Trustix Secure Linux

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- --------------------------------------------------------------------------
Trustix Secure Linux Bugfix Advisory #2003-0032

Package name:      bind, cyrus-imapd, cyrus-sasl, grub, hwdata, initscripts,
                   kernel, make, mdadm, ncurses, postfix, ppp, rp-pppoe,
                   samba, setup, stunnel
Summary:           Catchup bugfixes
Date:              2003-09-17
Affected versions: TSL 2.0

- --------------------------------------------------------------------------
Package description:
  * bind:
    BIND (Berkeley Internet Name Domain) is an implementation of the DNS
    (Domain Name System) protocols. BIND includes a DNS server (named),
    which resolves host names to IP addresses, and a resolver library
    (routines for applications to use when interfacing with DNS).  A DNS
    server allows clients to name resources or objects and share the
    information with other network machines.  The named DNS server can be
    used on workstations as a caching name server, but is generally only
    needed on one machine for an entire network.

  * cyrus-imapd:
    The Cyrus IMAP server is a scaleable enterprise mail system
    designed for use from small to large enterprise environments using
    standards-based technologies.

  * cyrus-sasl:
    The cyrus-sasl package contains the Cyrus implementation of SASL.
    SASL is the Simple Authentication and Security Layer, a method for
    adding authentication support to connection-based protocols.
 
  * grub:
    GRUB (Grand Unified Boot Loader) is an experimental boot loader
    capable of booting into most free operating systems - Linux, FreeBSD,
    NetBSD, GNU Mach, and others as well as most commercial operating
    systems.

  * hwdata:
    hwdata contains various hardware identification and configuration data,
    such as the pci.ids database, the XFree86 Cards and MonitorsDb databases.

  * initscripts:
    The initscripts package contains the basic system scripts used to boot
    your Trustix Secure Linux system, change runlevels, and shut the system down
    cleanly.  Initscripts also contains the scripts that activate and
    deactivate most network interfaces.

  * kernel:
    The kernel package contains the Linux kernel (vmlinuz), the core of your
    Trustix Secure Linux operating system.  The kernel handles the basic
    functions of the operating system:  memory allocation, process
    allocation, device input and output, etc.

  * make:
    A GNU tool for controlling the generation of executables and other
    non-source files of a program from the program's source files.  Make
    allows users to build and install packages without any significant
    knowledge about the details of the build process.  The details about
    how the program should be built are provided for make in the program's
    makefile.

  * mdadm:
    mdadm is a program that can be used to create, manage, and monitor
    Linux MD (Software RAID) devices.
    As such is provides similar functionality to the raidtools packages.
    The particular differences to raidtools is that mdadm is a single
    program, and it can perform (almost) all functions without a
    configuration file (that a config file can be used to help with
    some common tasks).

  * ncurses:
    The curses library routines are a terminal-independent method of
    updating character screens with reasonable optimization.  The ncurses
    (new curses) library is a freely distributable replacement for the
    discontinued 4.4BSD classic curses library.

  * postfix:
    Postfix is an alternative to the sendmail mailer daemon. Postfix attempts
    to be fast, easy to administer, and secure, while at the same time being
    sendmail compatible enough to not upset existing users.

  * ppp:
    The ppp package contains the PPP (Point-to-Point Protocol) daemon
    and documentation for PPP support.  The PPP protocol provides a
    method for transmitting datagrams over serial point-to-point links.

  * rp-pppoe:
    PPPoE (Point-to-Point Protocol over Ethernet) is a protocol used by
    many ADSL Internet Service Providers. Roaring Penguin has a free
    client for Linux systems to connect to PPPoE service providers.

  * samba:
    Samba provides an SMB server which can be used to provide network
    services to SMB (sometimes called "Lan Manager") clients, including
    various versions of MS Windows, OS/2, and other Linux machines. Samba
    uses NetBIOS over TCP/IP (NetBT) protocols and does NOT need NetBEUI
    (Microsoft Raw NetBIOS frame) protocol.

  * setup:
    The setup package contains a set of important system configuration and
    setup files, such as passwd, group, and profile.

