Corrected md5sum's for yesterdays 2179 kernel update.
by Dave Jones
Something went wrong with the md5sums in yesterdays announcement.
They should look like the following..
Dave
614d9051d0224008dcc270e0d8b9c463 2.4.22-1.2179.nptl/x86_64/kernel-2.4.22-1.2179.nptl.x86_64.rpm
b9cb0cbeb925bca8a12ba63058f15d28 2.4.22-1.2179.nptl/x86_64/kernel-source-2.4.22-1.2179.nptl.x86_64.rpm
96e738a8be19378abaaef8eee1f252d0 2.4.22-1.2179.nptl/x86_64/kernel-doc-2.4.22-1.2179.nptl.x86_64.rpm
1bd46eacb1eb5d25f0523a3aae7bea85 2.4.22-1.2179.nptl/x86_64/kernel-smp-2.4.22-1.2179.nptl.x86_64.rpm
ad8953b2fa8152576888c725432ed098 2.4.22-1.2179.nptl/x86_64/kernel-debuginfo-2.4.22-1.2179.nptl.x86_64.rpm
91eceae5508c8939af5d677bee5654c7 2.4.22-1.2179.nptl/SRPMS/kernel-2.4.22-1.2179.nptl.src.rpm
b9368e3c63dcd9cf8ddc72a90d669a4c 2.4.22-1.2179.nptl/i686/kernel-2.4.22-1.2179.nptl.i686.rpm
ecd1a72eea8cc01c78fa8ed880a43f6f 2.4.22-1.2179.nptl/i686/kernel-smp-2.4.22-1.2179.nptl.i686.rpm
fd4f04571b3d0002ad37be017e686b3f 2.4.22-1.2179.nptl/i686/kernel-debuginfo-2.4.22-1.2179.nptl.i686.rpm
ed2880317a12d54c0a078e11ce979a83 2.4.22-1.2179.nptl/i386/kernel-source-2.4.22-1.2179.nptl.i386.rpm
a074148ab23312a5a32db9b3a2792bdc 2.4.22-1.2179.nptl/i386/kernel-doc-2.4.22-1.2179.nptl.i386.rpm
41812eb52e21595476b00b59c7f2c9b7 2.4.22-1.2179.nptl/i386/kernel-BOOT-2.4.22-1.2179.nptl.i386.rpm
43171ce5f8683b66679f855453bbc479 2.4.22-1.2179.nptl/i386/kernel-debuginfo-2.4.22-1.2179.nptl.i386.rpm
af5b012b2cc5eeb815dc8a5e69975060 2.4.22-1.2179.nptl/athlon/kernel-2.4.22-1.2179.nptl.athlon.rpm
86e216f025311cc98bc3d209698e7aa7 2.4.22-1.2179.nptl/athlon/kernel-smp-2.4.22-1.2179.nptl.athlon.rpm
fcfd93b137278ceb880e774d6f07b5a6 2.4.22-1.2179.nptl/athlon/kernel-debuginfo-2.4.22-1.2179.nptl.athlon.rpm
6cac4bf3a414cde461294fa3b44b68f9 2.4.22-1.2179.nptl/i586/kernel-2.4.22-1.2179.nptl.i586.rpm
35df3c2e929a69aa4ddb07638695c329 2.4.22-1.2179.nptl/i586/kernel-debuginfo-2.4.22-1.2179.nptl.i586.rpm
20 years
[SECURITY] Updated kernel packages resolve security vulnerabilities
by Dave Jones
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-101
2004-04-14
---------------------------------------------------------------------
Name : kernel
Version : 2.4.22
Release : 1.2179.nptl
Summary : The Linux kernel (the core of the Linux operating system)
Description :
The kernel package contains the Linux kernel (vmlinuz), the core of your
Fedora Core Linux operating system. The kernel handles the basic functions
of the operating system: memory allocation, process allocation, device
input and output, etc.
iDefense reported a buffer overflow flaw in the ISO9660 filesystem code.
An attacker could create a malicious filesystem in such a way that they
could gain root privileges if that filesystem is mounted. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name
CAN-2004-0109 to this issue.
Solar Designer from OpenWall discovered a minor information leak in the
ext3 filesystem code due to the lack of initialization of journal
descriptor blocks. This flaw has only minor security implications and
exploitation requires privileged access to the raw device. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name
CAN-2004-0133 to this issue.
These packages also contain an updated fix with additional checks for
issues in the R128 Direct Render Infrastructure. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name
CAN-2004-0003 to this issue.
Additionally, additional hardening of the mremap function was applied to
prevent a potential local denial of service attack.
The low latency patch applied in previous kernels has also been found
to cause stability problems under certain conditions. It has been disabled in
this update whilst further investigation occurs.
---------------------------------------------------------------------
* Tue Apr 13 2004 Dave Jones <davej(a)redhat.com>
- mremap NULL pointer dereference fix
- Disable low latency patch, pending investigation into crashes.
