TSL-2005-0065 - multi

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- --------------------------------------------------------------------------
Trustix Secure Linux Bugfix Advisory #2005-0065

Package names:	   atk, backuppc, bind, clamav, curl, dhcp
                   expat, file, fontconfig, glib12, gtk12+
                   gtk2+, libglade, mono, opencdk, pango
                   pcre, php4, samba, vim, xorg-x11
Summary:           Various bug fixes
Date:              2005-11-18
Affected versions: Trustix Secure Linux 2.2
                   Trustix Secure Linux 3.0

- --------------------------------------------------------------------------
Package description:
  atk
  Handy library of accessability functions. Development libs and headers
  are in atk-devel.

  backuppc
  BackupPC is a high-performance, enterprise-grade system for backing up 
  Linux, Win32, and laptops to a server's disk. Features include clever 
  pooling of identical files, no client-side software, and a powerful 
  Apache/CGI user interface.

  bind
  BIND (Berkeley Internet Name Domain) is an implementation of the DNS
  (Domain Name System) protocols. BIND includes a DNS server (named),
  which resolves host names to IP addresses, and a resolver library
  (routines for applications to use when interfacing with DNS). A DNS
  server allows clients to name resources or objects and share the
  information with other network machines.  The named DNS server can be
  used on workstations as a caching name server, but is generally only
  needed on one machine for an entire network.

  clamav
  Clam AntiVirus is a GPL anti-virus toolkit for UNIX. The main purpose of 
  this software is the integration with mail servers (attachment scanning).
  The package provides a flexible and scalable multi-threaded daemon, a 
  command line scanner, and a tool for automatic updating via Internet.The 
  programs are based on a shared library distributed with package, which you 
  can use with your own software.

  curl
  curl is a client to get documents/files from servers, using any of the
  supported protocols. The command is designed to work without user 
  interaction or any kind of interactivity.
  
  dhcp
  DHCP (Dynamic Host Configuration Protocol) is a protocol which allows
  individual devices on an IP network to get their own network configuration 
  information (IP address, subnetmask, broadcast address,etc.) from a DHCP 
  server. The overall purpose of DHCP is to make it easier to  administer 
  a large network.  The dhcp package includes the DHCP server and a DHCP 
  relay agent.

  expat
  Expat is an XML 1.0 parser written in C by James Clark.  It aims to be
  fully conforming. It is not a validating XML parser.

  file
  The file command is used to identify a particular file according to the
  type of data contained by the file.  File can identify many different
  file types, including ELF binaries, system libraries, RPM packages, and
  different graphics formats.

  fontconfig
  Fontconfig is a library for configuring and customizing font access.

  glib12
  GLib is a handy library of utility functions. This C library is designed 
  to solve some portability problems and provide other useful functionality 
  which most programs require.

  gtk12+
  The gtk+ package contains the GIMP ToolKit (GTK+), a library for creating
  graphical user interfaces for the X Window System. GTK+ was originally
  written for the GIMP (GNU Image Manipulation Program) image processing
  program, but is now used by several other programs as well

  gtk2+
  The gtk+ package contains the GIMP ToolKit (GTK+), a library for creating
  graphical user interfaces for the X Window System. GTK+ was originally
  written for the GIMP (GNU Image Manipulation Program) image processing
  program, but is now used by several other programs as well.

  libglade
  Libglade is a small library that allows a program to load its user
  interface from am XML description at runtime. Libglade uses the XML file 
  format used by the GLADE user interface builder GLADE, so libglade acts 
  as an alternative to GLADE's code generation approach. Libglade also 
  provides a simple interface for connecting handlers to the various signals
  in the interface (on platforms where the gmodule library works correctly, 
  it is possible to connect all the handlers with a single function call). 
  Once the interface has been instantiated, libglade gives no overhead, so 
  other than the short initial interface loading time, there is no performance 
  tradeoff.

