announce May 2004

announce@lists.stg.fedoraproject.org

15 participants
33 discussions

[SECURITY] Fedora Core 2 Update: kdelibs-3.2.2-6
by than 19 May '04

19 May '04

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2004-122 2004-05-19 --------------------------------------------------------------------- Name : kdelibs Version : 3.2.2 Release : 6 Summary : K Desktop Environment - Libraries Description : Libraries for the K Desktop Environment: KDE Libraries included: kdecore (KDE core library), kdeui (user interface), kfm (file manager), khtmlw (HTML widget), kio (Input/Output, networking), kspell (spelling checker), jscript (javascript), kab (addressbook), kimgio (image manipulation). --------------------------------------------------------------------- Update Information: iDEFENSE identified a vulnerability in the Opera Web Browser that could allow remote attackers to create or truncate arbitrary files. The KDE team has found that a similar vulnerability exists in KDE. A flaw in the telnet URL handler can allow options to be passed to the telnet program which can be used to allow file creation or overwriting. An attacker could create a carefully crafted link such that when opened by a victim it creates or overwrites a file in the victims home directory. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2004-0411 to this issue. --------------------------------------------------------------------- * Sun May 16 2004 Than Ngo <than(a)redhat.com> 6:3.2.2-6 - vulnerability in the mailto handler, CAN-2004-0411 * Fri May 14 2004 Than Ngo <than(a)redhat.com> 3.2.2-5 - KDE Telnet URI Handler File Vulnerability , CAN-2004-0411 --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/ b271936a42f0370877996f52b25d7304 SRPMS/kdelibs-3.2.2-6.src.rpm 1f002c97bebde36e11f8ebaa8dd49ceb i386/kdelibs-3.2.2-6.i386.rpm fcdb0589544dbc9d878dd99c890429a8 i386/kdelibs-devel-3.2.2-6.i386.rpm 853897fa6815cc47ae2bf92c3352847b i386/debug/kdelibs-debuginfo-3.2.2-6.i386.rpm b2174cd0c744138b24364cccfbf50847 x86_64/kdelibs-3.2.2-6.x86_64.rpm 795aa24e391b667a5b2fb79cb8d4230f x86_64/kdelibs-devel-3.2.2-6.x86_64.rpm e95f633ef222198d8cbb8be067773fae x86_64/debug/kdelibs-debuginfo-3.2.2-6.x86_64.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. ---------------------------------------------------------------------

1 0

[SECURITY] Fedora Core 1 Update: tcpdump-3.7.2-8.fc1.2
by Harald Hoyer 19 May '04

19 May '04

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2004-120 2004-05-13 --------------------------------------------------------------------- Name : tcpdump Version : 3.7.2 Release : 8.fc1.2 Summary : A network traffic monitoring tool. Description : Tcpdump is a command-line tool for monitoring network traffic. Tcpdump can capture and display the packet headers on a particular network interface or on all interfaces. Tcpdump can display all of the packet headers, or just the ones that match particular criteria. Install tcpdump if you need a program to monitor network traffic. --------------------------------------------------------------------- Update Information: Tcpdump is a command-line tool for monitoring network traffic. Tcpdump v3.8.1 and earlier versions contained multiple flaws in the packet display functions for the ISAKMP protocol. Upon receiving specially crafted ISAKMP packets, TCPDUMP would try to read beyond the end of the packet capture buffer and subsequently crash. Users of tcpdump are advised to upgrade to these erratum packages, which contain backported security patches and are not vulnerable to these issues. --------------------------------------------------------------------- * Wed May 12 2004 Harald Hoyer <harald(a)redhat.com> - 14:3.7.2-8.fc1.2 - CAN-2004-0183/0184 fixed --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/ c11dc7a9af4766ca018405339f6e8b0d SRPMS/tcpdump-3.7.2-8.fc1.2.src.rpm f7de913568498b8b38788d2fc673162e i386/tcpdump-3.7.2-8.fc1.2.i386.rpm 13f09fefc188bfa47b0dc993eadabcd7 i386/libpcap-0.7.2-8.fc1.2.i386.rpm 5bdc0b8f388497e475b7091b5175c6c6 i386/arpwatch-2.1a11-8.fc1.2.i386.rpm 2545161afba66a197a54233349bc0285 x86_64/tcpdump-3.7.2-8.fc1.2.x86_64.rpm 343dea7f180e95f86b436fc42ce34c21 x86_64/libpcap-0.7.2-8.fc1.2.x86_64.rpm 1e50e97307551fabb2aba8f8c4cf635d x86_64/arpwatch-2.1a11-8.fc1.2.x86_64.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. ---------------------------------------------------------------------

