Advisories: February 22, 2005

Fedora Core

---

Fedora Update Notification
FEDORA-2005-153
2005-02-22

---

Product : Fedora Core 2
Name : squid
Version : 2.5.STABLE8
Release : 1.FC2.1
Summary : The Squid proxy caching server.

Description :
Squid is a high-performance proxy caching server for Web clients,
supporting FTP, gopher, and HTTP data objects. Unlike traditional
caching software, Squid handles all requests in a single,
non-blocking, I/O-driven process. Squid keeps meta data and
especially hot objects cached in RAM, caches DNS lookups, supports
non-blocking DNS lookups, and implements negative caching of failed
requests.

Squid consists of a main server program squid, a Domain Name
System lookup program (dnsserver), a program for retrieving FTP
data (ftpget), and some management and client tools.

---

Update Information:

This update fixes CAN-2005-0446 Squid DoS from bad DNS
response

---

• Fri Feb 18 2005 Jay Fenlason <fenlason@redhat.com>
  7:2.5.STABLE8-1.FC2.1
  • New upstream version, includes fix for bz#148884
    CAN-2005-0446
  • Reorganize spec file to put local patches after upstream
    ones.

---

This update can be downloaded from:

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/

197d46d4f118d9425d8156baafcd316c
SRPMS/squid-2.5.STABLE8-1.FC2.1.src.rpm
8117b066c52898f34e7290bb88850b18
x86_64/squid-2.5.STABLE8-1.FC2.1.x86_64.rpm
e38f7f8d6b9eeaae077fbcfa2657a6dd
x86_64/debug/squid-debuginfo-2.5.STABLE8-1.FC2.1.x86_64.rpm
af811c1431ebcc3b4e5fb329e656a839
i386/squid-2.5.STABLE8-1.FC2.1.i386.rpm
76364c80e7280f2116878ba67270a194
i386/debug/squid-debuginfo-2.5.STABLE8-1.FC2.1.i386.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the ‘up2date’ command.

---

---

Fedora Update Notification
FEDORA-2005-154
2005-02-22

---

Product : Fedora Core 3
Name : squid
Version : 2.5.STABLE8
Release : 1.FC3.1
Summary : The Squid proxy caching server.

Description :
Squid is a high-performance proxy caching server for Web clients,
supporting FTP, gopher, and HTTP data objects. Unlike traditional
caching software, Squid handles all requests in a single,
non-blocking, I/O-driven process. Squid keeps meta data and
especially hot objects cached in RAM, caches DNS lookups, supports
non-blocking DNS lookups, and implements negative caching of failed
requests.

Squid consists of a main server program squid, a Domain Name
System lookup program (dnsserver), a program for retrieving FTP
data (ftpget), and some management and client tools.

---

Update Information:

This update fixes CAN-2005-0446 Squid DoS from bad DNS
response

---

• Fri Feb 18 2005 Jay Fenlason <fenlason@redhat.com>
  7:2.5.STABLE8-1.FC3.1
  • New upstream version, includes fix for bz#148884
    CAN-2005-0446
  • Reorganize spec file to put local patches after upstream
    ones.

---

This update can be downloaded from:

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/

cbf4ef3e2a9a5c6dbf9083f8f027c1f5
SRPMS/squid-2.5.STABLE8-1.FC3.1.src.rpm
dffaa4064b557bd8e7d1291d81c16fdd
x86_64/squid-2.5.STABLE8-1.FC3.1.x86_64.rpm
858c915a58b3b5e352a2934fad633ab1
x86_64/debug/squid-debuginfo-2.5.STABLE8-1.FC3.1.x86_64.rpm
72a1472887ee86f5a4582543b2a59aa5
i386/squid-2.5.STABLE8-1.FC3.1.i386.rpm
8ca09a86e9d64bdfd5ed0fe46f2d06db
i386/debug/squid-debuginfo-2.5.STABLE8-1.FC3.1.i386.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the ‘up2date’ command.

---

---

Fedora Update Notification
FEDORA-2005-157
2005-02-22

---

Product : Fedora Core 3
Name : postgresql
Version : 7.4.7
Release : 3.FC3.1
Summary : PostgreSQL client programs and libraries.

Description :
PostgreSQL is an advanced Object-Relational database management
system (DBMS) that supports almost all SQL constructs (including
transactions, subselects and user-defined types and functions).

