Scientific Linux Errata 40rolling ia64

Update: perl-suidperl-5.8.5-36.RHEL4

Thu, 10 Aug 2006 08:56:26 +0000

Package: perl-suidperl-5.8.5-36.RHEL4
Summary: suidperl, for use with setuid perl scripts

Description:
suidperl is a setuid binary copy of perl that allows for (hopefully) more secure running of setuid perl scripts.

ChangeLog:

* Mon Jul 24 05:00:00 2006 Jason Vas Dias <jvdias{%}redhat{*}com> - 3:5.8.5-36.RHEL-4

- fix bug 199916 / CVE-2005-0155 - disable PERLIO_DEBUG under setuid perl

* Thu May 11 05:00:00 2006 Jason Vas Dias <jvdias{%}redhat{*}com> - 3:5.8.5-34.RHEL4

- fix errata testing issue - bug 191409, upstream perlbug 39130:
  o prevent h2ph emitting incorrect code for '#if defined A || defined B'

* Wed May 10 05:00:00 2006 Jason Vas Dias <jvdias{%}redhat{*}com> - 3:5.8.5-30.RHEL4

- fix errata testing issues:
  o bug 161305 localtime_r_needs_tzset incorrectly not set on 64-bit arches
  o generate perl headers correctly to avoid missing / unresolved headers

(More info)

Update: perl-5.8.5-36.RHEL4

Thu, 10 Aug 2006 08:56:26 +0000

Package: perl-5.8.5-36.RHEL4
Summary: The Perl programming language.

Description:
Perl is a high-level programming language with roots in C, sed, awk and shell scripting. Perl is good at handling processes and files, and is especially good at handling text. Perl's hallmarks are practicality and efficiency. While it is used to do a lot of different things, Perl's most common applications are system administration utilities and web programming. A large proportion of the CGI scripts on the web are written in Perl. You need the perl package installed on your system so that your system can handle Perl scripts. Install this package if you want to program in Perl or enable your system to handle Perl scripts.

ChangeLog:

* Mon Jul 24 05:00:00 2006 Jason Vas Dias <jvdias{%}redhat{*}com> - 3:5.8.5-36.RHEL-4

- fix bug 199916 / CVE-2005-0155 - disable PERLIO_DEBUG under setuid perl

* Thu May 11 05:00:00 2006 Jason Vas Dias <jvdias{%}redhat{*}com> - 3:5.8.5-34.RHEL4

- fix errata testing issue - bug 191409, upstream perlbug 39130:
  o prevent h2ph emitting incorrect code for '#if defined A || defined B'

* Wed May 10 05:00:00 2006 Jason Vas Dias <jvdias{%}redhat{*}com> - 3:5.8.5-30.RHEL4

- fix errata testing issues:
  o bug 161305 localtime_r_needs_tzset incorrectly not set on 64-bit arches
  o generate perl headers correctly to avoid missing / unresolved headers

(More info)

Update: ntp-4.2.0.a.20040617-4.EL4.1

Thu, 10 Aug 2006 07:56:02 +0000

Package: ntp-4.2.0.a.20040617-4.EL4.1
Summary: Synchronizes system time using the Network Time Protocol (NTP).

Description:
The Network Time Protocol (NTP) is used to synchronize a computer's time with another reference time source. The ntp package contains utilities and daemons that will synchronize your computer's time to Coordinated Universal Time (UTC) via the NTP protocol and NTP servers. The ntp package includes ntpdate (a program for retrieving the date and time from remote machines via a network) and ntpd (a daemon which continuously adjusts system time). Install the ntp package if you need tools for keeping your system's time synchronized via the NTP protocol.

ChangeLog:

* Thu Apr 20 05:00:00 2006 Miroslav Lichvar <mlichvar{%}redhat{*}com> - 4.2.0.a.20040617-4.EL4.1

- increase RLIMIT_MEMLOCK (#177052)
- fix post scriptlet (#166773)
- fix initscript (#142926, #187003)
- replace -T with -i in ntpd manpage (#168220)
- add option to sync hwclock after ntpdate (#179571)

* Thu Apr 14 05:00:00 2005 Jiri Ryska <jryska{%}redhat{*}com> - 4.2.0.a.20040617-4.EL4

- fixed gid setting when ntpd started with -u flag (#149652)

* Mon Oct 11 05:00:00 2004 Harald Hoyer <harald{%}redhat{*}com> - 4.2.0.a.20040617-4

- removed firewall hole punching from the initscript; rely on iptables
  ESTABLISHED,RELATED or manual firewall configuration

(More info)

Update: kdebase-devel-3.3.1-5.13

Thu, 10 Aug 2006 05:58:44 +0000

Package: kdebase-devel-3.3.1-5.13
Summary: Development files for kdebase

Description:
Header files for developing applications using kdebase. Install kdebase-devel if you want to develop or compile Konqueror, Kate plugins or KWin styles.

