Fedora Core 3 Test Update: ImageMagick-6.2.0.7-2.fc3
by Matthias Clasen
---------------------------------------------------------------------
Fedora Test Update Notification
FEDORA-2005-235
2005-03-18
---------------------------------------------------------------------
Product : Fedora Core 3
Name : ImageMagick
Version : 6.2.0.7
Release : 2.fc3
Summary : An X application for displaying and manipulating images.
Description :
ImageMagick(TM) is an image display and manipulation tool for the X
Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF,
and Photo CD image formats. It can resize, rotate, sharpen, color
reduce, or add special effects to an image, and when finished you can
either save the completed work in the original format or a different
one. ImageMagick also includes command line programs for creating
animated or transparent .gifs, creating composite images, creating
thumbnail images, and more.
ImageMagick is one of your choices if you need a program to manipulate
and dis play images. If you want to develop your own applications
which use ImageMagick code or APIs, you need to install
ImageMagick-devel as well.
---------------------------------------------------------------------
Update Information:
Andrei Nigmatulin discovered a heap based buffer overflow flaw in the
ImageMagick image handler. An attacker could create a carefully crafted
Photoshop Document (PSD) image in such a way that it would cause
ImageMagick to execute arbitrary code when processing the image. The
Common Vulnerabilities and Exposures project (cve.mitre.org) has
assigned the name CAN-2005-0005 to this issue.
A format string bug was found in the way ImageMagick handles filenames.
An attacker could execute arbitrary code in a victims machine if they
are able to trick the victim into opening a file with a specially
crafted name. The Common Vulnerabilities and Exposures project
(cve.mitre.org) has assigned the name CAN-2005-0397 to this issue.
---------------------------------------------------------------------
* Wed Mar 16 2005 <mclasen(a)redhat.com> - 6.2.0.7-2.fc3
- Update to 6.2.0 to fix a number of security issues:
#145112 (CAN-2005-05), #151265 (CAN-2005-0397)
- Drop a lot of upstreamed patches
* Fri Mar 11 2005 Matthias Clasen <mclasen(a)redhat.com> - 6.0.7.1-5.fc3
- Make writing tiff to stdout work.
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/testing/3/
96c355277cf7ce28ef4384a6d733ecab
SRPMS/ImageMagick-6.2.0.7-2.fc3.src.rpm
eba67c16f7c6c54feddd81e7197f41af
x86_64/ImageMagick-6.2.0.7-2.fc3.x86_64.rpm
065c95127afc38fa97e90157e6797183
x86_64/ImageMagick-devel-6.2.0.7-2.fc3.x86_64.rpm
8a476c7d7b50afa314c41e0b80a434c9
x86_64/ImageMagick-perl-6.2.0.7-2.fc3.x86_64.rpm
44e604b3be8523753821a2ae4cf1a432 x86_64/ImageMagick-c
++-6.2.0.7-2.fc3.x86_64.rpm
2b1b408f42aef092c6156395d8935ef6 x86_64/ImageMagick-c
++-devel-6.2.0.7-2.fc3.x86_64.rpm
2ead9fd925b4069dfb4d7793bfb613d9
x86_64/debug/ImageMagick-debuginfo-6.2.0.7-2.fc3.x86_64.rpm
8a9a464218ed28d7d6245c10c3b24e52
x86_64/ImageMagick-6.2.0.7-2.fc3.i386.rpm
8f30983373060a78e8f35ea972b4f0fd x86_64/ImageMagick-c
++-6.2.0.7-2.fc3.i386.rpm
8a9a464218ed28d7d6245c10c3b24e52
i386/ImageMagick-6.2.0.7-2.fc3.i386.rpm
302a65ffb25b36ff7e83edbf763976a9
i386/ImageMagick-devel-6.2.0.7-2.fc3.i386.rpm
70fddae83d164f2244c294435b50dc6a
i386/ImageMagick-perl-6.2.0.7-2.fc3.i386.rpm
8f30983373060a78e8f35ea972b4f0fd i386/ImageMagick-c
++-6.2.0.7-2.fc3.i386.rpm
cafc12bda5b8d2e773496a307ced844b i386/ImageMagick-c
++-devel-6.2.0.7-2.fc3.i386.rpm
06399797a7674e964c3645834e35c848
i386/debug/ImageMagick-debuginfo-6.2.0.7-2.fc3.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command. You may
need to edit your up2date channels configuration. Within
/etc/sysconfig/rhn/sources enable the following line:
yum updates-testing
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/testing/3...