1 0

Presenting FEDORA CORE 2
by Elliot Lee 18 May '04

18 May '04

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Presenting FEDORA CORE 2 STARRING .............. Linux 2.6 GNOME 2.6 & KDE 3.2.2 Xorg 6.7.0 WITH APPEARANCES BY ... SELinux IIIMF and the CJK gang Xfce 4 subversion 1.0 And hundreds of other updated and new packages MUSIC DECOMPOSED BY ... Homey G of Redmond BARTENDER ............. The Man from Tettnang EXECUTIVE PRODUCER .... The Open Source Community DIRECTOR .............. Red Hat Including musical numbers such as "Who Let Fedora Out?" by the Slashdot Men, "The Download Goes On" by Celeron Dion, and "The Hacker in Me" by Shania Sane. "It's a singing, dancing extravaganza!" says the Rawhide Daily News. "The new DVD iso image brings tears to my eyes!" gushes Eugenius. "Two penguin flippers up!" votes the Tux Dispatch. "My mortgage rate was cut in half after I replied to spam using Fedora Core 2!" raves Bo Battipaglia. "The combination of better hardware support, a new kernel, and desktop improvements provides a more powerful and productive user experience." mutters someone with a grounding in reality. Fedora Core 2. "They can take away our hard drives, but they'll never take away our freedom!" Opening May 18 on 32-bit x86 and 64-bit x86_64 computers worldwide. Contact your local Fedora mirror for details, or visit http://fedora.redhat.com/ ... The Fedora Project would like to thank the thousands of community members whose testing and contributions have raised the bar of quality and made this release possible. What is the Fedora Project? The Fedora Project is a Red Hat-sponsored and community-supported open source project that promotes rapid development of innovative open source software through a collaborative, community effort. Fedora Core 2 provides a complete Linux platform built exclusively from open source software. Available at no cost, the release serves the needs of community developers, testers, and other technology enthusiasts who wish to participate in and accelerate the technology development process. As a community forum for advanced development, the Fedora Project provides early visibility to the latest open source technology and serves as a proving ground for technology that may eventually make its way into Red Hat's fully-supported commercial solutions such as Red Hat Enterprise Linux. Red Hat contributes development resources, editorial direction and management to the Fedora Project. How Can I Get Fedora Core 2? Fedora Core 2 x86 or x86-64 Downloads are available from: http://fedora.redhat.com/download/ or from the network of mirrors in the Fedora Project distribution system. Users may prefer to download Fedora Core via BitTorrent, or via older file retrieval protocols such as HTTP, FTP, or RSYNC. BitTorrent typically provides faster download speeds than HTTP, FTP, or RSYNC. BitTorrent RPMS for Red Hat Linux and Fedora Core are available with detailed instructions at http://torrent.linux.duke.edu/ THE BEST WAY - BITTORRENT: http://torrent.linux.duke.edu/ HTTP/FTP/RSYNC MIRRORS: (courtesy of Matthias Saou) NORTH AMERICA ftp://mirror.clarkson.edu/pub/distributions/fedora/linux/core/2/ http://mirror.clarkson.edu/pub/distributions/fedora/linux/core/2/ ftp://ftp.webtrek.com/pub/mirrors/fedora/2/ ftp://mirror.stanford.edu/pub/mirrors/fedora/linux/core/2/ ftp://ftp.gtlib.cc.gatech.edu/pub/fedora.redhat/linux/core/2/ http://ftp.gtlib.cc.gatech.edu/pub/fedora.redhat/linux/core/2/ rsync://rsync.gtlib.cc.gatech.edu/fedora-linux-core/2/ ftp://mirror.hiwaay.net/redhat/fedora/linux/core/2/ http://mirror.hiwaay.net/redhat/fedora/linux/core/2/ rsync://mirror.hiwaay.net/fedora-linux-core/2/ ftp://mirror.cs.princeton.edu/pub/mirrors/fedora/linux/core/2/ ftp://mirror.cs.wisc.edu/pub/mirrors/linux/download.fedora.redhat.com/pub/f… http://mirror.cs.wisc.edu/pub/mirrors/linux/download.fedora.redhat.com/pub/… rsync://mirror.cs.wisc.edu/pub/mirrors/linux/download.fedora.redhat.com/pub… ftp://fedora.mirrors.tds.net/pub/fedora-core/2/ http://fedora.mirrors.tds.net/pub/fedora-core/2/ rsync://fedora.mirrors.tds.net/fedora-core/2/ ftp://mirror2.mirrors.tds.net/pub/fedora-core/2/ http://mirror2.mirrors.tds.net/pub/fedora-core/2/ rsync://mirror2.mirrors.tds.net/fedora-core/2/ ftp://less.cogeco.net/pub/fedora/linux/core/2/ ftp://limestone.uoregon.edu/fedora/2/ http://limestone.uoregon.edu/ftp/fedora/2/ rsync://limestone.uoregon.edu/ftp/fedora/2/ ftp://ftp.cse.buffalo.edu/pub/fedora/linux/core/2/ ftp://ftp.linux.ncsu.edu/pub/fedora/linux/core/2/ ftp://mirrors.secsup.org/pub/linux/redhat/fedora/core/2/ http://redhat.secsup.org/fedora/core/2/ ftp://ftp.nrc.ca/pub/systems/linux/redhat/fedora/linux/core/2/ ftp://mirror.netglobalis.net/pub/fedora/core/2/ ftp://mirrors.kernel.org/fedora/core/2/ http://mirrors.kernel.org/fedora/core/2/ rsync://mirrors.kernel.org/fedora/core/2/ ftp://mirror.eas.muohio.edu/mirrors/fedora/linux/core/2/ http://mirror.eas.muohio.edu/fedora/linux/core/2/ rsync://mirror.eas.muohio.edu/fedora/linux/core/2/ ftp://ftp.muug.mb.ca/pub/fedora/linux/core/2/ http://www.muug.mb.ca/pub/fedora/linux/core/2/ rsync://rsync.muug.mb.ca/fedora-linux-core/2/ ftp://ftp.net.usf.edu/pub/fedora/linux/core/2/ ftp://ftp.ussg.iu.edu/linux/fedora/linux/core/2/ ftp://mirror.cpsc.ucalgary.ca/mirror/fedora/linux/core/2/ http://mirror.cpsc.ucalgary.ca/mirror/fedora/linux/core/2/ rsync://mirror.cpsc.ucalgary.ca/fedora/linux/core/2/ ftp://ftp.dc.aleron.net/pub/linux/fedora/linux/core/2/ http://ftp.dc.aleron.net/linux/fedora/linux/core/2/ rsync://ftp.dc.aleron.net/fedora-linux-core/2/ ftp://mirror.web-ster.com/fedora/2/ ftp://mirrors.hpcf.upr.edu/pub/Mirrors/redhat/download.fedora.redhat.com/2/ ftp://mirror.atlantic.net/pub/fedora/core/2/ EUROPE ftp://ftp.heanet.ie/pub/fedora/linux/core/2/ http://ftp.heanet.ie/pub/fedora/linux/core/2/ rsync://ftp.heanet.ie/pub/fedora/linux/core/2/ ftp://alviss.et.tudelft.nl/pub/fedora/core/2/ ftp://mirror.switch.ch/mirror/fedora/linux/core/2/ ftp://ftp.tu-chemnitz.de/pub/linux/fedora-core/2/ http://wftp.tu-chemnitz.de/pub/linux/fedora-core/2/ ftp://ftp.fi.muni.cz/pub/linux/fedora-core/2/ ftp://ftp6.linux.cz/pub/linux/fedora-core/2/ rsync://ftp.fi.muni.cz/pub/linux/fedora-core/2/ ftp://sunsite.mff.cuni.cz/pub/fedora/2/ http://sunsite.mff.cuni.cz/pub/fedora/2/ rsync://sunsite.mff.cuni.cz/fedora/fedora/2/ ftp://ultra.linux.cz/pub/fedora/2/ ftp://sunsite.icm.edu.pl/pub/Linux/fedora/linux/core/2/ http://sunsite.icm.edu.pl/pub/Linux/fedora/linux/core/2/ rsync://sunsite.icm.edu.pl/fedora/linux/core/2/ ftp://sunsite.informatik.rwth-aachen.de/pub/linux/fedora-core/2/ ftp://ftp.chl.chalmers.se/pub/fedora/linux/core/2/ ftp://ftp.informatik.uni-frankfurt.de/pub/linux/Mirror/ftp.redhat.com/fedor… ftp://ftp.otenet.gr/pub/linux/fedora/linux/core/2/ ftp://fr2.rpmfind.net/linux/fedora/core/2/ http://fr2.rpmfind.net/linux/fedora/core/2/ rsync://fr2.rpmfind.net/linux/fedora/core/2/ ftp://ftp.funet.fi/pub/mirrors/ftp.redhat.com/pub/fedora/linux/core/2/ http://ftp.funet.fi/pub/mirrors/ftp.redhat.com/pub/fedora/linux/core/2/ ftp://ftp.ipv6.funet.fi/pub/mirrors/ftp.redhat.com/pub/fedora/linux/core/2/ http://ftp.ipv6.funet.fi/pub/mirrors/ftp.redhat.com/pub/fedora/linux/core/2/ ftp://ftp-stud.fht-esslingen.de/pub/Mirrors/fedora.redhat.com/linux/core/2/ http://ftp-stud.fht-esslingen.de/pub/Mirrors/fedora.redhat.com/linux/core/2/ ftp://redhat.linux.ee/pub/fedora/linux/core/2/ http://edhat.linux.ee/pub/fedora/linux/core/2/ ftp://ftp.lug.ro/fedora/linux/core/2/ http://ftp.lug.ro/fedora/linux/core/2/ ftp://klid.dk/pub/fedora/linux/core/2/ ftp://tux.cprm.net/pub/ftp.redhat.com/fedora/linux/core/2/ http://tux.cprm.net/pub/ftp.redhat.com/fedora/linux/core/2/ ftp://ftp.stw-bonn.de/pub/mirror/fedora/linux/core/2/ ftp://ftp.udl.es/pub/fedora/linux/core/2/ http://ftp.udl.es/pub/fedora/linux/core/2/ rsync://ftp.udl.es/fedora-linux-core/2/ ftp://ftp.quicknet.nl/pub/Linux/download.fedora.redhat.com/2/ ftp://ftp.uninett.no/pub/linux/Fedora/core/2/ rsync://ftp.uninett.no/fedora-linux-core/2/ ftp://gd.tuwien.ac.at/opsys/linux/fedora/core/2/ http://gd.tuwien.ac.at/opsys/linux/fedora/core/2/ rsync://gd.tuwien.ac.at/opsys/linux/fedora/core/2/ ftp://ftp.wsisiz.edu.pl/pub/linux/fedora/linux/core/2/ ftp://ftp.rdsor.ro/pub/Linux/Distributions/Fedora/Fedora 2/ ftp://ftp.nluug.nl/pub/os/Linux/distr/fedora/2/ http://ftp.nluug.nl/ftp/pub/os/Linux/distr/fedora/2/ rsync://ftp.nluug.nl/fedora/2/ ftp://zeniiia.linux.org.uk/pub/distributions/fedora/linux/core/2/ http://zeniiia.linux.org.uk/pub/distributions/fedora/linux/core/2/ rsync://zeniiia.linux.org.uk/fedora-linux-core/2/ ftp://zeniiib.linux.org.uk/pub/distributions/fedora/linux/core/2/ http://zeniiib.linux.org.uk/pub/distributions/fedora/linux/core/2/ rsync://zeniiib.linux.org.uk/fedora-linux-core/2/ ftp://ftp.nx.ro/fedora-core/2/ ftp://ftp.eu.uu.net/pub/linux/fedora/2/ ftp://ftp.crihan.fr/mirrors/fedora.redhat.com/fedora/linux/core/2/ http://ftp.crihan.fr/mirrors/fedora.redhat.com/fedora/linux/core/2/ rsync://ftp.crihan.fr/fedora-linux-core/2/ ftp://ftp.rhd.ru/pub/fedora/linux/core/2/ http://ftp.rhd.ru/pub/fedora/linux/core/2/ ftp://ftp.join.uni-muenster.de/pub/linux/distributions/fedora/linux/core/2/ rsync://ftp.join.uni-muenster.de/fedora-linux-core/2/ ftp://ftp.iasi.roedu.net/pub/mirrors/fedora.redhat.com/core/2/ http://ftp.iasi.roedu.net/mirrors/fedora.redhat.com/core/2/ rsync://ftp.iasi.roedu.net/fedora-core/core/2/ ftp://ftp.rediris.es/mirror/fedora.redhat/2/ http://sunsite.rediris.es/mirror/fedora.redhat/2/ ftp://ftp.g-int.net/pub/fedora/linux/core/2/ http://ftp.g-int.net/pub/fedora/linux/core/2/ http://download.atrpms.net/mirrors/fedoracore/2/ ftp://ftp.fi.udc.es/pub/linux/fedora/linux/core/2/ http://ftp.fi.udc.es/pub/linux/fedora/linux/core/2/ SOUTH AMERICA ftp://ftp.tecnoera.com/pub/fedora/linux/core/2/ http://ftp.tecnoera.com/pub/fedora/linux/core/2/ rsync://ftp.tecnoera.com/pub/fedora/linux/core/2/ ASIA-PACIFIC ftp://ftp.planetmirror.com/pub/fedora/linux/core/2/ http://planetmirror.com/pub/fedora/linux/core/2/ rsync://rsync.planetmirror.com/fedora/linux/core/2/ ftp://ftp.wicks.co.nz/pub/linux/dist/fedora/2/ ftp://ftp.kddilabs.jp/Linux/packages/fedora/core/2/ http://ftp.kddilabs.jp/Linux/packages/fedora/core/2/ rsync://ftp.kddilabs.jp/fedora/core/2/ ftp://ftp.isu.edu.tw/pub/Linux/Fedora/linux/core/2/ http://ftp.isu.edu.tw/pub/Linux/Fedora/linux/core/2/ ftp://download.stmc.edu.hk/fedora/linux/core/2/ http://download.stmc.edu.hk/fedora/linux/core/2/ ftp://ftp.sfc.wide.ad.jp/pub/Linux/Fedora/2/ rsync://ftp.sfc.wide.ad.jp/fedora/2/ ftp://ftp.oss.eznetsols.org/linux/fedora/2/ rsync://rsync.oss.eznetsols.org/ftp/linux/fedora/2/ ftp://videl.ics.hawaii.edu/mirrors/fedora/linux/core/2/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (GNU/Linux) iD8DBQFAqhQHtEJp0E8qb9IRArpXAJ9fKQIlPxr5v46DA7ouVhWIwIgbIgCeI282 e+1EYYXCfBXUYyAquLjdISI= =ErE6 -----END PGP SIGNATURE-----

