announce November 2004

announce@lists.stg.fedoraproject.org

26 participants
85 discussions

[SECURITY] Fedora Core 3 Update: gd-2.0.28-1.30.1
by Phil Knirsch 11 Nov '04

11 Nov '04

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2004-412 2004-11-11 --------------------------------------------------------------------- Product : Fedora Core 3 Name : gd Version : 2.0.28 Release : 1.30.1 Summary : A graphics library for quick creation of PNG or JPEG images. Description : The gd graphics library allows your code to quickly draw images complete with lines, arcs, text, multiple colors, cut and paste from other images, and flood fills, and to write out the result as a PNG or JPEG file. This is particularly useful in Web applications, where PNG and JPEG are two of the formats accepted for inline images by most browsers. Note that gd is not a paint program. --------------------------------------------------------------------- Update Information: Several buffer overflows were reported in various memory allocation calls. An attacker could create a carefully crafted image file in such a way that it could cause ImageMagick to execute arbitrary code when processing the image. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2004-0990 to these issues. Whilst researching the fixes to these overflows, additional buffer overflows were discovered in calls to gdMalloc. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2004-0941 to these issues. Users of gd should upgrade to these updated packages, which contain a backported security patch, and are not vulnerable to these issues. --------------------------------------------------------------------- * Wed Nov 03 2004 Phil Knirsch <pknirsch(a)redhat.com> 2.0.28-1.30.1 - Fixed several buffer overflows for gdMalloc() calls --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/ 1c43a52dbccf6fc0f41a51177f68039c SRPMS/gd-2.0.28-1.30.1.src.rpm 2d5162b7b1ee9cc41f6e449317a35544 x86_64/gd-2.0.28-1.30.1.x86_64.rpm fdf01ac8589f415447db35126fa9c21d x86_64/gd-progs-2.0.28-1.30.1.x86_64.rpm bebd31faf06696a1a4118e72fccfdef0 x86_64/gd-devel-2.0.28-1.30.1.x86_64.rpm 2f9e1862d862b7137f303fa63511ba3f x86_64/debug/gd-debuginfo-2.0.28-1.30.1.x86_64.rpm 43fdf0c898b78cb6524ce7238b134ab0 x86_64/gd-2.0.28-1.30.1.i386.rpm 43fdf0c898b78cb6524ce7238b134ab0 i386/gd-2.0.28-1.30.1.i386.rpm 1775b1c9061551b38bed8a0345e13daa i386/gd-progs-2.0.28-1.30.1.i386.rpm 9e73a389b07da7ceb7f4571852344a0c i386/gd-devel-2.0.28-1.30.1.i386.rpm 70e4cb5dad28af83ee4237569c8a244c i386/debug/gd-debuginfo-2.0.28-1.30.1.i386.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. --------------------------------------------------------------------- -- Philipp Knirsch | Tel.: +49-711-96437-470 Development | Fax.: +49-711-96437-111 Red Hat GmbH | Email: Phil Knirsch <phil(a)redhat.de> Hauptstaetterstr. 58 | Web: http://www.redhat.de/ D-70178 Stuttgart Motd: You're only jealous cos the little penguins are talking to me.