---

• Mon Feb 21 2005 Tom Lane <tgl@redhat.com> 7.4.7-3.FC3.1
  • Work around selinux <<EOF problem during initdb (bug
    #149237).
  • Repair improper error message in init script when PGVERSION
    doesn’t match.
  • Arrange for auto update of version embedded in init
    script.
  • Fix improper call of strerror_r, which leads to junk error
    messages in libpq.
  • Patch additional buffer overruns in plpgsql
    (CAN-2005-0247)

---

This update can be downloaded from:

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/

60500c654418746d2a240682fd867371
SRPMS/postgresql-7.4.7-3.FC3.1.src.rpm
d9e45da8811520933814dac4d759d5d4
x86_64/postgresql-7.4.7-3.FC3.1.x86_64.rpm
be1123e6b9785ac8ef8ea1c1cd7de748
x86_64/postgresql-libs-7.4.7-3.FC3.1.x86_64.rpm
ad105859cac1b36127900aac3332f6ab
x86_64/postgresql-server-7.4.7-3.FC3.1.x86_64.rpm
1ba5d2386089b713855771bb61d4ba8e
x86_64/postgresql-docs-7.4.7-3.FC3.1.x86_64.rpm
0bdccee85b2dc5ad306ab2d24c888797
x86_64/postgresql-contrib-7.4.7-3.FC3.1.x86_64.rpm
15b69dbd09c10a529c5839c9883877f3
x86_64/postgresql-devel-7.4.7-3.FC3.1.x86_64.rpm
6dccb6a0ce81b6405edb72f75ed59a8d
x86_64/postgresql-pl-7.4.7-3.FC3.1.x86_64.rpm
1007185ad27a2c7583938be4d0921378
x86_64/postgresql-tcl-7.4.7-3.FC3.1.x86_64.rpm
11ccd3dc110c364f955c39531386050c
x86_64/postgresql-python-7.4.7-3.FC3.1.x86_64.rpm
6fd7ca693e1dc9d30bd382980ef2d0ac
x86_64/postgresql-jdbc-7.4.7-3.FC3.1.x86_64.rpm
eaa52468a496ae181034206196aabbf2
x86_64/postgresql-test-7.4.7-3.FC3.1.x86_64.rpm
88ab743e7182c0a719f6df417aaaead6
x86_64/debug/postgresql-debuginfo-7.4.7-3.FC3.1.x86_64.rpm
17cb9897e42f7983a0b92a080e2cc43d
x86_64/postgresql-libs-7.4.7-3.FC3.1.i386.rpm
0432fdea144b04a8015c74cf145668fa
i386/postgresql-7.4.7-3.FC3.1.i386.rpm
17cb9897e42f7983a0b92a080e2cc43d
i386/postgresql-libs-7.4.7-3.FC3.1.i386.rpm
9517190f8d8242c49250773f65e2b7d5
i386/postgresql-server-7.4.7-3.FC3.1.i386.rpm
a2934e71475ac88832ccbf7251fa5caa
i386/postgresql-docs-7.4.7-3.FC3.1.i386.rpm
af6082a48a11a442ceeb3f5bcdc86fe9
i386/postgresql-contrib-7.4.7-3.FC3.1.i386.rpm
cd0856617a79d296468edd5507a971d3
i386/postgresql-devel-7.4.7-3.FC3.1.i386.rpm
5eb6b9052d9a95b321f7aee29ff8da80
i386/postgresql-pl-7.4.7-3.FC3.1.i386.rpm
37f5aa140b9e05014dbbaec68bad35a6
i386/postgresql-tcl-7.4.7-3.FC3.1.i386.rpm
ae1a7f6ddbc602af3f2edb2c06d35a1a
i386/postgresql-python-7.4.7-3.FC3.1.i386.rpm
2c567e3b6a1d37c2e295fb8a536d019c
i386/postgresql-jdbc-7.4.7-3.FC3.1.i386.rpm
9f3398a2d3050576ebf9f30814c215a2
i386/postgresql-test-7.4.7-3.FC3.1.i386.rpm
a81060ff2ffb99b97ca519b3445c606d
i386/debug/postgresql-debuginfo-7.4.7-3.FC3.1.i386.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the ‘up2date’ command.