1 0

[SECURITY] Fedora Core 1 Update: kdelibs-3.1.4-5
by than 17 May '04

17 May '04

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2004-121 2004-05-17 --------------------------------------------------------------------- Name : kdelibs Version : 3.1.4 Release : 5 Summary : K Desktop Environment - Libraries Description : Libraries for the K Desktop Environment: KDE Libraries included: kdecore (KDE core library), kdeui (user interface), kfm (file manager), khtmlw (HTML widget), kio (Input/Output, networking), kspell (spelling checker), jscript (javascript), kab (addressbook), kimgio (image manipulation). --------------------------------------------------------------------- Update Information: iDEFENSE identified a vulnerability in the Opera Web Browser that could allow remote attackers to create or truncate arbitrary files. The KDE team has found that a similar vulnerability exists in KDE. A flaw in the telnet URL handler can allow options to be passed to the telnet program which can be used to allow file creation or overwriting. An attacker could create a carefully crafted link such that when opened by a victim it creates or overwrites a file in the victims home directory. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2004-0411 to this issue. --------------------------------------------------------------------- * Sun May 16 2004 Than Ngo <than(a)redhat.com> 6:3.1.4-5 - KDE Telnet URI Handler File Vulnerability, vulnerability in the mailto handler, CAN-2004-0411 --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/ 17ef612d8376994d49d775e65f7cf3e2 SRPMS/kdelibs-3.1.4-5.src.rpm 67043b7db880bd1c5a6f6a860e357c3f i386/kdelibs-3.1.4-5.i386.rpm 4d7004becf7fb55a35530c49e77c36b7 i386/kdelibs-devel-3.1.4-5.i386.rpm d2ecc5a35193a30df1fa70bb382bc708 i386/debug/kdelibs-debuginfo-3.1.4-5.i386.rpm 7b91158e81b7291826d5ba614179d706 x86_64/kdelibs-3.1.4-5.x86_64.rpm 6a213815b2584be92ec32da05a985cba x86_64/kdelibs-devel-3.1.4-5.x86_64.rpm b136d3d183e72666f6f56e6a507c10f3 x86_64/debug/kdelibs-debuginfo-3.1.4-5.x86_64.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. ---------------------------------------------------------------------

