---

Home Security

Advisories: February 22, 2005

By

Fedora Core

Fedora Update Notification
FEDORA-2005-153
2005-02-22

Product : Fedora Core 2
Name : squid
Version : 2.5.STABLE8
Release : 1.FC2.1
Summary : The Squid proxy caching server.

Description :
Squid is a high-performance proxy caching server for Web clients,
supporting FTP, gopher, and HTTP data objects. Unlike traditional
caching software, Squid handles all requests in a single,
non-blocking, I/O-driven process. Squid keeps meta data and
especially hot objects cached in RAM, caches DNS lookups, supports
non-blocking DNS lookups, and implements negative caching of failed
requests.

Squid consists of a main server program squid, a Domain Name
System lookup program (dnsserver), a program for retrieving FTP
data (ftpget), and some management and client tools.

Update Information:

This update fixes CAN-2005-0446 Squid DoS from bad DNS
response

  • Fri Feb 18 2005 Jay Fenlason <fenlason@redhat.com>
    7:2.5.STABLE8-1.FC2.1

    • New upstream version, includes fix for bz#148884
      CAN-2005-0446
    • Reorganize spec file to put local patches after upstream
      ones.

This update can be downloaded from:

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/

197d46d4f118d9425d8156baafcd316c
SRPMS/squid-2.5.STABLE8-1.FC2.1.src.rpm
8117b066c52898f34e7290bb88850b18
x86_64/squid-2.5.STABLE8-1.FC2.1.x86_64.rpm
e38f7f8d6b9eeaae077fbcfa2657a6dd
x86_64/debug/squid-debuginfo-2.5.STABLE8-1.FC2.1.x86_64.rpm
af811c1431ebcc3b4e5fb329e656a839
i386/squid-2.5.STABLE8-1.FC2.1.i386.rpm
76364c80e7280f2116878ba67270a194
i386/debug/squid-debuginfo-2.5.STABLE8-1.FC2.1.i386.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the ‘up2date’ command.

Fedora Update Notification
FEDORA-2005-154
2005-02-22

Product : Fedora Core 3
Name : squid
Version : 2.5.STABLE8
Release : 1.FC3.1
Summary : The Squid proxy caching server.

Description :
Squid is a high-performance proxy caching server for Web clients,
supporting FTP, gopher, and HTTP data objects. Unlike traditional
caching software, Squid handles all requests in a single,
non-blocking, I/O-driven process. Squid keeps meta data and
especially hot objects cached in RAM, caches DNS lookups, supports
non-blocking DNS lookups, and implements negative caching of failed
requests.

Squid consists of a main server program squid, a Domain Name
System lookup program (dnsserver), a program for retrieving FTP
data (ftpget), and some management and client tools.

Update Information:

This update fixes CAN-2005-0446 Squid DoS from bad DNS
response

  • Fri Feb 18 2005 Jay Fenlason <fenlason@redhat.com>
    7:2.5.STABLE8-1.FC3.1

    • New upstream version, includes fix for bz#148884
      CAN-2005-0446
    • Reorganize spec file to put local patches after upstream
      ones.

This update can be downloaded from:

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/

cbf4ef3e2a9a5c6dbf9083f8f027c1f5
SRPMS/squid-2.5.STABLE8-1.FC3.1.src.rpm
dffaa4064b557bd8e7d1291d81c16fdd
x86_64/squid-2.5.STABLE8-1.FC3.1.x86_64.rpm
858c915a58b3b5e352a2934fad633ab1
x86_64/debug/squid-debuginfo-2.5.STABLE8-1.FC3.1.x86_64.rpm
72a1472887ee86f5a4582543b2a59aa5
i386/squid-2.5.STABLE8-1.FC3.1.i386.rpm
8ca09a86e9d64bdfd5ed0fe46f2d06db
i386/debug/squid-debuginfo-2.5.STABLE8-1.FC3.1.i386.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the ‘up2date’ command.

Fedora Update Notification
FEDORA-2005-157
2005-02-22

Product : Fedora Core 3
Name : postgresql
Version : 7.4.7
Release : 3.FC3.1
Summary : PostgreSQL client programs and libraries.

Description :
PostgreSQL is an advanced Object-Relational database management
system (DBMS) that supports almost all SQL constructs (including
transactions, subselects and user-defined types and functions).