  * stunnel:
    stunnel is a socket wrapper which can be used to give ordinary
    applications SSL (secure sockets layer) support. For example, it
    can be used in conjunction with a imapd to create a SSL secure IMAP
    server.

Problem description:
  All these packages had minor packaging errors in them.  One noticable
  exception:  If you use Postfix and SASL, read the documentation on the
  new configuration layout.

  bind: Bugfixing the jail, now even save the slave zones.
  cyrus-imapd: New upstream fixes a few bugs we can live without.
  cyrus-sasl:  Clean up .so's.
               Change deprecated -H option to -O in init script.
               Reformat man page to make it readable.
  grub:        Removed info pages, and provide html version.
               Added some build requirements.
  hwdata:      Synced pci.ids/pcitable with Redhat's hwdata-0.89.0-1.1.
               Added aic79xx to hwdata-module-info.
  initscripts: Added the auto-started raid check. Prints OK on an already
                 active md.
  kernel:      Changed CONFIG_BLK_DEV_MD=m to CONFIG_BLK_DEV_MD=y to support
                 raid autodetect.
  make:        Readded html page generated from make.texi
  mdadm:       New upstream: 1.3.0, allows creation of very large md devices.
  ncurses:     Own /usr/include/ncurses, to get permissions right.
  postfix:     Fix PAM and SASL issues.
  ppp:         Minor cleanup.
  rp-pppoe:    Change startup sequence to start early.
  samba:       Added --with-winbind-auth-challenge option on request.
  setup:       Updated /etc/services (gnatsd)
  stunnel:     Now create /var/run/stunnel.


Action:
  We recommend that all systems with this package installed be upgraded.
  Please note that if you do not need the functionality provided by this
  package, you may want to remove it from your system.


Location:
  All TSL updates are available from
  <URI:http://www.trustix.net/pub/Trustix/updates/>
  <URI:ftp://ftp.trustix.net/pub/Trustix/updates/>


About Trustix Secure Linux:
  Trustix Secure Linux is a small Linux distribution for servers. With focus
  on security and stability, the system is painlessly kept safe and up to
  date from day one using swup, the automated software updater.


Automatic updates:
  Users of the SWUP tool can enjoy having updates automatically
  installed using 'swup --upgrade'.


Public testing:
  These packages have been available for public testing for some time.
  If you want to contribute by testing the various packages in the
  testing tree, please feel free to share your findings on the
  tsl-discuss mailinglist.
  The testing tree is located at
  <URI:http://www.trustix.net/pub/Trustix/testing/>
  <URI:ftp://ftp.trustix.net/pub/Trustix/testing/>

  You may also use swup for public testing of updates for TSL 2.0 and later:
  
  site {
      class = 0
      location = "http://snow.trustix.org/cloud/rdfs/latest.rdf"
      regexp = ".*"
  }
  

Questions?
  Check out our mailing lists:
  <URI:http://www.trustix.net/support/>


Verification:
  This advisory along with all TSL packages are signed with the TSL sign key.
  This key is available from:
  <URI:http://www.trustix.net/TSL-GPG-KEY>

  The advisory itself is available from the errata pages at
  <URI:http://www.trustix.net/errata/trustix-2.0/>
  or directly at
  <URI:http://www.trustix.net/errata/misc/2003/TSL-2003-0032-multi.asc.txt>


