Trustix Security Advisor
2007-05-25 10:07:59 UTC
- --------------------------------------------------------------------------
Trustix Secure Linux Bugfix Advisory #2007-0018
Package names: cyrus-sasl, mrtg, postfix, snort, vim
Summary: Various bug fixes
Date: 2007-05-25
Affected versions: Trustix Secure Linux 2.2
Trustix Secure Linux 3.0
Trustix Secure Linux 3.0.5
- --------------------------------------------------------------------------
Package description:
cyrus-sasl
The cyrus-sasl package contains the Cyrus implementation of SASL. SASL
is the Simple Authentication and Security Layer, a method for adding
authentication support to connection-based protocols.
mrtg
The Multi Router Traffic Grapher (MRTG) is a tool to monitor the traffic
load on network links. MRTG generates HTML pages containing PNG images
which provide a LIVE visual representation of this traffic.
postfix
Postfix is an alternative to the sendmail mailer daemon. Postfix
attempts to be fast, easy to administer, and secure, while at the same
time being sendmail compatible enough to not upset existing users.
snort
Snort is an open source network intrusion prevention and detectin
system utilizing a rule-driven language, which combines the benefits
of signature, protocol and anomaly based inspection methods.
vim
VIM (VIsual editor iMproved) is an updated and improved version of the
vi editor. Vi was the first real screen-based editor for UNIX, and is
still very popular. VIM improves on vi by adding new features: multiple
windows, multi-level undo, block highlighting and more.
Problem description:
cyrus-sasl < TSL 3.0.5 >
- Changed sysconfdir path to /etc/sasl2, Bug #2138.
- Moved pluginviewer to utils sub-package.
mrtg < TSL 3.0.5 > < TSL 3.0 > < TSL 2.2 >
- New Upstream.
postfix < TSL 3.0.5 >
- Changed /etc/sasl references to /etc/sasl2.
snort < TSL 2.2 >
- New Upstream.
- Included missing dynamic preprocessors, Bug #2201.
- Added snort-devel package.
vim < TSL 2.2 >
- Fixed Bug in javascript syntax file, #2210.
Action:
We recommend that all systems with this package installed be upgraded.
Please note that if you do not need the functionality provided by this
package, you may want to remove it from your system.
Location:
All Trustix Secure Linux updates are available from
<URI:http://http.trustix.org/pub/trustix/updates/>
<URI:ftp://ftp.trustix.org/pub/trustix/updates/>
About Trustix Secure Linux:
Trustix Secure Linux is a small Linux distribution for servers. With focus
on security and stability, the system is painlessly kept safe and up to
date from day one using swup, the automated software updater.
Automatic updates:
Users of the SWUP tool can enjoy having updates automatically
installed using 'swup --upgrade'.
Questions?
Check out our mailing lists:
<URI:http://www.trustix.org/support/>
Verification:
This advisory along with all Trustix packages are signed with the
TSL sign key.
This key is available from:
<URI:http://www.trustix.org/TSL-SIGN-KEY>
The advisory itself is available from the errata pages at
<URI:http://www.trustix.org/errata/trustix-2.2/>,
<URI:http://www.trustix.org/errata/trustix-3.0/> and
<URI:http://www.trustix.org/errata/trustix-3.0.5/>
or directly at
<URI:http://www.trustix.org/errata/2007/0018/>
MD5sums of the packages:
- --------------------------------------------------------------------------
35bbef0d12ab0801bae0f8d0d57562a3 3.0.5/rpms/cyrus-sasl-2.1.22-5tr.i586.rpm
cb668beb3adc527262f11152575e9dee 3.0.5/rpms/cyrus-sasl-devel-2.1.22-5tr.i586.rpm
8437fb5dc25f35110e69bfeb5cfe25c7 3.0.5/rpms/cyrus-sasl-md5-2.1.22-5tr.i586.rpm
9c497a0ab74e9288ac626a191ba267ad 3.0.5/rpms/cyrus-sasl-otp-2.1.22-5tr.i586.rpm
584c7286f43385d3cccf13e8395463cf 3.0.5/rpms/cyrus-sasl-plain-2.1.22-5tr.i586.rpm