  mono
  Mono is a platform for running and developing modern applications,based on
  the ECMA/ISO Standards. Mono can run existing programs targeting the .NET
  or Java frameworks.

  opencdk
  This library provides basic parts of the OpenPGP message format.

  pango
  Pango is a library for layout and rendering of text, with an emphasis on 
  internationalization. Pango can be used anywhere that text layout is 
  needed; however, most of the work on Pango-1.0 was done using the GTK+ 
  widget toolkit as a test platform. Pango forms the core of text and font 
  handling for GTK+-2.0.

  pcre
  Perl-compatible regular expression library.PCRE has its own native API,
  but a set of "wrapper" functions that are based on the POSIX API are 
  also supplied in the library libpcreposix. Note that this just provides
  a POSIX calling interface to PCRE: the regular expressions themselves 
  still follow Perl syntax and semantics. The header file for the 
  POSIX-style functions is called pcreposix.h.

  php4
  PHP is an HTML-embedded scripting language.  PHP attempts to make it
  easy for developers to write dynamically generated web pages. PHP also
  offers built-in database integration for several commercial and 
  non-commercial database management systems, so writing a database-enabled 
  web page with PHP is fairly simple.  The most common use of PHP coding is 
  probably as a replacement for CGI scripts. The mod_php module enables the
  Apache web server to understand and process the embedded PHP language in 
  web pages.

  samba
  Samba provides an SMB server which can be used to provide network services
  to SMB (sometimes called "Lan Manager") clients, including various versions
  of MS Windows, OS/2, and other Linux machines. Samba uses NetBIOS over 
  TCP/IP (NetBT) protocols and does NOT need NetBEUI (Microsoft Raw NetBIOS 
  frame) protocol.

  vim
  VIM (VIsual editor iMproved) is an updated and improved version of the vi
  editor.  Vi was the first real screen-based editor for UNIX, and is still
  very popular.  VIM improves on vi by adding new features: multiple windows,
  multi-level undo, block highlighting and more.

  xorg-x11
  X.org X11 is an open source implementation of the X Window System. It
  provides the basic low level functionality which full fledged graphical 
  user interfaces (GUIs) such as GNOME and KDE are designed upon.

Problem description:
  atk < TSL 3.0 >
  - Fixed -devel Requires.

  backuppc < TSL 3.0 >
  - Initial build for TSL-3.0.

  bind < TSL 3.0 >
  - Changed init priority.

  clamav < TSL 3.0 >
  - Moved libclamav.pc to devel, Bug #1379.

  curl < TSL 3.0 >
  - Fixed -devel Requires.

  dhcp < TSL 3.0 > < TSL 2.2 >
  - changed init priority. Fixed Bug #1411.
  - New Upstream.

  expat < TSL 3.0 >
  - Fix Requires.

  file < TSL 3.0 >
  - Added Requires and BuildRequires, Bug #1397.

  fontconfig < TSL 3.0 >
  - pkgconfig files moved to devel. Fixed Bug #1380.

  glib12 < TSL 3.0 >
  - Fixed underquoted definition warning, Bug#1406.

  gtk12+ < TSL 3.0 >
  - Fixed underquoted definition warning, Bug#1407.
  - Fixed -devel Requires.

  gtk2+ < TSL 3.0 >
  - Moved *.pc files to devel and fixed Requires, Bug #1377 and #1385

  libglade < TSL 3.0 >
  - Fixed -devel Requires list.
  
  mono < TSL 3.0 >
  - Devel package added.

  opencdk < TSL 3.0 >
  - Fixed underquoted definition warning, Bug#1408.

  pango < TSL 3.0 >
  - Fixed -devel Requires.

  pcre < TSL 3.0 >
  - Moved libpcre.pc to devel.

  php4 < TSL 2.2 >
  - PHP developers released PHP 4.4.1 version on 2005-10-31. Security
  fixes introduced bug, which affects three SquirrelMail functions.
  If your SquirrelMail install does not use server side sorting, PHP
  bug can create infinite loop in message display.

  samba < TSL 3.0 >
  - symlink created for libsmbclient.so. Fixed Bug #1402.

  vim < TSL 3.0 >
  - Fixed help doc issue, Bug #1410.
  - Added -D_GNU_SOURCE to CFLAGS list.
  - Fixed BuildRequires, Bug #1400.

  xorg-x11 < TSL 3.0 >
  - Fixed Requires and BuildRequires.