MD5sums of the packages:
- --------------------------------------------------------------------------
072c425304d97349ae177831a1d5dfad  ./2.0/RPMS/bind-9.2.2-9tr.i586.rpm
36502edeeda6f3938794c40f42caf3c6  ./2.0/RPMS/bind-devel-9.2.2-9tr.i586.rpm
fdb9ee4fcc2b78683dd2a7cfa2366746  ./2.0/RPMS/bind-libs-9.2.2-9tr.i586.rpm
53ad10ce32742eed9d236a7a143f4e1e  ./2.0/RPMS/bind-light-9.2.2-9tr.i586.rpm
7123d67fcfa233ad48a10e7e405ef4d0  ./2.0/RPMS/bind-light-devel-9.2.2-9tr.i586.rpm
9f83753e137b8e96567d887ea5de7260  ./2.0/RPMS/bind-utils-9.2.2-9tr.i586.rpm
d80f9b0ee39c83817382c80b03517a76  ./2.0/SRPMS/bind-9.2.2-9tr.src.rpm
64e2358ab2fcf82a3ac9ac04172bbcf6  ./2.0/RPMS/cyrus-imapd-2.1.15-1tr.i586.rpm
bb27fbee2dc0676c44ee19a48c026d27  ./2.0/RPMS/cyrus-imapd-devel-2.1.15-1tr.i586.rpm
db583b4c72431f6ff628c849321b15a4  ./2.0/SRPMS/cyrus-imapd-2.1.15-1tr.src.rpm
7da24baaaf8d02cb3ca6c341eb7e3714  ./2.0/RPMS/cyrus-sasl-2.1.15-4tr.i586.rpm
41899c4b831536a22d2dccbe6f752a67  ./2.0/RPMS/cyrus-sasl-devel-2.1.15-4tr.i586.rpm
4db5604676ec002ef438e26209b3798d  ./2.0/RPMS/cyrus-sasl-md5-2.1.15-4tr.i586.rpm
c51584b4585eb6c57cf4cf3429c6ebb6  ./2.0/RPMS/cyrus-sasl-mysql-2.1.15-4tr.i586.rpm
87e996419329c5c2cba6e9e17db67cde  ./2.0/RPMS/cyrus-sasl-otp-2.1.15-4tr.i586.rpm
29937ad1f1847c70d4f942817707a9c8  ./2.0/RPMS/cyrus-sasl-plain-2.1.15-4tr.i586.rpm
d448008f68f60c8193bd7c5e317d608a  ./2.0/RPMS/cyrus-sasl-utils-2.1.15-4tr.i586.rpm
754d365124484c7f18f7838fd6969797  ./2.0/SRPMS/cyrus-sasl-2.1.15-4tr.src.rpm
cba12a0e35aba173754c88400cf4aaa0  ./2.0/RPMS/grub-0.92-9tr.i586.rpm
477f9e9ee2f7fb350b2758e8fbd80425  ./2.0/SRPMS/grub-0.92-9tr.src.rpm
28646bb7ad496d98c92a7f3492cf253c  ./2.0/RPMS/hwdata-0.44-9tr.noarch.rpm
64c9731c7a4d9be22ca7555a5aa24391  ./2.0/RPMS/hwdata-devel-0.44-9tr.noarch.rpm
54123170e8ade106efcc14648776a8c0  ./2.0/SRPMS/hwdata-0.44-9tr.src.rpm
3dbb5933ac27edbd04e5f95570bec5d4  ./2.0/RPMS/initscripts-7.14-6tr.i586.rpm
1f98f07a858fb53d90b7f2dceaf17724  ./2.0/SRPMS/initscripts-7.14-6tr.src.rpm
253c4e9420985bbfd779ed2b3d1d15eb  ./2.0/RPMS/kernel-2.4.21-15tr.i586.rpm
aa3890763a90ce63f219038d30968dbb  ./2.0/RPMS/kernel-BOOT-2.4.21-15tr.i586.rpm
667e0ca29c29c48553d8be43f1dacfa0  ./2.0/RPMS/kernel-doc-2.4.21-15tr.i586.rpm
b0adc8f367243a49a5e0563d1f5feba4  ./2.0/RPMS/kernel-firewall-2.4.21-15tr.i586.rpm
736d87fae6caf2ef52f1508041ecec68  ./2.0/RPMS/kernel-firewallsmp-2.4.21-15tr.i586.rpm
a0fcd8ee4b586c12e12f405a3515ab7e  ./2.0/RPMS/kernel-smp-2.4.21-15tr.i586.rpm
