Debian GNU/Linux 5.0 updated
Alexander Reichle-Schmehl <[email protected]> Sat, 4 Sep 2010 22:47:49 +0200
| Newsgroups | gmane.linux.debian.user.announce |
|---|---|
| Message-ID | <[email protected]> |
------------------------------------------------------------------------- The Debian Project http://www.debian.org/ Debian GNU/Linux 5.0 updated [email protected] September 4th, 2010 http://www.debian.org/News/2010/20100904 ------------------------------------------------------------------------- Debian GNU/Linux 5.0 updated The Debian project is pleased to announce the sixth update of its stable distribution Debian GNU/Linux 5.0 (codename "lenny"). This update mainly adds corrections for security problems to the stable release, along with a few adjustment to serious problems. Please note that this update does not constitute a new version of Debian GNU/Linux 5.0 but only updates some of the packages included. There is no need to throw away 5.0 CDs or DVDs but only to update via an up-to- date Debian mirror after an installation, to cause any out of date packages to be updated. Those who frequently install updates from security.debian.org won't have to update many packages and most updates from security.debian.org are included in this update. New CD and DVD images containing updated packages and the regular installation media accompanied with the package archive respectively will be available soon at the regular locations. Upgrading to this revision online is usually done by pointing the aptitude (or apt) package tool (see the sources.list(5) manual page) to one of Debian's many FTP or HTTP mirrors. A comprehensive list of mirrors is available at: <http://www.debian.org/distrib/ftplist> Miscellaneous Bugfixes ---------------------- This stable update adds important corrections to the following packages: Package Reason base-files Update /etc/debian_version bgoffice Don't delete files from /var/lib/aspell on upgrade debian-archive-keyring Add squeeze keys; retire etch keys git-core Fix stack-based buffer overflow handling gitdir paths ia32-libs Fix ld-linux.so.2 symlink on ia64 and add ld.so.conf snippet imp4 Disable DNS prefetching when disabling untrusted content; fix escaping problems in URL display iputils Fix resource consumption by specially crafted pong libapache-dbi-perl Properly apply security patch during build libnet-sftp-foreign-perl Add missing Recommends on lib{expect,io-pty}-perl libnss-lwres Rebuild against liblwres50 (introduced in bind9 DSA) libpoe-component-irc-perl Filter out commands containing newlines to prevent injection attack libtk-filedialog-perl Fix error about making ".filedialog" its own master libwww-perl Fix incorrect use of "redo"; lwp-download - don't use server-supplied filenames beginning with "." linux-2.6 Several fixes and increased hardware support makepasswd Avoid generating predictable passwords okular Memory corruption pango1.0 Fix crash with invalid Unicode sequences paste Fix XSS pastebinit Update pastebin.com definition; remove rafb.net pdf2djvu Fix crash when using -i / --indirect option quik Fix FTBFS and undesired prompting when debconf was in use slim Don't add current directory to default path ttf-dzongkha Fix hints file to point at the right font file ttf-inconsolata Mark font as fixed width and fix filename in defoma hints file w3m Check for NUL characters in certificate names xserver-xorg-video-intel Enable low power render writes on GEN3 Additionally, the sun-java5 and sun-java6 packages for the ia64 architecture which were not available in time for the previous point release are included in this update. Security Updates ---------------- This revision adds the following security updates to the stable release. The Security Team has already released an advisory for each of these updates: Advisory ID Package Correction(s) DSA-1919 smarty Regression in previous update DSA-2054 bind9 Cache poisoning DSA-2059 pcsc-lite Regression DSA-2064 xulrunner Several vulnerabilities DSA-2065 kvirc Several vulnerabilities DSA-2066 wireshark Several vulnerabilities DSA-2067 mahara Several vulnerabilities DSA-2068 python-cjson Denial of service DSA-2069 znc Denial of service DSA-2070 freetype Several vulnerabilities DSA-2071 libmikmod Several vulnerabilities DSA-2072 libpng Several vulnerabilities DSA-2073 mlmmj Directory traversal DSA-2074 ncompress Arbitrary code execution DSA-2075 xulrunner Several vulnerabilities DSA-2076 gnupg2 Execution of arbitrary code DSA-2078 kvirc Arbitrary IRC command execution DSA-2078 mapserver Arbitrary code execution DSA-2080 ghostscript Several vulnerabilities DSA-2081 libmikmod Arbitrary code execution DSA-2082 gmime2.2 Arbitrary code execution DSA-2083 moin Cross-site scripting DSA-2084 tiff Arbitrary code execution DSA-2085 lftp File overwrite vulnerability DSA-2086 avahi Denial of service DSA-2087 cabextract Arbitrary code execution DSA-2088 wget Potential code execution DSA-2089 php5 Several vulnerabilities DSA-2090 socat Arbitrary code execution DSA-2091 squirrelmail Cross-site request forgery DSA-2092 lxr-cvs Cross-site scripting DSA-2093 ghostscript Several vulnerabilities DSA-2094 linux-2.6 Several issues DSA-2094 user-mode-linux Several issues DSA-2095 lvm2 Denial of service DSA-2096 zope-ldapuserfolder Authentication DSA-2097 phpmyadmin Several vulnerabilities DSA-2098 typo3-src Several vulnerabilities DSA-2099 openoffice.org Arbitrary code execution DSA-2100 openssl Double free DSA-2101 wireshark Several vulnerabilities Removed packages ---------------- The following packages were removed due to circumstances beyond our control: Package Reason libconfig-inetd-perl broken empty package, no r-deps URLs ---- The complete lists of packages that have changed with this revision: <http://ftp.debian.org/debian/dists/lenny/ChangeLog> The current stable distribution: <http://ftp.debian.org/debian/dists/stable> Proposed updates to the stable distribution: <http://ftp.debian.org/debian/dists/proposed-updates> stable distribution information (release notes, errata etc.): <http://www.debian.org/releases/stable/> Security announcements and information: <http://www.debian.org/security/> About Debian ------------ The Debian Project is an association of Free Software developers who volunteer their time and effort in order to produce the completely free operating system Debian GNU/Linux. Contact Information ------------------- For further information, please visit the Debian web pages at <http://www.debian.org/>, send mail to <[email protected]>, or contact the stable release team at <[email protected]>