1 0

[SECURITY] Fedora Core 2 Update: gd-2.0.21-5.20.1
by Phil Knirsch 11 Nov '04

11 Nov '04

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2004-411 2004-11-11 --------------------------------------------------------------------- Product : Fedora Core 2 Name : gd Version : 2.0.21 Release : 5.20.1 Summary : A graphics library for quick creation of PNG or JPEG images. Description : The gd graphics library allows your code to quickly draw images complete with lines, arcs, text, multiple colors, cut and paste from other images, and flood fills, and to write out the result as a PNG or JPEG file. This is particularly useful in Web applications, where PNG and JPEG are two of the formats accepted for inline images by most browsers. Note that gd is not a paint program. --------------------------------------------------------------------- Update Information: Several buffer overflows were reported in various memory allocation calls. An attacker could create a carefully crafted image file in such a way that it could cause ImageMagick to execute arbitrary code when processing the image. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2004-0990 to these issues. Whilst researching the fixes to these overflows, additional buffer overflows were discovered in calls to gdMalloc. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2004-0941 to these issues. Users of gd should upgrade to these updated packages, which contain a backported security patch, and are not vulnerable to these issues. --------------------------------------------------------------------- * Thu Nov 04 2004 Phil Knirsch <pknirsch(a)redhat.com> 2.0.21-5.20.1 - Backport of fix for several buffer overflows in gdMalloc() calls --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/ 860ef179fc02b24faeb9c7ad6d3dd2c5 SRPMS/gd-2.0.21-5.20.1.src.rpm cc924e3a5eb622f8729a8940472bc19f x86_64/gd-2.0.21-5.20.1.x86_64.rpm cbfe3743fb6ed1d11e562af6617dd6cf x86_64/gd-progs-2.0.21-5.20.1.x86_64.rpm 899927fad1d49a55bedd96f12d308a81 x86_64/gd-devel-2.0.21-5.20.1.x86_64.rpm 4f034123d7a07054a2284fd1aef02e2e x86_64/debug/gd-debuginfo-2.0.21-5.20.1.x86_64.rpm 32203e8cff61a2a6799426b695f35650 i386/gd-2.0.21-5.20.1.i386.rpm 2812f648f8f6570b51b326fb400e985f i386/gd-progs-2.0.21-5.20.1.i386.rpm 7e48d961b951212bc44372b489da9917 i386/gd-devel-2.0.21-5.20.1.i386.rpm 6dd526e9a1a3cbf79b36671335328224 i386/debug/gd-debuginfo-2.0.21-5.20.1.i386.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. --------------------------------------------------------------------- -- Philipp Knirsch | Tel.: +49-711-96437-470 Development | Fax.: +49-711-96437-111 Red Hat GmbH | Email: Phil Knirsch <phil(a)redhat.de> Hauptstaetterstr. 58 | Web: http://www.redhat.de/ D-70178 Stuttgart Motd: You're only jealous cos the little penguins are talking to me.

1 0

Fedora Core 3 Update: libxml2-2.6.16-3
by Daniel Veillard 11 Nov '04

11 Nov '04

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2004-407 2004-11-11 --------------------------------------------------------------------- Product : Fedora Core 3 Name : libxml2 Version : 2.6.16 Release : 3 Summary : Library providing XML and HTML support Description : This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX stream or and in-memory DOM like representations. In this case one can use the built-in XPath and XPointer implementation to select subnodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP modules and combined to an URI library. --------------------------------------------------------------------- Update Information: This update to libxml2 fixes a variety of bugs found in 2.6.15, notably #137968. --------------------------------------------------------------------- * Wed Nov 10 2004 Daniel Veillard <veillard(a)redhat.com> - upstream release 2.6.16 see http://xmlsoft.org/news.html - this update fixes bug #137968 and a number of other random bugs. --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/ cd5ed9be86fa2ec9ea9549002693d41b SRPMS/libxml2-2.6.16-3.src.rpm 68b087380721f3970111ad4b93f6197d x86_64/libxml2-2.6.16-3.x86_64.rpm 3763b0b39ca7e26d619c431b5e460849 x86_64/libxml2-devel-2.6.16-3.x86_64.rpm 69a9e409b5df385df9dad73c876c5be2 x86_64/libxml2-python-2.6.16-3.x86_64.rpm 72c96cb43e4c1333faeec125d50c8191 x86_64/debug/libxml2-debuginfo-2.6.16-3.x86_64.rpm 4a152d0b3e672cd02d962ec673d3eb7b x86_64/libxml2-2.6.16-3.i386.rpm 4a152d0b3e672cd02d962ec673d3eb7b i386/libxml2-2.6.16-3.i386.rpm 0699ba7037061e80f91b859298f075be i386/libxml2-devel-2.6.16-3.i386.rpm b3aeaf0617be68c5b7238c18732e77b6 i386/libxml2-python-2.6.16-3.i386.rpm 11856f7ded5c13a53650236fe2d23218 i386/debug/libxml2-debuginfo-2.6.16-3.i386.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. --------------------------------------------------------------------- Daniel -- Daniel Veillard | Red Hat Desktop team http://redhat.com/ veillard(a)redhat.com | libxml GNOME XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | Rpmfind RPM search engine http://rpmfind.net/