1 0

[SECURITY] Fedora Core 1 Update: cvs-1.11.15-1
by Mark Cox 14 May '04

14 May '04

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2004-110 2004-04-22 --------------------------------------------------------------------- Name : cvs Version : 1.11.15 Release : 1 Summary : A version control system. Description : CVS (Concurrent Version System) is a version control system that can record the history of your files (usually, but not always, source code). CVS only stores the differences between versions, instead of every version of every file you have ever created. CVS also keeps a log of who, when, and why changes occurred. CVS is very helpful for managing releases and controlling the concurrent editing of source files among multiple authors. Instead of providing version control for a collection of files in a single directory, CVS provides version control for a hierarchical collection of directories consisting of revision controlled files. These directories and files can then be combined together to form a software release. --------------------------------------------------------------------- Update Information: The client for CVS before 1.11.15 allows a remote malicious CVS server to create arbitrary files using certain RCS diff files that use absolute pathnames during checkouts or updates. Updated packages were made available in April 2004 however the original update notification email did not make it to fedora-announce-list at that time. --------------------------------------------------------------------- * Wed Apr 21 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.11.15-1 - update to 1.11.15, fixing CAN-2004-0180 (#120969) * Tue Mar 23 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.11.14-1 - update to 1.11.14 * Fri Feb 13 2004 Elliot Lee <sopwith(a)redhat.com> - rebuilt * Wed Jan 07 2004 Nalin Dahyabhai <nalin(a)redhat.com> 1.11.11-1 - turn kserver, which people shouldn't use any more, back on * Tue Dec 30 2003 Nalin Dahyabhai <nalin(a)redhat.com> - update to 1.11.11 * Thu Dec 18 2003 Nalin Dahyabhai <nalin(a)redhat.com> 1.11.10-1 - update to 1.11.10 --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/ a4f1dea17be76c29ad0bdeff09a80bba SRPMS/cvs-1.11.15-1.src.rpm a356c7be00016bd9594462eb7e8041dc i386/cvs-1.11.15-1.i386.rpm 4d9ce4478aa261890870c5eca81320bf i386/debug/cvs-debuginfo-1.11.15-1.i386.rpm dc36b21f10740253a6927f815c8a28ff x86_64/cvs-1.11.15-1.x86_64.rpm f2601fe6b89fb6ff9136e46e02b8880b x86_64/debug/cvs-debuginfo-1.11.15-1.x86_64.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. ---------------------------------------------------------------------

