From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 21438 invoked by uid 1002); 22 Sep 2003 15:00:07 -0000 Mailing-List: contact gentoo-gwn-help@gentoo.org; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-gwn@gentoo.org Received: (qmail 17426 invoked from network); 22 Sep 2003 14:56:47 -0000 Date: Mon, 22 Sep 2003 10:56:07 -0400 From: Yuji Carlos Kosugi To: gentoo-gwn@gentoo.org Message-ID: <20030922145607.GA1648@kserion.dyndns.org> Mail-Followup-To: gentoo-gwn@gentoo.org Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="Q68bSM7Ycu6FN28Q" Content-Disposition: inline X-GPG-Key: http://pubbawup.net/carlos/carlos.gpg User-Agent: Mutt/1.5.4i-ja.1 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - serve.wwwroot3.net X-AntiAbuse: Original Domain - gentoo.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - gentoo.org Subject: [gentoo-gwn] Gentoo Weekly Newsletter -- Volume 2, Issue 34 X-Archives-Salt: baeb8957-a7c2-4caa-a10e-f421ef5cd622 X-Archives-Hash: 2a7906e6e26a6ddbc56886f42967ff66 --Q68bSM7Ycu6FN28Q Content-Type: text/plain; charset=euc-jp Content-Disposition: inline Content-Transfer-Encoding: quoted-printable --------------------------------------------------------------------------- Gentoo Weekly Newsletter http://www.gentoo.org/news/en/gwn/current.xml This is the Gentoo Weekly Newsletter for the week of September 22nd, 2003. --------------------------------------------------------------------------- =20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 1. Gentoo News =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =20 Summary ------- =20 * Gentoo 1.4 maintenance release 1 for x86=20 * Experimental IA-64 stage1 available=20 =20 Gentoo 1.4 maintenance release 1 for x86 ---------------------------------------- =20 New 20030911 builds of Gentoo 1.4 are now available on mirrors[1] and at=20 the Gentoo Store[2] so this may be a good time to reburn your CDs or to=20 order some copies of the LiveCDs. This maintenance build has the same=20 functionality as the 1.4 release but fixes many bugs. Also, if you=20 installed Gentoo with the 1.4 release there's no need to worry because the= =20 releases are only relevant for the LiveCDs and GRPs; run emerge rsync;=20 emerge -u world and your Gentoo system will be as up-to-date as anyone=20 else's.=20 1. http://www.gentoo.org/main/en/mirrors.xml 2. http://store.gentoo.org/ =20 Experimental IA-64 stage1 available ----------------------------------- =20 The IA-64 port can now be fully built from stage1, and an experimental=20 IA-64 stage1 tarball is now available under experimental/ia64. There's no= =20 LiveCD, but users are encouraged to try building a system, see how it=20 works, and submit bugs to Bugzilla[3].=20 3. http://bugs.gentoo.org/ =20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D 2. Gentoo Security =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =20 Summary ------- =20 * GLSA: mysql=20 * GLSA: exim=20 * GLSA: pine=20 * GLSA: openssh=20 * GLSA: sendmail=20 =20 GLSA: mysql ----------- =20 Quote from advisory:=20 =20 "Anyone with global administrative privileges on a MySQL server may=20 execute arbitrary code even on a host he isn't supposed to have a shell=20 on, with the privileges of the system account running the MySQL server." =20 * Severity: High - execute arbitrary code.=20 * Packages Affected: =3Dmysql-4.0.14-r2(masked)=20 * Rectification: emerge sync; emerge dev-db/mysql/; emerge= =20 clean=20 * GLSA Announcement[4]=20 4. http://marc.theaimsgroup.com/?l=3Dgentoo-announce&m=3D106362878312500&w= =3D2 GLSA: exim ---------- =20 "There's a heap overflow in all versions of exim3 and exim4 prior to=20 version 4.21. It can be exercised by anyone who can make an SMTP=20 connection to the exim daemon." =20 * Severity: Low - heap overflow=20 * Packages Affected: - Editor AJ Armstrong - Contributor Brian Downey - Contributor Cal Evans - Contributor Chris Gavin - Contributor Luke Giuliani - Contributor Shawn Jonnet - Contributor Michael Kohl - Contributor Kurt Lieber - Contributor Rafael Cordones Marcos - Contributor David Narayan - Contributor Gerald J Normandin Jr. - Contributor Ulrich Plate - Contributor Mathy Vanvoorden - Dutch Translation Hendrik Eeckhaut - Dutch Translation Jorn Eilander - Dutch Translation Bernard Kerckenaere - Dutch Translation Peter ter Borg - Dutch Translation Jochen Maes - Dutch Translation Roderick Goessen - Dutch Translation Gerard van den Berg - Dutch Translation Matthieu Montaudouin - French Translation Martin Prieto - French Translation Antoine Raillon - French Translation Sebastien Cevey - French Translation Jean-Christophe Choisy - French Translation Steffen Lassahn - German Translation Matthias F. Brandstetter - German Translation Thomas Raschbacher - German Translation Klaus-J. Wolf - German Translation Marco Mascherpa - Italian Translation Claudio Merloni - Italian Translation Christian Apolloni - Italian Translation Stefano Lucidi - Italian Translation Yoshiaki Hagihara - Japanese Translation Katsuyuki Konno - Japanese Translation Yuji Carlos Kosugi - Japanese Translation Yasunori Fukudome - Japanese Translation Takashi Ota <088@t.email.ne.jp> - Japanese Translation Radoslaw Janeczko - Polish Translation Lukasz Strzygowski - Polish Translation Michal Drobek - Polish Translation Adam Lyjak - Polish Translation Krzysztof Klimonda - Polish Translation Atila "Jedi" Bohlke Vasconcelos - Portuguese=20 (Brazil) Translation Eduardo Belloti - Portuguese (Brazil) Translation Jo??o Rafael Moraes Nicola - Portuguese (Brazil)=20 Translation Marcelo Gon??alves de Azambuja - Portuguese=20 (Brazil) Translation Otavio Rodolfo Piske - Portuguese (Brazil)=20 Translation Pablo N. Hess -- NatuNobilis - Portuguese=20 (Brazil) Translation Pedro de Medeiros - Portuguese (Brazil) Translation Ventura Barbeiro - Portuguese (Brazil)=20 Translation Bruno Ferreira - Portuguese (Portugal)=20 Translation Gustavo Felisberto - Portuguese (Portugal)=20 Translation Jos?? Costa - Portuguese (Portugal) Translation Luis Medina - Portuguese (Portugal) Translation Ricardo Loureiro - Portuguese (Portugal) Translation Sergey Galkin - Russian Translator Sergey Kuleshov - Russian Translator Alex Spirin - Russian Translator Dmitry Suzdalev - Russian Translator Anton Vorovatov - Russian Translator Denis Zaletov - Russian Translator Lanark - Spanish Translation Fernando J. Pereda - Spanish Translation Lluis Peinado Cifuentes - Spanish Translation Zephryn Xirdal T - Spanish Translation Guillermo Juarez - Spanish Translation Jes??s Garc??a Crespo - Spanish Translation Carlos Castillo - Spanish Translation Julio Castillo - Spanish Translation Sergio G??mez - Spanish Translation Aycan Irican - Turkish Translation Bugra Cakir - Turkish Translation Cagil Seker - Turkish Translation Emre Kazdagli - Turkish Translation Evrim Ulu - Turkish Translation Gursel Kaynak - Turkish Translation --Q68bSM7Ycu6FN28Q Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (GNU/Linux) iD8DBQE/bw2H9QP4LZPv56cRAmSzAKCHqUcNAvSz6WNgf7RMgiRzbVdkrgCfaVdz 0P3Vir7hVZzBAXB46BxO7oI= =iPbb -----END PGP SIGNATURE----- --Q68bSM7Ycu6FN28Q--