1 0

Fedora Core 2 Update: libxml2-2.6.16-2
by Daniel Veillard 11 Nov '04

11 Nov '04

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2004-407 2004-11-11 --------------------------------------------------------------------- Product : Fedora Core 2 Name : libxml2 Version : 2.6.16 Release : 2 Summary : Library providing XML and HTML support Description : This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX stream or and in-memory DOM like representations. In this case one can use the built-in XPath and XPointer implementation to select subnodes or ranges. A flexible Input/Output mechanism is available, with existing HTTP and FTP modules and combined to an URI library. --------------------------------------------------------------------- Update Information: This update to libxml2 fixes a variety of bugs found in 2.6.15, notably #137968. --------------------------------------------------------------------- * Wed Nov 10 2004 Daniel Veillard <veillard(a)redhat.com> - upstream release 2.6.16 see http://xmlsoft.org/news.html - this update fixes bug #137968 and a number of other random bugs. --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/ 9088719945a979288b21c31878ff9287 SRPMS/libxml2-2.6.16-2.src.rpm 8cd9715b1f812c6692bf5b0d59c49fd4 x86_64/libxml2-2.6.16-2.x86_64.rpm 27e65979044ded5b4c305876ec76c418 x86_64/libxml2-devel-2.6.16-2.x86_64.rpm 5b285955a91c0b727798eef5fa9d05ef x86_64/libxml2-python-2.6.16-2.x86_64.rpm 87e047faf96a6704bf2193b1ed239b3f x86_64/debug/libxml2-debuginfo-2.6.16-2.x86_64.rpm 24a210aeaea0a81a2cfebb66d32b774e i386/libxml2-2.6.16-2.i386.rpm 9eb7d7f40f951b59a55b7d9c90d8ca9e i386/libxml2-devel-2.6.16-2.i386.rpm b910e7ec98f7526c7bcf92c421f3cdf5 i386/libxml2-python-2.6.16-2.i386.rpm 9410fb67c3f5bb35d7e53ef49fc50d58 i386/debug/libxml2-debuginfo-2.6.16-2.i386.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. --------------------------------------------------------------------- Daniel -- Daniel Veillard | Red Hat Desktop team http://redhat.com/ veillard(a)redhat.com | libxml GNOME XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | Rpmfind RPM search engine http://rpmfind.net/

1 0

Fedora Core 3 Update: system-config-users-1.2.27-0.fc3.1
by Nils Philippsen 11 Nov '04

11 Nov '04

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2004-405 2004-11-11 --------------------------------------------------------------------- Product : Fedora Core 3 Name : system-config-users Version : 1.2.27 Release : 0.fc3.1 Summary : A graphical interface for administering users and groups Description : system-config-users is a graphical utility for administrating users and groups. It depends on the libuser library. --------------------------------------------------------------------- * Mon Nov 08 2004 Nils Philippsen <nphilipp(a)redhat.com> - 1.2.27-0.fc3.1 - some sanity testing to avoid deleting system directories when deleting a user (#138093) - eventually delete mail spool (#102637) and temporary files (#126756) * Fri Nov 05 2004 Nils Philippsen <nphilipp(a)redhat.com> - set password and confirm password entries (in)sensitive based on whether account is locked or not (#131180) * Tue Nov 02 2004 Nils Philippsen <nphilipp(a)redhat.com> - 1.2.26-1 - use libuser defaults for password aging (#130379, original patch by Dave Lehman) --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/ 04c7288c0054124dfef1f7f74e2f6bd3 SRPMS/system-config-users-1.2.27-0.fc3.1.src.rpm 6e98e27eae42ea41fdec203b6dc79560 x86_64/system-config-users-1.2.27-0.fc3.1.noarch.rpm 6e98e27eae42ea41fdec203b6dc79560 i386/system-config-users-1.2.27-0.fc3.1.noarch.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. --------------------------------------------------------------------- -- Nils Philippsen / Red Hat / nphilipp(a)redhat.com "They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety." -- B. Franklin, 1759 PGP fingerprint: C4A8 9474 5C4C ADE3 2B8F 656D 47D8 9B65 6951 3011

