-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
- --------------------------------------------------------------------------
Trustix Secure Linux Bugfix Advisory #2005-0042
Package names: 4suite, aspell, bind, cpplus-trustix, dmapi, kernel,
lftp, logwatch, mc, mrtg, nano, openssh, php4, php,
sqlite2, sqlite3, tsl-utils, xfsdump
Summary: Various bug fixes
Date: 2005-08-19
Affected versions: Trustix Secure Linux 2.2
Trustix Secure Linux 3.0
- --------------------------------------------------------------------------
Package description:
4suite
4Suite is a collection of Python tools for XML processing and object
database management. It provides support for XML parsing, several
transient and persistent DOM implementations, XPath expressions,
XPointer, XSLT transforms, XLink, RDF and ODMG object databases
aspell
GNU Aspell is a Free and Open Source spell checker designed to eventually
replace Ispell. It can either be used as a library or as an independent
spell checker. Its main feature is that it does a much betterjob of coming
up with possible suggestions than just about any other spell checker out
there for the English language, including Ispell and Microsoft Word.
bind
BIND (Berkeley Internet Name Domain) is an implementation of the DNS
(Domain Name System) protocols. BIND includes a DNS server (named), which
resolves host names to IP addresses, and a resolver library (routines for
applications to use when interfacing with DNS). A DNS server allows clients
to name resources or objects and share the information with other network
machines. The named DNS server can be used on workstations as a caching name
server, but is generally only needed on one machine for an entire network.
cpplus
CP+ is a web-based tool for remote administration of dedicated servers.It
can be used to perform basic administrative tasks and create/manage domains
through a graphical interface, which makes system administration easy and
comfortable. Users don't need to remember a long list of console commands
with complex syntax and valid parameter values.
dmapi
Files required by system software using the Data Management API (DMAPI).
This is used to implement the interface defined in the X/Open document:
Systems Management: Data Storage Managment (XDSM) API dated February 1997.
This interface is implemented by the libdm library.
kernel
The kernel package contains the Linux kernel (vmlinuz), the core of your
Trustix Secure Linux operating system. The kernel handles the basic
functions of the operating system: memory allocation, process allocation,
device input and output, etc.
lftp
LFTP is a shell-like command line ftp/http client. The main two advantages
over other ftp clients are reliability and ability to perform tasks in
background. It will reconnect and reget the file being transferred if the
connection broke. You can start a transfer in background and continue
browsing on the ftp site. It does this all in one process. When you have
started background jobs and feel you are done, you can just exit lftp and
it automatically moves to nohup mode and completes the transfers. It has
also such nice features as reput and mirror.
logwatch
Logwatch is a customizable log analysis system. Logwatch parses through
your system's logs for a given period of time and creates a report analyzing
areas that you specify, in as much detail as you require. Logwatch is easy
to use and will work right out of the package on most systems.
mc
GNU Midnight Commander (also referred to as MC) is a user shell with
text-mode full-screen interface. It can be run on the OS console, in xterm
and other terminal emulators.
mrtg
The Multi Router Traffic Grapher (MRTG) is a tool to monitor the traffic
load on network links. MRTG generates HTML pages containing PNG images which
provide a LIVE visual representation of this traffic.
nano
nano is a small, free and friendly editor which aims to replace Pico, the
default editor included in the non-free Pine package. Rather than just
copying Pico's look and feel, nano also implements some missing (or disabled
by default) features in Pico, such as "search and replace" and "go to line
number".
openssh
Ssh (Secure Shell) a program for logging into a remote machine and for
executing commands in a remote machine. It is intended to replace rlogin
and rsh, and provide secure encrypted communications between two untrusted
hosts over an insecure network. X11 connections and arbitrary TCP/IP ports
can also be forwarded over the secure channel.
php4
PHP is an HTML-embedded scripting language. PHP attempts to make it easy
for developers to write dynamically generated web pages. PHP also offers
built-in database integration for several commercial and non-commercial
database management systems, so writing a database-enabled web page with
PHP is fairly simple. The most common use of PHP coding is probably as a
replacement for CGI scripts. The mod_php module enables the Apache web
server to understand and process the embedded PHP language in web pages.
php
PHP is an HTML-embedded scripting language. PHP attempts to make it easy
for developers to write dynamically generated web pages. PHP also offers
built-in database integration for several commercial and non-commercial
database management systems, so writing a database-enabled web page with
PHP is fairly simple. The most common use of PHP coding is probably as a
replacement for CGI scripts. The mod_php module enables the Apache web
server to understand and process the embedded PHP language in web pages.
sqlite2
SQLite is a C library that implements an embeddable SQL database engine.
