White Box 64 Published by Philipp Esselbach 0

White Box Enterprise Linux 4 Respin 2 is now available for download via http/ftp/bittorrent. This covers Update5 from upstream plus a few errata released since. The recent OO.o and OO.o2 updates ARE included.

The previous policy of skipping every other Update from upstream is being reconsidered in light of the year gap it has caused. Every quarter was a bit often for me to respin, annually seems a mite too far in the other direction.

WBEL4 Respin2 Now available

White Box 64 Published by Philipp Esselbach 0

An updated lha package is available for White Box Enterprise Linux 3.0

-----------------------------------------------------------------------
Security Advisory

Synopsis: An updated lha package fixes security vulnerability
Advisory ID: WBSA-2004:323-01
Issue date: 09-20-2004
Updated on: 09-20-2004
Product: White Box Enterprise Linux 3.0 (i386, x86_64)
Keywords:
Cross references:
Obsoletes: WBSA-2004:178
CVE Names: CAN-2004-0769 CAN-2004-0771 CAN-2004-0694 CAN-2004-0745
-----------------------------------------------------------------------

An updated lha package that fixes a buffer overflow is now available.

More information is available in Red Hat, Inc's original advisory available on their site at:

http://www.redhat.com/archives/enterprise-watch-list/2004-September/msg00000.html

To install this new package on your White Box Enterprise Linux system use the Up2Date Network or Yum.

White Box 64 Published by Philipp Esselbach 0

Updated krb5 packages are available for White Box Enterprise Linux 3.0

-----------------------------------------------------------------------
Security Advisory

Synopsis: Updated krb5 packages fix security issues
Advisory ID: WBSA-2004:350-01]
Issue date: 09-20-2004
Updated on: 09-20-2004
Product: White Box Enterprise Linux 3.0 (i386, x86_64)
Keywords: krb5 client timeout
Cross references:
Obsoletes: WBSA-2004:236
CVE Names: CAN-2004-0642 CAN-2004-0643 CAN-2004-0644
-----------------------------------------------------------------------

Updated krb5 packages that improve client responsiveness and fix several security issues are now available.

More information is available in Red Hat, Inc's original advisory available on their site at:

http://www.redhat.com/archives/enterprise-watch-list/2004-August/msg00015.html

To install this new package on your White Box Enterprise Linux system use the Up2Date Network or Yum.

White Box 64 Published by Philipp Esselbach 0

Updated CUPS packages are available for White Box Enterprise Linux 3.0

-----------------------------------------------------------------------
Security Advisory

Synopsis: Updated CUPS packages fix security vulnerability
Advisory ID: WBSA-2004:449-01
Issue date: 09-20-2004
Updated on: 09-20-2004
Product: White Box Enterprise Linux 3.0 (i386, x86_64)
Keywords: DoS
Cross references:
Obsoletes:
CVE Names: CAN-2004-0558
-----------------------------------------------------------------------

Updated cups packages that fix a denial of service vulnerability are now available.

More information is available in Red Hat, Inc's original advisory available on their site at:

http://www.redhat.com/archives/enterprise-watch-list/2004-September/msg00008.html

To install this new package on your White Box Enterprise Linux system use the Up2Date Network or Yum.

White Box 64 Published by Philipp Esselbach 0

An updated gaim package is available for White Box Enterprise Linux 3.0

-----------------------------------------------------------------------
Security Advisory

Synopsis: Updated gaim package fixes security issues
Advisory ID: WBSA-2004:400-01
Issue date: 09-20-2004
Updated on: 09-20-2004
Product: White Box Enterprise Linux 3.0 (i386, x86_64)
Keywords:
Cross references:
Obsoletes: RHSA-2004:033
CVE Names: CAN-2004-0500 CAN-2004-0754 CAN-2004-0784 CAN-2004-0785
-----------------------------------------------------------------------

An updated gaim package that fixes several security issues is now available.

More information is available in Red Hat, Inc's original advisory available on their site at:

http://www.redhat.com/archives/enterprise-watch-list/2004-September/msg00003.html

To install this new package on your White Box Enterprise Linux system use the Up2Date Network or Yum.

White Box 64 Published by Philipp Esselbach 0

An updated rsync package is available for White Box Enterprise Linux 3.0

-----------------------------------------------------------------------
Security Advisory

Synopsis: Updated rsync package fixes security issue
Advisory ID: WBSA-2004:436-01
Issue date: 09-20-2004
Updated on: 09-20-2004
Product: White Box Enterprise Linux 3.0 (i386, x86_64)
Keywords:
Cross references:
Obsoletes:
CVE Names: CAN-2004-0792
-----------------------------------------------------------------------

An updated rsync package that fixes a path sanitizing bug is now available.