1 0

Fedora Core 2 Update: glibc-2.3.3-27.1
by Jakub Jelinek 11 Nov '04

11 Nov '04

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2004-356 2004-11-11 --------------------------------------------------------------------- Product : Fedora Core 2 Name : glibc Version : 2.3.3 Release : 27.1 Summary : The GNU libc libraries. Description : The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important sets of shared libraries: the standard C library and the standard math library. Without these two libraries, a Linux system will not function. --------------------------------------------------------------------- * Thu Oct 28 2004 Jakub Jelinek <jakub(a)redhat.com> 2.3.3-27.1 - ignore also ENODEV and ETIMEDOUT error values when searching paths in execvp/execlp (#136726) - use non-blocking sockets when querying DNS (#135234) - fix temp file vulnerability in catchsegv (CAN-2004-0968, #136318) - make catchsegv working even on bi-arch platforms for both 32-bit and 64-bit binaries - use backtrace () in libSegFault.so, so that catchsegv works even on ia64 and x86-64, add register dumping on ia64 (#130254) - fix reinitialization of _res when using NPTL thread stack cache (BZ #434) - update bug-reporting instructions - fix infinite loop in iconv(1) with some options (BZ #194) - fix inet_aton return value (BZ #276) - mask restart signal in linuxthreads during cancel handling (#132654) - avoid using unitialized memory in localedef - fix mtrace script to only call location when really needed - fix some -D_POSIX_C_SOURCE=200112L header namespace issues - fix V4MAPPED lookups in /etc/hosts (#123583) - always try both TCP and UDP reporting for syslog (#132816, BZ #108) - fix ypclnt.c locking (#132204) - avoid fragmentation of address space by malloc on flexmap layouts (#118574) - fix x86_64 <pthread.h> for -m32 -I/usr/include/nptl compilation - make NPTL <pthread.h> usable in -pedantic -std=c89 mode, as well as in C++ programs (BZ #375) - make rwlocks available with -D_POSIX_C_SOURCE=200112L (BZ #320) - remove __THROW from pthread_once, as the callback might throw - return EAGAIN instead of ENOMEM if pthread_create fails due to lack of memory - fix NPTL stack freeing in case of pthread_create failure with detached thread (BZ #405) - fix i?86 and x86_64 pthread_mutex_timedlock - save gp around linuxthreads ia64 CENABLE/CDISABLE calls - fix s390{,x} unwinding when frames are smaller than 96 (resp. 160) bytes - fix _POSIX_CHILD_MAX and _POSIX_OPEN_MAX values XPG6, add _POSIX_HOST_NAME_MAX, _POSIX_SYMLINK_MAX, _POSIX_SYMLOOP_MAX and _POSIX_RE_DUP_MAX defines - fix fnmatch backslash handling (BZ #361) - fix out of memory behaviour of syslog (BZ #365) - randomize resolver requests IDs all the time - fix daemon behaviour if /dev/null is not the correct device or it failed to open it - fix *sprintf buffer reallocation condition (BZ #346) - handle _nl_intern_locale_data (BZ #356) - fix fdim{,f,l} (+inf, +inf) (BZ #376) - fix glob on dangling symlinks - stop using __builtin_expect in assert.h (#127606) - fix cy_GB d_t_fmt (#103415) - make SHMLBA from <sys/shm.h> usable even in C++ (#132313) - fix <pthread.h> with -std=c{8,9}9 -D_XOPEN_SOURCE=600, but without -D_POSIX_C_SOURCE=200112L (BZ #284) - fix IPv6 AI_V4MAPPED filtering - fix i386 and x86-64 pow{,f,l} (BZ #258) - fix IBM932 and IBM943 iconv modules (#128674) - fix ifreq memory handling - fix loadavg if read returns 0 (BZ #263) - fix mbsrtowcs if src is not zero terminated - fix memusage with lots of allocations (BZ #285) - fix newlocale locking - fix NPTL pthread_rwlock_{timed}rdlock on architectures other than