A sharutils security update has been released for Fedora Core 3
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-281
2005-04-01
---------------------------------------------------------------------
Product : Fedora Core 3
Name : sharutils
Version : 4.2.1
Release : 22.1.FC3
Summary : The GNU shar utilities for packaging and unpackaging shell
archives.
Description :
The sharutils package contains the GNU shar utilities, a set of tools for encoding and decoding packages of files (in binary or text format) in a special plain text format called shell archives (shar). This format can be sent through e-mail (which can be problematic for regular binary files). The shar utility supports a wide range of capabilities (compressing, uuencoding, splitting long files for multi-part mailings, providing checksums), which make it very flexible at creating shar files. After the files have been sent, the unshar tool scans mail messages looking for shar files. Unshar automatically strips off mail headers and introductory text and then unpacks the shar files.
Install sharutils if you send binary files through e-mail.
A sharutils security update has been released for Fedora Core 2
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-280
2005-04-01
---------------------------------------------------------------------
Product : Fedora Core 2
Name : sharutils
Version : 4.2.1
Release : 18.1.FC2
Summary : The GNU shar utilities for packaging and unpackaging shell
archives.
Description :
The sharutils package contains the GNU shar utilities, a set of tools for encoding and decoding packages of files (in binary or text format) in a special plain text format called shell archives (shar). This format can be sent through e-mail (which can be problematic for regular binary files). The shar utility supports a wide range of capabilities
(compressing, uuencoding, splitting long files for multi-part mailings, providing checksums), which make it very flexible at creating shar files. After the files have been sent, the unshar tool scans mail messages looking for shar files. Unshar automatically strips off mail headers and introductory text and then unpacks the shar files.
Install sharutils if you send binary files through e-mail.
A selinux-policy-targeted update has been released for Fedora Core 3
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-250
2005-03-30
---------------------------------------------------------------------
Product : Fedora Core 3
Name : selinux-policy-targeted
Version : 1.17.30
Release : 2.93
Summary : SELinux targeted policy configuration
Description :
Security-enhanced Linux is a patch of the Linux
kernel and a number of utilities with enhanced security functionality designed to add mandatory access controls to Linux. The Security-enhanced Linux kernel contains new architectural components originally developed to improve the security of the Flask operating system. These architectural components provide general support for the enforcement of many kinds of mandatory access control policies, including those based on the concepts of Type Enforcement
, Role-based Access
Control, and Multi-level Security.
This package contains the SELinux example policy configuration along with the Flask configuration information and the application configuration files.
An initscripts security update has been released for Fedora Core 3
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-279
2005-03-30
---------------------------------------------------------------------
Product : Fedora Core 3
Name : initscripts
Version : 7.93.7
Release : 1
Summary : The inittab file and the /etc/init.d scripts.
Description :
The initscripts package contains the basic system scripts used to boot your Red Hat system, change runlevels, and shut the system down cleanly. Initscripts also contains the scripts that activate and deactivate most network interfaces.
A gtk2 security update is available for Fedora Core 3
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-268
2005-03-30
---------------------------------------------------------------------
Product : Fedora Core 3
Name : gtk2
Version : 2.4.14
Release : 3.fc3
Summary : The GIMP ToolKit (GTK+), a library for creating GUIs for
X.
Description :
GTK+ is a multi-platform toolkit for creating graphical user interfaces. Offering a complete set of widgets, GTK+ is suitable for projects ranging from small one-off tools to complete application suites.
A gtk2 update is available for Fedora Core 2
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-267
2005-03-30
---------------------------------------------------------------------
Product : Fedora Core 2
Name : gtk2
Version : 2.4.14
Release : 2.fc2
Summary : The GIMP ToolKit (GTK+), a library for creating GUIs for
X.
Description :
GTK+ is a multi-platform toolkit for creating graphical user interfaces. Offering a complete set of widgets, GTK+ is suitable for projects ranging from small one-off tools to complete application suites.
A gdk-pixbuf security update is available for Fedora Core 3
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-266
2005-03-30
---------------------------------------------------------------------
Product : Fedora Core 3
Name : gdk-pixbuf
Version : 0.22.0
Release : 16.fc3
Summary : An image loading library used with GNOME.
Description :
The gdk-pixbuf package contains an image loading library used with the GNOME GUI desktop environment. The GdkPixBuf library provides image loading facilities, the rendering of a GdkPixBuf into various formats (drawables or GdkRGB buffers), and a cache interface.
A gdk-pixbuf security update is available for Fedora Core 2
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-265
2005-03-30
---------------------------------------------------------------------
Product : Fedora Core 2
Name : gdk-pixbuf
Version : 0.22.0
Release : 12.fc2
Summary : An image loading library used with GNOME.
Description :
The gdk-pixbuf package contains an image loading library used with the GNOME GUI desktop environment. The GdkPixBuf library provides image loading facilities, the rendering of a GdkPixBuf into various formats (drawables or GdkRGB buffers), and a cache interface.
An ImageMagick security update is available for Fedora Core 3
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-235
2005-03-30
---------------------------------------------------------------------
Product : Fedora Core 3
Name : ImageMagick
Version : 6.2.0.7
Release : 2.fc3
Summary : An X application for displaying and manipulating images.
Description :
ImageMagick(TM) is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed work in the original format or a different one. ImageMagick also includes command line programs for creating animated or transparent .gifs, creating composite images, creating thumbnail images, and more.
ImageMagick is one of your choices if you need a program to manipulate and dis play images. If you want to develop your own applications which use ImageMagick code or APIs, you need to install ImageMagick-devel as well.
An ImageMagick security update is available for Fedora Core 2
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-234
2005-03-30
---------------------------------------------------------------------
Product : Fedora Core 2
Name : ImageMagick
Version : 6.2.0.7
Release : 2.fc2
Summary : An X application for displaying and manipulating images.