354d87aa606bed6769096e45d646fbd2  ./2.0/RPMS/kernel-source-2.4.21-15tr.i586.rpm
68032581f199a0a73d69ce4c9414361f  ./2.0/RPMS/kernel-utils-2.4.21-15tr.i586.rpm
e1309d0f86e9935fcbceac7574dc5ffb  ./2.0/SRPMS/kernel-2.4.21-15tr.src.rpm
cb1f74789502d17fcda28b66b1858126  ./2.0/RPMS/make-3.80-4tr.i586.rpm
4e6b9fe1886dba34e1c9ac5eac526127  ./2.0/SRPMS/make-3.80-4tr.src.rpm
382b8f13b1af380db0ceb34ee0bd02d1  ./2.0/RPMS/mdadm-1.3.0-2tr.i586.rpm
41926bc4a9da74233d8b3c5b16bbe0f7  ./2.0/SRPMS/mdadm-1.3.0-2tr.src.rpm
5dc6fda7c3bcb4dc0bc6c56b428fad38  ./2.0/RPMS/ncurses-5.3-6tr.i586.rpm
a2d8e0c24881e93c2de2fdd20a8378bc  ./2.0/RPMS/ncurses-devel-5.3-6tr.i586.rpm
aa66b81b91f419f02107db1a9d108b60  ./2.0/SRPMS/ncurses-5.3-6tr.src.rpm
fc905802756ec054ff8d1befa77dfd43  ./2.0/RPMS/postfix-2.0.13-6tr.i586.rpm
47ebfa5c3d90838edae1a15b3640fca1  ./2.0/RPMS/postfix-ldap-2.0.13-6tr.i586.rpm
0648b4d2b1c572b1221f7a3deb524d6a  ./2.0/RPMS/postfix-mysql-2.0.13-6tr.i586.rpm
24c4af14b2970bf4fe9eebf9e5794370  ./2.0/RPMS/postfix-pcre-2.0.13-6tr.i586.rpm
439a14cbd0d802f1e4eb6d255ed2ae51  ./2.0/RPMS/postfix-pgsql-2.0.13-6tr.i586.rpm
312d88dd5ab8bce667541b3e83b3a5a4  ./2.0/RPMS/postfix-rmail-2.0.13-6tr.i586.rpm
060b97cd8c7b5627307ba524e3fba56d  ./2.0/SRPMS/postfix-2.0.13-6tr.src.rpm
3b434b502d030a069221c8be4c5b4984  ./2.0/RPMS/ppp-2.4.1-7tr.i586.rpm
684434bd67f5c945e3aa4d6801c2b32b  ./2.0/SRPMS/ppp-2.4.1-7tr.src.rpm
26c700446ee3cf36f99520768afbdcfd  ./2.0/RPMS/rp-pppoe-3.5-6tr.i586.rpm
b0f9b717481a4cd42850b9939585b77b  ./2.0/SRPMS/rp-pppoe-3.5-6tr.src.rpm
716d2a52f67de863fca4c55b43d24d88  ./2.0/RPMS/samba-2.2.8-10tr.i586.rpm
82c0528adb3da9dc987b52554181df70  ./2.0/RPMS/samba-client-2.2.8-10tr.i586.rpm
999c5de818f5569970585cda09cb8412  ./2.0/RPMS/samba-common-2.2.8-10tr.i586.rpm
4abb2ef54a5389f0c1c292a487b30992  ./2.0/SRPMS/samba-2.2.8-10tr.src.rpm
4cbcf1568e6ce2ce997acdd3aa350895  ./2.0/RPMS/setup-2.2.3-3tr.noarch.rpm
6318cb920f0a047a207795af06c6f75d  ./2.0/SRPMS/setup-2.2.3-3tr.src.rpm
68874be530243b501a465384706ffd3f  ./2.0/RPMS/stunnel-4.04-5tr.i586.rpm
b710f57c1334d45cb4503545f9412a78  ./2.0/SRPMS/stunnel-4.04-5tr.src.rpm
- --------------------------------------------------------------------------


Trustix Security Team

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQE/aFbHwRTcg4BxxS0RApVlAKCB76T40o8NkZ3W6mFN3U31eh7iBgCfUQIb
XraVx4uPlyOh/6cRHSwvGAo=
=rdGl
-----END PGP SIGNATURE-----
_______________________________________________
tsl-announce mailing list
tsl-announce@tslng.org
http://www.tslng.org/mailman/listinfo/tsl-announce