ia32 and x86-64 (#129455) - fix nscd_getgr_r - fix nscd -i hosts to cause reinitialization of resolver in all threads, not just one (#125712) - fix res_init () memory leaks - initialize all needed fields before call to __printf_fp in strfmon{,_l} and printf_size - fix strtod (BZ #274) - fix fread_unlocked and fwrite_unlocked (BZ #309, #316) - don't hold rtld lock while running _dl_fini destructors (#126111) - fix linuxthreads clock_[gs]ettime (#127328) - fix a bug in DSO holes handling introduced by execstack changes - only canonicalize first name in getaddrinfo with AI_CANONNAME - fix an uninitialized field in __parse_one_specmb - reread resolv.conf in nscd when running nscd --invalidate hosts (#125712) - fix <fcntl.h> F_{GETLK,SETLK,SETLKW} definitions on x86_64 for -m32 -D_FILE_OFFSET_BITS=64 - avoid referencing freed memory in sunrpc pmaplist destruction (BZ #218) - fix sqrt special case handling on s390/s390x - fix pthread_rwlock_timed*lock and pthread_cond_timedwait handling of invalid tv_nsec - remove /usr/include/nptl/bits/stdio-lock.h from nptl-devel (BZ #245) - speed up sprintf if buffer starts in the first half of address space (#123148) - various memory handling fixes - fix strpbrk macro in <string.h> - fix strpbrk macro for GCC 3.4+ (BZ #130) - fix x86_64 makecontext - fix regex translate handling - fix RELA undefined TLS symbol relocation - fix -z nodelete DSO handling - fix setenv handling of invalid arguments - fix ia64/x86_64 backtrace in statically linked programs - fix xtrace error reporting - FUTEX_CMP_REQUEUE support --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/ 59ee93d07c8ac4b0bf41caf53715799d SRPMS/glibc-2.3.3-27.1.src.rpm c5aeeeee4c50acbe05bcbd773c2fbf19 x86_64/glibc-2.3.3-27.1.x86_64.rpm b5a3978d8af45708b45b4c60ee3cf986 x86_64/glibc-devel-2.3.3-27.1.x86_64.rpm f158e1a2b8a50447e7414bd4f7040e57 x86_64/glibc-headers-2.3.3-27.1.x86_64.rpm 088fee8073775b9596a498df37cb05d8 x86_64/nptl-devel-2.3.3-27.1.x86_64.rpm 529d2b03f5fd710667e9b7a70c9a40a8 x86_64/glibc-profile-2.3.3-27.1.x86_64.rpm e469a6b1f8e0c4344f37e26b5c47d402 x86_64/glibc-common-2.3.3-27.1.x86_64.rpm ff4a21f094918554a7b30dd7d369efdc x86_64/nscd-2.3.3-27.1.x86_64.rpm 93440792a09aed97100a1c8993f33144 x86_64/glibc-utils-2.3.3-27.1.x86_64.rpm 43294d17c13dd71239c1ecaaefa82ca5 x86_64/debug/glibc-debuginfo-2.3.3-27.1.x86_64.rpm fb617c33955adb608c331e1f349aa605 x86_64/glibc-2.3.3-27.1.i386.rpm 56f5bcdce78a2cccc1524a3210adecc3 x86_64/glibc-devel-2.3.3-27.1.i386.rpm fcebfa1076aeda3b8b349623b4bf032b x86_64/glibc-2.3.3-27.1.i686.rpm a54b9ee83f5fe910b38b3d6382fc1e3e x86_64/nptl-devel-2.3.3-27.1.i686.rpm fb617c33955adb608c331e1f349aa605 i386/glibc-2.3.3-27.1.i386.rpm 56f5bcdce78a2cccc1524a3210adecc3 i386/glibc-devel-2.3.3-27.1.i386.rpm 20dcdcb13db882656d55ac1335209080 i386/glibc-headers-2.3.3-27.1.i386.rpm fbe8294a2bee2468f2e7fadd312efdaf i386/glibc-profile-2.3.3-27.1.i386.rpm bac68f3806edf0c458cce94302d1fda6 i386/glibc-common-2.3.3-27.1.i386.rpm 14b3d1a411a0dc6c79a0e88a73af53d1 i386/nscd-2.3.3-27.1.i386.rpm 85e9662c711028c4a2ea1bbb71b5632f i386/glibc-utils-2.3.3-27.1.i386.rpm 09090e156aee0b89d12b3f1dc414e4ce i386/debug/glibc-debuginfo-2.3.3-27.1.i386.rpm 10acc81e50bc3ddd6a44e863ad314149 i386/debug/glibc-debuginfo-common-2.3.3-27.1.i386.rpm fcebfa1076aeda3b8b349623b4bf032b i386/glibc-2.3.3-27.1.i686.rpm a54b9ee83f5fe910b38b3d6382fc1e3e i386/nptl-devel-2.3.3-27.1.i686.rpm 2b728b8f2446c9070164efc81695435b i386/debug/glibc-debuginfo-2.3.3-27.1.i686.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. ---------------------------------------------------------------------

