[SECURITY] Fedora Core 4 Update: squirrelmail-1.4.6-1.fc4
by Warren Togami
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2006-133
2006-03-03
---------------------------------------------------------------------
Product : Fedora Core 4
Name : squirrelmail
Version : 1.4.6
Release : 1.fc4
Summary : SquirrelMail webmail client
Description :
SquirrelMail is a standards-based webmail package written in PHP4. It
includes built-in pure PHP support for the IMAP and SMTP protocols, and
all pages render in pure HTML 4.0 (with no Javascript) for maximum
compatibility across browsers. It has very few requirements and is very
easy to configure and install. SquirrelMail has all the functionality
you would want from an email client, including strong MIME support,
address books, and folder manipulation.
---------------------------------------------------------------------
Update Information:
Upgrade to version upstream 1.4.6 which solves these issues
in addition to several bugs.
http://www.squirrelmail.org/changelog.php
More details here.
Additionally Fedora's package contains fixes that may
improve usability of squirrelmail in various non-English
languages. Please report to Bug #162852 if this update
causes any regressions in non-English language behavior.
---------------------------------------------------------------------
* Wed Mar 1 2006 David Woodhouse <dwmw2(a)redhat.com> 1.4.6-1
- Upgrade to 1.4.6 proper for CVE-2006-0377 CVE-2006-0195 CVE-2006-0188
- Script the charset changes instead of using a patch
- Convert the ko_KR files to UTF-8, dropping invalid characters from
what's theoretically supposed to be EUC-KR in the original.
* Tue Jan 17 2006 Warren Togami <wtogami(a)redhat.com> 1.4.6-0.cvs20050812.3
- do not remove mo files
- require php-mbstring
* Fri Dec 9 2005 Jesse Keating <jkeating(a)redhat.com>
- rebuilt
* Mon Sep 12 2005 David Woodhouse <dwmw2(a)redhat.com> 1.4.6-0.cvs20050812.2
- Convert all locales to UTF-8 instead of legacy character sets to
work around bug #162852. Except for ko_KR, because iconv doesn't
believe its help files are actually in EUC-KR as claimed.
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/
7fa03570698b636dcd976d0f3b6d3d51df171224 SRPMS/squirrelmail-1.4.6-1.fc4.src.rpm
9cb6adf3a5746a0187ca0f7db333884221ef7512 ppc/squirrelmail-1.4.6-1.fc4.noarch.rpm
9cb6adf3a5746a0187ca0f7db333884221ef7512 x86_64/squirrelmail-1.4.6-1.fc4.noarch.rpm
9cb6adf3a5746a0187ca0f7db333884221ef7512 i386/squirrelmail-1.4.6-1.fc4.noarch.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
18 years, 1 month
[SECURITY] Fedora Core 4 Update: kernel-2.6.15-1.1833_FC4
by Dave Jones
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2006-131
2006-03-02
---------------------------------------------------------------------
Product : Fedora Core 4
Name : kernel
Version : 2.6.15
Release : 1.1833_FC4
Summary : The Linux kernel (the core of the Linux operating system)
Description :
The kernel package contains the Linux kernel (vmlinuz), the core of any
Linux operating system. The kernel handles the basic functions
of the operating system: memory allocation, process allocation, device
input and output, etc.
---------------------------------------------------------------------
Update Information:
This update rebases to the latest -stable release
(2.6.15.5), which fixes a number of security problems.
- sys_mbind failed to sanity check its arguments, leading to
a potential local DoS.
- A specially crafted ELF executable could cause Intel EM64T
boxes to crash. (CVE-2006-0741)
- Normal users could panic NFS clients with direct I/O
(CVE-2006-0555)
Further information on 2.6.15.5 changes can be found in the
upstream changelog at
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15.5
Further Fedora specific changes are detailed below.
---------------------------------------------------------------------
* Wed Mar 1 2006 Dave Jones <davej(a)redhat.com> [2.6.15-1.1833_FC4]
- 2.6.15.5
* Tue Feb 21 2006 Dave Jones <davej(a)redhat.com>
- Add boot delay debug patch.
