Actualización de Debian Lenny 5.0
Hola,
el pasado día 11 el proyecto Debian anunció la actualización de Debian Lenny 5.0. Esta actualización corrigue fallos de seguridad y bugs a la versión estable. Los paquetes correguidos ya se han incluido en las nuevas imágenes de los CD/DVD listas para descargar aunque si ya la teneis instalado no hace falta descargarlos, un simple apt-get update && apt-get upgrade os pondrá al día.
Los bug solucionados son los siquientes:
| Package | Reason |
|---|---|
| barnowl | Fix for CVE-2009-0363 (through testing-security) |
| base-files | Fix a typo to remove basecorrectly |
| bind9 | Fix atomic operations on alpha and ia64 |
| brltty | Upload with fixed version number |
| consolekit | Various fixes |
| fai | Fix typo which prevents perl scripts to work |
| firmware-nonfree | Kernel ABI change |
| flpsed | Fix dependency on ghostscript-x |
| gdm | Fix a double free |
| gthumb | Fix copying loop |
| gtick | Add dependency on oss-compat |
| gtk+2.0 | Fix infinite loop caused by setting color scheme |
| gtkguitune | Add dependency on oss-compat |
| heartbeat | Fix failover and message corruption |
| imagemagick | Replace non-free fonts |
| irqbalance | Do not crash on bogus /proc/irq entries |
| kvm | Fix hang on reboot with virtio |
| libbz2-ruby | [armel] |
| libcgi-application-plugins-perl | Fix information leak |
| libeb-ruby | [armel] |
| libfilesystem-ruby | [armel] |
| libfusefs-ruby | [armel] |
| libkakasi-ruby | [armel] |
| libodbc-ruby | [armel] |
| libopengl-ruby | [armel] |
| librevolution-ruby | [armel] |
| libvorbisfile-ruby | [armel] |
| libwrap-ruby | [armel] |
| linux-2.6 | Several issues |
| linux-kernel-di-alpha-2.6 | New kernel for debian-installer |
| linux-kernel-di-amd64-2.6 | New kernel for debian-installer |
| linux-kernel-di-arm-2.6 | Add minix-modules to orion5x kernel flavour |
| linux-kernel-di-armel-2.6 | New kernel for debian-installer |
| linux-kernel-di-hppa-2.6 | New kernel for debian-installer |
| linux-kernel-di-i386-2.6 | New kernel for debian-installer |
| linux-kernel-di-ia64-2.6 | New kernel for debian-installer |
| linux-kernel-di-mips-2.6 | New kernel for debian-installer |
| linux-kernel-di-mipsel-2.6 | New kernel for debian-installer |
| linux-kernel-di-powerpc-2.6 | New kernel for debian-installer |
| linux-kernel-di-s390-2.6 | New kernel for debian-installer |
| linux-kernel-di-sparc-2.6 | New kernel for debian-installer |
| linux-latest-2.6 | Kernel ABI change |
| linux-modules-contrib-2.6 | Rebuild for kernel ABI change |
| linux-modules-di-alpha-2.6 | New kernel modules for debian-installer |
| linux-modules-di-amd64-2.6 | New kernel modules for debian-installer |
| linux-modules-di-arm-2.6 | New kernel modules for debian-installer |
| linux-modules-di-armel-2.6 | New kernel modules for debian-installer |
| linux-modules-di-hppa-2.6 | New kernel modules for debian-installer |
| linux-modules-di-i386-2.6 | New kernel modules for debian-installer |
| linux-modules-di-ia64-2.6 | New kernel modules for debian-installer |
| linux-modules-di-mips-2.6 | New kernel modules for debian-installer |
| linux-modules-di-mipsel-2.6 | New kernel modules for debian-installer |
| linux-modules-di-powerpc-2.6 | New kernel modules for debian-installer |
| linux-modules-di-s390-2.6 | New kernel modules for debian-installer |
| linux-modules-di-sparc-2.6 | New kernel modules for debian-installer |
| linux-modules-extra-2.6 | Rebuild for kernel ABI change |