---------------------------------------------------------------------
19 years, 2 months
Release Notes
by Sean Earp
Hello All-
I may be missing it, but I do not see any release notes for FC4 at
<http://fedora.redhat.com/docs/release-notes/>
Is there an alternate location? I would like to see what all is
updated besides KDE and GNOME, and if there are any known issues, I
would like to avoid re-reporting them. Google was no help...
Thanks,
-Sean
19 years, 2 months
Disc 3 "not correct" disc
by Patrick
After discovering that I can't install (easily) through NFS or by using the iso files on the local harddrive, I burned disc 1, 2 and 3.
But when the installer asked for disc 3, it kept saying that it isn't the correct one ("this isn't the correct disc" or something, I'm Dutch you know ;-).
When I check disc 3 (sha1sum on the iso file or the check option in the installer) it seems ok (?)...
This installation is getting a bit difficult like this . . .
Patrick (RHCT)
_______________________________________________
No banners. No pop-ups. No kidding.
Make My Way your home on the Web - http://www.myway.com
19 years, 2 months
why has xfce been removed?
by Roger Grosswiler
Hello,
since fc3, xfce was shipped with, i personally found it not bad for quick things to do in gui. Why is xfce no longer
supplied?
Roger
19 years, 2 months
Fedora Core 3 Test Update: selinux-policy-targeted-1.17.30-2.90
by Daniel J Walsh
---------------------------------------------------------------------
Fedora Test Update Notification
FEDORA-2005-238
2005-03-19
---------------------------------------------------------------------
Product : Fedora Core 3
Name : selinux-policy-targeted
Version : 1.17.30
Release : 2.90
Summary : SELinux targeted policy configuration
Description :
Security-enhanced Linux is a patch of the Linux® kernel and a number
of utilities with enhanced security functionality designed to add
mandatory access controls to Linux. The Security-enhanced Linux
kernel contains new architectural components originally developed to
improve the security of the Flask operating system. These
architectural components provide general support for the enforcement
of many kinds of mandatory access control policies, including those
based on the concepts of Type Enforcement®, Role-based Access
Control, and Multi-level Security.
This package contains the SELinux example policy configuration along
with the Flask configuration information and the application
configuration files.
---------------------------------------------------------------------
* Tue Mar 15 2005 Dan Walsh <dwalsh(a)redhat.com> 1.17.30-2.90
- Allow system_mail_t access to random_device_t
* Wed Mar 9 2005 Dan Walsh <dwalsh(a)redhat.com> 1.17.30-2.89
- Backport many changes from rawhide
- Allow httpd getattr on etc_t lnk
- Switch to use read_sysctl
- Clean up postgresql file_contexts
- Allow nscd to handle certificates
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/testing/3/
ae87aa21c91bd41ebba6570d4c5bcd76
SRPMS/selinux-policy-targeted-1.17.30-2.90.src.rpm
e54a7902acd9aa131634b805abe84cb6
x86_64/selinux-policy-targeted-1.17.30-2.90.noarch.rpm
b057725376da2f295a7da8a7319b841c
x86_64/selinux-policy-targeted-sources-1.17.30-2.90.noarch.rpm
e54a7902acd9aa131634b805abe84cb6
i386/selinux-policy-targeted-1.17.30-2.90.noarch.rpm
b057725376da2f295a7da8a7319b841c
i386/selinux-policy-targeted-sources-1.17.30-2.90.noarch.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command. You may
need to edit your up2date channels configuration. Within
/etc/sysconfig/rhn/sources enable the following line:
yum updates-testing
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/testing/3...
