[4706] in linux-announce channel archive
Linux-Announce Digest #998
daemon@ATHENA.MIT.EDU (Digestifier)
Sun Jan 2 13:13:08 2005
From: Digestifier <Linux-Announce-Request@senator-bedfellow.mit.edu>
To: Linux-Announce@senator-bedfellow.mit.edu
Reply-To: Linux-Announce@senator-bedfellow.mit.edu
Date: Sun, 2 Jan 2005 13:13:04 EST
Linux-Announce Digest #998, Volume #4 Sun, 2 Jan 2005 13:13:04 EST
Contents:
SITEWATCH: http://tyl.notlong.com ("Frederick Noronha (FN)")
GNU SASL 0.2.4 (fwd) ("Frederick Noronha (FN)")
Debian GNU/Linux 3.0 updated (r4) (fwd) ("Frederick Noronha (FN)")
SITEWATCH: http://opensource.mimos.my ("Frederick Noronha (FN)")
----------------------------------------------------------------------------
Date: Sun, 2 Jan 2005 01:04:13 CST
From: "Frederick Noronha (FN)" <fred@bytesforall.org>
Subject: SITEWATCH: http://tyl.notlong.com
This message is in MIME format. The first part should be readable text,
while the remaining parts are likely unreadable without MIME-aware tools.
--Boundary_(ID_iuo48OC0PR4aUwKjDc0ERA)
Content-id: <Pine.LNX.4.60.0501021156231.544@news.goa.bytesforall.org>
Content-type: TEXT/PLAIN; CHARSET=X-UNKNOWN; FORMAT=flowed
Content-transfer-encoding: QUOTED-PRINTABLE
Seeking help of all interested to promote and support this mailing-li=
st for=20
newbies, set up from India. -FN
________________________________________________
teach-yourself-linux =B7 GNU/Linux Teacher =09[ Join This Group!
<http://groups.yahoo.com/group/teach-yourself-linux/join?referer=3D1>=
]
*=09Home <http://groups.yahoo.com/group/teach-yourself-linux>
=09 _____
=09(Already a member? Sign in to Yahoo!
Description =09Category: Education
Teach yourself the Free Software's GNU/Linux operating system by
sharing useful information with others across the globe. Sharing of
information is how GNU/Linux spreads.
What's New
New within the last seven days:
=09 Members: =09 2=09 =09 Messages: =09 3
Message History
=09 Jan=09 Feb=09 Mar=09 Apr=09 May=09 Jun=09 Jul=09 Aug
Sep=09 Oct=09 Nov=09 Dec
2004=09 5 =09 =09 8 =09 4 =09 5 =09 6 =09 6 =09 13
17 =09 14 =09 9 =09 5
2003=09 11 =09 6 =09 9 =09 17 =09 4 =09 9 =09 10 =09 10
10 =09 8 =09 1 =09 2
2002
13 =09 9 =09 7 =09 4
Group Email Addresses
Post message:=09 teach-yourself-linux@yahoogroups.com
Subscribe:=09 teach-yourself-linux-subscribe@yahoogroups.com
Unsubscribe:=09 teach-yourself-linux-unsubscribe@yahoogroups.com
List owner:=09 teach-yourself-linux-owner@yahoogroups.com
=09 =09 =09 Group Info
Members: 146
Created: Sep 5, 2002
Language: English
Group Settings
=B7=09 Listed in directory
=B7=09 Open membership
=B7=09 Messages require approval
=B7=09 All members may post messages
=B7=09 Message archive viewable by members only
=B7=09 Email attachments are permitted
________________________________________________
--Boundary_(ID_iuo48OC0PR4aUwKjDc0ERA)--
##########################################################################
# Send submissions for comp.os.linux.announce to: cola@stump.algebra.com #
# PLEASE remember a short description of the software and the LOCATION. #
# This group is archived at http://stump.algebra.com/~cola/ #
##########################################################################
------------------------------
Date: Sun, 2 Jan 2005 10:44:37 CST
From: "Frederick Noronha (FN)" <fred@bytesforall.org>
Subject: GNU SASL 0.2.4 (fwd)
========== Forwarded message ==========
GNU SASL version 0.2.4 has been released!