Programs that link with the SQLite library can have SQL database access
without running a separate RDBMS process. The distribution comes with a
standalone command-line access program (sqlite) that can be used to
administer an SQLite database and which serves as an example of how to
use the SQLite library.
sqlite3
SQLite is a C library that implements an embeddable SQL database engine.
Programs that link with the SQLite library can have SQL database access
without running a separate RDBMS process. The distribution comes with a
standalone command-line access program (sqlite) that can be used to
administer an SQLite database and which serves as an example of how to
use the SQLite library.
tsl-utils
The Trustix Secure Linux utils is a set of utilities and scripts that are
made in the development process, and that really fit in no other package.
xfsdump
The xfsdump package contains xfsdump, xfsrestore and a number of other
utilities for administering XFS filesystems.
Problem description:
4suite
- Initial Entry into TSL 3.0
aspell
- Initial Entry into TSL 3.0
bind
- Split common zones to a separate file.
cpplus-trustix
- Fixed deleting of build and install temporary files.
- Fixed throwing up error messages when CP+ is installing.
dmapi
- Now build manpages. Bug #1181
kernel
- Fixed broken symlinks issue, Bug #1177
lftp
- Fix manpage files, Bug #1180.
logwatch
- Initial Entry into TSL-3.0
mc
- Rebuilt with slang utf8 support.
- Added fix to convert all to utf8 and sync.
mrtg
- Initial Entry into TSL-3.0
- Added a user/group mrtg
- Fixed the pid location
- Added default sysconfig mrtg
nano
- Initial Entry into TSL-3.0
openssh
- Added chroot patch for OpenSSH, Fix Bug #1151
php4
- Now BuildRequire curl. Bug #1184
- Now own /usr/share/php4. Bug #1188
- Now also ship with -devel files. Bug #1189
- Added FastCGI support. Bug #1190
php
- Now Install missing pear packages, Bug #1185
- New Upstream of XML_RPC to fix broken PEAR installation, Bug #1185
sqlite2
- Initial Entry into TSL-3.0
sqlite3
- Now sqlite is sqlite3, Bug #1176.
tsl-utils
- Fix grep in restart_maybe. Bug #1194
xfsdump
- Now build manpages. Bug #1182
Action:
We recommend that all systems with this package installed be upgraded.
Please note that if you do not need the functionality provided by this
package, you may want to remove it from your system.
Location:
All Trustix Secure Linux updates are available from
<URI:http://http.trustix.org/pub/trustix/updates/>
<URI:ftp://ftp.trustix.org/pub/trustix/updates/>
About Trustix Secure Linux:
Trustix Secure Linux is a small Linux distribution for servers. With focus
on security and stability, the system is painlessly kept safe and up to
date from day one using swup, the automated software updater.
Automatic updates:
Users of the SWUP tool can enjoy having updates automatically
installed using 'swup --upgrade'.
Questions?
Check out our mailing lists:
<URI:http://www.trustix.org/support/>
Verification:
This advisory along with all Trustix packages are signed with the
TSL sign key.