* Mon Feb 20 2006 Dave Jones <davej(a)redhat.com>
- Make monitor mode work for ipw2200
- Add another mp3 player to the usb unusual device list. (#176584)
* Sun Feb 19 2006 Dave Jones <davej(a)redhat.com>
- Bump minimum requirements for module-init-tools & udev
- Make 16C950 UARTs work.
* Thu Feb 16 2006 Dave Jones <davej(a)redhat.com>
- Fix PMTU NAT bug.
* Thu Feb 16 2006 John W. Linville <linville(a)redhat.com>
- Set ipw2200 hwcrypto option to 0 to avoid firmware restarts.
* Fri Feb 10 2006 Dave Jones <davej(a)redhat.com> [2.6.15-1.1832_FC4]
- 2.6.15.4
* Thu Feb 9 2006 Dave Jones <davej(a)redhat.com>
- Disable SMP in x86-64 UP kernels. (Whoops).
* Thu Feb 9 2006 David Woodhouse <dwmw2(a)redhat.com>
- Fix PPC64 FP exception setup
- Fix brain damage in usb_find_interface (#176333)
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/
7682f506eeb41aee31371405d55e7fa93e01360f SRPMS/kernel-2.6.15-1.1833_FC4.src.rpm
f37c270a5d32bf752b4b9b50dec21766ac5f72a0 ppc/kernel-2.6.15-1.1833_FC4.ppc.rpm
624e1525a3feb8c35c154aa0d1dade7b2c5bf0d1 ppc/kernel-devel-2.6.15-1.1833_FC4.ppc.rpm
53138aeb74ff50e5c13a96b5c87c37488cb4ddb5 ppc/kernel-smp-2.6.15-1.1833_FC4.ppc.rpm
d0024ab26bd3d2b0476f5142be5866f0d653fb27 ppc/kernel-smp-devel-2.6.15-1.1833_FC4.ppc.rpm
0c607cfa3944a0000ea89143f3dc5fc2f8203a26 ppc/debug/kernel-debuginfo-2.6.15-1.1833_FC4.ppc.rpm
64cd60e3c7595c2c23dc24ce7922218323678687 ppc/kernel-doc-2.6.15-1.1833_FC4.noarch.rpm
3de514a4c888cbf92b6b6c2269e8b0cc69977577 x86_64/kernel-2.6.15-1.1833_FC4.x86_64.rpm
9d637ea0323f5a37172a0a06d04cee7064ed5e2a x86_64/kernel-devel-2.6.15-1.1833_FC4.x86_64.rpm
8b63fd524c20e9d10f5de872545cccb3a66f8323 x86_64/kernel-smp-2.6.15-1.1833_FC4.x86_64.rpm
1e6b05ecbc2f5f4e6d68fe8606bff50666028d11 x86_64/kernel-smp-devel-2.6.15-1.1833_FC4.x86_64.rpm
fc4e5b2d7ea78ac7ef97cd2b78762e85c0c96e7f x86_64/debug/kernel-debuginfo-2.6.15-1.1833_FC4.x86_64.rpm
64cd60e3c7595c2c23dc24ce7922218323678687 x86_64/kernel-doc-2.6.15-1.1833_FC4.noarch.rpm
ad545cc747ef07f8b9ece878e057c24e997d0e47 i386/kernel-2.6.15-1.1833_FC4.i586.rpm
cd001d16945ccd001e9adece7f4a4b44a6099bf9 i386/kernel-devel-2.6.15-1.1833_FC4.i586.rpm
ed35c8709004507af2b9cc720afcb2b4a5f35e42 i386/debug/kernel-debuginfo-2.6.15-1.1833_FC4.i586.rpm
98e78f254935b01d42f4b3bc5d165a00b85dfdd8 i386/kernel-2.6.15-1.1833_FC4.i686.rpm
f0a6bcda29f5a936fbd9f45f5dbc3fd8162f1260 i386/kernel-devel-2.6.15-1.1833_FC4.i686.rpm
1801e8f001ee4f06198094ded3ab5431e4284442 i386/kernel-smp-2.6.15-1.1833_FC4.i686.rpm
0eaae08ab5d54182a5da346943e66ab0a9db94e7 i386/kernel-smp-devel-2.6.15-1.1833_FC4.i686.rpm
73c80a317d968cd0909cd3d1dfea903afa2bb314 i386/debug/kernel-debuginfo-2.6.15-1.1833_FC4.i686.rpm
64cd60e3c7595c2c23dc24ce7922218323678687 i386/kernel-doc-2.6.15-1.1833_FC4.noarch.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
18 years, 1 month
Fedora Core 4 Update: xterm-208-2.FC4
by Jason Vas Dias
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2006-126
2006-03-01
---------------------------------------------------------------------
Product : Fedora Core 4
Name : xterm
Version : 208
Release : 2.FC4
Summary : xterm terminal emulator for the X Window System
Description :
The xterm program is a terminal emulator for the X Window System. It
provides DEC VT102 and Tektronix 4014 compatible terminals for
programs that can't use the window system directly.