This version include a re-written implementation of DIGEST-MD5 for the
new API, some internationalization improvements in the PLAIN server, a
small number of fixes in the new (0.2.x) API functions, and a new
simple user database password lookup function API.
Alas, while rewriting the DIGEST-MD5 mechanism, I came to realize that
there were little analysis available in public on the security of
DIGEST-MD5. Considering the recently demonstrated weakness in MD5,
and pending more information, I am now recommending users to consider
CRAM-MD5 instead of DIGEST-MD5. The internal priority order reflect
this. Unlike DIGEST-MD5, CRAM-MD5 is based on HMAC-MD5. While
CRAM-MD5 also uses MD5, there has been some allegedly credible public
analysis that appear to suggest that HMAC-MD5 at least cannot be
trivially defeated as a consequence of the demonstrated MD5
vulnerability. The downside of using CRAM-MD5 is that authorization
identities are not supported (e.g., when an administrators login on
behalf as someone else, aka proxy authentication). I would appreciate
references to literature that would revert or reinforce this decision.
Discussion may be held on sci.crypt, one message regarding this:
<http://groups-beta.google.com/group/sci.crypt/messages/0d4e0a7f710ff761>
Btw, ftp-upload.gnu.org appear to be down, so the links below are only
to my own site, without FTP. I am sorry for the inconvenience. The
release will be upload to alpha.gnu.org eventually.
Enjoy,
Simon
GNU SASL is an implementation of the Simple Authentication and
Security Layer framework and a few common SASL mechanisms. SASL is
used by network servers (e.g., IMAP, SMTP) to request authentication
from clients, and in clients to authenticate against servers.
The project page of the library is available at:
http://www.gnu.org/software/gsasl/
http://josefsson.org/gsasl/
Here are the compressed sources of the entire package:
http://josefsson.org/gsasl/releases/gsasl-0.2.4.tar.gz (2.5MB)
Here are GPG detached signatures using key 0xB565716F:
http://josefsson.org/gsasl/releases/gsasl-0.2.4.tar.gz.sig
Here are the compressed sources of the LGPL library (included above):
http://josefsson.org/gsasl/releases/libgsasl-0.2.4.tar.gz (560KB)
Here are GPG detached signatures using key 0xB565716F:
http://josefsson.org/gsasl/releases/libgsasl-0.2.4.tar.gz.sig
Here are the SHA-1 checksums:
e76d14c55d1210c3dc31dbeee9a0c46ac90237cb gsasl-0.2.4.tar.gz
48dc8fc856f0dbdbbaa4cf6c6c9ed568b637da3d gsasl-0.2.4.tar.gz.sig
994c127ece128f55d9149e2daf668fb6a5461c75 libgsasl-0.2.4.tar.gz
548e1e1f97789462b7a107d4eae38c6de40c6e53 libgsasl-0.2.4.tar.gz.sig
Here are the build reports for various platforms:
http://josefsson.org/autobuild-logs/gsasl.html
Noteworthy changes in the front-end (changes in library below):
** The CRAM-MD5 mechanism is now preferred over DIGEST-MD5.
This decision was based on recent public research that suggest MD5 is
broken, while HMAC-MD5 not immediately compromised, and the lack of
public analysis on what consequences the MD5 break have for
DIGEST-MD5. Support for CRAM-SHA1 is under investigation, to enable
users to avoid MD5 completely
** Fixed a bug that prevented SMTP client from working.
** New configure option --disable-obsolete to remove backwards compatibility.
This is mostly intended to be used when compiling for platforms with
constrained memory/space resources.
** DIGEST-MD5 rewritten and enabled by default (see lib/NEWS for details).
** Command line tool now query for realm, hostname and service name properly.
** Documentation updates and improvements.
** Self test improvements.
** Update of gnulib files.
Noteworthy changes in the library:
** The DIGEST-MD5 mechanism is rewritten and enabled by default.
The implementation is written so it can be used separately from GNU
SASL in your own product, it only uses C89 and two external symbols
for MD5 and HMAC-MD5. For more information, see digest-md5/README.
** Improvements to the PLAIN server.
It now prepare the incoming authid and password using SASLprep
(unassigned code point will be rejected). It should also reject
invalid input better.
