|
|
Errata
tinysofa enterprise server 1.0
May 3rd, 2004 (#2004-003)
- --------------------------------------------------------------------------
tinysofa Security Advisory #2004-003
Package name: e2fsprogs expat initscripts kerberos5 ntp stunnel
tinysofa-gpgkeys-emily
Summary: Minor bug fixes
Advisory ID: TSSA-2004-003
Date: 2004-05-03
Affected versions: tinysofa enterprise server 1.0
- --------------------------------------------------------------------------
Package description:
e2fsprogs:
The e2fsprogs package contains a number of utilities for creating,
checking, modifying and correcting any inconsistencies in second
extended (ext2) filesystems. E2fsprogs contains e2fsck (used to repair
filesystem inconsistencies after an unclean shutdown), mke2fs (used to
initialize a partition to contain an empty ext2 filesystem), debugfs
(used to examine the internal structure of a filesystem, to manually
repair a corrupted filesystem or to create test cases for e2fsck), tune2fs
(used to modify filesystem parameters) and most of the other core ext2fs
filesystem utilities.
expat:
Expat is an XML 1.0 parser written in C by James Clark. It aims to be
fully conforming. It is not a validating XML parser.
initscripts:
The initscripts package contains the basic system scripts used to boot
your tinysofa, change runlevels, and shut the system down
cleanly. Initscripts also contains the scripts that activate and
deactivate most network interfaces.
kerberos5:
(MIT) Kerberos is a network authentication protocol. It is designed to
provide strong authentication for client/server applications by using
secret-key cryptography. A free implementation of this protocol is available
from the Massachusetts Institute of Technology. Kerberos is available in many
commercial products as well.
ntp:
The Network Time Protocol (NTP) is used to synchronize a computer's
time with another reference time source. The ntp package contains
utilities and daemons that will synchronize your computer's time to
Coordinated Universal Time (UTC) via the NTP protocol and NTP servers.
The ntp package includes ntpdate (a program for retrieving the date
and time from remote machines via a network) and ntpd (a daemon which
continuously adjusts system time).
stunnel:
stunnel is a socket wrapper which can be used to give ordinary
applications SSL (secure sockets layer) support. For example, it
can be used in conjunction with a imapd to create a SSL secure IMAP
server.
tinysofa-gpgkeys-emily:
This package contains the GPG keys used to sign packages and rdfs. It is used
by swup to verify that the packages and rdfs found on the official tinysofa
sites and mirrors are correct.
Problem description:
e2fsprogs:
Fixed libcom_err-devel permissions. This update fixes Bug #3
<URI:http://www.tinysofa.org/bugs/show_bug.cgi?id=3>
expat:
Fixed permissions of documentation and include files.
This update fixes Bug #3
<URI:http://www.tinysofa.org/bugs/show_bug.cgi?id=3>
initscripts:
Fixed permissions of configuration and documentation files.
This update fixes Bug #3
<URI:http://www.tinysofa.org/bugs/show_bug.cgi?id=3>
kerberos5:
Fixed permissions of manual and include files.
This update fixes Bug #3
<URI:http://www.tinysofa.org/bugs/show_bug.cgi?id=3>
ntp:
Fixed permissions of configuration and documentation files.
This update fixes Bug #3
<URI:http://www.tinysofa.org/bugs/show_bug.cgi?id=3>
stunnel:
Fixed permissions of documentation files.
This update fixes Bug #3
<URI:http://www.tinysofa.org/bugs/show_bug.cgi?id=3>
tinysofa-gpgkeys-emily:
Fixed permissions of configuration files. Added the tinysofa contrib
public key. This update fixes Bug #3
<URI:http://www.tinysofa.org/bugs/show_bug.cgi?id=3>
Action:
We recommend that all systems with these packages installed be upgraded.
Please note that if you do not need the functionality provided by this
package, you may want to remove it from your system.
Location:
All tinysofa updates are available from
<URI:http://http.tinysofa.org/pub/tinysofa/updates/>
<URI:ftp://ftp.tinysofa.org/pub/tinysofa/updates/>
Automatic updates:
Users of the SWUP tool can enjoy having updates automatically
installed using 'swup --upgrade'.
Questions?
Check out our mailing lists:
<URI:http://www.tinysofa.org/support/>
Verification:
This advisory is signed with the tinysofa security sign key.
This key is available from:
<URI:http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xAEDCBB4B>
All tinysofa packages are signed with the tinysofa stable sign key.
This key is available from:
<URI:http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x0F1240A2>
The advisory is available from the tinysofa errata database at
<URI:http://www.tinysofa.org/support/errata/>
or directly at
<URI:http://www.tinysofa.org/support/errata/2004/003.html>
MD5sums of the packages:
- --------------------------------------------------------------------------
b358a3d1dd71169c0d7fa5c214db2f93 e2fsprogs-1.35-6ts.i586.rpm
5165967c815825e261445d68bed4ac2e e2fsprogs-devel-1.35-6ts.i586.rpm
36cffb1554a84eaad0eddb1948b58840 expat-1.95.7-10ts.i586.rpm
c62e1d3596733147d5be288ea5d6b1c3 expat-devel-1.95.7-10ts.i586.rpm
4476d28c5f7099f40429e3335af3434d expat-libs-1.95.7-10ts.i586.rpm
a2e3d088304d72cebccec238d8543cfd initscripts-7.14-21ts.i586.rpm
b2813ff94d3ee8596079ceb19a8e5d86 kerberos5-1.3.2-3ts.i586.rpm
c35d77f1799f64717a64525322d4c71d kerberos5-devel-1.3.2-3ts.i586.rpm
2239da035579d22208b7c9e61d857c65 kerberos5-libs-1.3.2-3ts.i586.rpm
a4f05429e0720f67933b9dc9564ed2ba ntp-4.2.0-11ts.i586.rpm
12f0f74be5b4ef76e669a8a0c9049e0e stunnel-4.05-7ts.i586.rpm
b0882bec3fd09e43271a8a336e61f594 tinysofa-gpgkeys-emily-1.0-6ts.noarch.rpm
- --------------------------------------------------------------------------
tinysofa Security Team
|