---------------------------------------------------------------------
* Wed Feb 22 2006 Jason Vas Dias <jvdias(a)redhat.com> - 208-2.FC4
- fix bug 182382: check for (VWindow(screen)!=0) in set_cursor_gcs
- further fix for bug 178302: allow vt100*cursorColor to be same
as foreground
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/
30156cc04dbaf4241917cdc3c959363dc735c35c SRPMS/xterm-208-2.FC4.src.rpm
9d78ba5a85a9492b67b61045102d5e1087dcadbd ppc/xterm-208-2.FC4.ppc.rpm
709f4b3c0bb22e1ae636325aa3de41760e862fd5 ppc/debug/xterm-debuginfo-208-2.FC4.ppc.rpm
d05ac793b9b2a8d760feec9f44f97bbdef0c99ba x86_64/xterm-208-2.FC4.x86_64.rpm
5543d17e69dd710ad06021576f55543b653d5932 x86_64/debug/xterm-debuginfo-208-2.FC4.x86_64.rpm
0d091b461c520886cb1bad9b27ec8e1a7a29599b i386/xterm-208-2.FC4.i386.rpm
123a6c6426c3f34723201e16ac8dcb6d490e1f4d i386/debug/xterm-debuginfo-208-2.FC4.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
18 years, 1 month
Fedora Core 4 Update: system-config-netboot-0.1.38-2_FC4
by Jason Vas Dias
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2006-130
2006-03-01
---------------------------------------------------------------------
Product : Fedora Core 4
Name : system-config-netboot
Version : 0.1.38
Release : 2_FC4
Summary : system-config-netboot is an network booting/install configuration utility
Description :
system-config-netboot is a utility which allows you to configure
diskless environments and network installations.
---------------------------------------------------------------------
* Tue Feb 14 2006 Jason Vas Dias <jvdias(a)redhat.com> - 0.1.38-1
- further fix for f1(a)micromemory.com problem (now bug 181365)
deal with required binaries that have been replaced by scripts
- fix bug 178395: allow setting of NISDOMAIN
- fix bug 174629: fix initscript patches (prevent application!)
- fix bug 182869: should Requires(post): hicolor-icon-theme
- fix issues reported by brian(a)chpc.utah.edu (bugs to be raised):
o mkdiskless must not wipe out client root customizations on re-run
o give serial console checkbox a speed drop down list
- add "Use tty0 console also" checkbox option
o allow editing of extra boot options in the config file
o do not create snapshot directory for network boot targets
o remove /etc/ssh keys and make /etc/ssh a snapshot file
o mount /var/cache, /var/lib/misc, /var/lib/mrtg on tmpfs / snapshot
o fix network syslog : '*' -> '*.*'
* Thu Feb 9 2006 Jason Vas Dias <jvdias(a)redhat.com> - 0.1.37-1
- fix problem reported by f1(a)micromemory.com:
detect and deal with missing libraries in the client root correctly
- fix bug 178392: disklessrc's "^$MODULE" should be "^$MODULE "
- ship updated .po files
* Wed Dec 21 2005 Jason Vas Dias <jvdias(a)redhat.com> - 0.1.36-1
- fix bug 171820: add desktop.in file to POTFILES.in
- use 'LC_ALL=C' for updateDiskless' 'echo y | /sbin/mke2fs ...',
as pointed out by email from Kiko Albiol Colomer <kiko(a)sertecnet.com>
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/
bd3ff43bc5af5c610dfe665d49d289f6e5fcef49 SRPMS/system-config-netboot-0.1.38-2_FC4.src.rpm
d3e8151d4bcd086393174fc35f897f611bce8573 x86_64/system-config-netboot-0.1.38-2_FC4.x86_64.rpm
ec44db65c832886a2eae877c63f808c7e86a6edb x86_64/debug/system-config-netboot-debuginfo-0.1.38-2_FC4.x86_64.rpm
ff7aaf0a97545a9c03349404024773b3f438167b i386/system-config-netboot-0.1.38-2_FC4.i386.rpm
9327ab1f0fa92c7bd3e627ad3c6f26dd04dd08a1 i386/debug/system-config-netboot-debuginfo-0.1.38-2_FC4.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
18 years, 1 month
Fedora Core 4 Update: dhcp-3.0.2-34.FC4
by Jason Vas Dias
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2006-122
2006-03-01
---------------------------------------------------------------------
Product : Fedora Core 4
Name : dhcp
Version : 3.0.2
Release : 34.FC4
Summary : A DHCP (Dynamic Host Configuration Protocol) server and relay agent.