** Improved robustness of callback backwards compatibility.
** Memory leaks fixed.
** New simple user database API `gsasl_simple_getpass'.
This replaces gsasl_md5pwd_get_password. The functionality is the
same, only the API changed (to remove fixed size buffer restrictions).
** New configure option --disable-obsolete to remove backwards compatibility.
This is mostly intended to be used when compiling for platforms with
constrained memory/space resources.
** Gnulib files were updated.
** API and ABI modifications.
gsasl_md5pwd_get_password: DEPRECATED. Use gsasl_simple_getpass() instead.
gsasl_simple_getpass: ADD. No buffer length restriction.
GSASL_FOPEN_ERROR: DEPRECATED. Not used any more.
GSASL_FCLOSE_ERROR: DEPRECATED. Not used any more.
GSASL_NO_MORE_REALMS: DEPRECATED. Not used any more.
GSASL_INVALID_HANDLE: DEPRECATED. Not used any more.
_______________________________________________
GNU Announcement mailing list <info-gnu@gnu.org>
http://lists.gnu.org/mailman/listinfo/info-gnu
##########################################################################
# Send submissions for comp.os.linux.announce to: cola@stump.algebra.com #
# PLEASE remember a short description of the software and the LOCATION. #
# This group is archived at http://stump.algebra.com/~cola/ #
##########################################################################
------------------------------
Date: Sun, 2 Jan 2005 11:49:51 CST
From: "Frederick Noronha (FN)" <fred@bytesforall.org>
Subject: Debian GNU/Linux 3.0 updated (r4) (fwd)
========== Forwarded message ==========
========================================================================
The Debian Project http://www.debian.org/
Debian GNU/Linux 3.0 updated (r4) press@debian.org
January 1st, 2005 http://www.debian.org/News/2005/20050101
========================================================================
Debian GNU/Linux 3.0 updated (r4)
This is the fourth update of Debian GNU/Linux 3.0 (codename `woody')
which mainly adds security updates to the stable release, along with a
few corrections to serious problems. Those who frequently update from
security.debian.org won't have to update many packages and most
updates from security.debian.org are included in this update.
Please note that this update does not produce a new version of Debian
GNU/Linux 3.0 but only adds a few updated packages to it. There is no
need to throw away 3.0 CDs but only to update against ftp.debian.org
after an installation, in order to incorporate those late changes.
Upgrading to this revision online is usually done by pointing the
`apt' package tool (see the sources.list(5) manual page) to one of
Debian's many FTP or HTTP mirrors. A comprehensive list of mirrors is
available at:
<http://www.debian.org/distrib/ftplist>
Please note that packages from non-US.debian.org are currently only
available on its mirrors due to the problems the project has encountered
on the host klecker.
Security Updates
================
This revision adds the following security updates to the stable release.
The Security Team has already released an advisory for each of these
updates.
Debian Security Advisory ID Package(s)
DSA 307 gps
DSA 310 xaos
DSA 335 mantis
DSA 359 atari800
DSA 391 freesweep
DSA 417 linux-kernel-2.4.18
DSA 426 netpbm-free
DSA 438 linux-kernel-2.4.18
DSA 442 linux-kernel-2.4.17
DSA 472 fte
DSA 473 oftpd
DSA 479 linux-kernel-2.4.18
DSA 482 linux-kernel-2.4.17
DSA 524 rlpr
DSA 530 l2tpd
DSA 547 imagemagick
DSA 567 tiff
DSA 574 cabextract
DSA 575 catdoc
DSA 576 squid
DSA 577 postgresql
DSA 578 mpg123
DSA 579 abiword
DSA 580 iptables
DSA 581 xpdf
DSA 582 libxml1
DSA 582 libxml2
DSA 583 lvm10
DSA 584 dhcp
DSA 585 shadow
DSA 586 ruby
DSA 587 freeamp
DSA 588 gzip
DSA 590 gnats
DSA 591 libgd2
DSA 592 ez-ipupdate
DSA 593 imagemagick
DSA 594 apache
DSA 595 bnc
DSA 596 sudo
DSA 597 cyrus-imapd
DSA 598 yardradius
DSA 599 tetex-bin
DSA 602 libgd2
DSA 603 openssl
DSA 604 hpsockd
DSA 605 viewcvs
DSA 606 nfs-utils
DSA 607 xfree86
DSA 608 zgv
DSA 609 atari800
DSA 610 cscope
DSA 611 htget
DSA 612 a2ps
DSA 613 ethereal
DSA 614 xzgv
DSA 615 debmake
DSA 616 netkit-telnet-ssl
DSA 617 tiff
DSA 618 imlib
Miscellaneous Bugfixes
======================
This revision adds important corrections to the following packages.
