work
to the specified files.
---------------------------------------------------------------------
* Wed Dec 08 2004 Tomas Mraz <tmraz(a)redhat.com> 0.77-66.1
- add argument to pam_console_apply to restrict its work to specified files
- #140451 parse passwd entries correctly and test for failure
* Thu Nov 11 2004 Tomas Mraz <tmraz(a)redhat.com> 0.77-66
- #77646 log failures when renaming the files when changing password
- Log failure on missing /etc/security/opasswd when remember option is present
* Wed Nov 10 2004 Tomas Mraz <tmraz(a)redhat.com>
- #87628 pam_timestamp remembers authorization after logout
- #116956 fixed memory leaks in pam_stack
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/
abb99f86fd1a9ed109b11f8004699dd8 SRPMS/pam-0.77-66.1.src.rpm
b5246c33d3d12b5f82654efeee06fb55 x86_64/pam-0.77-66.1.x86_64.rpm
aef0118ec92d301309025c7b68b4f4a0 x86_64/pam-devel-0.77-66.1.x86_64.rpm
add741b0976f8b8057ecfe1404322767 x86_64/debug/pam-debuginfo-0.77-66.1.x86_64.rpm
394dee8ab21b39c055ca27b295b6dd6c x86_64/pam-0.77-66.1.i386.rpm
4bcffb03951f0fb215ebdfd34fcb7d7f x86_64/pam-devel-0.77-66.1.i386.rpm
394dee8ab21b39c055ca27b295b6dd6c i386/pam-0.77-66.1.i386.rpm
4bcffb03951f0fb215ebdfd34fcb7d7f i386/pam-devel-0.77-66.1.i386.rpm
2bfad85fcc36a808ce0883b17dafd623 i386/debug/pam-debuginfo-0.77-66.1.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
19 years, 4 months