Description :
ImageMagick(TM) is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed work in the original format or a different one. ImageMagick also includes command line programs for creating animated or transparent .gifs, creating composite images, creating thumbnail images, and more.
ImageMagick is one of your choices if you need a program to manipulate and dis play images. If you want to develop your own applications which use ImageMagick code or APIs, you need to install ImageMagick-devel as well.
A telnet security update is available for Fedora Core 3
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-277
2005-03-30
---------------------------------------------------------------------
Product : Fedora Core 2
Name : telnet
Version : 0.17
Release : 28.FC2.1
Summary : The client program for the telnet remote login protocol.
Description :
Telnet is a popular protocol for logging into remote systems over the Internet. The telnet package provides a command line telnet client.
A squid security update is available for Fedora Core 3
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-276
2005-03-30
---------------------------------------------------------------------
Product : Fedora Core 3
Name : squid
Version : 2.5.STABLE9
Release : 1.FC3.4
Summary : The Squid proxy caching server.
Description :
Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DNS lookups, supports non-blocking DNS lookups, and implements negative caching of failed requests.
Squid consists of a main server program squid, a Domain Name System lookup program (dnsserver), a program for retrieving FTP data (ftpget), and some management and client tools.
Note that squid-2.5.STABLE7 and later do not use /etc/squid/errors for error messages. If you do not want to use the default English error messages, you must set the error_directory in your /etc/squid/squid.conf to the appropriate subdirectory of /usr/share/squid/errors
A squid security update has been released for Fedora Core 2
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-275
2005-03-30
---------------------------------------------------------------------
Product : Fedora Core 2
Name : squid
Version : 2.5.STABLE9
Release : 1.FC2.2
Summary : The Squid proxy caching server.
Description :
Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DNS lookups, supports non-blocking DNS lookups, and implements negative caching of failed requests.
Squid consists of a main server program squid, a Domain Name System lookup program (dnsserver), a program for retrieving FTP data (ftpget), and some management and client tools.
Note that squid-2.5.STABLE7 and later do not use /etc/squid/errors for error messages. If you do not want to use the default English error messages, you must set the error_directory in your /etc/squid/squid.conf to the appropriate subdirectory of /usr/share/squid/errors
New foomatic packages are available for Fedora Core 3
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-149
2005-03-30
---------------------------------------------------------------------
Product : Fedora Core 3
Name : foomatic
Version : 3.0.2
Release : 13.3
Summary : Foomatic printer database.
Description :
Foomatic is a comprehensive, spooler-independent database of printers, printer drivers, and driver descriptions. It contains utilities to generate driver description files and printer queues for CUPS, LPD, LPRng, and PDQ using the database. There is also the possibility to read the PJL options out of PJL-capable laser printers and take them into account at the driver description file generation.
There are spooler-independent command line interfaces to manipulate queues (foomatic-configure) and to print files/manipulate jobs (foomatic printjob).
The site
http://www.linuxprinting.org/ is based on this database.
A telnet security update is available for Fedora Core 3
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-274
2005-03-30
---------------------------------------------------------------------
Product : Fedora Core 3
Name : telnet
Version : 0.17
Release : 32.FC3.2
Summary : The client program for the telnet remote login protocol.
Description :
Telnet is a popular protocol for logging into remote systems over the Internet. The telnet package provides a command line telnet client.
An updated system-config-services package has been released for Fedora Core 3
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-256
2005-03-30
---------------------------------------------------------------------
Product : Fedora Core 3
Name : system-config-services
Version : 0.8.21
Release : 0.fc3.1
Summary : system-config-services is an initscript and xinetd configuration utility
Description :
system-config-services is a utility which allows you to configure which services should be enabled on your machine.
A xorg security update is available for Fedora Core 3
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-272
2005-03-29
---------------------------------------------------------------------
Product : Fedora Core 2
Name : xorg-x11
Version : 6.7.0
Release : 14
Summary : The basic fonts, programs and docs for an X workstation.
Description :
X.org X11 is an open source implementation of the X Window System. It provides the basic low level functionality which full fledged graphical user interfaces (GUIs) such as GNOME and KDE are designed upon.
A xorg security update has been released for Fedora Core 3
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-273
2005-03-29
---------------------------------------------------------------------
Product : Fedora Core 3
Name : xorg-x11
Version : 6.8.2
Release : 1.FC3.13
Summary : The basic fonts, programs and docs for an X workstation.
Description :
X.org X11 is an open source implementation of the X Window System. It provides the basic low level functionality which full fledged graphical user interfaces (GUIs) such as GNOME and KDE are designed upon.
---------------------------------------------------------------------
Update Information:
An integer overflow flaw was found in libXpm, which is used by some applications for loading of XPM images. An attacker could create a malicious XPM file that would execute arbitrary code if opened by a victim using an application linked to the vulnerable library. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name
CAN-2005-0605 to this issue.
Futhermore, this updates the Fedora Core 3 X.org packages to the 6.8.2 maintenance release, which includes a large number of bug fixes:
http://xorg.freedesktop.org/wiki/X11R682Release
A krb5 update is available for Fedora Core 3
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-270
2005-03-29
---------------------------------------------------------------------
Product : Fedora Core 3
Name : krb5
Version : 1.3.6
Release : 5
Summary : The Kerberos network authentication system.
Description :
Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of cleartext passwords.
A krb5 update has been released for Fedora Core 2
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-269
2005-03-29
---------------------------------------------------------------------
Product : Fedora Core 2
Name : krb5
Version : 1.3.6
Release : 4
Summary : The Kerberos network authentication system.
Description :
Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of cleartext passwords.