| linux-modules-nonfree-2.6 | Rebuild for kernel ABI change |
| live-initramfs | Fix media timeout, boot and shutdown issues |
| lvm2 | Fix lvm on multipath in initrd |
| mediawiki | Fix XSS vulnerabilities |
| mp3gain | [i386] |
| mt-daapd | Fix crasher in built-in webserver |
| munin | Fix cgi mode |
| nvidia-graphics-legacy-96xx-modules-amd64 | Rebuild for kernel ABI change |
| nvidia-graphics-legacy-96xx-modules-i386 | Rebuild for kernel ABI change |
| nvidia-graphics-modules-amd64 | Rebuild for kernel ABI change |
| nvidia-graphics-modules-i386 | Rebuild for kernel ABI change |
| oldsys-preseed | Add support for the D-Link DNS-323 |
| open-vm-tools | Fix builds with other kernels than the running one |
| openoffice.org | Repacked source to remove RFC text file, various bug fixes |
| optipng | Fix array overflow vulnerability |
| pam | Fix signedness error in _pam_StrTok |
| pcapy | Fix memory leak and capturing on lo |
| pidgin | Fix failure while connecting to ICQ servers due to protocol changes |
| pidgin-otr | Provide translation |
| posixlock | [armel] |
| postgresql-8.3 | New upstream bugfix release |
| pyusb | Fix module for python2.5 on 64 bit arch |
| qwik | [armel] |
| root-system | Add libsm-dev as Build-Dependency |
| roundup | Fix several vulnerabilities |
| ruby-v4l | [armel] |
| samba | Fix two bugs of severity important |
| sary-ruby | [armel] |
| sbnc | Fix sbnc.key file location |
| schroot | Build with pthreads explicitly to fix a crash on alpha |
| smartmontools | Fix target not checking for running daemon |
| snort | Fix possible segfault |
| texlive-extra | Blacklist aurora, non-commercial license |
| toolame | Portability fixes |
| user-mode-linux | Rebuild against updated linux-source |
| xorg-server | Work around broken PCI on sparc in lenny’s kernel |
| xserver-xorg-video-savage | Do not add panel modes when there is no panel |
Las actualizaciones de seguridad son las siguientes:
| Advisory ID | Package | Correction(s) |
|---|---|---|
| DSA-1719 | gnutls26 | Certificate validation |
| DSA-1725 | websvn | Information leak |
| DSA-1726 | python-crypto | Denial of service |
| DSA-1728 | dkim-milter | Denial of service |
| DSA-1730 | proftpd-dfsg | SQL injection vulnerabilities |
| DSA-1734 | opensc | Information disclosure |
| DSA-1735 | znc | Privilege escalation |
| DSA-1736 | mahara | Cross-site scripting |
| DSA-1737 | wesnoth | Several vulnerabilities |
| DSA-1738 | curl | Arbitrary file access |
| DSA-1739 | mldonkey | Double slash vulnerability |
| DSA-1740 | yaws | Denial of service |
| DSA-1741 | psi | Denial of service |
| DSA-1742 | libsndfile | Arbitrary code execution |
| DSA-1743 | libtk-img | Arbitrary code execution |
| DSA-1744 | weechat | Denial of service |
| DSA-1745 | lcms | Arbitrary code execution |
| DSA-1746 | ghostscript | Arbitrary code execution |
| DSA-1747 | glib2.0 | Arbitrary code execution |
| DSA-1749 | linux-2.6 | Several issues |
| DSA-1750 | libpng | Several vulnerabilities |
| DSA-1751 | xulrunner | Several vulnerabilities |
| DSA-1752 | webcit | Potential remote code execution |
| DSA-1755 | systemtap | Local privilege escalation |
| DSA-1756 | xulrunner | Multiple vulnerabilities |
| DSA-1757 | auth2db | SQL injection |
| DSA-1758 | nss-ldapd | Information disclosure |
| DSA-1759 | strongswan | Possible denial of service |
| DSA-1760 | openswan | Possible denial of service |
+ info: http://www.debian.org/News/2009/20090411
Comentarios recientes