ChangeLog:

* Wed Jun 14 05:00:00 2006 Than Ngo <than{%}redhat{*}com> 6:3.3.1-5.13

- kstart --tosystray does not send window to the system tray in Kicker,
  apply patch to fix this issue #182452
- apply patch to let klipper ignore selections in firefox/Gecko, random freezes #169459
- apply patch to make fish kioslave working #177743
- apply patch to fix local root vulnerability in kcheckpass #166995, CVE-2005-2494

* Mon Jun 12 05:00:00 2006 Than Ngo <than{%}redhat{*}com> 6:3.3.1-5.12

- apply patch to to fix #194659, CVE-2006-2449 KDM symlink attack vulnerability
  thanks to KDE security team

* Mon Jun 13 05:00:00 2005 Than Ngo <than{%}redhat{*}com> 6:3.3.1-5.8

- update pam configuration for the new audit system #159333

(More info)

Update: kdebase-3.3.1-5.13

Thu, 10 Aug 2006 05:58:44 +0000

Package: kdebase-3.3.1-5.13
Summary: K Desktop Environment - core files

Description:
Core applications for the K Desktop Environment. Included are: kdm (replacement for xdm), kwin (window manager), konqueror (filemanager, web browser, ftp client, ...), konsole (xterm replacement), kpanel (application starter and desktop pager), kaudio (audio server), kdehelp (viewer for kde help files, info and man pages), kthememgr (system for managing alternate theme packages) plus other KDE components (kcheckpass, kikbd, kscreensaver, kcontrol, kfind, kfontmanager, kmenuedit).

ChangeLog:

* Wed Jun 14 05:00:00 2006 Than Ngo <than{%}redhat{*}com> 6:3.3.1-5.13

- kstart --tosystray does not send window to the system tray in Kicker,
  apply patch to fix this issue #182452
- apply patch to let klipper ignore selections in firefox/Gecko, random freezes #169459
- apply patch to make fish kioslave working #177743
- apply patch to fix local root vulnerability in kcheckpass #166995, CVE-2005-2494

* Mon Jun 12 05:00:00 2006 Than Ngo <than{%}redhat{*}com> 6:3.3.1-5.12

- apply patch to to fix #194659, CVE-2006-2449 KDM symlink attack vulnerability
  thanks to KDE security team

* Mon Jun 13 05:00:00 2005 Than Ngo <than{%}redhat{*}com> 6:3.3.1-5.8

- update pam configuration for the new audit system #159333

(More info)

Update: elfutils-0.97.1-3

Wed, 09 Aug 2006 09:49:40 +0000

Package: elfutils-0.97.1-3
Summary: A collection of utilities and DSOs to handle compiled objects.

Description:
Elfutils is a collection of utilities, including ld (a linker), nm (for listing symbols from object files), size (for listing the section sizes of an object or archive file), strip (for discarding symbols), readelf (to see the raw ELF file structures), and elflint (to check for well-formed ELF files). Also included are numerous helper libraries which implement DWARF, ELF, and machine-specific ELF handling.

ChangeLog:

* Sun Apr 16 05:00:00 2006 Roland McGrath <roland{%}redhat{*}com> - 0.97.1-3

- Backport more robustification fixes (#159888).

* Tue Apr 11 05:00:00 2006 Roland McGrath <roland{%}redhat{*}com> - 0.97.1-1

- Code relicensed under GPLv2.

* Mon Aug 1 05:00:00 2005 Roland McGrath <roland{%}redhat{*}com> - 0.97-8

- eu-strip: fix ET_REL debuginfo files (#156342)

(More info)

Update: elfutils-libelf-0.97.1-3

Wed, 09 Aug 2006 09:49:40 +0000

Package: elfutils-libelf-0.97.1-3
Summary: Library to read and write ELF files.

Description:
The elfutils-libelf package provides a DSO which allows reading and writing ELF files on a high level. Third party programs depend on this package to read internals of ELF files. The programs of the elfutils package use it also to generate new ELF files.

ChangeLog:

* Sun Apr 16 05:00:00 2006 Roland McGrath <roland{%}redhat{*}com> - 0.97.1-3

- Backport more robustification fixes (#159888).