Action:
  We recommend that all systems with this package installed be upgraded.
  Please note that if you do not need the functionality provided by this
  package, you may want to remove it from your system.


Location:
  All Trustix Secure Linux updates are available from
  <URI:http://http.trustix.org/pub/trustix/updates/>
  <URI:ftp://ftp.trustix.org/pub/trustix/updates/>


About Trustix Secure Linux:
  Trustix Secure Linux is a small Linux distribution for servers. With focus
  on security and stability, the system is painlessly kept safe and up to
  date from day one using swup, the automated software updater.


Automatic updates:
  Users of the SWUP tool can enjoy having updates automatically
  installed using 'swup --upgrade'.


Questions?
  Check out our mailing lists:
  <URI:http://www.trustix.org/support/>


Verification:
  This advisory along with all Trustix packages are signed with the
  TSL sign key.
  This key is available from:
  <URI:http://www.trustix.org/TSL-SIGN-KEY>

  The advisory itself is available from the errata pages at
  <URI:http://www.trustix.org/errata/trustix-2.2/> and
  <URI:http://www.trustix.org/errata/trustix-3.0/>
  or directly at
  <URI:http://www.trustix.org/errata/2005/0065/>


MD5sums of the packages:
- --------------------------------------------------------------------------
b8419cc291b81e3db050eae2de785e3a  2.2/rpms/php4-4.4.1-2tr.i586.rpm
175e83bc2f202a74293a501e5e55cbfd  2.2/rpms/php4-cli-4.4.1-2tr.i586.rpm
ae60df4cc97315c21ac20952f77c2ea3  2.2/rpms/php4-curl-4.4.1-2tr.i586.rpm
0c38b5f529dd6ab448f6140fdb04d350  2.2/rpms/php4-devel-4.4.1-2tr.i586.rpm
e739af36f8e235ff0b9393b0d46f0bd1  2.2/rpms/php4-domxml-4.4.1-2tr.i586.rpm
1d946e500f1b5b3822c02c0d318861a4  2.2/rpms/php4-exif-4.4.1-2tr.i586.rpm
2ab948befefb4e1be52f48d00cce61a5  2.2/rpms/php4-fcgi-4.4.1-2tr.i586.rpm
f1097595965ae20273cd8920b11a3d49  2.2/rpms/php4-gd-4.4.1-2tr.i586.rpm
9fd0598ea866b18bb540240d1a5e5e7b  2.2/rpms/php4-imap-4.4.1-2tr.i586.rpm
72ec299cf7cbf69ef3ba59d6c1de3608  2.2/rpms/php4-ldap-4.4.1-2tr.i586.rpm
35f76927c35fc4b755b622a5e35b883f  2.2/rpms/php4-mhash-4.4.1-2tr.i586.rpm
6f974e1f102435a59a6ea61b1e07685a  2.2/rpms/php4-mysql-4.4.1-2tr.i586.rpm
4ee7ae9da4753cface5d83830b089c2d  2.2/rpms/php4-pgsql-4.4.1-2tr.i586.rpm
c9dcbcf00d3b873a86e13f8a2a754e29  2.2/rpms/php4-test-4.4.1-2tr.i586.rpm