Most of them don't affect the security of the system, but may affect
data integrity.
libcrypt-passwdmd5-perl Dependency correction
The complete list of all accepted and rejected packages together with
rationale is on the preparation page for this revision:
<http://people.debian.org/~joey/3.0r4/>
URLs
----
The complete lists of packages that have changed with this revision:
<http://http.us.debian.org/debian/dists/Debian3.0r4/ChangeLog>
<http://non-us.debian.org/debian-non-US/dists/Debian3.0r4/non-US/ChangeLog>
The current stable distribution:
<ftp://ftp.debian.org/debian/dists/stable>
<ftp://non-us.debian.org/debian-non-US/dists/stable>
Proposed updates to the stable distribution:
<ftp://ftp.debian.org/debian/dists/proposed-updates>
<ftp://non-us.debian.org/debian-non-US/dists/proposed-updates>
Stable distribution information (release notes, errata etc.):
<http://www.debian.org/releases/stable/>
Security announcements and information:
<http://www.debian.org/security/>
About Debian
============
The Debian Project is an organization of free software developers who
volunteer their time and effort in order to produce the completely
free operating systems Debian GNU/Linux and Debian GNU/Hurd.
Contact Information
===================
For further information, please visit the Debian web pages at
<http://www.debian.org/> or send mail to <press@debian.org>.
--
To UNSUBSCRIBE, email to debian-announce-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
##########################################################################
# Send submissions for comp.os.linux.announce to: cola@stump.algebra.com #
# PLEASE remember a short description of the software and the LOCATION. #
# This group is archived at http://stump.algebra.com/~cola/ #
##########################################################################
------------------------------
Date: Sun, 2 Jan 2005 11:49:38 CST
From: "Frederick Noronha (FN)" <fred@bytesforall.org>
Subject: SITEWATCH: http://opensource.mimos.my
This message is in MIME format. The first part should be readable text,
while the remaining parts are likely unreadable without MIME-aware tools.
--Boundary_(ID_i9SIAWqp2fodXf7DaBkaSQ)
Content-type: TEXT/PLAIN; charset=X-UNKNOWN; format=flowed
Content-transfer-encoding: QUOTED-PRINTABLE
________________________________________________
MIMOS Open Source
About MIMOS <http://opensource.mimos.my/?main=3Dmimos/about>
About Open Source <http://opensource.mimos.my/?main=3Dopensrc/oshisto=
ry>
About Linux <http://opensource.mimos.my/?main=3Dlinux/linuxintro>
Open Source R&D Group <http://opensource.mimos.my/?main=3Dmimos/mimos=
-oss>
FAQs <http://opensource.mimos.my/?main=3Dmimos/faq>
Open Source Applications <http://opensource.mimos.my/?main=3Ddload/os=
apps>
Asian Open Source Centre <http://www.asiaosc.org>
Mirror <http://mymirror.asiaosc.org>
For specific enquiries please use following information:
Open Source R&D Group <mailto:opensource@mimos.my>
Tel: 603-8996 5000
Fax: 603-8657 9477
Popular Links
Slashdot.org <http://www.slashdot.org>
Freshmeat.net <http://www.freshmeat.net>
OSDN <http://www.osdn.com>
Linux Online <http://www.linux.org>
Distrowatch <http://www.distrowatch.com>
Welcome To MIMOS Open Source R&D Group
MIMOS <http://www.mimos.my> strongly believes in the philosophy of O=
pen
Source and is currently moving towards increased adoption of Open Sou=
rce
policies. MIMOS believes the Open Source business model will ensure t=
he
protection of intellectual property, prevention of monopoly and progr=
ess
of technology for the benefit of all.