* Tue Apr 11 05:00:00 2006 Roland McGrath <roland{%}redhat{*}com> - 0.97.1-1

- Code relicensed under GPLv2.

* Mon Aug 1 05:00:00 2005 Roland McGrath <roland{%}redhat{*}com> - 0.97-8

- eu-strip: fix ET_REL debuginfo files (#156342)

(More info)

Update: elfutils-devel-0.97.1-3

Wed, 09 Aug 2006 09:49:40 +0000

Package: elfutils-devel-0.97.1-3
Summary: Development libraries to handle compiled objects.

Description:
The elfutils-devel package contains the libraries to create applications for handling compiled objects. libebl provides some higher-level ELF access functionality.

ChangeLog:

* Sun Apr 16 05:00:00 2006 Roland McGrath <roland{%}redhat{*}com> - 0.97.1-3

- Backport more robustification fixes (#159888).

* Tue Apr 11 05:00:00 2006 Roland McGrath <roland{%}redhat{*}com> - 0.97.1-1

- Code relicensed under GPLv2.

* Mon Aug 1 05:00:00 2005 Roland McGrath <roland{%}redhat{*}com> - 0.97-8

- eu-strip: fix ET_REL debuginfo files (#156342)

(More info)

Update: libtiff-3.6.1-12

Wed, 02 Aug 2006 04:31:43 +0000

Package: libtiff-3.6.1-12
Summary: A library of functions for manipulating TIFF format image files.

Description:
The libtiff package contains a library of functions for manipulating TIFF (Tagged Image File Format) image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if you need to manipulate TIFF format image files.

ChangeLog:

* Mon Jul 24 05:00:00 2006 Matthias Clasen <mclasen{%}redhat{*}com>

- Fix several vulnerabilities (CVE-2006-3460 CVE-2006-3461
  CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)

* Thu May 25 05:00:00 2006 Matthias Clasen <mclasen{%}redhat{*}com>

- Fix an overflow in tiffsplit (#193166)

* Wed Apr 26 05:00:00 2006 Matthias Clasen <mclasen{%}redhat{*}com> 3.6.1-9

- fix multiple vulnerabilities (#189933, #189974, CVE-2006-2024)

(More info)

Update: libtiff-devel-3.6.1-12

Wed, 02 Aug 2006 04:31:43 +0000

Package: libtiff-devel-3.6.1-12
Summary: Development tools for programs which will use the libtiff library.

Description:
This package contains the header files and static libraries for developing programs which will manipulate TIFF format image files using the libtiff library. If you need to develop programs which will manipulate TIFF format image files, you should install this package. You'll also need to install the libtiff package.

ChangeLog:

* Mon Jul 24 05:00:00 2006 Matthias Clasen <mclasen{%}redhat{*}com>

- Fix several vulnerabilities (CVE-2006-3460 CVE-2006-3461
  CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)

* Thu May 25 05:00:00 2006 Matthias Clasen <mclasen{%}redhat{*}com>

- Fix an overflow in tiffsplit (#193166)

* Wed Apr 26 05:00:00 2006 Matthias Clasen <mclasen{%}redhat{*}com> 3.6.1-9

- fix multiple vulnerabilities (#189933, #189974, CVE-2006-2024)

(More info)

Update: gnupg-1.2.6-6

Wed, 02 Aug 2006 04:30:52 +0000

Package: gnupg-1.2.6-6
Summary: A GNU utility for secure communication and data storage.

Description:
GnuPG (GNU Privacy Guard) is a GNU utility for encrypting data and creating digital signatures. GnuPG has advanced key management capabilities and is compliant with the proposed OpenPGP Internet standard described in RFC2440. Since GnuPG doesn't use any patented algorithm, it is not compatible with any version of PGP2 (PGP2.x uses only IDEA for symmetric-key encryption, which is patented worldwide).

ChangeLog:

* Wed Jun 28 05:00:00 2006 Nalin Dahyabhai <nalin{%}redhat{*}com> - 1.2.6-6

- backport fixes for two more malloc overflows from 1.4.5rc1 (#200502)

* Tue Jun 20 05:00:00 2006 Nalin Dahyabhai <nalin{%}redhat{*}com> - 1.2.6-5

- add patch from upstream to fix CVE-2006-3082 (#195945)

* Tue Apr 25 05:00:00 2006 Nalin Dahyabhai <nalin{%}redhat{*}com> 1.2.6-4

- create the "home directory" if we fail to create a lock due to it not
  existing (#142206)

(More info)

Update: firefox-1.5.0.5-0.el4.1

Mon, 31 Jul 2006 07:16:56 +0000

Package: firefox-1.5.0.5-0.el4.1
Summary: Mozilla Firefox Web browser.