This key is available from:
<URI:http://www.trustix.org/TSL-SIGN-KEY>
The advisory itself is available from the errata pages at
<URI:http://www.trustix.org/errata/trustix-2.2/> and
<URI:http://www.trustix.org/errata/trustix-3.0/>
or directly at
<URI:http://www.trustix.org/errata/2005/0042/>
MD5sums of the packages:
- --------------------------------------------------------------------------
073b1281907a7ee20256e65edb26e855 3.0/rpms/4suite-1.0-0.b1.1tr.i586.rpm
7a4cc474deb7d950acaab01b6d96f1e4 3.0/rpms/4suite-docs-1.0-0.b1.1tr.i586.rpm
2e5f048941322f7aaa25735498ab4699 3.0/rpms/aspell-0.60.3-2tr.i586.rpm
4c6ebde6127f54cc90645e3d51bc5115 3.0/rpms/aspell-devel-0.60.3-2tr.i586.rpm
fb4cb1fef71769de872dc4363c7066bb 3.0/rpms/aspell-libs-0.60.3-2tr.i586.rpm
23ae2a8d337601bbcc6f1208125755b0 3.0/rpms/bind-9.3.1-8tr.i586.rpm
40c9a79b86d89a34a7477af9d58f05c2 3.0/rpms/bind-devel-9.3.1-8tr.i586.rpm
1f01e06b8b5d58b794872acefc326968 3.0/rpms/bind-libs-9.3.1-8tr.i586.rpm
97ef279a976c511adb7c8295f8c13716 3.0/rpms/bind-light-9.3.1-8tr.i586.rpm
342e81a7b4b7dc03c92ddd544a5bff21 3.0/rpms/bind-light-devel-9.3.1-8tr.i586.rpm
e62c7bb87706bff11c9d24f3ca237fdb 3.0/rpms/bind-utils-9.3.1-8tr.i586.rpm
60f01c680bd3f938e819fc1e94259dda 3.0/rpms/dmapi-2.2.1-4tr.i586.rpm
338ef2c990352adadc052c968d50bed8 3.0/rpms/dmapi-devel-2.2.1-4tr.i586.rpm
90c58fd786752af76b1106d43e77da32 3.0/rpms/kernel-2.6.12.6-1tr.i586.rpm
c857377889fe2a751984bd8fa043ccc2 3.0/rpms/kernel-doc-2.6.12.6-1tr.i586.rpm
08e72c5764cbbafea16b9e8e2bf4512b 3.0/rpms/kernel-headers-2.6.12.6-1tr.i586.rpm
b7024dd4610bdee27e2a2f81073e3a31 3.0/rpms/kernel-smp-2.6.12.6-1tr.i586.rpm
ed99eefa73ea15f415297dede33d9639
3.0/rpms/kernel-smp-headers-2.6.12.6-1tr.i586.rpm
584305146de1a13abea5b97c4e8b3fb5 3.0/rpms/kernel-source-2.6.12.6-1tr.i586.rpm
076694cd848f58d328ae9d58c3d89f68 3.0/rpms/kernel-utils-2.6.12.6-1tr.i586.rpm
b7f858294e614c2ff16e56a7dd6b0260 3.0/rpms/lftp-3.1.3-3tr.i586.rpm
d705098c31f90728c9bfae99330eb2bf 3.0/rpms/logwatch-6.1.2-1tr.i586.rpm
eea7fbf892ef15488409509fc156d630 3.0/rpms/mc-4.6.1-3tr.i586.rpm
27e1ca7331d2f248cc0e8155db96fbc4 3.0/rpms/mrtg-2.12.2-6tr.i586.rpm
5dce4cb07d4a413207a1411bb8f28214 3.0/rpms/nano-1.2.5-1tr.i586.rpm
163fc14edb4d5620c3981ec0a9bc1549 3.0/rpms/openssh-4.1p1-4tr.i586.rpm
a6349733b6e7d16f8f218679d8016801 3.0/rpms/openssh-clients-4.1p1-4tr.i586.rpm
e9db730d98bb41a4843277727854db58 3.0/rpms/openssh-server-4.1p1-4tr.i586.rpm
4336c7422edeffb6b0f307e95570baf8