MIMOS's Open Source R&D Group comprises of the Asiaosc team, National
Policy team and Localization team. The Asiaosc team focuses on creati=
ng
a hub of information about open source in Asia, and project MIMOS's o=
pen
source activities throughout Asia. National Policy team focuses on
secretariat and chair of steering committee. Localization team focuse=
s
on ensure key open source software available in BM, especially for
digital divide community.
ANNOUNCEMENT ::
OpenOffice.org 1.1.4 released
OpenOffice.org 1.1.4 represents one of the last stages before
OpenOffice.org 2.0, which *does* contain many new features and even
better compatibility with other major office suites.
For a complete release notes, go here
<http://download.openoffice.org/1.1.4/release_notes_1.1.4.html> . Cli=
ck
here <http://mymirror.asiaosc.org/openoffice/stable/1.1.4/> to
download.
OpenOffice.org 2.0 will be ready for general use in March 2005. An
early, preview version, is ready for download now. It is not meant fo=
r
daily use but is meant to give a taste of things to come. To download
the preview of 2.0, visit this page
<http://download.openoffice.org/680/> .
OpenOffice.org - Bahasa Melayu Spellchecker
MIMOS Open Source Group is conducting a Beta Test on the Bahasa Melay=
u
spellchecker that we have just released. Click here
<http://opensource.mimos.my/?main=3Dmimos/spellchecker> for more det=
ails.
OpenOffice.org 1.1 User Manual
We are pleased to announce that OpenOffice.org 1.1 User Manual is
available for download. Click here
<http://opensource.mimos.my/?main=3Dmimos/OO-manual> for more detail=
s...
OpenOffice.org - Bahasa Melayu version
We are pleased to announce that a pre-release version of OpenOffice.o=
rg
1.1.0 is available in Bahasa Melayu. You can download it here
<http://opensource.mimos.my/?main=3Dmimos/localization_bm> .
OpenOffice.org Survey
MIMOS Open Source Group is conducting a survey on the Bahasa Melayu
version of OpenOffice.org that we have just released (see above).
Details here <http://opensource.mimos.my/?main=3Dmimos/OOo_survey> .
What's New ::
Date =09What's New
Dec 1, 2004
=09Open Source & IP Seminar - A half day seminar on Open Source :
Ethical Issues in Open Source. Click here
<http://opensource.mimos.my/?main=3Dtech_wshop/1Disember> for more
details...
Sept 23, 2004
=09MIMOS-Open Source Workshop - A half day workshop on Security -
Security Using Open Source Tools. Click here
<http://opensource.mimos.my/?main=3Dtech_wshop/23September> for more
details...
June 24, 2004
=09MIMOS-Open Source Workshop - A half day workshop on
OpenOffice.org - Introduction, Install and Use . Click here
<http://opensource.mimos.my/?main=3Dtech_wshop/24June> for more
details...
May 13, 2004
=09MIMOS-Open Source Workshop - A half day workshop on Linux -
Install, Configure and Use. Click here
<http://opensource.mimos.my/?main=3Dtech_wshop/13May> for more detai=
ls...
April 29, 2004
=09MIMOS-Open Source Workshop - A half day workshop on Linux
Operating System - Select and Install. Click here
<http://opensource.mimos.my/?main=3Dtech_wshop/29Apr> for more detai=
ls...
March 22, 2004
=09Presentation slides for MIMOS-Open Source Workshop/Seminar and
3rd Asia Open Source Symposium. Click here
<http://opensource.mimos.my/?main=3Dtech_wshop/slides_2004/slides_200=
4>
=2E..
March 18, 2004
=09MIMOS-Open Source Workshop/Seminar - A half day seminar on Open
Source Trends in Asia. Click here
<http://opensource.mimos.my/?main=3Dtech_wshop/18Mac> for more detai=
ls...