Description:
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability.

ChangeLog:

* Wed Jul 26 05:00:00 2006 Christopher Aillon <caillon{%}redhat{*}com> - 1.5.0.5-0.el4.1

- Update to 1.5.0.5

* Fri May 26 05:00:00 2006 Christopher Aillon <caillon{%}redhat{*}com> - 1.5.0.3-0.2.EL4

- Rebuild to fix an issue with the wrapper script sometimes not launching
  a browser

* Mon May 8 05:00:00 2006 Christopher Aillon <caillon{%}redhat{*}com> - 1.5.0.3-0.1.EL4

- Build this on RHEL4

(More info)

Update: ruby-devel-1.8.1-7.EL4.6

Fri, 28 Jul 2006 02:59:23 +0000

Package: ruby-devel-1.8.1-7.EL4.6
Summary: A Ruby development environment.

Description:
Header files and libraries for building a extension library for the Ruby or an application embedded Ruby.

ChangeLog:

* Thu Jul 20 05:00:00 2006 Akira TAGOH <tagoh{%}redhat{*}com> - 1.8.1-7.EL4.6

- security fixes [CVE-2006-3694]
  - fixed the insecure operations on Dir and Regexp in the certain safe-level
    restrictions. (#199539)
  - fixed to not bypass the certain safe-level restrictions. (#199545)

* Fri May 12 05:00:00 2006 Akira TAGOH <tagoh{%}redhat{*}com> - 1.8.1-7.EL4.4

- ruby-magic-setjmp.patch: backported to fix unstable GC on ia64.
  [ruby-talk:144939] (#190805)

* Fri Apr 21 05:00:00 2006 Akira TAGOH <tagoh{%}redhat{*}com> - 1.8.1-7.EL4.3

- security fix [CVE-2006-1931]
- ruby-1.8.2-webrick-dos-1.patch: a patch to read data with non-blocking I/O.
- ruby-1.8.2-xmlrpc-dos-1.patch: a patch to use WEBrick's HTTPServer class to
  avoid the above issue as well.

(More info)

Update: ruby-1.8.1-7.EL4.6

Fri, 28 Jul 2006 02:59:23 +0000

Package: ruby-1.8.1-7.EL4.6
Summary: An interpreter of object-oriented scripting language

Description:
Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks (as in Perl). It is simple, straight-forward, and extensible.

ChangeLog:

* Thu Jul 20 05:00:00 2006 Akira TAGOH <tagoh{%}redhat{*}com> - 1.8.1-7.EL4.6

- security fixes [CVE-2006-3694]
  - fixed the insecure operations on Dir and Regexp in the certain safe-level
    restrictions. (#199539)
  - fixed to not bypass the certain safe-level restrictions. (#199545)

* Fri May 12 05:00:00 2006 Akira TAGOH <tagoh{%}redhat{*}com> - 1.8.1-7.EL4.4

- ruby-magic-setjmp.patch: backported to fix unstable GC on ia64.
  [ruby-talk:144939] (#190805)

* Fri Apr 21 05:00:00 2006 Akira TAGOH <tagoh{%}redhat{*}com> - 1.8.1-7.EL4.3

- security fix [CVE-2006-1931]
- ruby-1.8.2-webrick-dos-1.patch: a patch to read data with non-blocking I/O.
- ruby-1.8.2-xmlrpc-dos-1.patch: a patch to use WEBrick's HTTPServer class to
  avoid the above issue as well.

(More info)

Update: irb-1.8.1-7.EL4.6

Fri, 28 Jul 2006 02:59:23 +0000

Package: irb-1.8.1-7.EL4.6
Summary: The Interactive Ruby.

Description:
The irb is acronym for Interactive Ruby. It evaluates ruby expression from the terminal.