---

---

Fedora Update Notification
FEDORA-2005-158
2005-02-22

---

Product : Fedora Core 2
Name : postgresql
Version : 7.4.7
Release : 3.FC2.1
Summary : PostgreSQL client programs and libraries.

Description :
PostgreSQL is an advanced Object-Relational database management
system (DBMS) that supports almost all SQL constructs (including
transactions, subselects and user-defined types and functions).

---

• Mon Feb 21 2005 Tom Lane <tgl@redhat.com> 7.4.7-3.FC2.1
  • Repair improper error message in init script when PGVERSION
    doesn’t match.
  • Arrange for auto update of version embedded in init
    script.
  • Fix improper call of strerror_r, which leads to junk error
    messages in libpq.
  • Patch additional buffer overruns in plpgsql
    (CAN-2005-0247)

---

This update can be downloaded from:

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/

a00e5138d8a17e30cd939748a038df64
SRPMS/postgresql-7.4.7-3.FC2.1.src.rpm
5f2d62cbc35e34a83b92041faa4462b3
x86_64/postgresql-7.4.7-3.FC2.1.x86_64.rpm
880960ba30d83312f673d7aee9963dc0
x86_64/postgresql-libs-7.4.7-3.FC2.1.x86_64.rpm
2bf77b35a1b0c3575d109d3f6e35092e
x86_64/postgresql-server-7.4.7-3.FC2.1.x86_64.rpm
85506986320c8eb0bf66536dbd941ab0
x86_64/postgresql-docs-7.4.7-3.FC2.1.x86_64.rpm
b5cab1a453ddd438fed5c75944177625
x86_64/postgresql-contrib-7.4.7-3.FC2.1.x86_64.rpm
dac4e1782e2796f505a954944785e1bf
x86_64/postgresql-devel-7.4.7-3.FC2.1.x86_64.rpm
c356376e83bca330aa1069c7a596dbc5
x86_64/postgresql-pl-7.4.7-3.FC2.1.x86_64.rpm
e0a911740eb46e6eedee89a31fda5089
x86_64/postgresql-tcl-7.4.7-3.FC2.1.x86_64.rpm
d4ba7a336299a8ec3556c963231fc057
x86_64/postgresql-python-7.4.7-3.FC2.1.x86_64.rpm
a717489a2d24719a591e41502519080e
x86_64/postgresql-jdbc-7.4.7-3.FC2.1.x86_64.rpm
25eab038c34f381a6f3a47c2a50804cb
x86_64/postgresql-test-7.4.7-3.FC2.1.x86_64.rpm
14698db52b3596d178e2af185fbdbb3e
x86_64/debug/postgresql-debuginfo-7.4.7-3.FC2.1.x86_64.rpm
3a9645f2b1e2efd6f473832428c3c2c9
i386/postgresql-7.4.7-3.FC2.1.i386.rpm
9da36d65eda539afcbcb9a61d68e7d31
i386/postgresql-libs-7.4.7-3.FC2.1.i386.rpm
a77fd5281a0c73b5e277a21c4344cb57
i386/postgresql-server-7.4.7-3.FC2.1.i386.rpm
0b314d470edf82156c2d7de0db9fb4d7
i386/postgresql-docs-7.4.7-3.FC2.1.i386.rpm
369219be851b2f511f4479162f5be697
i386/postgresql-contrib-7.4.7-3.FC2.1.i386.rpm
2dcebe6952e900e2b2ea3182bed93268
i386/postgresql-devel-7.4.7-3.FC2.1.i386.rpm
be93e1bcde4c2f017481c8e65ca95ad6
i386/postgresql-pl-7.4.7-3.FC2.1.i386.rpm
e3e2e18df1a0b87af1be7f9f3affe9bd
i386/postgresql-tcl-7.4.7-3.FC2.1.i386.rpm
4a2a643b91d8cc2ca4887a7d69a9ce55
i386/postgresql-python-7.4.7-3.FC2.1.i386.rpm
cdc1001c8d5b306f07ecdf1e5998bac2
i386/postgresql-jdbc-7.4.7-3.FC2.1.i386.rpm
4f1927c6510d6e3f18f097697bc99b08
i386/postgresql-test-7.4.7-3.FC2.1.i386.rpm
214e6720e2bb734d6e7309648831b0ff
i386/debug/postgresql-debuginfo-7.4.7-3.FC2.1.i386.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the ‘up2date’ command.

---