[SECURITY] Fedora Core 4 Update: texinfo-4.8-4.1
by Tim Waugh
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-991
2005-10-14
---------------------------------------------------------------------
Product : Fedora Core 4
Name : texinfo
Version : 4.8
Release : 4.1
Summary : Tools needed to create Texinfo format documentation files.
Description :
Texinfo is a documentation system that can produce both online
information and printed output from a single source file. The GNU
Project uses the Texinfo file format for most of its documentation.
Install texinfo if you want a documentation system for producing both
online and print documentation from the same source file and/or if you
are going to write documentation for the GNU Project.
---------------------------------------------------------------------
Update Information:
This package fixes a temporary file name vulnerability in
the texindex program (CAN-2005-3011).
---------------------------------------------------------------------
* Fri Oct 14 2005 Tim Waugh <twaugh(a)redhat.com> 4.8-4.1
- Apply patch to fix CAN-2005-3011 (bug #169585).
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/
10e51e319c3b894a5a0c6e046e9ac9bb SRPMS/texinfo-4.8-4.1.src.rpm
759b73cdedc10bbfd5526992ca58ca4b ppc/texinfo-4.8-4.1.ppc.rpm
224565f4e89ecd79a221775947470c78 ppc/info-4.8-4.1.ppc.rpm
716d455ba001af5b6f64b2469acf8428 ppc/debug/texinfo-debuginfo-4.8-4.1.ppc.rpm
85df5755e653ea3576881f289a71c6b5 x86_64/texinfo-4.8-4.1.x86_64.rpm
1fad02bc5ef64c71f40c899ad24ba1b3 x86_64/info-4.8-4.1.x86_64.rpm
af423ce685205538879f7e3007b4c674 x86_64/debug/texinfo-debuginfo-4.8-4.1.x86_64.rpm
cb219820133c9d9bca3e388540cd8afa i386/texinfo-4.8-4.1.i386.rpm
fe645c668710b85f407c762ec6f56f37 i386/info-4.8-4.1.i386.rpm
14a5ac3918bf8312fa39482cb7bdf5b5 i386/debug/texinfo-debuginfo-4.8-4.1.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
18 years, 6 months
[SECURITY] Fedora Core 3 Update: texinfo-4.8-2.2
by Tim Waugh
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-990
2005-10-14
---------------------------------------------------------------------
Product : Fedora Core 3
Name : texinfo
Version : 4.8
Release : 2.2
Summary : Tools needed to create Texinfo format documentation files.
Description :
Texinfo is a documentation system that can produce both online
information and printed output from a single source file. The GNU
Project uses the Texinfo file format for most of its documentation.
Install texinfo if you want a documentation system for producing both
online and print documentation from the same source file and/or if you
are going to write documentation for the GNU Project.
---------------------------------------------------------------------
Update Information:
This package fixes a temporary file name vulnerability in
the texindex program (CAN-2005-3011).
---------------------------------------------------------------------
* Fri Oct 14 2005 Tim Waugh <twaugh(a)redhat.com> 4.8-2.2
- Apply patch to fix CAN-2005-3011 (bug #169585).
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/
22460b89314708f1a06144e1c47034f4 SRPMS/texinfo-4.8-2.2.src.rpm
8f24c8388f77e4aae686ffca6d6b638d x86_64/texinfo-4.8-2.2.x86_64.rpm
5e7feb055712d27dc87911776a704115 x86_64/info-4.8-2.2.x86_64.rpm
1610a6c4c12aec49867e40a67681da7a x86_64/debug/texinfo-debuginfo-4.8-2.2.x86_64.rpm
2cdc8b87544ae6cdb76a77d5f8cbd31c i386/texinfo-4.8-2.2.i386.rpm
bd1cb11c0d71734cf132277b5f170628 i386/info-4.8-2.2.i386.rpm
a4b176d9c9fd286babd8a063a65d00d4 i386/debug/texinfo-debuginfo-4.8-2.2.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
18 years, 6 months
[SECURITY] Fedora Core 3 Update: abiword-2.0.12-11
by Caolán McNamara
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-989
2005-10-13
---------------------------------------------------------------------
Product : Fedora Core 3
Name : abiword
Version : 2.0.12
Release : 11
Summary : The AbiWord word processor
Description :
AbiWord is a cross-platform Open Source word processor. The goal is to make
AbiWord full-featured, and remain lean.