ChangeLog:

* Thu Jul 20 05:00:00 2006 Akira TAGOH <tagoh{%}redhat{*}com> - 1.8.1-7.EL4.6

- security fixes [CVE-2006-3694]
  - fixed the insecure operations on Dir and Regexp in the certain safe-level
    restrictions. (#199539)
  - fixed to not bypass the certain safe-level restrictions. (#199545)

* Fri May 12 05:00:00 2006 Akira TAGOH <tagoh{%}redhat{*}com> - 1.8.1-7.EL4.4

- ruby-magic-setjmp.patch: backported to fix unstable GC on ia64.
  [ruby-talk:144939] (#190805)

* Fri Apr 21 05:00:00 2006 Akira TAGOH <tagoh{%}redhat{*}com> - 1.8.1-7.EL4.3

- security fix [CVE-2006-1931]
- ruby-1.8.2-webrick-dos-1.patch: a patch to read data with non-blocking I/O.
- ruby-1.8.2-xmlrpc-dos-1.patch: a patch to use WEBrick's HTTPServer class to
  avoid the above issue as well.

(More info)

Update: ruby-mode-1.8.1-7.EL4.6

Fri, 28 Jul 2006 02:59:23 +0000

Package: ruby-mode-1.8.1-7.EL4.6
Summary: Emacs Lisp ruby-mode for the scripting language Ruby

Description:
Emacs Lisp ruby-mode for the object-oriented scripting language Ruby.

ChangeLog:

* Thu Jul 20 05:00:00 2006 Akira TAGOH <tagoh{%}redhat{*}com> - 1.8.1-7.EL4.6

- security fixes [CVE-2006-3694]
  - fixed the insecure operations on Dir and Regexp in the certain safe-level
    restrictions. (#199539)
  - fixed to not bypass the certain safe-level restrictions. (#199545)

* Fri May 12 05:00:00 2006 Akira TAGOH <tagoh{%}redhat{*}com> - 1.8.1-7.EL4.4

- ruby-magic-setjmp.patch: backported to fix unstable GC on ia64.
  [ruby-talk:144939] (#190805)

* Fri Apr 21 05:00:00 2006 Akira TAGOH <tagoh{%}redhat{*}com> - 1.8.1-7.EL4.3

- security fix [CVE-2006-1931]
- ruby-1.8.2-webrick-dos-1.patch: a patch to read data with non-blocking I/O.
- ruby-1.8.2-xmlrpc-dos-1.patch: a patch to use WEBrick's HTTPServer class to
  avoid the above issue as well.

(More info)

Update: ruby-tcltk-1.8.1-7.EL4.6

Fri, 28 Jul 2006 02:59:23 +0000

Package: ruby-tcltk-1.8.1-7.EL4.6
Summary: Tcl/Tk interface for scripting language Ruby.

Description:
Tcl/Tk interface for the object-oriented scripting language Ruby.

ChangeLog:

* Thu Jul 20 05:00:00 2006 Akira TAGOH <tagoh{%}redhat{*}com> - 1.8.1-7.EL4.6

- security fixes [CVE-2006-3694]
  - fixed the insecure operations on Dir and Regexp in the certain safe-level
    restrictions. (#199539)
  - fixed to not bypass the certain safe-level restrictions. (#199545)

* Fri May 12 05:00:00 2006 Akira TAGOH <tagoh{%}redhat{*}com> - 1.8.1-7.EL4.4

- ruby-magic-setjmp.patch: backported to fix unstable GC on ia64.
  [ruby-talk:144939] (#190805)

* Fri Apr 21 05:00:00 2006 Akira TAGOH <tagoh{%}redhat{*}com> - 1.8.1-7.EL4.3

- security fix [CVE-2006-1931]
- ruby-1.8.2-webrick-dos-1.patch: a patch to read data with non-blocking I/O.
- ruby-1.8.2-xmlrpc-dos-1.patch: a patch to use WEBrick's HTTPServer class to
  avoid the above issue as well.

(More info)

Update: ruby-libs-1.8.1-7.EL4.6

Fri, 28 Jul 2006 02:59:23 +0000

Package: ruby-libs-1.8.1-7.EL4.6
Summary: Libraries necessary to run Ruby.

Description:
This package includes the libruby, necessary to run Ruby.

ChangeLog:

* Thu Jul 20 05:00:00 2006 Akira TAGOH <tagoh{%}redhat{*}com> - 1.8.1-7.EL4.6

- security fixes [CVE-2006-3694]
  - fixed the insecure operations on Dir and Regexp in the certain safe-level
    restrictions. (#199539)
  - fixed to not bypass the certain safe-level restrictions. (#199545)

* Fri May 12 05:00:00 2006 Akira TAGOH <tagoh{%}redhat{*}com> - 1.8.1-7.EL4.4

- ruby-magic-setjmp.patch: backported to fix unstable GC on ia64.
  [ruby-talk:144939] (#190805)

* Fri Apr 21 05:00:00 2006 Akira TAGOH <tagoh{%}redhat{*}com> - 1.8.1-7.EL4.3

- security fix [CVE-2006-1931]
- ruby-1.8.2-webrick-dos-1.patch: a patch to read data with non-blocking I/O.
- ruby-1.8.2-xmlrpc-dos-1.patch: a patch to use WEBrick's HTTPServer class to
  avoid the above issue as well.