1 0

[SECURITY] Fedora Core 1 Update: neon-0.24.5-1
by Mark Cox 14 May '04

14 May '04

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2004-103 2004-04-14 --------------------------------------------------------------------- Name : neon Version : 0.24.5 Release : 1 Summary : An HTTP and WebDAV client library Description : neon is an HTTP and WebDAV client library, with a C interface; providing a high-level interface to HTTP and WebDAV methods along with a low-level interface for HTTP request handling. neon supports persistent connections, proxy servers, basic, digest and Kerberos authentication, and has complete SSL support. --------------------------------------------------------------------- Update Information: Multiple format string vulnerabilities in neon 0.24.4 and earlier allow remote malicious WebDAV servers to execute arbitrary code. Updated packages were made available in April 2004 however the original update notification email did not make it to fedora-announce-list at that time. --------------------------------------------------------------------- * Wed Apr 14 2004 Joe Orton <jorton(a)redhat.com> 0.24.5-1 - update to 0.24.5 for CAN 2004-0179 fix * Thu Mar 25 2004 Joe Orton <jorton(a)redhat.com> 0.24.4-4 - implement the Negotate auth scheme, and only over SSL * Tue Mar 02 2004 Elliot Lee <sopwith(a)redhat.com> - rebuilt * Wed Feb 25 2004 Joe Orton <jorton(a)redhat.com> 0.24.4-3 - use BuildRequires not BuildPrereq, drop autoconf, libtool; -devel requires {openssl,zlib}-devel (#116744) * Fri Feb 13 2004 Elliot Lee <sopwith(a)redhat.com> 0.24.4-2 - rebuilt * Mon Feb 09 2004 Joe Orton <jorton(a)redhat.com> 0.24.4-1 - update to 0.24.4 --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/ f34a346e0d945707e888874699ed958a SRPMS/neon-0.24.5-1.src.rpm 4c3c9a53a1916566c3822e5ac9eed67d i386/neon-0.24.5-1.i386.rpm c00098bf0548dcf7e3f8ad1db90c78e8 i386/neon-devel-0.24.5-1.i386.rpm c6faddb460bff55de5571630324f5381 i386/debug/neon-debuginfo-0.24.5-1.i386.rpm e192a575ff1184e7ba35326a0ba84b5c x86_64/neon-0.24.5-1.x86_64.rpm 50d3157693574508440893e5dcf48ac3 x86_64/neon-devel-0.24.5-1.x86_64.rpm eb12e5f3ed12849c26b949ce7c3c5aa0 x86_64/debug/neon-debuginfo-0.24.5-1.x86_64.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. ---------------------------------------------------------------------

1 0

[SECURITY] Fedora Core 1 Update: mailman-2.1.4-1
by Mark Cox 14 May '04

14 May '04

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2004-060 2004-02-26 --------------------------------------------------------------------- Name : mailman Version : 2.1.4 Release : 1 Summary : Mailing list manager with built in Web access. Description : Mailman is software to help manage email discussion lists, much like Majordomo and Smartmail. Unlike most similar products, Mailman gives each mailing list a webpage, and allows users to subscribe, unsubscribe, etc. over the Web. Even the list manager can administer his or her list entirely from the Web. Mailman also integrates most things people want to do with mailing lists, including archiving, mail <-> news gateways, and so on. Documentation can be found in: /usr/share/doc/mailman-2.1.4 When the package has finished installing, you will need to perform some additional installation steps, these are described in: /usr/share/doc/mailman-2.1.4/INSTALL.REDHAT --------------------------------------------------------------------- Update Information: A cross-site scripting (XSS) vulnerability exists in the admin CGI script for Mailman before 2.1.4. This update moves Mailman to version 2.1.4 which is not vulnerable to this issue. Updated packages were made available in February 2004 however the original update notification email did not make it to fedora-announce-list at that time. --------------------------------------------------------------------- * Fri Jan 09 2004 John Dennis <jdennis(a)finch.boston.redhat.com> 3:2.1.4-1 - upgrade to new upstream release 2.1.4 - fixes bugs 106349,112851,105367,91463 --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/ 4b8e7161d1a2bb7f912efd294775b887 SRPMS/mailman-2.1.4-1.src.rpm 6e387ba96c1d651a55b329b0ab678824 i386/mailman-2.1.4-1.i386.rpm 60c4f5f77c01e8521c8079f00fadf1e8 i386/debug/mailman-debuginfo-2.1.4-1.i386.rpm c823903d2b33ce9ff794f5ba3c9d514d x86_64/mailman-2.1.4-1.x86_64.rpm 15a0c4d8f8069395602a40ee121eff0a x86_64/debug/mailman-debuginfo-2.1.4-1.x86_64.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. ---------------------------------------------------------------------