More information is available in Red Hat, Inc's original advisory available on their site at:

http://www.redhat.com/archives/enterprise-watch-list/2004-September/msg00002.html

To install this new package on your White Box Enterprise Linux system use the Up2Date Network or Yum.

White Box 64 Published by Philipp Esselbach 0

Updated qt packages are available for White Box Enterprise Linux 3.0

-----------------------------------------------------------------------
Security Advisory

Synopsis: Updated qt packages fix security issues
Advisory ID: WBSA-2004:414-01
Issue date: 09-20-2004
Updated on: 09-20-2004
Product: White Box Enterprise Linux 3.0 (i386, x86_64)
Keywords:
Cross references:
Obsoletes:
CVE Names: CAN-2004-0691 CAN-2004-0692 CAN-2004-0693
-----------------------------------------------------------------------

Updated qt packages that fix security issues in several of the image decoders are now available.

More information is available in Red Hat, Inc's original advisory available on their site at:

http://www.redhat.com/archives/enterprise-watch-list/2004-August/msg00012.html

To install this new package on your White Box Enterprise Linux system use the Up2Date Network or Yum.

White Box 64 Published by Philipp Esselbach 0

Updated Mozilla packages are available for White Box Enterprise Linux 3.0

-----------------------------------------------------------------------
Security Advisory

Synopsis: Updated mozilla packages fix security issues
Advisory ID: WBSA-2004:421-01
Issue date: 08-19-2004
Updated on: 08-19-2004
Product: White Box Enterprise Linux 3.0 (i386, x86_64)
Keywords:
Cross references:
Obsoletes:
CVE Names: CAN-2004-0597 CAN-2004-0599 CAN-2004-0718 CAN-2004-0722 CAN-2004-0757 CAN-2004-0758 CAN-2004-0759 CAN-2004-0760 CAN-2004-0761 CAN-2004-0762 CAN-2004-0763 CAN-2004-0764 CAN-2004-0765
-----------------------------------------------------------------------

This one was released by RH on Aug 4 and is only now making it's way to the WBEL mirrors. Didn't have time to do the trademark fixups before vacation.

Updated mozilla packages based on version 1.4.3 that fix a number of security issues are now available.

More information is available in Red Hat, Inc's original advisory available on their site at:

http://www.redhat.com/archives/enterprise-watch-list/2004-August/msg00005.html

To install this new package on your White Box Enterprise Linux system use the Up2Date Network or Yum.

White Box 64 Published by Philipp Esselbach 0

Updated Ethereal packages are available for White Box Enterprise Linux 3.0

-----------------------------------------------------------------------
Security Advisory

Synopsis: Updated Ethereal packages fix security issues
Advisory ID: WBSA-2004:378-01
Issue date: 08-19-2004
Updated on: 08-19-2004
Product: White Box Enterprise Linux 3.0 (i386, x86_64)
Keywords:
Cross references:
Obsoletes: WBSA-2004:234
CVE Names: CAN-2004-0633 CAN-2004-0634 CAN-2004-0635
-----------------------------------------------------------------------

Updated Ethereal packages that fix various security vulnerabilities are now available.

More information is available in Red Hat, Inc's original advisory available on their site at:

http://www.redhat.com/archives/enterprise-watch-list/2004-August/msg00006.html

To install this new package on your White Box Enterprise Linux system use the Up2Date Network or Yum.

White Box 64 Published by Philipp Esselbach 0

Updated sox packages are available for White Box Enterprise Linux 3.0

-----------------------------------------------------------------------
Security Advisory

Synopsis: Updated sox packages fix buffer overflows
Advisory ID: WBSA-2004:409-01
Issue date: 08-19-2004
Updated on: 08-19-2004
Product: White Box Enterprise Linux 3.0 (i386, x86_64)
Keywords: sox wav
Cross references:
Obsoletes:
CVE Names: CAN-2004-0557
-----------------------------------------------------------------------

Another catchup announcement.

Updated sox packages that fix buffer overflows in the WAV file handling code are now available.

More information is available in Red Hat, Inc's original advisory available on their site at:

http://www.redhat.com/archives/enterprise-watch-list/2004-July/msg00007.html

To install this new package on your White Box Enterprise Linux system use the Up2Date Network or Yum.