(More info)

Update: ruby-docs-1.8.1-7.EL4.6

Fri, 28 Jul 2006 02:59:23 +0000

Package: ruby-docs-1.8.1-7.EL4.6
Summary: Manuals and FAQs for scripting language Ruby.

Description:
Manuals and FAQs for the object-oriented scripting language Ruby.

ChangeLog:

* Thu Jul 20 05:00:00 2006 Akira TAGOH <tagoh{%}redhat{*}com> - 1.8.1-7.EL4.6

- security fixes [CVE-2006-3694]
  - fixed the insecure operations on Dir and Regexp in the certain safe-level
    restrictions. (#199539)
  - fixed to not bypass the certain safe-level restrictions. (#199545)

* Fri May 12 05:00:00 2006 Akira TAGOH <tagoh{%}redhat{*}com> - 1.8.1-7.EL4.4

- ruby-magic-setjmp.patch: backported to fix unstable GC on ia64.
  [ruby-talk:144939] (#190805)

* Fri Apr 21 05:00:00 2006 Akira TAGOH <tagoh{%}redhat{*}com> - 1.8.1-7.EL4.3

- security fix [CVE-2006-1931]
- ruby-1.8.2-webrick-dos-1.patch: a patch to read data with non-blocking I/O.
- ruby-1.8.2-xmlrpc-dos-1.patch: a patch to use WEBrick's HTTPServer class to
  avoid the above issue as well.

(More info)

Update: samba-common-3.0.10-1.4E.6.2

Wed, 26 Jul 2006 04:04:05 +0000

Package: samba-common-3.0.10-1.4E.6.2
Summary: Files used by both Samba servers and clients.

Description:
Samba-common provides files necessary for both the server and client packages of Samba.

ChangeLog:

* Thu Jul 13 05:00:00 2006 Jay Fenlason <fenlason{%}redhat{*}com> 3.0.10-1.4E.6.1

- Include backported patch from upstream to fix
  bz#197836 CVE-2006-3403 Samba denial of service

* Wed Dec 21 04:00:00 2005 Jay Fenlason <fenlason{%}redhat{*}com> 3.0.10-1.4E.6

- Respin, backing out the ldap-failover-timeout-backport patch for RHEL4U3

* Wed Dec 21 04:00:00 2005 Jay Fenlason <fenlason{%}redhat{*}com> 3.0.10-1.4E.5

- Respin

(More info)

Update: samba-3.0.10-1.4E.6.2

Wed, 26 Jul 2006 04:04:05 +0000

Package: samba-3.0.10-1.4E.6.2
Summary: The Samba SMB server.

Description:
Samba is the protocol by which a lot of PC-related machines share files, printers, and other information (such as lists of available files and printers). The Windows NT, OS/2, and Linux operating systems support this natively, and add-on packages can enable the same thing for DOS, Windows, VMS, UNIX of all kinds, MVS, and more. This package provides an SMB server that can be used to provide network services to SMB (sometimes called "Lan Manager") clients. Samba uses NetBIOS over TCP/IP (NetBT) protocols and does NOT need the NetBEUI (Microsoft Raw NetBIOS frame) protocol.

ChangeLog:

* Thu Jul 13 05:00:00 2006 Jay Fenlason <fenlason{%}redhat{*}com> 3.0.10-1.4E.6.1

- Include backported patch from upstream to fix
  bz#197836 CVE-2006-3403 Samba denial of service

* Wed Dec 21 04:00:00 2005 Jay Fenlason <fenlason{%}redhat{*}com> 3.0.10-1.4E.6

- Respin, backing out the ldap-failover-timeout-backport patch for RHEL4U3

* Wed Dec 21 04:00:00 2005 Jay Fenlason <fenlason{%}redhat{*}com> 3.0.10-1.4E.5

- Respin

(More info)

Update: samba-client-3.0.10-1.4E.6.2

Wed, 26 Jul 2006 04:04:05 +0000

Package: samba-client-3.0.10-1.4E.6.2
Summary: Samba (SMB) client programs.