13f90e739720c7a429f1524ec5c59005  3.0/rpms/bind-libs-9.3.1-9tr.i586.rpm
8a1f6ca968d0ca144417583c7cb45bac  3.0/rpms/bind-light-9.3.1-9tr.i586.rpm
999138767d12c4d929969fe3d83ae076  3.0/rpms/bind-light-devel-9.3.1-9tr.i586.rpm
6d114102473f44c055db5306e2fea622  3.0/rpms/bind-utils-9.3.1-9tr.i586.rpm
38891abb1ed70cb5b313715670b968c0  3.0/rpms/clamav-0.87.1-2tr.i586.rpm
8cd749a8eb4c74e9113b1d7a0b15fc53  3.0/rpms/clamav-devel-0.87.1-2tr.i586.rpm
1c49c9f5023d3e885569dd63048699b6  3.0/rpms/curl-7.14.0-2tr.i586.rpm
6cce8b5a08a088ad6760ba4a195951e8  3.0/rpms/curl-devel-7.14.0-2tr.i586.rpm
825595d9eaf5eb53f369708126ab5880  3.0/rpms/dhcp-client-3.0.3-2tr.i586.rpm
2180066ab705330f7477c6cef4ea99ea  3.0/rpms/dhcp-common-3.0.3-2tr.i586.rpm
77f6ca7c919117cee08ffb861b5f9163  3.0/rpms/dhcp-devel-3.0.3-2tr.i586.rpm
42bc14903910ee85783413f5be9a6e12  3.0/rpms/dhcp-server-3.0.3-2tr.i586.rpm
925d706bcf1bb98fd594469adaca4cf3  3.0/rpms/expat-1.95.8-5tr.i586.rpm
75a3c3ac618d3be6635004a380d1d8a1  3.0/rpms/expat-devel-1.95.8-5tr.i586.rpm
83d2c6135de38f917f82285e7d3b0f75  3.0/rpms/expat-libs-1.95.8-5tr.i586.rpm
e582f4805fb4a0fbe5af0c53fcf21816  3.0/rpms/file-4.13-3tr.i586.rpm
5f5ba40b55498b70ab76ea167d3326c9  3.0/rpms/file-devel-4.13-3tr.i586.rpm
dcdecb01960d0737450903dd1a73b76b  3.0/rpms/fontconfig-2.2.3-6tr.i586.rpm
4d8837907841a694eac42fda4683a936  3.0/rpms/fontconfig-devel-2.2.3-6tr.i586.rpm
8a37cd6d7dcc8dcf435df1a786d9ec2f  3.0/rpms/glib12-1.2.10-21tr.i586.rpm
8f73a48c098e255779372c9be3da1e9a  3.0/rpms/glib12-devel-1.2.10-21tr.i586.rpm
cc4da2752668681eee7a742c7572a0ca  3.0/rpms/gtk12+-1.2.10-23tr.i586.rpm
2e6c1623f34897323e745a1ee7faee16  3.0/rpms/gtk12+-devel-1.2.10-23tr.i586.rpm
ed624ad80038e95d709a30f2744959b4  3.0/rpms/gtk2+-2.6.7-5tr.i586.rpm
bedbadce4325ee11e207e85b26ea44ed  3.0/rpms/gtk2+-devel-2.6.7-5tr.i586.rpm
3ae56637917e20ff69b11aac2f5b4e22  3.0/rpms/libglade-2.5.1-3tr.i586.rpm
834a002095b4c23e8aeea032174ba641  3.0/rpms/libglade-devel-2.5.1-3tr.i586.rpm
8eae67a2b37e46d286ad86e2cef92edd  3.0/rpms/mono-1.0.6-5tr.i586.rpm
6f529f73a78e1895040b09d21df25d96  3.0/rpms/mono-devel-1.0.6-5tr.i586.rpm
5959754a04cb135a55d97e2284cd4d1c  3.0/rpms/opencdk-0.5.5-5tr.i586.rpm
75278919e49106af1a534cbaf8a763dd  3.0/rpms/opencdk-devel-0.5.5-5tr.i586.rpm
335bf2472ddd69b3a644bedcc85a4500  3.0/rpms/pango-1.8.2-2tr.i586.rpm