MIMOS Open Source R&D Group - Conference & Exhibition
The 16th MSC Technology Forum
<http://opensource.mimos.my/?main=3Dconference/MDC_Tech_Forum>
FOSSCON 2003 Presentation Slides
<http://opensource.mimos.my/fosscon2003cd/index.html>
MIMOS Open Source R&D Group - Workshop
Workshop Schedule
<http://opensource.mimos.my/?main=3Dtech_wshop/schedule>
Workshop Announcement
Workshop Presentation Slides
Dec 1, 2004
Ethical Issues in Open Source
<http://opensource.mimos.my/?main=3Dtech_wshop/slides_2004/1Dec/1Dec>
Sept 23, 2004
Security Using Open Source Tools
<http://opensource.mimos.my/?main=3Dtech_wshop/slides_2004/23Sept/23S=
ept>
June 24, 2004
OpenOffice.org - Introduction, Install and Use
<http://opensource.mimos.my/?main=3Dtech_wshop/slides_2004/24June/24J=
une>
May 13, 2004
Linux - Install,Configure and Use
<http://opensource.mimos.my/?main=3Dtech_wshop/slides_2004/13May/13Ma=
y>
April 29, 2004
Linux Operating System - Select and Install
<http://opensource.mimos.my/?main=3Dtech_wshop/slides_2004/29Apr/29Ap=
r>
March 18, 2004
Open Source Trends in Asia
<http://opensource.mimos.my/?main=3Dtech_wshop/slides_2004/18Mac/18Ma=
c>
December 17, 2003
Database Development in Open Source
<http://opensource.mimos.my/?main=3Dtech_wshop/17Dec>
October 22, 2003
Antispam and Antivirus using Open Source Tools
<http://opensource.mimos.my/?main=3Dtech_wshop/slides_2003/22Oct>
MIMOS Open Source R&D Group - Participation in Other Events
December 09, 2004 :
UPM Educating Open Source Seminar
<http://opensource.mimos.my/?main=3Dour_participation/upm2>
September 22, 2004 :
UTM Open Source 2004 Conference
<http://opensource.mimos.my/?main=3Dour_participation/utm>
July 12, 2004 :
UPM Introduction to Open Source Seminar
<http://opensource.mimos.my/?main=3Dour_participation/upm>
May 22, 2004 :
UiTM Open Source Presentation
<http://opensource.mimos.my/?main=3Dour_participation/uitm2>
May 12, 2004 :
LinuxWorld Malaysia Conference & Expo
<http://opensource.mimos.my/?main=3Dour_participation/linuxworld>
April 20, 2004 :
USM Open Source Seminar and Workshop
<http://opensource.mimos.my/?main=3Dour_participation/usm>
April 12, 2004 :
National Library Open Source Seminar
<http://opensource.mimos.my/?main=3Dour_participation/lib>
March 29, 2004 :
OUM Knowledge Development Seminar
<http://opensource.mimos.my/?main=3Dour_participation/oum>
March 25, 2004 :
APIIT Open Source Day
<http://opensource.mimos.my/?main=3Dour_participation/apiit>
March 8-10, 2004 :
3rd Asia OSS Symposium
<http://opensource.mimos.my/?main=3Dour_participation/3rd_oss_sympo>
February 7, 2004 :
UiTM Open Source Day
<http://opensource.mimos.my/?main=3Dour_participation/uitm>
December 19, 2003 :
16th MSC Technology Forum
<http://opensource.mimos.my/?main=3Dconference/MDC_Tech_Forum>
Copyright =A9 2002-2004 MIMOS Open Source R&D Group. All right reserv=
ed.
Terms & Conditions <http://opensource.mimos.my/?main=3Dmimos/policy>
________________________________________________
--Boundary_(ID_i9SIAWqp2fodXf7DaBkaSQ)--
##########################################################################
# Send submissions for comp.os.linux.announce to: cola@stump.algebra.com #
# PLEASE remember a short description of the software and the LOCATION. #
# This group is archived at http://stump.algebra.com/~cola/ #
##########################################################################
------------------------------
** FOR YOUR REFERENCE **
The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:
Internet: Linux-Announce-Request@NEWS-DIGESTS.MIT.EDU
You can submit announcements to be moderated via:
Internet: linux-announce@NEWS.ORNL.GOV
Linux may be obtained via one of these FTP sites:
ftp.funet.fi pub/Linux
tsx-11.mit.edu pub/linux
sunsite.unc.edu pub/Linux
End of Linux-Announce Digest
******************************
