[tinysofa-announce] TS-2004-004 - multiple packages

tinysofa Security Team security at tinysofa.org
Tue May 4 13:22:51 UTC 2004


- --------------------------------------------------------------------------
tinysofa Bugfix Advisory #2004-004

Package name:      hwdata openssl swup tinysofa-gpgkeys-emily
Summary:           Minor bug fixes, Feature enhancements
Advisory ID:       TS-2004-004
Date:              2004-05-04
Affected versions: tinysofa enterprise server 1.0

- --------------------------------------------------------------------------
Package description:

  hwdata:
  hwdata contains various hardware identification and configuration data,
  such as the pci.ids database, the XFree86 Cards and MonitorsDb databases.

  openssl:
  A C library that provides various crytographic algorithms and protocols,
  including DES, RC4, RSA, and SSL. Includes shared libraries.

  swup:
  SWUP - SoftWare UPdater is an extension for existing software packaging
  systems to facilitate automatic and secure update and install. SWUP
  handles dependencies between software packages, and is able to fetch
  additional required software when installing or upgrading.

  tinysofa-gpgkeys-emily:
  This package contains the GPG keys used to sign packages and rdfs. It is used
  by swup to verify that the packages and rdfs found on the official tinysofa
  sites and mirrors are correct.


Problem description:

  hwdata:
  Update to latest hardware lists. Update module-info to include SATA drivers.
  This update fixes Bug #8
  <URI:http://www.tinysofa.org/bugs/show_bug.cgi?id=8>

  openssl:
  Updated M2Crypto. Fixed permissions of python related directories.
  Fixed missing M2Crypto files. This update fixes Bug #6 
  <URI:http://www.tinysofa.org/bugs/show_bug.cgi?id=6> and Bug #7
  <URI:http://www.tinysofa.org/bugs/show_bug.cgi?id=7>

  swup:
  Fixed permissions of python related directories. Added a swup as local user
  fix. Updated to latest cvs, which contains some cosmetic fixes.
  This update fixes Bug #9
  <URI:http://www.tinysofa.org/bugs/show_bug.cgi?id=9>

  tinysofa-gpgkeys-emily:
  Added security key. Now imports keys into rpm automatically.
  This update fixes Bug #10
  <URI:http://www.tinysofa.org/bugs/show_bug.cgi?id=10>


Action:
  We recommend that all systems with these packages installed be upgraded.
  Please note that if you do not need the functionality provided by this
  package, you may want to remove it from your system.


Location:
  All tinysofa updates are available from
  <URI:http://http.tinysofa.org/pub/tinysofa/updates/>
  <URI:ftp://ftp.tinysofa.org/pub/tinysofa/updates/>


Automatic updates:
  Users of the SWUP tool can enjoy having updates automatically
  installed using 'swup --upgrade'.


Questions?
  Check out our mailing lists:
  <URI:http://www.tinysofa.org/support/>


Verification:
  This advisory is signed with the tinysofa security sign key.
  This key is available from:
  <URI:http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xAEDCBB4B>

  Aall tinysofa packages are signed with the tinysofa stable sign key.
  This key is available from:
  <URI:http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x0F1240A2>

  The advisory is available from the tinysofa errata database at
  <URI:http://www.tinysofa.org/support/errata/>
  or directly at
  <URI:http://www.tinysofa.org/support/errata/2004/004.html>


MD5sums of the packages:
- --------------------------------------------------------------------------
bf7d307bc470fce1db624a7b88e6a20f  hwdata-0.44-17ts.noarch.rpm
ca39bda44f82a3ab2c1344f94c7e5ddc  hwdata-devel-0.44-17ts.noarch.rpm
37277a74ad5904fc0b1c5905f4661bfc  openssl-0.9.7c-7ts.i586.rpm
38b9511063c02da4c5243a76d48c710d  openssl-devel-0.9.7c-7ts.i586.rpm
7c651084ccf8b219840aa35af17ff955  openssl-python-0.9.7c-7ts.i586.rpm
bf302bbe97fa2c7474b0ef19a33f7616  openssl-support-0.9.7c-7ts.i586.rpm
98ba79c00d01190a47f94a718baf1928  swup-2.4.3-5ts.noarch.rpm
362dfaa5d24ba1cb7cfc3d6ac3e73453  swup-libs-2.4.3-5ts.noarch.rpm
4b9c1a00c5f6dc22793ea697c3a8af1d  swupcron-2.4.3-5ts.noarch.rpm
195709149b4dc35c11f4c107d4529dfe  rdfgen-2.4.3-5ts.noarch.rpm
a229aaef538ce5c0aab28089dc9239f0  tinysofa-gpgkeys-emily-1.0-7ts.noarch.rpm
- --------------------------------------------------------------------------


tinysofa Security Team
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.tinysofa.org/pipermail/tinysofa-announce/attachments/20040504/396f6830/attachment.bin 


More information about the Tinysofa-announce mailing list