---------------------------------------------------------------------
Update Information:
CAN-2005-2972 abiword multiple buffer overflows
---------------------------------------------------------------------
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/
e257d0f780a8af74b8aa977272d74fae SRPMS/abiword-2.0.12-11.src.rpm
2c997f3b37a25c9d11e0b641e71039d1 x86_64/abiword-2.0.12-11.x86_64.rpm
34db6ef87c703f9c268be5c956fa3a5b x86_64/debug/abiword-debuginfo-2.0.12-11.x86_64.rpm
4565785df972dcaf4b348952c3e8d581 i386/abiword-2.0.12-11.i386.rpm
713bf539a028501fb5fbb25e79d2ff79 i386/debug/abiword-debuginfo-2.0.12-11.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
18 years, 6 months
Fedora Core 4 Update: lftp-3.2.1-4_FC4
by Jason Vas Dias
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-988
2005-10-13
---------------------------------------------------------------------
Product : Fedora Core 4
Name : lftp
Version : 3.2.1
Release : 4_FC4
Summary : A sophisticated file transfer program
Description :
LFTP is a sophisticated ftp/http file transfer program. Like bash, it has job
control and uses the readline library for input. It has bookmarks, built-in
mirroring, and can transfer several files in parallel. It is designed with
reliability in mind.
---------------------------------------------------------------------
* Tue Oct 11 2005 Jason Vas Dias <jvdias(a)redhat.com> 3.2.1-1
- Upgrade to upstream version 3.2.1
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/
e4effa29dc808f86bc4cb7624efda867 SRPMS/lftp-3.2.1-4_FC4.src.rpm
f244d52215d631d76481d0f69cb4abe6 ppc/lftp-3.2.1-4_FC4.ppc.rpm
63f167f961d416054f81afcd81d3dfdd ppc/debug/lftp-debuginfo-3.2.1-4_FC4.ppc.rpm
23eb7f8a2516de0ab8ac48844038bbb8 x86_64/lftp-3.2.1-4_FC4.x86_64.rpm
02d63d0beaca5f85b8d3026e1e923eb1 x86_64/debug/lftp-debuginfo-3.2.1-4_FC4.x86_64.rpm
567bf327272da676f5fa72174f911536 i386/lftp-3.2.1-4_FC4.i386.rpm
d27816265542adba0ea7257a9683d64e i386/debug/lftp-debuginfo-3.2.1-4_FC4.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
18 years, 6 months
[SECURITY] Fedora Core 4 Update: openssl-0.9.7f-7.10
by Tomas Mraz
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-986
2005-10-13
---------------------------------------------------------------------
Product : Fedora Core 4
Name : openssl
Version : 0.9.7f
Release : 7.10
Summary : The OpenSSL toolkit.
Description :
The OpenSSL toolkit provides support for secure communications between
machines. OpenSSL includes a certificate management tool and shared
libraries which provide various cryptographic algorithms and
protocols.
---------------------------------------------------------------------
* Wed Oct 12 2005 Tomas Mraz <tmraz(a)redhat.com> 0.9.7f-7.10
- fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
disables the countermeasure against man in the middle attack in SSLv2
(#169863)
- more fixes for constant time/memory access for DSA signature algorithm
- updated ICA engine patch
- ca-bundle.crt should be config(noreplace)
- add *.so.soversion as symlinks in /lib (#165264)
- remove unpackaged symlinks (#159595)
- fixes from upstream (bn assembler div on ppc arch,
initialize memory on realloc)
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/
7a208caac25c849bea298129a50cd07b SRPMS/openssl-0.9.7f-7.10.src.rpm
59019192fd5257073275df66aba0ed9c ppc/openssl-0.9.7f-7.10.ppc.rpm
3efb44c6fa9b7ede9d6bf6ede9aabd16 ppc/openssl-devel-0.9.7f-7.10.ppc.rpm
78e9dc41a9f7da959c79a6b47b364e7c ppc/openssl-perl-0.9.7f-7.10.ppc.rpm
dfd846c61dba5ade1414c5cc40d08014 ppc/debug/openssl-debuginfo-0.9.7f-7.10.ppc.rpm
28be950fca37f2778cb68e18572f3e13 ppc/openssl-0.9.7f-7.10.ppc64.rpm
97ffac074c3e0efc99110726eb6cf3cf x86_64/openssl-0.9.7f-7.10.x86_64.rpm
f7e8e31bfac9e30124850913244b9c1a x86_64/openssl-devel-0.9.7f-7.10.x86_64.rpm
7e6528df16fb831ba79e6faeeea5125a x86_64/openssl-perl-0.9.7f-7.10.x86_64.rpm
d421465583f86241aebd04dc9616fc6e x86_64/debug/openssl-debuginfo-0.9.7f-7.10.x86_64.rpm
10b0af84502fa18f9894e9e759cecd64 i386/openssl-0.9.7f-7.10.i386.rpm
b68877aac95d2066a8880495d96b6105 i386/openssl-devel-0.9.7f-7.10.i386.rpm
752088e010d088efcb8a8d433e7e2814 i386/openssl-perl-0.9.7f-7.10.i386.rpm
aac366e42a46f27c7136e6c4dc602278 i386/debug/openssl-debuginfo-0.9.7f-7.10.i386.rpm
4af1e37b0caba144bd44df07af5f33fb i386/openssl-0.9.7f-7.10.i686.rpm
38e486decdc14d578975079e573202de i386/debug/openssl-debuginfo-0.9.7f-7.10.i686.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
18 years, 6 months
[SECURITY] Fedora Core 4 Update: openssl097a-0.9.7a-3.1
by Tomas Mraz
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-986
2005-10-13
---------------------------------------------------------------------
Product : Fedora Core 4
Name : openssl097a
Version : 0.9.7a
Release : 3.1
Summary : The OpenSSL toolkit.