1 0

[SECURITY] Fedora Core 3 Update: ruby-1.8.1-7.FC3.1
by Akira TAGOH 10 Nov '04

10 Nov '04

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2004-403 2004-11-11 --------------------------------------------------------------------- Product : Fedora Core 3 Name : ruby Version : 1.8.1 Release : 7.FC3.1 Summary : An interpreter of object-oriented scripting language Description : Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks (as in Perl). It is simple, straight-forward, and extensible. --------------------------------------------------------------------- * Thu Nov 11 2004 Akira TAGOH <tagoh(a)redhat.com> - 1.8.1-7.FC3.1 - security fix [CAN-2004-0983] - security fix [CAN-2004-0755] - ruby-1.8.1-cgi-dos.patch: applied to fix a denial of service issue. (#138366) - ruby-1.8.1-cgi_session_perms.patch: sets the permission of the session data file to 0600. (#130063) * Sat Oct 30 2004 Akira TAGOH <tagoh(a)redhat.com> - 1.8.1-7.fc3 - added openssl-devel and db4-devel into BuildRequires. (#137479) --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/ e423a05f3e6a63767c6ab5b886c882ad SRPMS/ruby-1.8.1-7.FC3.1.src.rpm fb594cf216b9725b7fd4b8347e79eb1a x86_64/ruby-1.8.1-7.FC3.1.x86_64.rpm 4528129815539f8fe3ebc6c69b648d33 x86_64/irb-1.8.1-7.FC3.1.x86_64.rpm 48e0554aa63e4765dfbd2d71dafccde7 x86_64/debug/ruby-debuginfo-1.8.1-7.FC3.1.x86_64.rpm 9a8ca938db4721ab82132394c4f56299 x86_64/ruby-devel-1.8.1-7.FC3.1.x86_64.rpm e8878f90c73e5045d936e5fa2e70e846 x86_64/ruby-docs-1.8.1-7.FC3.1.x86_64.rpm 47d9d40d7fef2ef8a92cf9c660f255dc x86_64/ruby-libs-1.8.1-7.FC3.1.x86_64.rpm 1f1919213fa7c8861605d1e0c982e422 x86_64/ruby-mode-1.8.1-7.FC3.1.x86_64.rpm a891cb18610b83c0fb6fed21b7ee7641 x86_64/ruby-tcltk-1.8.1-7.FC3.1.x86_64.rpm 2f26d34775553cee2980645c6654aed9 x86_64/ruby-libs-1.8.1-7.FC3.1.i386.rpm 912970b09bb1e07d026a9d4ff719cd98 i386/ruby-devel-1.8.1-7.FC3.1.i386.rpm 177f1ba8bf1d42de2335ec0177f14fe0 i386/irb-1.8.1-7.FC3.1.i386.rpm a92fe04818616b255e04cf4379e3e7be i386/ruby-1.8.1-7.FC3.1.i386.rpm 29bc7a12865e313eb41c90cc9be69f10 i386/debug/ruby-debuginfo-1.8.1-7.FC3.1.i386.rpm 130d73a9b8eaeceee0b7e10a8e80aec4 i386/ruby-docs-1.8.1-7.FC3.1.i386.rpm 2f26d34775553cee2980645c6654aed9 i386/ruby-libs-1.8.1-7.FC3.1.i386.rpm 5e2582af078ebb5218eb4dcdece19062 i386/ruby-mode-1.8.1-7.FC3.1.i386.rpm 76ef077fc025371af17239f7e3769d8b i386/ruby-tcltk-1.8.1-7.FC3.1.i386.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. ---------------------------------------------------------------------