8be4e3de2a02bfcf701f4e95c1d8c745  3.0/rpms/pango-devel-1.8.2-2tr.i586.rpm
d6839a2037c2955dd0440e339a0d69e5  3.0/rpms/pcre-5.0-5tr.i586.rpm
754faf25d09cccfbb99594588a25424c  3.0/rpms/pcre-devel-5.0-5tr.i586.rpm
85fd23d796230f39d2e45223904a4036  3.0/rpms/samba-3.0.14a-10tr.i586.rpm
42b027aaa07026dbe3dbbcbf5d49a86a  3.0/rpms/samba-client-3.0.14a-10tr.i586.rpm
1953f29a84e43e057f94479d560b99fb  3.0/rpms/samba-common-3.0.14a-10tr.i586.rpm
95303159eecc1ef40d9037f6e4690e09  3.0/rpms/samba-devel-3.0.14a-10tr.i586.rpm
8d1f4dee2a0b92e9d41eaf97e0c7e635  3.0/rpms/samba-mysql-3.0.14a-10tr.i586.rpm
64c352f60b5b13c141295bef48f6cb26  3.0/rpms/vim-6.4.000-3tr.i586.rpm
5682b06c1a3edc3d1a909f928f7c5540  3.0/rpms/vim-doc-6.4.000-3tr.i586.rpm
3ab5ee0fa73a3bc442d3a803ac400647  3.0/rpms/vim-syntax-6.4.000-3tr.i586.rpm
4a7fafe86c822337005a6a6822cb29ff  3.0/rpms/vim-tools-6.4.000-3tr.i586.rpm
b73575a628d02e7022b407c9fdcbf1e0  3.0/rpms/xorg-x11-6.8.2-9tr.i586.rpm
cdd13673c73e258e8b3d5146c53d74e3  3.0/rpms/xorg-x11-devel-6.8.2-9tr.i586.rpm
e2b05b0f9205dbdfd5dc739f675b3266  3.0/rpms/xorg-x11-doc-6.8.2-9tr.i586.rpm
2077a6737e8c02bb6384c038b64b062f  3.0/rpms/xorg-x11-fonts-100dpi-6.8.2-9tr.i586.rpm
da721531fed5aa57d6d7de31af0ec005  3.0/rpms/xorg-x11-fonts-6.8.2-9tr.i586.rpm
803908bd34dda6debd214169c61b9938  3.0/rpms/xorg-x11-fonts-75dpi-6.8.2-9tr.i586.rpm
cc92a568afb653b66b985481673ca169  3.0/rpms/xorg-x11-fonts-cid-6.8.2-9tr.i586.rpm
3294ac394747eb7aacfb80664f802296  3.0/rpms/xorg-x11-fonts-cyrillic-6.8.2-9tr.i586.rpm
cab59f2305dcb2df4f1f960209d137ca  3.0/rpms/xorg-x11-fonts-otf-6.8.2-9tr.i586.rpm
26b03a4ef89f7a8b75c46f14626f6423  3.0/rpms/xorg-x11-fonts-speedo-6.8.2-9tr.i586.rpm
4689468bd9ecf4e6054de45252e9cc06  3.0/rpms/xorg-x11-fonts-ttf-6.8.2-9tr.i586.rpm
5f47e4cf2876afa70b3ae96e04cee9ab  3.0/rpms/xorg-x11-fonts-type1-6.8.2-9tr.i586.rpm
eb8835bebad76b4a9613de0ba8862a64  3.0/rpms/xorg-x11-libs-6.8.2-9tr.i586.rpm
ccda082ae90441cc62e18a4706bdab95  3.0/rpms/xorg-x11-sdk-6.8.2-9tr.i586.rpm
- --------------------------------------------------------------------------


Trustix Security Team


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFDfdeLi8CEzsK9IksRAoj9AKCZVuOHDRUp2C5c1+TDEGnT9xqU6QCgoyyS
pvcuoI1zQTRCFnohIIWKUhM=
=IuuI
-----END PGP SIGNATURE-----