announce December 2003

announce@lists.fedoraproject.org

9 participants
19 discussions

Fedora Core 1 Update: bash-2.05b-34
by Tim Waugh 23 Dec '03

23 Dec '03

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2003-033 2003-12-23 --------------------------------------------------------------------- Name : bash Version : 2.05b Release : 34 Summary : The GNU Bourne Again shell (bash) version 2.05b. Description : The GNU Bourne Again shell (Bash) is a shell or command language interpreter that is compatible with the Bourne shell (sh). Bash incorporates useful features from the Korn shell (ksh) and the C shell (csh). Most sh scripts can be run by bash without modification. This package (bash) contains bash version 2.05b, which improves POSIX compliance over previous versions. However, many old shell scripts will depend upon the behavior of bash 1.14, which is included in the bash1 package. Bash is the default shell for Red Hat Linux. It is popular and powerful, and you'll probably end up using it. --------------------------------------------------------------------- Update Information: When interactively editing a command line with UTF-8 encoding, the GNU bash shell can be very inefficient (bug #102353, bug #110777). A method for speeding up UTF-8 processing in bash has been incorporated in this updated package. Other bugs fixed in this package include bug #83776 (bash.info problem), bug #109269 (apply official patches) and bug #111171 (build requirements). --------------------------------------------------------------------- * Tue Dec 09 2003 Tim Waugh <twaugh(a)redhat.com> 2.05b-34 - Build requires texinfo (bug #111171). * Fri Nov 28 2003 Tim Waugh <twaugh(a)redhat.com> 2.05b-33 - Speed up UTF-8 command-line redrawing in the common case (bug #102353, bug #110777). * Thu Nov 06 2003 Tim Waugh <twaugh(a)redhat.com> 2.05b-32 - Apply upstream patches (bug #109269 among others). * Fri Oct 31 2003 Tim Waugh <twaugh(a)redhat.com> - Fix bash.info (bug #83776). --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/ bae66d30ed5dc617aebf8b789cd43310 SRPMS/bash-2.05b-34.src.rpm 157ae32e56458f8598312aa93443c4e1 i386/bash-2.05b-34.i386.rpm 71365bb5518026bc1506ced00c5bcdf8 i386/debug/bash-debuginfo-2.05b-34.i386.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. ---------------------------------------------------------------------

1 0

Fedora Core 1 Update: gphoto2-2.1.3-1
by Tim Waugh 23 Dec '03

23 Dec '03

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2003-028 2003-12-23 --------------------------------------------------------------------- Name : gphoto2 Version : 2.1.3 Release : 1 Summary : Software for accessing digital cameras Description : The gPhoto2 project is a universal, free application and library framework that lets you download images from several different digital camera models, including the newer models with USB connections. Note that a) for some older camera models you must use the old "gphoto" package. b) for USB mass storage models you must use the driver in the kernel This package contains i) the library that digital camera applications can use ii) the command-line utility gphoto2 Other (GUI) frontends are available separately. --------------------------------------------------------------------- Update Information: New packages are available for gPhoto2, in order to fix bug #111415. --------------------------------------------------------------------- * Wed Dec 03 2003 Tim Waugh <twaugh(a)redhat.com> 2.1.3-1 - 2.1.3. --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/ bf6c539ba20a5b9c9fca56b9c2009129 SRPMS/gphoto2-2.1.3-1.src.rpm 5a60997b59a10caa20310e71bf395368 i386/gphoto2-2.1.3-1.i386.rpm 4b599b9e3e6a972b1db1bcd7fc8c2020 i386/gphoto2-devel-2.1.3-1.i386.rpm 1c23c35c0d9cb16a51e92110bb3f9d37 i386/debug/gphoto2-debuginfo-2.1.3-1.i386.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. ---------------------------------------------------------------------

1 0

Fedora Core 1 Update: binutils-2.14.90.0.6-4
by Jakub Jelinek 19 Dec '03

19 Dec '03

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2003-021 2003-12-19 --------------------------------------------------------------------- Name : binutils Version : 2.14.90.0.6 Release : 4 Summary : A GNU collection of binary utilities. Description : Binutils is a collection of binary utilities, including ar (for creating, modifying and extracting from archives), as (a family of GNU assemblers), gprof (for displaying call graph profile data), ld (the GNU linker), nm (for listing symbols from object files), objcopy (for copying and translating object files), objdump (for displaying information from object files), ranlib (for generating an index for the contents of an archive), size (for listing the section sizes of an object or archive file), strings (for listing printable strings from files), strip (for discarding symbols), and addr2line (for converting addresses to file and line). --------------------------------------------------------------------- Update Information: An assembler parsing bug has been discovered in binutils released in Fedora Core 1. The bug affects at least Linux kernel versions 2.5.63 and later, where nr_syscalls=(.-sys_call_table)/4 line set nr_syscalls incorrectly to (.-sys_call_table) when assembled by binutils 2.14.90.0.1 and later. --------------------------------------------------------------------- * Mon Nov 24 2003 Jakub Jelinek <jakub(a)redhat.com> 2.14.90.0.6-4 - fix assembly parsing of foo=(.-bar)/4 (Alan Modra) - fix IA-64 assembly parsing of (p7) hint @pause --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/ 405b1229a3c3963277c47a3c6f48d612 SRPMS/binutils-2.14.90.0.6-4.src.rpm 47829701efcf6e5f8748d90606af0a3f i386/binutils-2.14.90.0.6-4.i386.rpm b70c7202dd525c3585235732b4f05999 i386/debug/binutils-debuginfo-2.14.90.0.6-4.i386.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. ---------------------------------------------------------------------