1 0

[SECURITY] Fedora Core 2 Update: ruby-1.8.1-6.FC2.0
by Akira TAGOH 10 Nov '04

10 Nov '04

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2004-402 2004-11-11 --------------------------------------------------------------------- Product : Fedora Core 2 Name : ruby Version : 1.8.1 Release : 6.FC2.0 Summary : An interpreter of object-oriented scripting language Description : Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks (as in Perl). It is simple, straight-forward, and extensible. --------------------------------------------------------------------- * Thu Nov 11 2004 Akira TAGOH <tagoh(a)redhat.com> - 1.8.1-6.FC2.0 - security fix [CAN-2004-0983] - ruby-1.8.1-cgi-dos.patch: applied to fix a denial of service issue. (#138366) --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/ 293d5e469bd71ef98784871e41cc73f9 SRPMS/ruby-1.8.1-6.FC2.0.src.rpm c784cd9ca42df1b9de594011bdb4e2ae x86_64/ruby-1.8.1-6.FC2.0.x86_64.rpm 9e1905c69a00f2694df9ad8978ac12c8 x86_64/irb-1.8.1-6.FC2.0.x86_64.rpm a296e349a0d4d7acc6555c9805772328 x86_64/debug/ruby-debuginfo-1.8.1-6.FC2.0.x86_64.rpm 30aa43b22e40363bb7e11631345e99c5 x86_64/ruby-devel-1.8.1-6.FC2.0.x86_64.rpm 9824ce6c4556cd7ef51843ba93a15c89 x86_64/ruby-docs-1.8.1-6.FC2.0.x86_64.rpm 19a699cb5214a1711443a33fd2a95039 x86_64/ruby-libs-1.8.1-6.FC2.0.x86_64.rpm c2e9a4d6dfeee96eb0f4a98f7b1a122a x86_64/ruby-mode-1.8.1-6.FC2.0.x86_64.rpm 02dc49125bd7f28ddf6445d16e67651e x86_64/ruby-tcltk-1.8.1-6.FC2.0.x86_64.rpm 299e59746ce36650d63a653b38dd2768 i386/ruby-devel-1.8.1-6.FC2.0.i386.rpm 01ba84845b2ab822d61172ea02afbfcc i386/irb-1.8.1-6.FC2.0.i386.rpm 369422099a979559084fee2435159422 i386/ruby-1.8.1-6.FC2.0.i386.rpm 867808625081629c48e32c617d5b154c i386/debug/ruby-debuginfo-1.8.1-6.FC2.0.i386.rpm 34f1d7d8a554f14b416e888a1b7d8941 i386/ruby-docs-1.8.1-6.FC2.0.i386.rpm 5e29bc2068cd9ac010cf6cd508336dff i386/ruby-libs-1.8.1-6.FC2.0.i386.rpm 6179faec35191a15ff7999e4c551fd62 i386/ruby-mode-1.8.1-6.FC2.0.i386.rpm b711d470384fc33f52eeb67c35f77915 i386/ruby-tcltk-1.8.1-6.FC2.0.i386.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. ---------------------------------------------------------------------

1 0

Fedora Core 3 Update: jwhois-3.2.2-6.FC3.1
by Miloslav Trmač 10 Nov '04

10 Nov '04

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2004-406 2004-11-10 --------------------------------------------------------------------- Product : Fedora Core 3 Name : jwhois Version : 3.2.2 Release : 6.FC3.1 Summary : Internet whois/nicname client. Description : A whois client that accepts both traditional and finger-style queries. --------------------------------------------------------------------- Update Information: This update fixes a crash when a processing a query requires more than one redirection. --------------------------------------------------------------------- * Tue Nov 09 2004 Miloslav Trmac <mitr(a)redhat.com> - 3.2.2-6.FC3.1 - Build for FC 3 * Mon Nov 01 2004 Miloslav Trmac <mitr(a)redhat.com> - 3.2.2-7 - Fix double free (#137693) --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/ fc8785d9a67256d978889a3c7015fa17 SRPMS/jwhois-3.2.2-6.FC3.1.src.rpm cfab98b3d2eca1a04dc13527957b4b04 x86_64/jwhois-3.2.2-6.FC3.1.x86_64.rpm b911b9cacb79704b263ffe0c1b11ca58 x86_64/debug/jwhois-debuginfo-3.2.2-6.FC3.1.x86_64.rpm 28d557c54adb47973a180232b0704739 i386/jwhois-3.2.2-6.FC3.1.i386.rpm d9ed0ec48892068280e109e6b7e1e061 i386/debug/jwhois-debuginfo-3.2.2-6.FC3.1.i386.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. ---------------------------------------------------------------------