- Additional r128 DRM check. (CAN-2004-0003)
- Bounds checking in ISO9660 filesystem. (CAN-2004-0109)
- Fix Information leak in EXT3 (CAN-2004-0133)
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
9e0765301b215adcfbfb207fbde7f01c SRPMS/kernel-2.4.22-1.2179.nptl.src.rpm
727bbfa24367eb2a602af7d502ca1ba3 i386/kernel-source-2.4.22-1.2179.nptl.i386.rpm
e3af69505adeacc849653a1720cdd85a i386/kernel-doc-2.4.22-1.2179.nptl.i386.rpm
34f130838275872d22cef3a16491bfe1 i386/kernel-BOOT-2.4.22-1.2179.nptl.i386.rpm
0d5b4b7e87f9bf78cc2949c5cb04cb83 i386/debug/kernel-debuginfo-2.4.22-1.2179.nptl.i386.rpm
6f2eeac856745d62204f2b74463aca2d i386/kernel-2.4.22-1.2179.nptl.i586.rpm
18440652776236d4de387022f6b12e92 i386/debug/kernel-debuginfo-2.4.22-1.2179.nptl.i586.rpm
9db5f0316633462936ce6e18152d713d i386/kernel-2.4.22-1.2179.nptl.i686.rpm
7444996499d1c8513978b37762ce8edd i386/kernel-smp-2.4.22-1.2179.nptl.i686.rpm
73e9f302d5e1fd4e30a61212e9092fe3 i386/debug/kernel-debuginfo-2.4.22-1.2179.nptl.i686.rpm
45d41d4338a62a10430058639dfaa2aa i386/kernel-2.4.22-1.2179.nptl.athlon.rpm
35995314b5df6c2babf90caf561fdabf i386/kernel-smp-2.4.22-1.2179.nptl.athlon.rpm
7c3a503213ffb046caf4681ff3dcd1ca i386/debug/kernel-debuginfo-2.4.22-1.2179.nptl.athlon.rpm
54b2796976b7549cc0a4134d78c7ad00 x86_64/kernel-2.4.22-1.2179.nptl.x86_64.rpm
398362a0fb8d8e74973333b73227cb91 x86_64/kernel-source-2.4.22-1.2179.nptl.x86_64.rpm
016feee2d5e018165c783383b814bc4d x86_64/kernel-doc-2.4.22-1.2179.nptl.x86_64.rpm
b437cc1e0d29a0fe3ac32f2212ca3901 x86_64/kernel-smp-2.4.22-1.2179.nptl.x86_64.rpm
163aa338fb7064ce15b5e2562b3d44d4 x86_64/debug/kernel-debuginfo-2.4.22-1.2179.nptl.x86_64.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
20 years
Fedora Core 1 Update: gaim-0.76-1.FC1
by Warren Togami
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-099
2004-04-05
---------------------------------------------------------------------
Name : gaim
Version : 0.76
Release : 1.FC1
Summary : A Gtk+ based multiprotocol instant messaging client
Description :
Gaim allows you to talk to anyone using a variety of messaging
protocols, including AIM (Oscar and TOC), ICQ, IRC, Yahoo!,
MSN Messenger, Jabber, Gadu-Gadu, Napster, and Zephyr. These
protocols are implemented using a modular, easy to use design.
To use a protocol, just add an account using the account editor.
Gaim supports many common features of other clients, as well as many
unique features, such as perl scripting and C plugins.
Gaim is NOT affiliated with or endorsed by America Online, Inc.,
Microsoft Corporation, or Yahoo! Inc. or other messaging service
providers.
---------------------------------------------------------------------
Update Information:
Solves #119255 History plugin crash, makes Yahoo protocol work, and
hundreds of other fixes. Read the upstream ChangeLog for more details:
http://gaim.sourceforge.net/ChangeLog
---------------------------------------------------------------------
* Thu Apr 01 2004 Warren Togami <wtogami(a)redhat.com> 0.76-1.FC1
- 0.76
* Sun Mar 28 2004 Warren Togami <wtogami(a)redhat.com>
- CVS snapshot
- more spec cleanups
* Tue Mar 16 2004 Warren Togami <wtogami(a)redhat.com>
- CVS snapshot, generated with automake-1.7.9
- update #4
- update #2 but disable
- #5 no longer needed
- default to gnome-open #6
- some spec cleanup
* Tue Mar 02 2004 Elliot Lee <sopwith(a)redhat.com>
- rebuilt
* Fri Feb 13 2004 Elliot Lee <sopwith(a)redhat.com>
- rebuilt
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
dd3535bbe4b3d065988b3c78aa42153c SRPMS/gaim-0.76-1.FC1.src.rpm
a72b7d5a9e98a33078f16599d841b16a i386/gaim-0.76-1.FC1.i386.rpm
741c2331cbbc8d42f0fe121c2d662510
i386/debug/gaim-debuginfo-0.76-1.FC1.i386.rpm
221a211fb34141a94b1aa05a1404d70a x86_64/gaim-0.76-1.FC1.x86_64.rpm
1fa77dde01139de1f10df09a9cda6c74
x86_64/debug/gaim-debuginfo-0.76-1.FC1.x86_64.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
20 years
Fedora Core 1 Update: gnome-session-2.4.0-3
by Mark McLoughlin
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-098
2004-04-01
---------------------------------------------------------------------
Name : gnome-session
Version : 2.4.0
Release : 3
Summary : GNOME session manager
Description :
gnome-session manages a GNOME desktop session. It starts up the other core
GNOME components and handles logout and saving the session.
---------------------------------------------------------------------
* Wed Mar 31 2004 Mark McLoughlin <markmc(a)redhat.com> 2.4.0-3
- Fix X lock up on logout with glib-2.4 installed (bug #119253)
* Wed Nov 05 2003 Than Ngo <than(a)redhat.com> 2.4.0-2
- don't show gnome-session-properties in KDE (bug #102533)
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
68ee6463e2194ac7d27889877a81383b SRPMS/gnome-session-2.4.0-3.src.rpm
3d028412188c2966852d865f31345341 i386/gnome-session-2.4.0-3.i386.rpm
b5788fedc4e7cd8d57aac732cc510549 i386/debug/gnome-session-debuginfo-2.4.0-3.i386.rpm
f30eac562d412188f2d0074d34269890 x86_64/gnome-session-2.4.0-3.x86_64.rpm
f5769ff8ccf685abbe859cb52e3d12f2 x86_64/debug/gnome-session-debuginfo-2.4.0-3.x86_64.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
20 years