Description:
The samba-client package provides some SMB clients to compliment the built-in SMB filesystem in Linux. These clients allow access of SMB shares and printing to SMB printers.

ChangeLog:

* Thu Jul 13 05:00:00 2006 Jay Fenlason <fenlason{%}redhat{*}com> 3.0.10-1.4E.6.1

- Include backported patch from upstream to fix
  bz#197836 CVE-2006-3403 Samba denial of service

* Wed Dec 21 04:00:00 2005 Jay Fenlason <fenlason{%}redhat{*}com> 3.0.10-1.4E.6

- Respin, backing out the ldap-failover-timeout-backport patch for RHEL4U3

* Wed Dec 21 04:00:00 2005 Jay Fenlason <fenlason{%}redhat{*}com> 3.0.10-1.4E.5

- Respin

(More info)

Update: samba-swat-3.0.10-1.4E.6.2

Wed, 26 Jul 2006 04:04:05 +0000

Package: samba-swat-3.0.10-1.4E.6.2
Summary: The Samba SMB server configuration program.

Description:
The samba-swat package includes the new SWAT (Samba Web Administration Tool), for remotely managing Samba's smb.conf file using your favorite Web browser.

ChangeLog:

* Thu Jul 13 05:00:00 2006 Jay Fenlason <fenlason{%}redhat{*}com> 3.0.10-1.4E.6.1

- Include backported patch from upstream to fix
  bz#197836 CVE-2006-3403 Samba denial of service

* Wed Dec 21 04:00:00 2005 Jay Fenlason <fenlason{%}redhat{*}com> 3.0.10-1.4E.6

- Respin, backing out the ldap-failover-timeout-backport patch for RHEL4U3

* Wed Dec 21 04:00:00 2005 Jay Fenlason <fenlason{%}redhat{*}com> 3.0.10-1.4E.5

- Respin

(More info)

Update: libwmf-devel-0.2.8.3-5.3

Wed, 19 Jul 2006 01:50:43 +0000

Package: libwmf-devel-0.2.8.3-5.3
Summary: Support files necessary to compile applications with libwmf

Description:
Libraries, headers, and support files necessary to compile applications using libwmf.

ChangeLog:

* Wed Jul 12 05:00:00 2006 Caolan McNamara <caolanm{%}redhat{*}com> 0.2.8.3-5.3

- CVE-2006-3376 libwmf integer overflow on 64bit platforms

* Wed Jul 12 05:00:00 2006 Caolan McNamara <caolanm{%}redhat{*}com> 0.2.8.3-5.2

- CVE-2006-3376 libwmf integer overflow

* Fri Dec 17 04:00:00 2004 Jeremy Katz <katzj{%}redhat{*}com>

- remove bad hack

(More info)

Update: libwmf-0.2.8.3-5.3

Wed, 19 Jul 2006 01:50:43 +0000

Package: libwmf-0.2.8.3-5.3
Summary: Windows Metafile Library

Description:
A library for reading and converting Windows MetaFile vector graphics (WMF)

ChangeLog:

* Wed Jul 12 19:00:00 2006 Caolan McNamara <caolanm{%}redhat{*}com> 0.2.8.3-5.3

- CVE-2006-3376 libwmf integer overflow on 64bit platforms

* Wed Jul 12 19:00:00 2006 Caolan McNamara <caolanm{%}redhat{*}com> 0.2.8.3-5.2

- CVE-2006-3376 libwmf integer overflow

* Fri Dec 17 18:00:00 2004 Jeremy Katz <katzj{%}redhat{*}com>

- remove bad hack

(More info)

Update: gnupg-1.2.6-5

Wed, 19 Jul 2006 01:49:37 +0000

Package: gnupg-1.2.6-5
Summary: A GNU utility for secure communication and data storage.

ChangeLog:

* Tue Jun 20 05:00:00 2006 Nalin Dahyabhai <nalin{%}redhat{*}com> - 1.2.6-5

- add patch from upstream to fix CVE-2006-3082 (#195945)

* Tue Apr 25 05:00:00 2006 Nalin Dahyabhai <nalin{%}redhat{*}com> 1.2.6-4

- create the "home directory" if we fail to create a lock due to it not
  existing (#142206)

* Mon Mar 13 04:00:00 2006 Nalin Dahyabhai <nalin{%}redhat{*}com> 1.2.6-3

- bump and rebuild

(More info)

Update: gimp-devel-2.0.5-6

Wed, 19 Jul 2006 01:47:18 +0000

Package: gimp-devel-2.0.5-6
Summary: GIMP plugin and extension development kit

Description:
The gimp-devel package contains the static libraries and header files for writing GNU Image Manipulation Program (GIMP) plug-ins and extensions.