9e01777d2e6431f4d61788e6fec9cfb9 3.0.5/rpms/cyrus-sasl-sql-2.1.22-5tr.i586.rpm
c139066821c1182da78d7c036da1602c 3.0.5/rpms/cyrus-sasl-utils-2.1.22-5tr.i586.rpm
9927fc198a070012ac673ce7d9b99981 3.0.5/rpms/mrtg-2.15.2-1tr.i586.rpm
9a30cfa53df55e6d4c7862cf167a1d4c 3.0.5/rpms/postfix-2.2.11-5tr.i586.rpm
a7f8f986d80140503aa2042b224fff11 3.0.5/rpms/postfix-conf-2.2.11-5tr.i586.rpm
fafd8826d6d65570b184be29997f2dde 3.0.5/rpms/postfix-ldap-2.2.11-5tr.i586.rpm
3c2b9d46d616d71bf4564394193d0309 3.0.5/rpms/postfix-mysql-2.2.11-5tr.i586.rpm
46dd21e9276be37729066fbabae69ff2 3.0.5/rpms/postfix-pcre-2.2.11-5tr.i586.rpm
8663d1035d39c0cf1a3a4277f26367b8 3.0.5/rpms/postfix-pgsql-2.2.11-5tr.i586.rpm
85485f4f1ad3956c2b0f816d822f79d6 3.0.5/rpms/postfix-rmail-2.2.11-5tr.i586.rpm
b1b2518b99df0c1ca82a2a5c2140dc10 3.0/rpms/mrtg-2.15.2-1tr.i586.rpm
9d1399fcc6b3b1019e2d26007402a784 2.2/rpms/mrtg-2.15.2-1tr.i586.rpm
ae5d7ad8902b3feb9aa58ed7db80e3ad 2.2/rpms/snort-2.6.1.5-1tr.i586.rpm
9c9f5d758f38949e6f15b875774933b3 2.2/rpms/snort-devel-2.6.1.5-1tr.i586.rpm
11fc81c8b252b75577dd4b106b184158 2.2/rpms/snort-mysql-2.6.1.5-1tr.i586.rpm
5abfaaebca639ce48c399be8b7666eab 2.2/rpms/snort-postgresql-2.6.1.5-1tr.i586.rpm
9f009cb0784639190e99e7eb5e6d4800 2.2/rpms/vim-6.4.009-2tr.i586.rpm
30d430da65d0fdc9bb1320a4312592a7 2.2/rpms/vim-doc-6.4.009-2tr.i586.rpm
c211a66969225142945130915472d5e7 2.2/rpms/vim-syntax-6.4.009-2tr.i586.rpm
a70d03507db84184eec88da5e0c5bd0a 2.2/rpms/vim-tools-6.4.009-2tr.i586.rpm
- --------------------------------------------------------------------------
Trustix Security Team
Trustix Secure Linux Bugfix Advisory #2007-0018
Package names: cyrus-sasl, mrtg, postfix, snort, vim
Summary: Various bug fixes
Date: 2007-05-25
Affected versions: Trustix Secure Linux 2.2
Trustix Secure Linux 3.0
Trustix Secure Linux 3.0.5
- --------------------------------------------------------------------------
Package description:
cyrus-sasl
The cyrus-sasl package contains the Cyrus implementation of SASL. SASL
is the Simple Authentication and Security Layer, a method for adding
authentication support to connection-based protocols.
mrtg
The Multi Router Traffic Grapher (MRTG) is a tool to monitor the traffic
load on network links. MRTG generates HTML pages containing PNG images
which provide a LIVE visual representation of this traffic.
postfix
Postfix is an alternative to the sendmail mailer daemon. Postfix
attempts to be fast, easy to administer, and secure, while at the same
time being sendmail compatible enough to not upset existing users.
snort
Snort is an open source network intrusion prevention and detectin
system utilizing a rule-driven language, which combines the benefits
of signature, protocol and anomaly based inspection methods.
vim
VIM (VIsual editor iMproved) is an updated and improved version of the
vi editor. Vi was the first real screen-based editor for UNIX, and is
still very popular. VIM improves on vi by adding new features: multiple
windows, multi-level undo, block highlighting and more.
Problem description:
cyrus-sasl < TSL 3.0.5 >
- Changed sysconfdir path to /etc/sasl2, Bug #2138.
- Moved pluginviewer to utils sub-package.
mrtg < TSL 3.0.5 > < TSL 3.0 > < TSL 2.2 >
- New Upstream.
postfix < TSL 3.0.5 >
- Changed /etc/sasl references to /etc/sasl2.
snort < TSL 2.2 >
- New Upstream.
- Included missing dynamic preprocessors, Bug #2201.
- Added snort-devel package.
vim < TSL 2.2 >
- Fixed Bug in javascript syntax file, #2210.
Action:
We recommend that all systems with this package installed be upgraded.
Please note that if you do not need the functionality provided by this
package, you may want to remove it from your system.
