[Sisyphus-cybertalk] I: Sisyphus-4.0-branch packages: +3 (5898)
QA Team Robot
=?iso-8859-1?q?qa_=CE=C1_altlinux=2Eorg?=
Вт Май 15 14:05:06 MSD 2007
3 UPDATED packages
libexif - libexif is a library for parsing, editing, and saving EXIF data
* Mon May 14 2007 Michael Shigorin <mike на altlinux> 0.6.14-alt1
- 0.6.14: security fixes
+ http://secunia.com/advisories/25235/
an error exists within the handling of malformed EXIF information;
this can be exploited to crash an application using the library and may
allow execution of arbitrary code
+ thanks Valery Inozemtsev (shrek@) for alerting
- s/autoconf/autoreconf -fisv/
- updated buildrequires
- got back translations (apparently missed in 0.6.13 due to
packaging thinko re minor/soname during 0.6.12 with .so.12)
- demacrified Url:
* Thu Aug 10 2006 Michael Shigorin <mike на altlinux> 0.6.13-alt1
qcad - a professional CAD system
* Thu May 10 2007 Valery Inozemtsev <shrek на altlinux> 2.0.5.0-alt5
- drop old menu, added freedesktop menu
- build translations
- install help
- added Tango icons by default
- updated build dependencies
* Sun Oct 01 2006 Michail Yakushin <silicium на altlinux> 2.0.5.0-alt4
samba - Samba SMB/CIFS server [24M]
* Mon May 14 2007 Alexander Bokovoy <ab на altlinux> 3.0.25-alt1
- New release
- Security fixes for CVE-2007-2444, CVE-2007-2446, and CVE-2007-2447:
+ CVE-2007-2444
Versions: Samba 3.0.23d - 3.0.25pre2
Local SID/Name translation bug can result in user privilege elevation
+ CVE-2007-2446
Versions: Samba 3.0.0 - 3.0.24
Multiple heap overflows allow remote code execution
+ CVE-2007-2447
Versions: Samba 3.0.0 - 3.0.24
Unescaped user input parameters are passed as
arguments to /bin/sh allowing for remote command
execution
- Removed:
+ smbwrapper, as it is not supported anymore
- Fixed:
+ python build w.r.t. -pie
* Wed Apr 18 2007 Dmitry V. Levin <ldv на altlinux> 3.0.24-alt3
Total 5898 source packages.
Подробная информация о списке рассылки Sisyphus-cybertalk