A gdk-pixbuf security update is available for Fedora Core 3
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-266
2005-03-30
---------------------------------------------------------------------
Product : Fedora Core 3
Name : gdk-pixbuf
Version : 0.22.0
Release : 16.fc3
Summary : An image loading library used with GNOME.
Description :
The gdk-pixbuf package contains an image loading library used with the GNOME GUI desktop environment. The GdkPixBuf library provides image loading facilities, the rendering of a GdkPixBuf into various formats (drawables or GdkRGB buffers), and a cache interface.
A gdk-pixbuf security update is available for Fedora Core 2
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-265
2005-03-30
---------------------------------------------------------------------
Product : Fedora Core 2
Name : gdk-pixbuf
Version : 0.22.0
Release : 12.fc2
Summary : An image loading library used with GNOME.
Description :
The gdk-pixbuf package contains an image loading library used with the GNOME GUI desktop environment. The GdkPixBuf library provides image loading facilities, the rendering of a GdkPixBuf into various formats (drawables or GdkRGB buffers), and a cache interface.
An ImageMagick security update is available for Fedora Core 3
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-235
2005-03-30
---------------------------------------------------------------------
Product : Fedora Core 3
Name : ImageMagick
Version : 6.2.0.7
Release : 2.fc3
Summary : An X application for displaying and manipulating images.
Description :
ImageMagick(TM) is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed work in the original format or a different one. ImageMagick also includes command line programs for creating animated or transparent .gifs, creating composite images, creating thumbnail images, and more.
ImageMagick is one of your choices if you need a program to manipulate and dis play images. If you want to develop your own applications which use ImageMagick code or APIs, you need to install ImageMagick-devel as well.
An ImageMagick security update is available for Fedora Core 2
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-234
2005-03-30
---------------------------------------------------------------------
Product : Fedora Core 2
Name : ImageMagick
Version : 6.2.0.7
Release : 2.fc2
Summary : An X application for displaying and manipulating images.
Description :
ImageMagick(TM) is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed work in the original format or a different one. ImageMagick also includes command line programs for creating animated or transparent .gifs, creating composite images, creating thumbnail images, and more.
ImageMagick is one of your choices if you need a program to manipulate and dis play images. If you want to develop your own applications which use ImageMagick code or APIs, you need to install ImageMagick-devel as well.
A telnet security update is available for Fedora Core 3
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-277
2005-03-30
---------------------------------------------------------------------
Product : Fedora Core 2
Name : telnet
Version : 0.17
Release : 28.FC2.1
Summary : The client program for the telnet remote login protocol.
Description :
Telnet is a popular protocol for logging into remote systems over the Internet. The telnet package provides a command line telnet client.
A squid security update is available for Fedora Core 3
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-276
2005-03-30
---------------------------------------------------------------------
Product : Fedora Core 3
Name : squid
Version : 2.5.STABLE9
Release : 1.FC3.4
Summary : The Squid proxy caching server.
Description :
Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DNS lookups, supports non-blocking DNS lookups, and implements negative caching of failed requests.
Squid consists of a main server program squid, a Domain Name System lookup program (dnsserver), a program for retrieving FTP data (ftpget), and some management and client tools.
Note that squid-2.5.STABLE7 and later do not use /etc/squid/errors for error messages. If you do not want to use the default English error messages, you must set the error_directory in your /etc/squid/squid.conf to the appropriate subdirectory of /usr/share/squid/errors
A squid security update has been released for Fedora Core 2
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-275
2005-03-30
---------------------------------------------------------------------
Product : Fedora Core 2
Name : squid
Version : 2.5.STABLE9
Release : 1.FC2.2
Summary : The Squid proxy caching server.
Description :
Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DNS lookups, supports non-blocking DNS lookups, and implements negative caching of failed requests.
Squid consists of a main server program squid, a Domain Name System lookup program (dnsserver), a program for retrieving FTP data (ftpget), and some management and client tools.
Note that squid-2.5.STABLE7 and later do not use /etc/squid/errors for error messages. If you do not want to use the default English error messages, you must set the error_directory in your /etc/squid/squid.conf to the appropriate subdirectory of /usr/share/squid/errors
New foomatic packages are available for Fedora Core 3
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-149
2005-03-30
---------------------------------------------------------------------
Product : Fedora Core 3
Name : foomatic
Version : 3.0.2
Release : 13.3
Summary : Foomatic printer database.
Description :
Foomatic is a comprehensive, spooler-independent database of printers, printer drivers, and driver descriptions. It contains utilities to generate driver description files and printer queues for CUPS, LPD, LPRng, and PDQ using the database. There is also the possibility to read the PJL options out of PJL-capable laser printers and take them into account at the driver description file generation.
There are spooler-independent command line interfaces to manipulate queues (foomatic-configure) and to print files/manipulate jobs (foomatic printjob).
The site
http://www.linuxprinting.org/ is based on this database.
A telnet security update is available for Fedora Core 3
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-274
2005-03-30
---------------------------------------------------------------------
Product : Fedora Core 3
Name : telnet
Version : 0.17
Release : 32.FC3.2
Summary : The client program for the telnet remote login protocol.
Description :
Telnet is a popular protocol for logging into remote systems over the Internet. The telnet package provides a command line telnet client.
An updated system-config-services package has been released for Fedora Core 3
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-256
2005-03-30
---------------------------------------------------------------------
Product : Fedora Core 3
Name : system-config-services
Version : 0.8.21
Release : 0.fc3.1
Summary : system-config-services is an initscript and xinetd configuration utility
Description :
system-config-services is a utility which allows you to configure which services should be enabled on your machine.