Location:
All Trustix Secure Linux updates are available from
<URI:http://http.trustix.org/pub/trustix/updates/>
<URI:ftp://ftp.trustix.org/pub/trustix/updates/>
About Trustix Secure Linux:
Trustix Secure Linux is a small Linux distribution for servers. With focus
on security and stability, the system is painlessly kept safe and up to
date from day one using swup, the automated software updater.
Automatic updates:
Users of the SWUP tool can enjoy having updates automatically
installed using 'swup --upgrade'.
Questions?
Check out our mailing lists:
<URI:http://www.trustix.org/support/>
Verification:
This advisory along with all Trustix packages are signed with the
TSL sign key.
This key is available from:
<URI:http://www.trustix.org/TSL-SIGN-KEY>
The advisory itself is available from the errata pages at
<URI:http://www.trustix.org/errata/trustix-2.2/>,
<URI:http://www.trustix.org/errata/trustix-3.0/> and
<URI:http://www.trustix.org/errata/trustix-3.0.5/>
or directly at
<URI:http://www.trustix.org/errata/2007/0018/>
MD5sums of the packages:
- --------------------------------------------------------------------------
35bbef0d12ab0801bae0f8d0d57562a3 3.0.5/rpms/cyrus-sasl-2.1.22-5tr.i586.rpm
cb668beb3adc527262f11152575e9dee 3.0.5/rpms/cyrus-sasl-devel-2.1.22-5tr.i586.rpm
8437fb5dc25f35110e69bfeb5cfe25c7 3.0.5/rpms/cyrus-sasl-md5-2.1.22-5tr.i586.rpm
9c497a0ab74e9288ac626a191ba267ad 3.0.5/rpms/cyrus-sasl-otp-2.1.22-5tr.i586.rpm
584c7286f43385d3cccf13e8395463cf 3.0.5/rpms/cyrus-sasl-plain-2.1.22-5tr.i586.rpm
9e01777d2e6431f4d61788e6fec9cfb9 3.0.5/rpms/cyrus-sasl-sql-2.1.22-5tr.i586.rpm
c139066821c1182da78d7c036da1602c 3.0.5/rpms/cyrus-sasl-utils-2.1.22-5tr.i586.rpm
9927fc198a070012ac673ce7d9b99981 3.0.5/rpms/mrtg-2.15.2-1tr.i586.rpm
9a30cfa53df55e6d4c7862cf167a1d4c 3.0.5/rpms/postfix-2.2.11-5tr.i586.rpm
a7f8f986d80140503aa2042b224fff11 3.0.5/rpms/postfix-conf-2.2.11-5tr.i586.rpm
fafd8826d6d65570b184be29997f2dde 3.0.5/rpms/postfix-ldap-2.2.11-5tr.i586.rpm
3c2b9d46d616d71bf4564394193d0309 3.0.5/rpms/postfix-mysql-2.2.11-5tr.i586.rpm
46dd21e9276be37729066fbabae69ff2 3.0.5/rpms/postfix-pcre-2.2.11-5tr.i586.rpm
8663d1035d39c0cf1a3a4277f26367b8 3.0.5/rpms/postfix-pgsql-2.2.11-5tr.i586.rpm
85485f4f1ad3956c2b0f816d822f79d6 3.0.5/rpms/postfix-rmail-2.2.11-5tr.i586.rpm
b1b2518b99df0c1ca82a2a5c2140dc10 3.0/rpms/mrtg-2.15.2-1tr.i586.rpm
9d1399fcc6b3b1019e2d26007402a784 2.2/rpms/mrtg-2.15.2-1tr.i586.rpm
ae5d7ad8902b3feb9aa58ed7db80e3ad 2.2/rpms/snort-2.6.1.5-1tr.i586.rpm
9c9f5d758f38949e6f15b875774933b3 2.2/rpms/snort-devel-2.6.1.5-1tr.i586.rpm
11fc81c8b252b75577dd4b106b184158 2.2/rpms/snort-mysql-2.6.1.5-1tr.i586.rpm
5abfaaebca639ce48c399be8b7666eab 2.2/rpms/snort-postgresql-2.6.1.5-1tr.i586.rpm
9f009cb0784639190e99e7eb5e6d4800 2.2/rpms/vim-6.4.009-2tr.i586.rpm
30d430da65d0fdc9bb1320a4312592a7 2.2/rpms/vim-doc-6.4.009-2tr.i586.rpm
c211a66969225142945130915472d5e7 2.2/rpms/vim-syntax-6.4.009-2tr.i586.rpm
a70d03507db84184eec88da5e0c5bd0a 2.2/rpms/vim-tools-6.4.009-2tr.i586.rpm
- --------------------------------------------------------------------------
Trustix Security Team