1 0

Fedora Core 1 Update: sed-4.0.8-2
by Jakub Jelinek 19 Dec '03

19 Dec '03

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2003-015 2003-12-19 --------------------------------------------------------------------- Name : sed Version : 4.0.8 Release : 2 Summary : A GNU stream text editor. Description : The sed (Stream EDitor) editor is a stream or batch (non-interactive) editor. Sed takes text as input, performs an operation or set of operations on the text and outputs the modified text. The operations that sed performs (substitutions, deletions, insertions, etc.) can be specified in a script file or from the command line. --------------------------------------------------------------------- Update Information: Sed in Fedora Core 1 (and earlier distributions) was not using fastmap for regular expressions. Fastmap can speed up regular expression searching a lot, in some cases as much as 10 times. --------------------------------------------------------------------- * Fri Nov 14 2003 Jakub Jelinek <jakub(a)redhat.com> 4.0.8-2 - enable --without-included-regex again - use fastmap for regex searching --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/ 1adc5cfdc2c2649185014d447f328289 SRPMS/sed-4.0.8-2.src.rpm 6f26b193075e6673094a8b3d2f666c48 i386/sed-4.0.8-2.i386.rpm cf58ea014488472fa32b60b4dbb70108 i386/debug/sed-debuginfo-4.0.8-2.i386.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. ---------------------------------------------------------------------

1 0

Fedora Core 1 Update: dia-0.92.2-1
by Alexander Larsson 19 Dec '03

19 Dec '03

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2003-039 2003-12-19 --------------------------------------------------------------------- Name : dia Version : 0.92.2 Release : 1 Summary : A diagram drawing program. Description : The Dia drawing program is designed to be like the Windows(TM) Visio program. Dia can be used to draw different types of diagrams, and includes support for UML static structure diagrams (class diagrams), entity relationship modeling, and network diagrams. Dia can load and save diagrams to a custom file format, can load and save in .xml format, and can export to PostScript(TM). --------------------------------------------------------------------- Update Information: Update to version 0.92.2. Lots of new features in this version, including support for auto-routing of zig-zag lines. For details, check out the news at: http://www.lysator.liu.se/~alla/dia/ --------------------------------------------------------------------- * Tue Dec 09 2003 Alexander Larsson <alexl(a)redhat.com> 1:0.92.2-1 - update to 0.92.2 --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/ 312e024582216b50563337ec397d03b8 SRPMS/dia-0.92.2-1.src.rpm 8b369422cffaf9c9e04bf91159522fdd i386/dia-0.92.2-1.i386.rpm c9321280df9ecafde7fba9a3402ffcda i386/debug/dia-debuginfo-0.92.2-1.i386.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command.

1 0

Fedora Core 1 Update: gnucash-1.8.8-1
by Bill Nottingham 18 Dec '03

18 Dec '03

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2003-029 2003-12-18 --------------------------------------------------------------------- Name : gnucash Version : 1.8.8 Release : 1 Summary : GnuCash is an application to keep track of your finances. Description : GnuCash is a personal finance manager. A check-book like register GUI allows you to enter and track bank accounts, stocks, income and even currency trades. The interface is designed to be simple and easy to use, but is backed with double-entry accounting principles to ensure balanced books. --------------------------------------------------------------------- Update Information: This is an update to the latest stable version of gnucash. From the upstream release notes: The GnuCash team is pleased to announce the release of stable version 1.8.8. What's New in GnuCash 1.8.8? o HBCI - Improve error message when receiving zero balance from bank. o Add account template for Swiss German businesses "KMU" by Tom Winterhalder o Add *big* account template for German businesses "SKR04" by Betina Schmidt o Add Catalan and Turkish translation, Updated German, Italian, Czech, Greek and Dutch translations. o Add Turkish account template. Updated Greek account templates. o Remove debian scripts o Add a comment about minimum string length o Fix the ISO_DATELEN to be "long enough" o Fix handling of HBCI direct debits (fix wrong textkey). Fix and initially implement handling of multiple banks/users/customers. o Fixed extremly stupid, old bug that causes weird HBCI errors. Improved user messages. o Refactor some GUI code. Improve user messages. o BillTermDecRef should have been BillTermIncRef when setting new bill term. o Applied Frank Pavageau's patch regarding capital gains to handle split transactions. o Don't make a timespec with tv_sec == 0. Fixes some tests on the alpha platform. --------------------------------------------------------------------- * Tue Dec 02 2003 Bill Nottingham <notting(a)redhat.com> 1.8.8-1 - update to 1.8.8 --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/ 2e45adeba661f5675010c498fe82b9fe SRPMS/gnucash-1.8.8-1.src.rpm d1f51a5775d3b5704db25630d4e99506 i386/gnucash-1.8.8-1.i386.rpm 8d23cec98b7fa382c383421ade9daf8b i386/gnucash-backend-postgres-1.8.8-1.i386.rpm 06b35a769768d68f2b8eb36b82a50053 i386/debug/gnucash-debuginfo-1.8.8-1.i386.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. ---------------------------------------------------------------------