A xorg security update is available for Fedora Core 3
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-272
2005-03-29
---------------------------------------------------------------------
Product : Fedora Core 2
Name : xorg-x11
Version : 6.7.0
Release : 14
Summary : The basic fonts, programs and docs for an X workstation.
Description :
X.org X11 is an open source implementation of the X Window System. It provides the basic low level functionality which full fledged graphical user interfaces (GUIs) such as GNOME and KDE are designed upon.
A xorg security update has been released for Fedora Core 3
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-273
2005-03-29
---------------------------------------------------------------------
Product : Fedora Core 3
Name : xorg-x11
Version : 6.8.2
Release : 1.FC3.13
Summary : The basic fonts, programs and docs for an X workstation.
Description :
X.org X11 is an open source implementation of the X Window System. It provides the basic low level functionality which full fledged graphical user interfaces (GUIs) such as GNOME and KDE are designed upon.
---------------------------------------------------------------------
Update Information:
An integer overflow flaw was found in libXpm, which is used by some applications for loading of XPM images. An attacker could create a malicious XPM file that would execute arbitrary code if opened by a victim using an application linked to the vulnerable library. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name
CAN-2005-0605 to this issue.
Futhermore, this updates the Fedora Core 3 X.org packages to the 6.8.2 maintenance release, which includes a large number of bug fixes:
http://xorg.freedesktop.org/wiki/X11R682Release
A krb5 update is available for Fedora Core 3
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-270
2005-03-29
---------------------------------------------------------------------
Product : Fedora Core 3
Name : krb5
Version : 1.3.6
Release : 5
Summary : The Kerberos network authentication system.
Description :
Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of cleartext passwords.
A krb5 update has been released for Fedora Core 2
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-269
2005-03-29
---------------------------------------------------------------------
Product : Fedora Core 2
Name : krb5
Version : 1.3.6
Release : 4
Summary : The Kerberos network authentication system.
Description :
Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of cleartext passwords.
An updated libaio packages is available for Fedora Core 3
----------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-147
2005-03-29
----------------------------------------------------------------------
Product : Fedora Core 3
Name : libaio
Version : 0.3.103
Release : 5
Summary : Linux-native asynchronous I/O access library
Description :
The Linux-native asynchronous I/O facility ("async I/O", or "aio") has a richer API and capability set than the simple POSIX async I/O facility. This library, libaio, provides the Linux-native API for async I/O. The POSIX async I/O facility requires this library in order to provide kernel-accelerated async I/O capabilities, as do applications which require the Linux-native async I/O API.
----------------------------------------------------------------------
Update Information:
The SONAME for libaio was inadvertantly changed from libaio.so.1 to libaio.so.1.0.0. While applications linked with libaio.so.1 would still load, they would fail upon looking up a symbol in libaio. This also introduced an RPM dependency that could not be solved. Application RPMs which were built against the old package would not install as well.
The solution for this was to revert the SONAME to its old value, and to provide a compat library for those packages that were built against the library with the wrong SONAME.
A sylpheed update has been released for Fedora Core 3
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-264
2005-03-29
---------------------------------------------------------------------
Product : Fedora Core 3
Name : sylpheed
Version : 1.0.4
Release : 0.fc3
Summary : A GTK+ based, lightweight, and fast email client.
Description :
This program is an X based fast email client which has features like:
o user-friendly and intuitive interface
o integrated NetNews client (partially implemented)
o ability of keyboard-only operation
o Mew/Wanderlust-like key bind
o multipart MIME
o unlimited multiple account handling
o message queueing
o assortment function
o XML-based address book
See /usr/share/doc/sylpheed*/README for more information.
A sylpheed update has been released for Fedora Core 2
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-263
2005-03-29
---------------------------------------------------------------------
Product : Fedora Core 2
Name : sylpheed
Version : 1.0.4
Release : 0.fc2
Summary : A GTK+ based, lightweight, and fast email client.
Description :
This program is an X based fast email client which has features like:
o user-friendly and intuitive interface
o integrated NetNews client (partially implemented)
o ability of keyboard-only operation
o Mew/Wanderlust-like key bind
o multipart MIME
o unlimited multiple account handling
o message queueing
o assortment function
o XML-based address book
See /usr/share/doc/sylpheed*/README for more information.
Updated mozilla packages are available for Fedora Core 2
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-271
2005-03-28
---------------------------------------------------------------------
Product : Fedora Core 2
Name : mozilla
Version : 1.7.6
Release : 1.2.5
Summary : Web browser and mail reader
Description :
Mozilla is an open-source web browser, designed for standards compliance, performance and portability.
---------------------------------------------------------------------
Update Information:
This update supercedes the previous 1.7.6-1.2.2 which mistakenly had dependencies on FC3.
OSNews has published hints and tips for Fedora Core x86-64
A spamassassin update has been released for Fedora Core 3
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-261
2005-03-28
---------------------------------------------------------------------
Product : Fedora Core 3
Name : spamassassin
Version : 3.0.2
Release : 0.fc3
Summary : Spam filter for email which can be invoked from mail
delivery agents.
Description :
SpamAssassin provides you with a way to reduce if not completely eliminate Unsolicited Commercial Email (SPAM) from your incoming email. It can be invoked by a MDA such as sendmail or postfix, or can be called from a procmail script, .forward file, etc. It uses a genetic-algorithm evolved scoring system to identify messages which look spammy, then adds headers to the message so they can be filtered by the user's mail reading software. This distribution includes the spamd/spamc components which create a server that considerably speeds processing of mail.
To enable spamassassin, if you are receiving mail locally, simply add this line to your ~/.procmailrc:
INCLUDERC=/etc/mail/spamassassin/spamassassin-default.rc
To filter spam for all users, add that line to /etc/procmailrc (creating if necessary).