1 0

[SECURITY] Fedora Core 1 Update: lha-1.14i-12.1
by than 11 May '04

11 May '04

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2004-119 2004-05-11 --------------------------------------------------------------------- Name : lha Version : 1.14i Release : 12.1 Summary : An archiving and compression utility for LHarc format archives. Description : LHA is an archiving and compression utility for LHarc format archives. LHA is mostly used in the DOS world, but can be used under Linux to extract DOS files from LHA archives. Install the lha package if you need to extract DOS files from LHA archives. --------------------------------------------------------------------- Update Information: Ulf Härnhammar discovered two stack buffer overflows and two directory traversal flaws in LHA. An attacker could exploit the buffer overflows by creating a carefully crafted LHA archive in such a way that arbitrary code would be executed when the archive is tested or extracted by a victim. CAN-2004-0234. An attacker could exploit the directory traversal issues to create files as the victim outside of the expected directory. CAN-2004-0235. --------------------------------------------------------------------- * Wed May 05 2004 Than Ngo <than(a)redhat.com> 1.14i-12.1 - fix security vulnerabilities, CAN-2004-0234, CAN-2004-0235 --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/ 298cc75d90f489e4b71432bfb349162b SRPMS/lha-1.14i-12.1.src.rpm 57238f4d4ec1779fb54c8e36433f9351 i386/lha-1.14i-12.1.i386.rpm 242bf89b6fdc64405e4d9d33a1720934 i386/debug/lha-debuginfo-1.14i-12.1.i386.rpm 2aac21d1d3cc6b1c70d71e275c8f477c x86_64/lha-1.14i-12.1.x86_64.rpm f00e196233a73f4093856ecd29b921d4 x86_64/debug/lha-debuginfo-1.14i-12.1.x86_64.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. ---------------------------------------------------------------------

1 0

[SECURITY] Fedora Update Notification: iproute-2.4.7-13.2
by Phil Knirsch 11 May '04

11 May '04

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2004-115 2004-05-11 --------------------------------------------------------------------- Name : iproute Version : 2.4.7 Release : 13.2 Summary : Advanced IP routing and network device configuration tools. Description : The iproute package contains networking utilities (ip and rtmon, for example) which are designed to use the advanced networking capabilities of the Linux 2.4.x and 2.6.x kernel. --------------------------------------------------------------------- This update of the iproute package fixes a security problem found in netlink. See CAN-2003-0856. All users of the netlink application are very strongly advised to update to these latest packages. * Thu May 06 2004 Phil Knirsch <pknirsch(a)redhat.com> 2.4.7-13.2 - Built security errata version for FC1. * Wed Apr 21 2004 Phil Knirsch <pknirsch(a)redhat.com> 2.4.7-14 - Fixed -f option for ss (#118355). - Small description fix (#110997). - Added initialization of some vars (#74961). - Added patch to initialize "default" rule as well (#60693). * Fri Feb 13 2004 Elliot Lee <sopwith(a)redhat.com> - rebuilt * Wed Nov 05 2003 Phil Knirsch <pknirsch(a)redhat.com> 2.4.7-12 - Security errata for netlink (CAN-2003-0856). --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/ 742a66f04b4bb5f4e814908bd33fbdde SRPMS/iproute-2.4.7-13.2.src.rpm ece1fcf398e9e7b234584e942c08d6e1 i386/iproute-2.4.7-13.2.i386.rpm 842d74b8f79ebfe414a1ee1ca5f7ecc7 i386/debug/iproute-debuginfo-2.4.7-13.2.i386.rpm 738a0454d2d4f390d11fa484768dc7ce x86_64/iproute-2.4.7-13.2.x86_64.rpm 2a4e1ee78d017c593588ec0172159295 x86_64/debug/iproute-debuginfo-2.4.7-13.2.x86_64.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. --------------------------------------------------------------------- -- Philipp Knirsch | Tel.: +49-711-96437-470 Development | Fax.: +49-711-96437-111 Red Hat GmbH | Email: Phil Knirsch <phil(a)redhat.de> Hauptstaetterstr. 58 | Web: http://www.redhat.de/ D-70178 Stuttgart Motd: You're only jealous cos the little penguins are talking to me.

1 0

Fedora News Updates #11
by Colin Charles 06 May '04

06 May '04

Another issue of the Fedora News Updates has been released and is available at: http://fedoranews.org/colin/fnu/issue11.shtml The current issue is always linked to http://fedoranews.org/colin/fnu/current.shtml In this issue, we cover special features: statements from the Fedora Project Leader, Cristian Gafton, as well as the Fedora Legacy Project Lead, Jesse Keating. Fedora Core 2 Test 3 has been released, notes for it accompany, along with tips on getting dual-head video as well as webcams that work well with Fedora. There are plenty more updates, with regards to documents, new scripts, and ideas to tame the lists. -- Colin Charles, byte(a)aeon.com.my http://www.bytebot.net/

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

announce May 2004