1 0

[SECURITY] Fedora Core 1 Update: ethereal-0.10.0a-0.1
by Phil Knirsch 18 Dec '03

18 Dec '03

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2003-040 2003-12-18 --------------------------------------------------------------------- Name : ethereal Version : 0.10.0a Release : 0.1 Summary : Network traffic analyzer Description : Ethereal is a network traffic analyzer for Unix-ish operating systems. This package lays base for libpcap, a packet capture and filtering library, contains command-line utilities, contains plugins and documentation for ethereal. A graphical user interface is packaged separately to GTK+ package. --------------------------------------------------------------------- Update Information: Serious issues have been discovered in the following protocol dissectors: * Selecting "Match->Selected" or "Prepare->Selected" for a malformed SMB packet could cause a segmentation fault. * It is possible for the Q.931 dissector to dereference a null pointer when reading a malformed packet. Impact: Both vulnerabilities will make the Ethereal application crash. The Q.931 vulnerability also affects Tethereal. It is not known if either vulnerability can be used to make Ethereal or Tethereal run arbitrary code. Resolution: Upgrade to 0.10.0. If you are running a version prior to 0.10.0 and you cannot upgrade, you can disable the SMB and Q.931 protocol dissectors by selecting Edit->Protocols... and deselecting them from the list. --------------------------------------------------------------------- * Wed Dec 17 2003 Phil Knirsch <pknirsch(a)redhat.com> 0.10.0a-0.1 - Update to latest upstream version 0.10.0a - Fixed plugins problem. --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/ 5ac28be19cc9b3113b6c339aed1c5f33 SRPMS/ethereal-0.10.0a-0.1.src.rpm 5e295a50ac358b0edd4828d39da04a9e i386/ethereal-0.10.0a-0.1.i386.rpm 8b0add410bf1e84f44f1e93c91a29596 i386/ethereal-gnome-0.10.0a-0.1.i386.rpm 0cf3428ab5d3ec2fdf8b415d79b5d9db i386/debug/ethereal-debuginfo-0.10.0a-0.1.i386.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. --------------------------------------------------------------------- -- Philipp Knirsch | Tel.: +49-711-96437-470 Development | Fax.: +49-711-96437-111 Red Hat GmbH | Email: Phil Knirsch <phil(a)redhat.de> Hauptstaetterstr. 58 | Web: http://www.redhat.de/ D-70178 Stuttgart Motd: You're only jealous cos the little penguins are talking to me.

1 0

[SECURITY] Fedora Core 1 Update: lftp
by Nalin Dahyabhai 15 Dec '03

15 Dec '03

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2003-034 2003-12-15 --------------------------------------------------------------------- Name : lftp Version : 2.6.10 Release : 1 Summary : A sophisticated file transfer program Description : LFTP is a sophisticated ftp/http file transfer program. Like bash, it has job control and uses the readline library for input. It has bookmarks, built-in mirroring, and can transfer several files in parallel. It is designed with reliability in mind. --------------------------------------------------------------------- Update Information: Ulf Härnhammar found a remotely-triggerable buffer overflow in lftp. An attacker could create a carefully crafted directory on a website such that, if a user connects to that directory using the lftp client and subsequently issues a 'ls' or 'rels' command, the attacker could execute arbitrary code on the users machine. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2003-0963 to this issue. Users of lftp are advised to upgrade to these erratum packages, which upgrade lftp to a version which is not vulnerable to this issue. Red Hat would like to thank Ulf Härnhammar for discovering and alerting us to this issue. This update notification is being re-issued to correct the advisory ID and issue date. The update packages themselves are unchanged. --------------------------------------------------------------------- * Fri Dec 12 2003 Nalin Dahyabhai <nalin(a)redhat.com> 2.6.10-1 - update to 2.6.10, which folds in the previous patches - configure with --with-debug so that we get useful debug info * Tue Dec 09 2003 Nalin Dahyabhai <nalin(a)redhat.com> 2.6.9-1 - include patch based on patch from Ulf Härnhammar to fix unsafe use of sscanf when reading http directory listings (CAN-2003-0963) - include patch based on patch from Ulf Härnhammar to fix compile warnings modified based on input from Solar Designer * Mon Dec 08 2003 Nalin Dahyabhai <nalin(a)redhat.com> - update to 2.6.9 --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/ b36e31c19e088ee086afc9c42dacd471 SRPMS/lftp-2.6.10-1.src.rpm 1a6ab3a0b3df685cc1354bf4740a7201 i386/lftp-2.6.10-1.i386.rpm 7c70562d0c91db1b15d21d0f56f32ea0 i386/debug/lftp-debuginfo-2.6.10-1.i386.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. ---------------------------------------------------------------------