  • Mon Feb 21 2005 Tom Lane <tgl@redhat.com> 7.4.7-3.FC3.1
    • Work around selinux <<EOF problem during initdb (bug
      #149237).
    • Repair improper error message in init script when PGVERSION
      doesn’t match.
    • Arrange for auto update of version embedded in init
      script.
    • Fix improper call of strerror_r, which leads to junk error
      messages in libpq.
    • Patch additional buffer overruns in plpgsql
      (CAN-2005-0247)

This update can be downloaded from:

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/

60500c654418746d2a240682fd867371
SRPMS/postgresql-7.4.7-3.FC3.1.src.rpm
d9e45da8811520933814dac4d759d5d4
x86_64/postgresql-7.4.7-3.FC3.1.x86_64.rpm
be1123e6b9785ac8ef8ea1c1cd7de748
x86_64/postgresql-libs-7.4.7-3.FC3.1.x86_64.rpm
ad105859cac1b36127900aac3332f6ab
x86_64/postgresql-server-7.4.7-3.FC3.1.x86_64.rpm
1ba5d2386089b713855771bb61d4ba8e
x86_64/postgresql-docs-7.4.7-3.FC3.1.x86_64.rpm
0bdccee85b2dc5ad306ab2d24c888797
x86_64/postgresql-contrib-7.4.7-3.FC3.1.x86_64.rpm
15b69dbd09c10a529c5839c9883877f3
x86_64/postgresql-devel-7.4.7-3.FC3.1.x86_64.rpm
6dccb6a0ce81b6405edb72f75ed59a8d
x86_64/postgresql-pl-7.4.7-3.FC3.1.x86_64.rpm
1007185ad27a2c7583938be4d0921378
x86_64/postgresql-tcl-7.4.7-3.FC3.1.x86_64.rpm
11ccd3dc110c364f955c39531386050c
x86_64/postgresql-python-7.4.7-3.FC3.1.x86_64.rpm
6fd7ca693e1dc9d30bd382980ef2d0ac
x86_64/postgresql-jdbc-7.4.7-3.FC3.1.x86_64.rpm
eaa52468a496ae181034206196aabbf2
x86_64/postgresql-test-7.4.7-3.FC3.1.x86_64.rpm
88ab743e7182c0a719f6df417aaaead6
x86_64/debug/postgresql-debuginfo-7.4.7-3.FC3.1.x86_64.rpm
17cb9897e42f7983a0b92a080e2cc43d
x86_64/postgresql-libs-7.4.7-3.FC3.1.i386.rpm
0432fdea144b04a8015c74cf145668fa
i386/postgresql-7.4.7-3.FC3.1.i386.rpm
17cb9897e42f7983a0b92a080e2cc43d
i386/postgresql-libs-7.4.7-3.FC3.1.i386.rpm
9517190f8d8242c49250773f65e2b7d5
i386/postgresql-server-7.4.7-3.FC3.1.i386.rpm
a2934e71475ac88832ccbf7251fa5caa
i386/postgresql-docs-7.4.7-3.FC3.1.i386.rpm
af6082a48a11a442ceeb3f5bcdc86fe9
i386/postgresql-contrib-7.4.7-3.FC3.1.i386.rpm
cd0856617a79d296468edd5507a971d3
i386/postgresql-devel-7.4.7-3.FC3.1.i386.rpm
5eb6b9052d9a95b321f7aee29ff8da80
i386/postgresql-pl-7.4.7-3.FC3.1.i386.rpm
37f5aa140b9e05014dbbaec68bad35a6
i386/postgresql-tcl-7.4.7-3.FC3.1.i386.rpm
ae1a7f6ddbc602af3f2edb2c06d35a1a
i386/postgresql-python-7.4.7-3.FC3.1.i386.rpm
2c567e3b6a1d37c2e295fb8a536d019c
i386/postgresql-jdbc-7.4.7-3.FC3.1.i386.rpm
9f3398a2d3050576ebf9f30814c215a2
i386/postgresql-test-7.4.7-3.FC3.1.i386.rpm
a81060ff2ffb99b97ca519b3445c606d
i386/debug/postgresql-debuginfo-7.4.7-3.FC3.1.i386.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the ‘up2date’ command.

Fedora Update Notification
FEDORA-2005-158
2005-02-22

Product : Fedora Core 2
Name : postgresql
Version : 7.4.7
Release : 3.FC2.1
Summary : PostgreSQL client programs and libraries.

Description :
PostgreSQL is an advanced Object-Relational database management
system (DBMS) that supports almost all SQL constructs (including
transactions, subselects and user-defined types and functions).