3.0/rpms/openssh-server-config-4.1p1-4tr.i586.rpm
db39f8d77994b943c3dda2cc58f5c38b 3.0/rpms/php-5.0.4-18tr.i586.rpm
ab5ac4261bc43208e44728a42508fbdf 3.0/rpms/php-cli-5.0.4-18tr.i586.rpm
f64974cf20542dcc9a1cf37f1a510253 3.0/rpms/php-curl-5.0.4-18tr.i586.rpm
e4739b55dbd7971b428afed5cc8ee09b 3.0/rpms/php-devel-5.0.4-18tr.i586.rpm
a091a50636688d0d04164e0cd30a9ea2 3.0/rpms/php-exif-5.0.4-18tr.i586.rpm
dff4d3f3425f0d5f5d983d38cb373538 3.0/rpms/php-fcgi-5.0.4-18tr.i586.rpm
9b88c903b6824d732064a91d4d113b2d 3.0/rpms/php-gd-5.0.4-18tr.i586.rpm
c576bc9ddf0219369ab9b1e60b58a6ed 3.0/rpms/php-imap-5.0.4-18tr.i586.rpm
b553c65ad30175842d6cf1128357721d 3.0/rpms/php-ldap-5.0.4-18tr.i586.rpm
fd50d06e4aa96ab1e6f03c225c4c6bdd 3.0/rpms/php-mhash-5.0.4-18tr.i586.rpm
842b0a2035cd79a6f464c4c62227db09 3.0/rpms/php-mysql-5.0.4-18tr.i586.rpm
ea9b6e4f8ba3d3a3ba7ab30f565e33c4 3.0/rpms/php-mysqli-5.0.4-18tr.i586.rpm
e8b56844a378daf873ac19e6f994ebf5 3.0/rpms/php-pgsql-5.0.4-18tr.i586.rpm
a6f4aee28a03061c59a36bf6d4ad02ab 3.0/rpms/php-snmp-5.0.4-18tr.i586.rpm
ea1f6e176ab58d49992ab9b77cddee59 3.0/rpms/php-zlib-5.0.4-18tr.i586.rpm
90a9696f689032d3b8e8a7a97613d92d 3.0/rpms/sqlite2-2.8.16-1tr.i586.rpm
879f802522587c3c239331598d980905 3.0/rpms/sqlite2-devel-2.8.16-1tr.i586.rpm
4ca5e5746394b4d3bd655279b0aad827 3.0/rpms/sqlite3-3.2.1-3tr.i586.rpm
cfb1725c4f2c8a3d10e0837ba76b9cea 3.0/rpms/sqlite3-devel-3.2.1-3tr.i586.rpm
5ecfb8aa0fb18920674dd1f7f41683e5 3.0/rpms/tsl-utils-1.7-7tr.i586.rpm
ac90522e75163fd346d395912e1df48d 3.0/rpms/xfsdump-2.2.25-5tr.i586.rpm
7739b2dcfc56b24ffc52597d601d90eb 2.2/rpms/bind-9.3.1-4tr.i586.rpm
11b5254e680b754ba98d9e3350390b06 2.2/rpms/bind-devel-9.3.1-4tr.i586.rpm
43bed3955adf02354cdddefc157c9ee1 2.2/rpms/bind-libs-9.3.1-4tr.i586.rpm
fa4b79a3926a6acf5d15b2467ffb0913 2.2/rpms/bind-light-9.3.1-4tr.i586.rpm
41288ce4ddb7c47250e34a6a3234c3b7 2.2/rpms/bind-light-devel-9.3.1-4tr.i586.rpm
8be596756998765d353e8817ac7a123c 2.2/rpms/bind-utils-9.3.1-4tr.i586.rpm
79149f778025496c1cb4db8430d57160 2.2/rpms/openssh-3.9.0p1-3tr.i586.rpm
1d2f73fdaa7b6cd527e6047dfd974c27 2.2/rpms/openssh-clients-3.9.0p1-3tr.i586.rpm
4288a3ed1d584b5c5fced6f5aff42100 2.2/rpms/openssh-server-3.9.0p1-3tr.i586.rpm
d23049d8cafa9cb8ba80120d0813e825
2.2/rpms/openssh-server-config-3.9.0p1-3tr.i586.rpm
4c88f185845cae29758f73b22fb3c47d 2.2/rpms/php-5.0.4-11tr.i586.rpm
c1e6f1ba06918906cf39d487e9b4b5f3 2.2/rpms/php-cli-5.0.4-11tr.i586.rpm