Description :
DHCP (Dynamic Host Configuration Protocol) is a protocol which allows
individual devices on an IP network to get their own network
configuration information (IP address, subnetmask, broadcast address,
etc.) from a DHCP server. The overall purpose of DHCP is to make it
easier to administer a large network. The dhcp package includes the
ISC DHCP service and relay agent.
To use DHCP on your network, install a DHCP service (or relay agent),
and on clients run a DHCP client daemon. The dhcp package provides
the ISC DHCP service and relay agent.
---------------------------------------------------------------------
* Mon Feb 20 2006 Jason Vas Dias <jvdias(a)redhat.com> - 11:3.0.2-34
- Apply upstream fix for bug 176615 / ISC RT#15811
* Tue Feb 14 2006 Jason Vas Dias <jvdias(a)redhat.com> - 11:3.0.2-32
- fix bug 181482: resolv.conf not updated on RENEW :
since dhcp-3.0.1rc12-RHScript.patch: "$new_domain_servers" should have
been "$new_domain_name_servers" :-(
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/
78deed920a0c192cee2abbb187181840d4dba742 SRPMS/dhcp-3.0.2-34.FC4.src.rpm
f82415aabc676b739c7e60295958bd08d964583e ppc/dhcp-3.0.2-34.FC4.ppc.rpm
27aed507b64e5376135777c0e2b2624ea8c40b2f ppc/dhclient-3.0.2-34.FC4.ppc.rpm
3202369c0febbde4c767fb42bcec69622679674d ppc/dhcp-devel-3.0.2-34.FC4.ppc.rpm
f36a6a0bd9d5eedb79cd8ffca55fb7b9d6b91981 ppc/debug/dhcp-debuginfo-3.0.2-34.FC4.ppc.rpm
603a472eb59953e548deaa41fd91a5ebdec6bc14 x86_64/dhcp-3.0.2-34.FC4.x86_64.rpm
b96f826358aaf3a6943533f554c989c6a1634be4 x86_64/dhclient-3.0.2-34.FC4.x86_64.rpm
fbdf350a845e0b2fc189dce47f481b0a6c546b03 x86_64/dhcp-devel-3.0.2-34.FC4.x86_64.rpm
2d1d9e962ca8be20cec126adc33fbb20bfcc3bb4 x86_64/debug/dhcp-debuginfo-3.0.2-34.FC4.x86_64.rpm
c2a379efbda62d3e9792bad625a22ab7ef2771f3 i386/dhcp-3.0.2-34.FC4.i386.rpm
a6feaea2b7e5d3bf1caee76b152fc8b1c26fe13f i386/dhclient-3.0.2-34.FC4.i386.rpm
d92babdba976c0fa9873320d5611b44597dcdd20 i386/dhcp-devel-3.0.2-34.FC4.i386.rpm
47651b66de0508d5ebb219b69c3716df61a4172f i386/debug/dhcp-debuginfo-3.0.2-34.FC4.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
18 years, 1 month