Re: Update - fou4s 0.11.1

On Jan 30, Martin Köhling <[email protected]> wrote:

> On Tue, 27 Jan 2004, Markus Gaugusch wrote:
>
> > This is just a minor bugfix release.
> > * Fix broken importing of fou4s gpg key on fresh installs
> > * Fix broken AMD64 detection (typo)
>
> Howver, after I applied that patch to fou4s-0.10.0 on a SuSE 8.2 box
> yesterday (I hadn't noticed the new fou4s version yet :-)), I discovered
> another issue:
>[...]
> kdebase3-SuSE    8.2-112       (8.2-102      ) [dl] security     4889kb
>
> See? Another packet just magically appeared - an "old" update from 11/2003
> that was never installed! (In fou4s 0.11.1 the problem seems to be fixed,
> too.)
Yes, sorry. I didn't see that during my testing. I'm preparing version
0.11.2 for tomorrow and will announce it on suse-security as well.

The bug that causes RPM to install some files with GID fou4s is also
fixed. It's not nice, but I can't imagine any real security breach. GID
fou4s is thought for admins who don't want to work as root and not for
untrusted people. I hope that this was clear to everyone :)

Markus
PS: The version that's going to be released tomorrow is also available at
http://fou4s.gaugusch.at/beta/fou4s-0.11.2-2.noarch.rpm - if you can test
it, especially using import/export and/or --host, try it! Thanks :-)

-- 
__________________    /"\
Markus Gaugusch       \ /    ASCII Ribbon Campaign
markus(at)gaugusch.at  X     Against HTML Mail
                      / \
--