Description :
The OpenSSL toolkit provides support for secure communications between
machines. OpenSSL includes a certificate management tool and shared
libraries which provide various cryptographic algorithms and
protocols.
---------------------------------------------------------------------
* Tue Oct 11 2005 Tomas Mraz <tmraz(a)redhat.com> 0.9.7a-3.1
- fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
disables the countermeasure against man in the middle attack in SSLv2
(#169863)
- more fixes for constant time/memory access for DSA signature algorithm
- updated ICA engine patch
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/
7b5d366a2175f506df5470052584f931 SRPMS/openssl097a-0.9.7a-3.1.src.rpm
af1d476f7115ee75d213daa91bb42808 ppc/openssl097a-0.9.7a-3.1.ppc.rpm
2b51057a778da0e5cd3ce961499fd4e7 ppc/debug/openssl097a-debuginfo-0.9.7a-3.1.ppc.rpm
aeaeb2f3d8bc9f2a58a54c7fdead02f8 x86_64/openssl097a-0.9.7a-3.1.x86_64.rpm
5bb4865bf5b279349115cd4327939d8c x86_64/debug/openssl097a-debuginfo-0.9.7a-3.1.x86_64.rpm
89142415f683cf15a74b1b6cf8fcaeda i386/openssl097a-0.9.7a-3.1.i386.rpm
6d9052a438a4e279baf5e3e633502fe0 i386/debug/openssl097a-debuginfo-0.9.7a-3.1.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
18 years, 6 months
[SECURITY] Fedora Core 3 Update: openssl-0.9.7a-42.2
by Tomas Mraz
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-985
2005-10-13
---------------------------------------------------------------------
Product : Fedora Core 3
Name : openssl
Version : 0.9.7a
Release : 42.2
Summary : The OpenSSL toolkit.
Description :
The OpenSSL toolkit provides support for secure communications between
machines. OpenSSL includes a certificate management tool and shared
libraries which provide various cryptographic algorithms and
protocols.
---------------------------------------------------------------------
* Tue Oct 11 2005 Tomas Mraz <tmraz(a)redhat.com> 0.9.7a-42.2
- fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
disables the countermeasure against man in the middle attack in SSLv2
(#169863)
- more fixes for constant time/memory access for DSA signature algorithm
- updated ICA engine patch
- install ca-bundle.crt as a config file
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/
385070cd4cbcef6beb59571066a08baf SRPMS/openssl-0.9.7a-42.2.src.rpm
dd28b6aba5377c64da20c05e2c60722e x86_64/openssl-0.9.7a-42.2.x86_64.rpm
062d09908f7777387958b35c71112215 x86_64/openssl-devel-0.9.7a-42.2.x86_64.rpm
cf47c8a41605ee78213f0ed54b81d01c x86_64/openssl-perl-0.9.7a-42.2.x86_64.rpm
7dd0586966ce231751013a66050c1cd1 x86_64/debug/openssl-debuginfo-0.9.7a-42.2.x86_64.rpm
5771664b0590b304c5d2a06dba276642 x86_64/openssl-0.9.7a-42.2.i386.rpm
797ddd44ea165b234463a80107f14f18 x86_64/openssl-0.9.7a-42.2.i686.rpm
5771664b0590b304c5d2a06dba276642 i386/openssl-0.9.7a-42.2.i386.rpm
26a292002e9806eb6331ade376c04c68 i386/openssl-devel-0.9.7a-42.2.i386.rpm
1c2676b06b305fcc3e82b79a641cdbb7 i386/openssl-perl-0.9.7a-42.2.i386.rpm
a8599ed6c62d679dc4f5aa4bd0b63131 i386/debug/openssl-debuginfo-0.9.7a-42.2.i386.rpm
797ddd44ea165b234463a80107f14f18 i386/openssl-0.9.7a-42.2.i686.rpm
ac7dd0ec8c3e1d57b580ceffce7f37bb i386/debug/openssl-debuginfo-0.9.7a-42.2.i686.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
18 years, 6 months
[SECURITY] Fedora Core 3 Update: openssl096b-0.9.6b-21.2
by Tomas Mraz
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-985
2005-10-13
---------------------------------------------------------------------
Product : Fedora Core 3
Name : openssl096b
Version : 0.9.6b
Release : 21.2
Summary : The OpenSSL toolkit.