---------------------------------------------------------------------
--
19 years, 2 months
FC4t1 and up2date
by Gene C.
For those who would like to use up2date --
The currently is a bug in up2date (already reported at least once in bugzilla)
which does not allow selection or moving to the next step (downloading and
then install) UNLESS there is an exception package to select.
So, until up2date is fixed, you can use it by adding a packages (that needs
updating anyway) to the Package Exceptions and then select it when you run
up2date.
I wish I understood yum better and it could probably do the just just fine but
with the current conflicts in development, there is no easy way to select
packages. (OK Seth, tel me how to do it).
--
Gene
19 years, 2 months
Fedora Core 2 Test Update: ImageMagick-6.2.0.7-2.fc2
by Matthias Clasen
Fedora Test Update Notification
FEDORA-2005-234
2005-03-18
---------------------------------------------------------------------
Product : Fedora Core 2
Name : ImageMagick
Version : 6.2.0.7
Release : 2.fc2
Summary : An X application for displaying and manipulating images.
Description :
ImageMagick(TM) is an image display and manipulation tool for the X
Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF,
and Photo CD image formats. It can resize, rotate, sharpen, color
reduce, or add special effects to an image, and when finished you can
either save the completed work in the original format or a different
one. ImageMagick also includes command line programs for creating
animated or transparent .gifs, creating composite images, creating
thumbnail images, and more.
ImageMagick is one of your choices if you need a program to manipulate
and dis play images. If you want to develop your own applications
which use ImageMagick code or APIs, you need to install
ImageMagick-devel as well.
---------------------------------------------------------------------
Update Information:
Andrei Nigmatulin discovered a heap based buffer overflow flaw in the
ImageMagick image handler. An attacker could create a carefully crafted
Photoshop Document (PSD) image in such a way that it would cause
ImageMagick to execute arbitrary code when processing the image. The
Common Vulnerabilities and Exposures project (cve.mitre.org) has
assigned the name CAN-2005-0005 to this issue.
A format string bug was found in the way ImageMagick handles filenames.
An attacker could execute arbitrary code in a victims machine if they
are able to trick the victim into opening a file with a specially
crafted name. The Common Vulnerabilities and Exposures project
(cve.mitre.org) has assigned the name CAN-2005-0397 to this issue.
A bug was found in the way ImageMagick handles TIFF tags. It is possible
that a TIFF image file with an invalid tag could cause ImageMagick to
crash.
A bug was found in ImageMagick's TIFF decoder. It is possible that a
specially crafted TIFF image file could cause ImageMagick to crash.
A bug was found in the way ImageMagick parses PSD files. It is possilbe
that a specially crafted PSD file could cause ImageMagick to crash.
A heap overflow bug was found in ImageMagick's SGI parser. It is
possible
that an attacker could execute arbitrary code by tricking a user into
opening a specially crafted SGI image file.