c26ae88f45f5d151f1fecf82b2d51675 2.2/rpms/php-curl-5.0.4-11tr.i586.rpm
bffe73ac3fae883f3d11073b7f1ca1d2 2.2/rpms/php-devel-5.0.4-11tr.i586.rpm
77df2f5e5d265705aabbf8d9d90868d7 2.2/rpms/php-exif-5.0.4-11tr.i586.rpm
57ee06a4fa00fd282c3ab64e7f87ebe0 2.2/rpms/php-fcgi-5.0.4-11tr.i586.rpm
0133da2237dc6bca3ca538e110b5952d 2.2/rpms/php-gd-5.0.4-11tr.i586.rpm
75bd17ba0ea16400b2515b3090996cce 2.2/rpms/php-imap-5.0.4-11tr.i586.rpm
3d6efccf9e94d210289ae1e756cd085e 2.2/rpms/php-ldap-5.0.4-11tr.i586.rpm
8246e50f68916faac6c0a3c153663e83 2.2/rpms/php-mhash-5.0.4-11tr.i586.rpm
58600aa04f0bd9e960a5159af9a01449 2.2/rpms/php-mysql-5.0.4-11tr.i586.rpm
03bb910ce9683c15c805a9a58fdefaab 2.2/rpms/php-mysqli-5.0.4-11tr.i586.rpm
ba4315bd4320345f60df34e00b968082 2.2/rpms/php-pgsql-5.0.4-11tr.i586.rpm
ac19bd001f0e64f0366dcc05f8cbf6a6 2.2/rpms/php-zlib-5.0.4-11tr.i586.rpm
2f4f281a71f0c6309dca8ec29f02d854 2.2/rpms/php4-4.4.0-5tr.i586.rpm
24737dc7746e3299c6727c49cdd56648 2.2/rpms/php4-cli-4.4.0-5tr.i586.rpm
cff67cd7148f5ebec073908b99077590 2.2/rpms/php4-curl-4.4.0-5tr.i586.rpm
71e769cbb260064a91e716941538d519 2.2/rpms/php4-devel-4.4.0-5tr.i586.rpm
78e293b0c6f8dada3b0a188213b7e3a9 2.2/rpms/php4-domxml-4.4.0-5tr.i586.rpm
2b5e39f2bdc0e8854a1f878a56d4c5d6 2.2/rpms/php4-exif-4.4.0-5tr.i586.rpm
9801002543272a72639efb5fdeb16adc 2.2/rpms/php4-fcgi-4.4.0-5tr.i586.rpm
3e12f2c33a3edc52b9824286e5c0211c 2.2/rpms/php4-gd-4.4.0-5tr.i586.rpm
e7d73a36595dbaadd0332c98db7d1c6a 2.2/rpms/php4-imap-4.4.0-5tr.i586.rpm
0a7f8254c9d6bc4f964a6b0d807ec62c 2.2/rpms/php4-ldap-4.4.0-5tr.i586.rpm
178d08ebd3ee203b7954293e26279a0e 2.2/rpms/php4-mhash-4.4.0-5tr.i586.rpm
d6bf41ecd9d979e1e5eb360dccb8824e 2.2/rpms/php4-mysql-4.4.0-5tr.i586.rpm
6b17e937e05e3d13131ac784948c5a02 2.2/rpms/php4-pgsql-4.4.0-5tr.i586.rpm
8f01c6b97faa83ee06891f87c29d89e0 2.2/rpms/php4-test-4.4.0-5tr.i586.rpm
7f37acc273010e5348ed8bc4b54f702e 2.2/rpms/tsl-utils-1.6-3tr.i586.rpm
- --------------------------------------------------------------------------
Trustix Security Team
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
iD8DBQFDFzBDi8CEzsK9IksRAiruAJ9MlmO7ttvApivUdUBxbW5gWPvm6wCfSIpv
CGfhBCcVHT6SdB1IsCgPkfQ=
=6+Zi
-----END PGP SIGNATURE-----
_______________________________________________
tsl-announce mailing list
[email protected]
http://lists.trustix.org/mailman/listinfo/tsl-announce
_______________________________________________
tsl-discuss mailing list
[email protected]
http://lists.trustix.org/mailman/listinfo/tsl-discuss