Description :
The OpenSSL toolkit provides support for secure communications between
machines. OpenSSL includes a certificate management tool and shared
libraries which provide various cryptographic algorithms and
protocols.
---------------------------------------------------------------------
* Thu Oct 6 2005 Tomas Mraz <tmraz(a)redhat.com> 0.9.6b-21.2
- fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
disables the countermeasure against man in the middle attack in SSLv2
(#169863)
- more fixes for constant time/memory access for DSA signature algorithm
- replaced add-luna patch with new one with right license (#158061)
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/
a81510ddd8127092def521888a29735c SRPMS/openssl096b-0.9.6b-21.2.src.rpm
a16e20e80018c7676260339fd9d5dec1 x86_64/openssl096b-0.9.6b-21.2.x86_64.rpm
fa00e72e190651d0c6c28bb197c15661 x86_64/debug/openssl096b-debuginfo-0.9.6b-21.2.x86_64.rpm
515e5aa803873859c235d0822ab74710 x86_64/openssl096b-0.9.6b-21.2.i386.rpm
515e5aa803873859c235d0822ab74710 i386/openssl096b-0.9.6b-21.2.i386.rpm
d892c00a0272ede0a0f625f5ae746313 i386/debug/openssl096b-debuginfo-0.9.6b-21.2.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
18 years, 6 months
[SECURITY] Fedora Core 3 Update: koffice-1.4.2-0.FC3.2
by than
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-984
2005-10-13
---------------------------------------------------------------------
Product : Fedora Core 3
Name : koffice
Version : 1.4.2
Release : 0.FC3.2
Summary : A set of office applications for KDE.
Description :
The koffice package contains the KOffice office-type applications for
the K Desktop Environment (KDE) GUI desktop. KOffice contains KWord, a
word processor; KSpread, a spreadsheet; KPresenter, for presentations;
and KChart, a diagram generator.
---------------------------------------------------------------------
* Tue Oct 11 2005 Than Ngo <than(a)redhat.com> 4:1.4.2-0.FC3.2
- remove security fix which is included in new 1.4.2 upstream
* Thu Sep 29 2005 Than Ngo <than(a)redhat.com> 4:1.4.2-0.FC3.1
- update to 1.4.2
- apply upstream patch to fix CAN-2005-2971 kword buffer overflow #169486
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/
bafe97fb7281f5426b3083724e322ea0 SRPMS/koffice-1.4.2-0.FC3.2.src.rpm
e15514c10895f145a86f4c9f9705280e x86_64/koffice-1.4.2-0.FC3.2.x86_64.rpm
deabe85c27ee8e64222852e9102353ea x86_64/koffice-devel-1.4.2-0.FC3.2.x86_64.rpm
fee6bd39288102e654472e8eeef7eae7 x86_64/koffice-i18n-1.4.2-0.FC3.2.x86_64.rpm
277f7d7ac321494caea1f3ebac286c6c x86_64/debug/koffice-debuginfo-1.4.2-0.FC3.2.x86_64.rpm
37dc3bd085181b7358847cc9f83baa9a i386/koffice-1.4.2-0.FC3.2.i386.rpm
aa952fabd7e68535b8d9990beaab6a8c i386/koffice-devel-1.4.2-0.FC3.2.i386.rpm
1618a08fea088e2feade1eb04020bd88 i386/koffice-i18n-1.4.2-0.FC3.2.i386.rpm
5ff5c11941786261c73bf8f35a97afa4 i386/debug/koffice-debuginfo-1.4.2-0.FC3.2.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
18 years, 6 months