---------------------------------------------------------------------
* Wed Mar 16 2005 <mclasen(a)redhat.com> - 6.2.0.7-2.fc2
- Update to 6.2.0 to fix a number of security issues:
#145112 (CAN-2005-05), #151265 (CAN-2005-0397),
#150313, #150319, #150325, #150329
- Drop a lot of upstreamed patches
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/testing/2/
749a11790152d59322f9ebef52849df9
SRPMS/ImageMagick-6.2.0.7-2.fc2.src.rpm
dea486c813ff353a68cc705d5d94295c
x86_64/ImageMagick-6.2.0.7-2.fc2.x86_64.rpm
1f6a82f6265a202132f2a693ef79bd14
x86_64/ImageMagick-devel-6.2.0.7-2.fc2.x86_64.rpm
49b1d3309b39a916864e6445c6b55fe3
x86_64/ImageMagick-perl-6.2.0.7-2.fc2.x86_64.rpm
0dd172f7b5ab2b024117b14b59d57fab x86_64/ImageMagick-c
++-6.2.0.7-2.fc2.x86_64.rpm
e7f3ee43f8039506f924a9c69627c0bc x86_64/ImageMagick-c
++-devel-6.2.0.7-2.fc2.x86_64.rpm
a6941001331c16dc37456489fcdf5c10
x86_64/debug/ImageMagick-debuginfo-6.2.0.7-2.fc2.x86_64.rpm
7d5f987d35141a93ac530f2fc220cb8a
i386/ImageMagick-6.2.0.7-2.fc2.i386.rpm
dd33c80086e12bdd6c902de59071690b
i386/ImageMagick-devel-6.2.0.7-2.fc2.i386.rpm
e80adc816e953f4c554f9e47a147448d
i386/ImageMagick-perl-6.2.0.7-2.fc2.i386.rpm
59de5846ce72e6a570093d223f29fff7 i386/ImageMagick-c
++-6.2.0.7-2.fc2.i386.rpm
c01492e0b9267c307a8785200486dfc1 i386/ImageMagick-c
++-devel-6.2.0.7-2.fc2.i386.rpm
4fbbaba9036d3122a08211121735c8f6
i386/debug/ImageMagick-debuginfo-6.2.0.7-2.fc2.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command. You may
need to edit your up2date channels configuration. Within
/etc/sysconfig/rhn/sources enable the following line:
yum updates-testing
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/testing/2...
---------------------------------------------------------------------
19 years, 2 months
Re: FC4t1 and up2date
by J Z
I've also had success with up2date in the commandline.
Just use terminal and put in:
up2date --nox -u
You can also add --nosig if you don't want it to check for GPG keys.
Most packages I saw were not signed.
Hope it helps!
-- JZ
----- Original Message -----
From: "Gene C." <czar(a)czarc.net>
To: "For testers of Fedora Core development releases" <fedora-test-list(a)redhat.com>
Subject: FC4t1 and up2date
Date: Fri, 18 Mar 2005 18:04:48 -0500
>
> For those who would like to use up2date --
>
> The currently is a bug in up2date (already reported at least once in bugzilla)
> which does not allow selection or moving to the next step (downloading and
> then install) UNLESS there is an exception package to select.
>
> So, until up2date is fixed, you can use it by adding a packages (that needs
> updating anyway) to the Package Exceptions and then select it when you run
> up2date.
>
> I wish I understood yum better and it could probably do the just just fine but
> with the current conflicts in development, there is no easy way to select
> packages. (OK Seth, tel me how to do it).
> --
> Gene
>
> --
> fedora-test-list mailing list
> fedora-test-list(a)redhat.com
> To unsubscribe:
> http://www.redhat.com/mailman/listinfo/fedora-test-list
--
______________________________________________
Check out the latest SMS services @ http://www.linuxmail.org
This allows you to send and receive SMS through your mailbox.
Powered by Outblaze
19 years, 2 months
FC4T1, Evolution 2.2.0-5
by Keith Sharp
Hello,
Is anyone else unable to cut/copy/paste in the To: and Cc: entry boxes
in Evolution?
If I select an email address in a gnome-terminal or Epiphany and copy to
the clipboard (Ctrl-Shift-C or Ctrl-C) and then try to paste into the
To: entry using either Ctrl-V, the Edit menu option, or middle mouse,
nothing happens!
Keith.
19 years, 2 months
grub and old kernel still left behind - multiboot
by Jim Cornette
After upgrading to FC4T1 on a system with multi-installations, I was
left with the previous kernel and also grub did not seem to change
anything related to the grub loader.
Grub was originally using /dev/hdb1 for this prior installation and was
left intact when I upgraded via the FC4T1 disks.
Anyway, I am curious as to whether grub works at all from the
installation CDs. I tried to install a clean system and afterward could
not access this clean install on another computer. Resorting to the
rescue CD, the actins seemed to complete, but nothing seemed to take.
Jim
19 years, 2 months