1 0

Fedora Core 2 Update: openoffice.org-1.1.2-11.4.fc2
by Dan Williams 10 Nov '04

10 Nov '04

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2004-410 2004-11-10 --------------------------------------------------------------------- Product : Fedora Core 2 Name : openoffice.org Version : 1.1.2 Release : 11.4.fc2 Summary : OpenOffice.org comprehensive office suite. Description : OpenOffice.org is an Open Source, community-developed, multi-platform office productivity suite. It includes the key desktop applications, such as a word processor, spreadsheet, presentation manager, formula editor and drawing program, with a user interface and feature set similar to other office suites. Sophisticated and flexible, OpenOffice.org also works transparently with a variety of file formats, including Microsoft Office. Usage: Simply type "ooffice" to run OpenOffice.org or select the requested component (Writer, Calc, Draw, Impress, etc.) from your desktop menu. The ooffice wrapper script will install a few files in the user's home, if necessary. The OpenOffice.org team hopes you enjoy working with OpenOffice.org! Note: Non-.vor templates covered under the GPL license. --------------------------------------------------------------------- Update Information: The fixes in this update are detailed in the changelog entry below. --------------------------------------------------------------------- * Mon Nov 08 2004 Dan Williams <dcbw(a)redhat.com> - 1.1.2-11 - #rh120055# enable .doc mscodec backport for 1.1.2 (Caolan) - #rh136907# Wrong colors in openoffice menubars - #rh106548# Openoffice 1.1 places '.' on LD_LIBRARY_PATH (Caolan) - #rh137281# OpenOffice crashes due to "lack of memory" (Caolan) - #rh137335# OOo should not depend on evolution-devel - #rh137854# Japanese document from Windows is heavily broken - #rh137799# German spell checker does not work - #rh137741# Warnings about dictionary list corruption on startup - #rh137307# Cannot show hidden columns in calc - #rh137977# Open Office failes to recognise TXT datasource after upgrade - #rh118742# Templates/wizards in Polish language not working - #rh123758# Writer does not fallback to english for Index templates - #rh137395# [x86_64][OOo] installation of OpenOffice.org 1.1.2 failed - #rh102287# Prelink failures with openoffice (Caolan) - #rh137487# (partial) Norwegian translation includes som german texts - #rh137969# crashes openoffice-1.1.2-10 under certain circumstances (Caolan) - #rh129719# (partial) Incorporate updated Gujarati translation - #rh107298# Remove File->Autopilots->Report menu for NoJava builds (Caolan) - #rh110934# OpenOffice Writer locks up when pasting image (Caolan) - #rh120696# splash window has title "untitled window" (Caolan) - #rh138317# Printer setting is scrambled for Japanese env - Change naming schemes so upgrades work (ex FC2 -> FC3) even with the same NVR on both OS versions --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/ 2cc84729a5c94cfc4480159d098c263f SRPMS/openoffice.org-1.1.2-11.4.fc2.src.rpm 5b34614d218848b36ed5f0b340da183e x86_64/openoffice.org-1.1.2-11.4.fc2.i386.rpm 20374f89d4aa46cb796d4928b25b5caf x86_64/openoffice.org- libs-1.1.2-11.4.fc2.i386.rpm a0fc78b9383ae13454b5c8c8e8b768f2 x86_64/openoffice.org- i18n-1.1.2-11.4.fc2.i386.rpm 5b34614d218848b36ed5f0b340da183e i386/openoffice.org-1.1.2-11.4.fc2.i386.rpm 20374f89d4aa46cb796d4928b25b5caf i386/openoffice.org- libs-1.1.2-11.4.fc2.i386.rpm a0fc78b9383ae13454b5c8c8e8b768f2 i386/openoffice.org- i18n-1.1.2-11.4.fc2.i386.rpm 2a378599059d5a5fbc70077440a4a125 i386/openoffice.org- kde-1.1.2-11.4.fc2.i386.rpm 0b2689c269925eb0b0549bc08191b515 i386/debug/openoffice.org- debuginfo-1.1.2-11.4.fc2.i386.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. ---------------------------------------------------------------------

1 0

← Newer
1
2
3
4
5
6
7
8
9
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

announce November 2004