ChangeLog:

* Wed Jul 12 05:00:00 2006 Nils Philippsen <nphilipp{%}redhat{*}com> 2.0.5-6

- fix buffer overflow in XCF loader (#198296, fix by Henning Makholm)

* Thu Oct 14 05:00:00 2004 Nils Philippsen <nphilipp{%}redhat{*}com>

- catch wrong values of bpp in BMP plugin (#135675), don't forget 1bpp and
  24bpp (d'oh)

* Thu Sep 30 05:00:00 2004 Christopher Aillon <caillon{%}redhat{*}com>

- PreReq desktop-file-utils >= 0.9

(More info)

Update: gimp-2.0.5-6

Wed, 19 Jul 2006 01:47:18 +0000

Package: gimp-2.0.5-6
Summary: The GNU Image Manipulation Program

Description:
The GIMP (GNU Image Manipulation Program) is a powerful image composition and editing program, which can be extremely useful for creating logos and other graphics for webpages. The GIMP has many of the tools and filters you would expect to find in similar commercial offerings, and some interesting extras as well. The GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. The GIMP includes a scripting facility, but many of the included scripts rely on fonts that we cannot distribute. The GIMP FTP site has a package of fonts that you can install by yourself, which includes all the fonts needed to run the included scripts. Some of the fonts have unusual licensing requirements; all the licenses are documented in the package. Get ftp://ftp.gimp.org/pub/gimp/fonts/freefonts-0.10.tar.gz and ftp://ftp.gimp.org/pub/gimp/fonts/sharefonts-0.10.tar.gz if you are so inclined. Alternatively, choose fonts which exist on your system before running the scripts.

ChangeLog:

* Wed Jul 12 05:00:00 2006 Nils Philippsen <nphilipp{%}redhat{*}com> 2.0.5-6

- fix buffer overflow in XCF loader (#198296, fix by Henning Makholm)

* Thu Oct 14 05:00:00 2004 Nils Philippsen <nphilipp{%}redhat{*}com>

- catch wrong values of bpp in BMP plugin (#135675), don't forget 1bpp and
  24bpp (d'oh)

* Thu Sep 30 05:00:00 2004 Christopher Aillon <caillon{%}redhat{*}com>

- PreReq desktop-file-utils >= 0.9

(More info)

Update: freetype-devel-2.1.9-1.rhel4.4

Wed, 19 Jul 2006 01:37:29 +0000

Package: freetype-devel-2.1.9-1.rhel4.4
Summary: FreeType development libraries and header files

Description:
The FreeType engine is a free and portable TrueType font rendering engine, developed to provide TrueType support for a variety of platforms and environments. FreeType is a library which can open and manages font files as well as efficiently load, hint and render individual glyphs. FreeType is not a font server or a complete text-rendering library.

ChangeLog:

* Tue Jun 27 05:00:00 2006 Matthew Barnes <mbarnes{%}redhat{*}com> - 2.1.9-1.rhel4.4

- Yet more fixes for CVE-2006-1861.

* Thu Jun 1 05:00:00 2006 Matthew Barnes <mbarnes{%}redhat{*}com> - 2.1.9-1.rhel4.3

- Fixed another uninitialized pointer, this one in FT_Realloc().

* Wed May 10 05:00:00 2006 Matthew Barnes <mbarnes{%}redhat{*}com> - 2.1.9-1.rhel4.2

- Fixed an uninitialized pointer in FT_QRealloc().

(More info)

Update: freetype-demos-2.1.9-1.rhel4.4

Wed, 19 Jul 2006 01:37:29 +0000

Package: freetype-demos-2.1.9-1.rhel4.4
Summary: A collection of FreeType demos.

ChangeLog:

* Tue Jun 27 05:00:00 2006 Matthew Barnes <mbarnes{%}redhat{*}com> - 2.1.9-1.rhel4.4

- Yet more fixes for CVE-2006-1861.

* Thu Jun 1 05:00:00 2006 Matthew Barnes <mbarnes{%}redhat{*}com> - 2.1.9-1.rhel4.3

- Fixed another uninitialized pointer, this one in FT_Realloc().

* Wed May 10 05:00:00 2006 Matthew Barnes <mbarnes{%}redhat{*}com> - 2.1.9-1.rhel4.2

- Fixed an uninitialized pointer in FT_QRealloc().

(More info)