1 0

[SECURITY] Fedora Core 1 Update: lftp
by Nalin Dahyabhai 15 Dec '03

15 Dec '03

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2003-025 2003-12-12 --------------------------------------------------------------------- Name : lftp Version : 2.6.10 Release : 1 Summary : A sophisticated file transfer program Description : LFTP is a sophisticated ftp/http file transfer program. Like bash, it has job control and uses the readline library for input. It has bookmarks, built-in mirroring, and can transfer several files in parallel. It is designed with reliability in mind. --------------------------------------------------------------------- Update Information: Ulf Härnhammar found a remotely-triggerable buffer overflow in lftp. An attacker could create a carefully crafted directory on a website such that, if a user connects to that directory using the lftp client and subsequently issues a 'ls' or 'rels' command, the attacker could execute arbitrary code on the users machine. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2003-0963 to this issue. Users of lftp are advised to upgrade to these erratum packages, which upgrade lftp to a version which is not vulnerable to this issue. Red Hat would like to thank Ulf Härnhammar for discovering and alerting us to this issue. --------------------------------------------------------------------- * Fri Dec 12 2003 Nalin Dahyabhai <nalin(a)redhat.com> 2.6.10-1 - update to 2.6.10, which folds in the previous patches - configure with --with-debug so that we get useful debug info * Tue Dec 09 2003 Nalin Dahyabhai <nalin(a)redhat.com> 2.6.9-1 - include patch based on patch from Ulf Härnhammar to fix unsafe use of sscanf when reading http directory listings (CAN-2003-0963) - include patch based on patch from Ulf Härnhammar to fix compile warnings modified based on input from Solar Designer * Mon Dec 08 2003 Nalin Dahyabhai <nalin(a)redhat.com> - update to 2.6.9 --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/ b36e31c19e088ee086afc9c42dacd471 SRPMS/lftp-2.6.10-1.src.rpm 1a6ab3a0b3df685cc1354bf4740a7201 i386/lftp-2.6.10-1.i386.rpm 7c70562d0c91db1b15d21d0f56f32ea0 i386/debug/lftp-debuginfo-2.6.10-1.i386.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. ---------------------------------------------------------------------

1 0

Fedora Core 1 Update: redhat-config-printer-0.6.79.2-1
by Tim Waugh 12 Dec '03

12 Dec '03

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2003-011 2003-12-12 --------------------------------------------------------------------- Name : redhat-config-printer Version : 0.6.79.2 Release : 1 Summary : A printer configuration backend/frontend combination. Description : The printconf utility is a printer configuration and filtration system based on magicfilter (the alchemist data library) and the foomatic filter system. It rebuilds local print configuration and spool directories from data sources at lpd init time, and is integrated to use the multi-sourced features of the alchemist data library. --------------------------------------------------------------------- Update Information: Packages fixing a bug concerning printer sharing in the Printing configuration tool are now available. --------------------------------------------------------------------- * Wed Nov 19 2003 Tim Waugh <twaugh(a)redhat.com> 0.6.79.2-1 - 0.6.79.2: - Another attempt to fix bug #109942. * Thu Nov 13 2003 Tim Waugh <twaugh(a)redhat.com> 0.6.79.1-1 - 0.6.79.1: - More sharing fixes (bug #109942). --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/ 8e948ec34bf3ebed240ae21636f0f8d3 SRPMS/redhat-config-printer-0.6.79.2-1.src.rpm 2371cb63c6e2f616e1382ab5e670cee9 i386/redhat-config-printer-0.6.79.2-1.i386.rpm fd0c120a21f3d1f13b640ff0f9162b71 i386/redhat-config-printer-gui-0.6.79.2-1.i386.rpm cf9c57f98d25d1c2f627d8adb0caa29e i386/debug/redhat-config-printer-debuginfo-0.6.79.2-1.i386.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. ---------------------------------------------------------------------

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

announce December 2003