LWN.net Logo

Trustix Secure Linux Bugfix Advisory

From:  Trustix Security Advisor <tsl-AT-trustix.org>
To:  tsl-announce-AT-lists.trustix.org
Subject:  TSL-2005-0007 - multi
Date:  Fri, 25 Feb 2005 15:14:57 +0100

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- --------------------------------------------------------------------------
Trustix Secure Linux Bugfix Advisory #2005-0007

Package name:      cyrus-imapd dev postfix ppp samba squid
Summary:           Package improvements
Date:              2005-02-25
Affected versions: Trustix Secure Linux 2.1
                   Trustix Secure Linux 2.2
                   Trustix Operating System - Enterprise Server 2
- --------------------------------------------------------------------------
Package description:
  cyrus-imapd:
  The Cyrus IMAP server is a scaleable enterprise mail system
  designed for use from small to large enterprise environments using
  standards-based technologies.

  dev:
  The Trustix operating system uses file system entries to represent
  devices (CD-ROMs, floppy drives, etc.) attached to the machine. All of
  these entries are in the /dev tree (although they don't have to be).
  This package contains the most commonly used /dev entries.

  postfix:
  Postfix is an alternative to the sendmail mailer daemon. Postfix attempts
  to be fast, easy to administer, and secure, while at the same time being
  sendmail compatible enough to not upset existing users.

  ppp:
  The ppp package contains the PPP (Point-to-Point Protocol) daemon
  and documentation for PPP support.  The PPP protocol provides a
  method for transmitting datagrams over serial point-to-point links.

  samba:
  Samba provides an SMB server which can be used to provide network
  services to SMB (sometimes called "Lan Manager") clients, including
  various versions of MS Windows, OS/2, and other Linux machines. Samba
  uses NetBIOS over TCP/IP (NetBT) protocols and does NOT need NetBEUI
  (Microsoft Raw NetBIOS frame) protocol.

  squid:
  Squid is a high-performance proxy caching server for Web clients,
  supporting FTP, gopher, and HTTP data objects. Unlike traditional
  caching software, Squid handles all requests in a single,
  non-blocking, I/O-driven process. Squid keeps meta data and especially
  hot objects cached in RAM, caches DNS lookups, supports non-blocking
  DNS lookups, and implements negative caching of failed requests.


Problem description:
  cyrus-imapd:
  New upstream.

  dev:
  Added OSST devices.

  postfix:
  Fix error in dynupdate script referring to a pcre_table file which
  was not there.

  ppp:
  Fixes (from the text of bug #75 by Olaf Rempel):
  - pam support was dropped with ppp-2.4.2-make.patch. reintroduced pam.
  - all plugins were build, but not installed (leaving files in /usr/local/*
    on build system). all plugins are now installed to /usr/lib/pppd/
    (except radius plugin, didn't know what other files are needed, and
    trustix lacks radius support..).
  - /usr/share/man/man8/man8/ was created by mistake
  - specfile cleanup

  samba:
  New upstream.

  squid:
  New upstream.

Action:
  We recommend that all systems with this package installed be upgraded.
  Please note that if you do not need the functionality provided by this
  package, you may want to remove it from your system.


Location:
  All Trustix Secure Linux updates are available from
  <URI:http://http.trustix.org/pub/trustix/updates/>>
  <URI:ftp://ftp.trustix.org/pub/trustix/updates/>>


About Trustix Secure Linux:
  Trustix Secure Linux is a small Linux distribution for servers. With focus
  on security and stability, the system is painlessly kept safe and up to
  date from day one using swup, the automated software updater.


Automatic updates:
  Users of the SWUP tool can enjoy having updates automatically
  installed using 'swup --upgrade'.


Questions?
  Check out our mailing lists:
  <URI:http://www.trustix.org/support/>>


Verification:
  This advisory along with all Trustix packages are signed with the
  TSL sign key.
  This key is available from:
  <URI:http://www.trustix.org/TSL-SIGN-KEY>>

  The advisory itself is available from the errata pages at
  <URI:http://www.trustix.org/errata/trustix-2.1/>> and
  <URI:http://www.trustix.org/errata/trustix-2.2/>>
  or directly at
  <URI:http://www.trustix.org/errata/2005/0007/>>


MD5sums of the packages:
- --------------------------------------------------------------------------
ea4bb997147333086b5c092071426238  2.2/rpms/cyrus-imapd-2.2.12-1tr.i586.rpm
60d0ede8ec9830bb0ec11016d4ced1e8
2.2/rpms/cyrus-imapd-devel-2.2.12-1tr.i586.rpm
20cbe85c04830e66e0084e180e554634  2.2/rpms/dev-2.7.19-2tr.i586.rpm
b2a087c829bab2e19f5e288e76b1ca19  2.2/rpms/postfix-2.1.5-12tr.i586.rpm
e6d5594c51941235ea7a5a4bac90de2e  2.2/rpms/postfix-conf-2.1.5-12tr.i586.rpm
a73ae396cd1c439665a0e27350ea51a0  2.2/rpms/postfix-ldap-2.1.5-12tr.i586.rpm
12a6e3dce270ad0ae4af25fe83686a27  2.2/rpms/postfix-mysql-2.1.5-12tr.i586.rpm
9029efe9c16655e446383d7538ca16b2  2.2/rpms/postfix-pcre-2.1.5-12tr.i586.rpm
e894511e992d91c0561325eccf512d55  2.2/rpms/postfix-pgsql-2.1.5-12tr.i586.rpm
7384827eea82fbda499c0695c54f5faf  2.2/rpms/postfix-rmail-2.1.5-12tr.i586.rpm
80611b5a6df50dbbabc20552dad6170a  2.2/rpms/ppp-2.4.3-3tr.i586.rpm
a9160c3b61d5cda81c468e7892a58e72  2.2/rpms/samba-3.0.11-1tr.i586.rpm
b18a88864c3017ea09859b23698b95c1  2.2/rpms/samba-client-3.0.11-1tr.i586.rpm
b7c0ab2900c0800a3c9b1c8ecb4a269a  2.2/rpms/samba-common-3.0.11-1tr.i586.rpm
35061c45f57ba5fc9fd5ed8ee66b9d7a  2.2/rpms/samba-mysql-3.0.11-1tr.i586.rpm
8e1bcad6e777e8b0db77008396f95c34  2.2/rpms/squid-2.5.STABLE9-1tr.i586.rpm

b4839293f26979ef7c8e50a479b90471  2.1/rpms/cyrus-imapd-2.2.12-0.1tr.i586.rpm
715c5e095021b62815c9bf00d2b25aca
2.1/rpms/cyrus-imapd-devel-2.2.12-0.1tr.i586.rpm
- --------------------------------------------------------------------------


Trustix Security Team

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQFCHy75i8CEzsK9IksRAqN3AJ9JN1yDuU85rXGK3nji3fejJAtycQCeNdbv
yeKfNyAoQMcv1dmgeyTS4Cc=
=FJLS
-----END PGP SIGNATURE-----
_______________________________________________
tsl-announce mailing list
tsl-announce@lists.trustix.org
http://lists.trustix.org/mailman/listinfo/tsl-announce


(Log in to post comments)

Copyright © 2005, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds