Actualización de Debian Lenny 5.0
Domingo, 19 de abril de 2009
Sin comentarios
Hola,
el pasado día 11 el proyecto Debian anunció la actualización de Debian Lenny 5.0. Esta actualización corrigue fallos de seguridad y bugs a la versión estable. Los paquetes correguidos ya se han incluido en las nuevas imágenes de los CD/DVD listas para descargar aunque si ya la teneis instalado no hace falta descargarlos, un simple apt-get update && apt-get upgrade os pondrá al día.
Los bug solucionados son los siquientes:
| Package | Reason |
|---|---|
| barnowl | Fix for CVE-2009-0363 (through testing-security) |
| base-files | Fix a typo to remove basecorrectly |
| bind9 | Fix atomic operations on alpha and ia64 |
| brltty | Upload with fixed version number |
| consolekit | Various fixes |
| fai | Fix typo which prevents perl scripts to work |
| firmware-nonfree | Kernel ABI change |
| flpsed | Fix dependency on ghostscript-x |
| gdm | Fix a double free |
| gthumb | Fix copying loop |
| gtick | Add dependency on oss-compat |
| gtk+2.0 | Fix infinite loop caused by setting color scheme |
| gtkguitune | Add dependency on oss-compat |
| heartbeat | Fix failover and message corruption |
| imagemagick | Replace non-free fonts |
| irqbalance | Do not crash on bogus /proc/irq entries |
| kvm | Fix hang on reboot with virtio |
| libbz2-ruby | [armel] |
| libcgi-application-plugins-perl | Fix information leak |
| libeb-ruby | [armel] |
| libfilesystem-ruby | [armel] |
| libfusefs-ruby | [armel] |
| libkakasi-ruby | [armel] |
| libodbc-ruby | [armel] |
| libopengl-ruby | [armel] |
| librevolution-ruby | [armel] |
| libvorbisfile-ruby | [armel] |
| libwrap-ruby | [armel] |
| linux-2.6 | Several issues |
| linux-kernel-di-alpha-2.6 | New kernel for debian-installer |
| linux-kernel-di-amd64-2.6 | New kernel for debian-installer |
| linux-kernel-di-arm-2.6 | Add minix-modules to orion5x kernel flavour |
| linux-kernel-di-armel-2.6 | New kernel for debian-installer |
| linux-kernel-di-hppa-2.6 | New kernel for debian-installer |
| linux-kernel-di-i386-2.6 | New kernel for debian-installer |
| linux-kernel-di-ia64-2.6 | New kernel for debian-installer |
| linux-kernel-di-mips-2.6 | New kernel for debian-installer |
| linux-kernel-di-mipsel-2.6 | New kernel for debian-installer |
| linux-kernel-di-powerpc-2.6 | New kernel for debian-installer |
| linux-kernel-di-s390-2.6 | New kernel for debian-installer |
| linux-kernel-di-sparc-2.6 | New kernel for debian-installer |
| linux-latest-2.6 | Kernel ABI change |
| linux-modules-contrib-2.6 | Rebuild for kernel ABI change |
| linux-modules-di-alpha-2.6 | New kernel modules for debian-installer |
| linux-modules-di-amd64-2.6 | New kernel modules for debian-installer |
| linux-modules-di-arm-2.6 | New kernel modules for debian-installer |
| linux-modules-di-armel-2.6 | New kernel modules for debian-installer |
| linux-modules-di-hppa-2.6 | New kernel modules for debian-installer |
| linux-modules-di-i386-2.6 | New kernel modules for debian-installer |
| linux-modules-di-ia64-2.6 | New kernel modules for debian-installer |
| linux-modules-di-mips-2.6 | New kernel modules for debian-installer |
| linux-modules-di-mipsel-2.6 | New kernel modules for debian-installer |
| linux-modules-di-powerpc-2.6 | New kernel modules for debian-installer |
| linux-modules-di-s390-2.6 | New kernel modules for debian-installer |
| linux-modules-di-sparc-2.6 | New kernel modules for debian-installer |
| linux-modules-extra-2.6 | Rebuild for kernel ABI change |
| linux-modules-nonfree-2.6 | Rebuild for kernel ABI change |
| live-initramfs | Fix media timeout, boot and shutdown issues |
| lvm2 | Fix lvm on multipath in initrd |
| mediawiki | Fix XSS vulnerabilities |
| mp3gain | [i386] |
| mt-daapd | Fix crasher in built-in webserver |
| munin | Fix cgi mode |
| nvidia-graphics-legacy-96xx-modules-amd64 | Rebuild for kernel ABI change |
| nvidia-graphics-legacy-96xx-modules-i386 | Rebuild for kernel ABI change |
| nvidia-graphics-modules-amd64 | Rebuild for kernel ABI change |
| nvidia-graphics-modules-i386 | Rebuild for kernel ABI change |
| oldsys-preseed | Add support for the D-Link DNS-323 |
| open-vm-tools | Fix builds with other kernels than the running one |
| openoffice.org | Repacked source to remove RFC text file, various bug fixes |
| optipng | Fix array overflow vulnerability |
| pam | Fix signedness error in _pam_StrTok |
| pcapy | Fix memory leak and capturing on lo |
| pidgin | Fix failure while connecting to ICQ servers due to protocol changes |
| pidgin-otr | Provide translation |
| posixlock | [armel] |
| postgresql-8.3 | New upstream bugfix release |
| pyusb | Fix module for python2.5 on 64 bit arch |
| qwik | [armel] |
| root-system | Add libsm-dev as Build-Dependency |
| roundup | Fix several vulnerabilities |
| ruby-v4l | [armel] |
| samba | Fix two bugs of severity important |
| sary-ruby | [armel] |
| sbnc | Fix sbnc.key file location |
| schroot | Build with pthreads explicitly to fix a crash on alpha |
| smartmontools | Fix target not checking for running daemon |
| snort | Fix possible segfault |
| texlive-extra | Blacklist aurora, non-commercial license |
| toolame | Portability fixes |
| user-mode-linux | Rebuild against updated linux-source |
| xorg-server | Work around broken PCI on sparc in lenny’s kernel |
| xserver-xorg-video-savage | Do not add panel modes when there is no panel |
Las actualizaciones de seguridad son las siguientes:
| Advisory ID | Package | Correction(s) |
|---|---|---|
| DSA-1719 | gnutls26 | Certificate validation |
| DSA-1725 | websvn | Information leak |
| DSA-1726 | python-crypto | Denial of service |
| DSA-1728 | dkim-milter | Denial of service |
| DSA-1730 | proftpd-dfsg | SQL injection vulnerabilities |
| DSA-1734 | opensc | Information disclosure |
| DSA-1735 | znc | Privilege escalation |
| DSA-1736 | mahara | Cross-site scripting |
| DSA-1737 | wesnoth | Several vulnerabilities |
| DSA-1738 | curl | Arbitrary file access |
| DSA-1739 | mldonkey | Double slash vulnerability |
| DSA-1740 | yaws | Denial of service |
| DSA-1741 | psi | Denial of service |
| DSA-1742 | libsndfile | Arbitrary code execution |
| DSA-1743 | libtk-img | Arbitrary code execution |
| DSA-1744 | weechat | Denial of service |
| DSA-1745 | lcms | Arbitrary code execution |
| DSA-1746 | ghostscript | Arbitrary code execution |
| DSA-1747 | glib2.0 | Arbitrary code execution |
| DSA-1749 | linux-2.6 | Several issues |
| DSA-1750 | libpng | Several vulnerabilities |
| DSA-1751 | xulrunner | Several vulnerabilities |
| DSA-1752 | webcit | Potential remote code execution |
| DSA-1755 | systemtap | Local privilege escalation |
| DSA-1756 | xulrunner | Multiple vulnerabilities |
| DSA-1757 | auth2db | SQL injection |
| DSA-1758 | nss-ldapd | Information disclosure |
| DSA-1759 | strongswan | Possible denial of service |
| DSA-1760 | openswan | Possible denial of service |
Comentarios recientes