  • Mon Feb 21 2005 Tom Lane <tgl@redhat.com> 7.4.7-3.FC2.1
    • Repair improper error message in init script when PGVERSION
      doesn’t match.
    • Arrange for auto update of version embedded in init
      script.
    • Fix improper call of strerror_r, which leads to junk error
      messages in libpq.
    • Patch additional buffer overruns in plpgsql
      (CAN-2005-0247)

This update can be downloaded from:

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/

a00e5138d8a17e30cd939748a038df64
SRPMS/postgresql-7.4.7-3.FC2.1.src.rpm
5f2d62cbc35e34a83b92041faa4462b3
x86_64/postgresql-7.4.7-3.FC2.1.x86_64.rpm
880960ba30d83312f673d7aee9963dc0
x86_64/postgresql-libs-7.4.7-3.FC2.1.x86_64.rpm
2bf77b35a1b0c3575d109d3f6e35092e
x86_64/postgresql-server-7.4.7-3.FC2.1.x86_64.rpm
85506986320c8eb0bf66536dbd941ab0
x86_64/postgresql-docs-7.4.7-3.FC2.1.x86_64.rpm
b5cab1a453ddd438fed5c75944177625
x86_64/postgresql-contrib-7.4.7-3.FC2.1.x86_64.rpm
dac4e1782e2796f505a954944785e1bf
x86_64/postgresql-devel-7.4.7-3.FC2.1.x86_64.rpm
c356376e83bca330aa1069c7a596dbc5
x86_64/postgresql-pl-7.4.7-3.FC2.1.x86_64.rpm
e0a911740eb46e6eedee89a31fda5089
x86_64/postgresql-tcl-7.4.7-3.FC2.1.x86_64.rpm
d4ba7a336299a8ec3556c963231fc057
x86_64/postgresql-python-7.4.7-3.FC2.1.x86_64.rpm
a717489a2d24719a591e41502519080e
x86_64/postgresql-jdbc-7.4.7-3.FC2.1.x86_64.rpm
25eab038c34f381a6f3a47c2a50804cb
x86_64/postgresql-test-7.4.7-3.FC2.1.x86_64.rpm
14698db52b3596d178e2af185fbdbb3e
x86_64/debug/postgresql-debuginfo-7.4.7-3.FC2.1.x86_64.rpm
3a9645f2b1e2efd6f473832428c3c2c9
i386/postgresql-7.4.7-3.FC2.1.i386.rpm
9da36d65eda539afcbcb9a61d68e7d31
i386/postgresql-libs-7.4.7-3.FC2.1.i386.rpm
a77fd5281a0c73b5e277a21c4344cb57
i386/postgresql-server-7.4.7-3.FC2.1.i386.rpm
0b314d470edf82156c2d7de0db9fb4d7
i386/postgresql-docs-7.4.7-3.FC2.1.i386.rpm
369219be851b2f511f4479162f5be697
i386/postgresql-contrib-7.4.7-3.FC2.1.i386.rpm
2dcebe6952e900e2b2ea3182bed93268
i386/postgresql-devel-7.4.7-3.FC2.1.i386.rpm
be93e1bcde4c2f017481c8e65ca95ad6
i386/postgresql-pl-7.4.7-3.FC2.1.i386.rpm
e3e2e18df1a0b87af1be7f9f3affe9bd
i386/postgresql-tcl-7.4.7-3.FC2.1.i386.rpm
4a2a643b91d8cc2ca4887a7d69a9ce55
i386/postgresql-python-7.4.7-3.FC2.1.i386.rpm
cdc1001c8d5b306f07ecdf1e5998bac2
i386/postgresql-jdbc-7.4.7-3.FC2.1.i386.rpm
4f1927c6510d6e3f18f097697bc99b08
i386/postgresql-test-7.4.7-3.FC2.1.i386.rpm
214e6720e2bb734d6e7309648831b0ff
i386/debug/postgresql-debuginfo-7.4.7-3.FC2.1.i386.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the ‘up2date’ command.

Get the Free Newsletter!

Subscribe to Developer Insider for top news, trends, & analysis

Must Read

LinuxToday is a trusted, contributor-driven news resource supporting all types of Linux users. Our thriving international community engages with us through social media and frequent content contributions aimed at solving problems ranging from personal computing to enterprise-level IT operations. LinuxToday serves as a home for a community that struggles to find comparable information elsewhere on the web.

Our Brands

Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.