[4824] in linux-announce channel archive

home help back first fref pref prev next nref lref last post

Linux-Announce Digest #117

daemon@ATHENA.MIT.EDU (Digestifier)
Sun May 1 14:13:06 2005

From: Digestifier <Linux-Announce-Request@senator-bedfellow.mit.edu>
To: Linux-Announce@senator-bedfellow.mit.edu
Reply-To: Linux-Announce@senator-bedfellow.mit.edu
Date:     Sun, 1 May 2005 14:13:03 EDT

Linux-Announce Digest #117, Volume #5           Sun, 1 May 2005 14:13:03 EDT

Contents:
  GnuTLS 1.2.3 and 1.0.25 (fwd) ("Frederick Noronha (FN)")
  [Pine-announce] Pine 4.63 is now available (fwd) ("Frederick Noronha (FN)")
  GNU Libtool 1.5.16 released. (fwd) ("Frederick Noronha (FN)")
  GNUsound 0.7 released (fwd) ("Frederick Noronha (FN)")

----------------------------------------------------------------------------

From: "Frederick Noronha (FN)" <fred@bytesforall.org>
Subject: GnuTLS 1.2.3 and 1.0.25 (fwd)
Date: 30 Apr 2005 18:20:02 GMT


========== Forwarded message ==========

We are pleased to announce the availability of two new GnuTLS
releases; GnuTLS 1.2.3 and GnuTLS 1.0.25!

These releases were prompted by the discovery of a denial of service
problem.

We recommend 1.0 users to move to 1.2.  We will continue to make
releases on the old branch when security problems are discovered, for
those who feel unable to upgrade.

We do not have the resources to analyze and write an explanation of
this security problem.  Volunteers who want to read the bug reports
and the CVS changes, and write up an explanation in plain English, are
most welcome!  Having a detailed track record of security problems can
be a useful reference when discussing security in free software
packages in general.  Naturally, if you wish to sponsor us to do this
work for you, please contact me.

PS.  The ftp.gnutls.org server appear down at the moment, but the
files below will be available as soon as possible.

If you need help to use GnuTLS, or want to help others, you are
invited to join our help-gnutls mailing list, see:
<http://lists.gnu.org/mailman/listinfo/help-gnutls>.

The project page of the library is available at:
   http://www.gnutls.org/
   http://www.gnu.org/software/gnutls/
   http://josefsson.org/gnutls/ (updated fastest)

Here are the compressed sources:
   http://josefsson.org/gnutls/releases/gnutls-1.0.25.tar.gz (1.5MB)
   ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.0.25.tar.gz (1.5MB)
   http://josefsson.org/gnutls/releases/gnutls-1.2.3.tar.bz2 (2.4MB)
   ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.2.3.tar.bz2 (2.4MB)

Here are GPG detached signatures signed using key 0xB565716F:
   http://josefsson.org/gnutls/releases/gnutls-1.0.25.tar.gz.sig
   ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.0.25.tar.gz.sig
   http://josefsson.org/gnutls/releases/gnutls-1.2.3.tar.bz2.sig
   ftp://ftp.gnutls.org/pub/gnutls/devel/gnutls-1.2.3.tar.bz2.sig

Here are the build reports for various platforms:
   http://josefsson.org/autobuild-logs/gnutls.html

Here are the MD5/SHA1 checksums:

3585b5b204135e51e0efc9084b3e028b  gnutls-1.0.25.tar.gz
80527e5a5d17e199cb8a2848178990a6  gnutls-1.0.25.tar.gz.sig
e790b848b9aa1e98d8f28ecf522d8e5dc7e0cb0b  gnutls-1.0.25.tar.gz
7db580ff783bcfb2febe5085f3a3ad10d76d5508  gnutls-1.0.25.tar.gz.sig

4986c2bf8ce533d6b5d4dd6f9f1bbdf1  gnutls-1.2.3.tar.bz2
04a61b016ae24c4b7983c2373c9e023c  gnutls-1.2.3.tar.bz2.sig
78e1b92a9d818479faca9042d446eed61770fb17  gnutls-1.2.3.tar.bz2
c3ccbd42db7918e5d1f69dbdd40e755f8fa5a985  gnutls-1.2.3.tar.bz2.sig

Noteworthy changes since version 1.0.24/1.2.3:

- Corrected bug in record packet parsing that could lead
   to a denial of service attack.
- Corrected bug in RSA key export. Previously exported keys
   can be fixed using certtool. Use certtool -k <infile >outfile
- API and ABI modifications:
     gnutls_x509_privkey_fix(): Add.

Enjoy,
Nikos and Simon


_______________________________________________
GNU Announcement mailing list <info-gnu@gnu.org>
http://lists.gnu.org/mailman/listinfo/info-gnu

##########################################################################
# Send submissions for comp.os.linux.announce to: cola@stump.algebra.com #
# PLEASE remember a short description of the software and the LOCATION.  #
# This group is archived at http://stump.algebra.com/~cola/              #
##########################################################################


------------------------------

Date: Sun, 1 May 2005 02:21:48 CST
From: "Frederick Noronha (FN)" <fred@bytesforall.org>
Subject: [Pine-announce] Pine 4.63 is now available (fwd)

========== Forwarded message ==========

This note is to announce the availability of the Pine Message System
version 4.63.  This is a maintenance release with only a few new features.

Specific information about changes can be found in the built-in release
notes ("R" off the Main Menu), or via any of:

           http://www.washington.edu/pine/

           http://www.washington.edu/pine/changes.html

           ftp://ftp.cac.washington.edu/pine/docs/


UNIX source code for the latest Pine release is available at:

           http://www.washington.edu/pine/getpine/
or
           ftp://ftp.cac.washington.edu/pine/pine.tar.gz
                 (MD5: 0cd94e17c10eef0d43966635a328fe64)
           ftp://ftp.cac.washington.edu/pine/pine.tar.Z
                 (MD5: 2104701c86463e5b62fc087647d743e9)
           ftp://ftp.cac.washington.edu/pine/pine.tar.bz2
                 (MD5: e881f439f38039b310d22554ab08feb4)

Pre-built binaries are available for a small number of UNIX operating
environments via:

           http://www.washington.edu/pine/getpine/

The PC-Pine distribution is also available at the above url, or at:

           ftp://ftp.cac.washington.edu/pine/pcpine/setup_pine_4.63.exe
                 (MD5: 8d4b186293a91b43e6ac4557526a1f89)

Alternatively, the zip file is also available at:

           ftp://ftp.cac.washington.edu/pine/pcpine/pm463w32.zip
                 (MD5: 2c9e13eeeccdb90b39d8dac0eb7f108f)

Linux RPMs and Debian packages are now also available at:

           http://www.washington.edu/pine/getpine/linux.html
or
           ftp://ftp.cac.washington.edu/pine/pine-4.63-1.i386.rpm
                  (MD5: f243c2e78c2e5239ca86ec380cdf55e4)
           ftp://ftp.cac.washington.edu/pine/pine-4.63-1.src.rpm
                  (MD5: 0129f229f3d30b3d4b9876213a98d330)
           ftp://ftp.cac.washington.edu/pine/pine_4.63_i386.deb
                  (MD5: f5aa298518b2859f22337d288015f2d3)

New enhancements in version 4.63 include:

      * When cancelling a message being composed the commands are now "^C"
        followed by "_C_onfirm" instead of "^C" followed by "_Y_es". "^C"
        "Yes" was close to "^X" "Yes", the command used to send a message.
        The change is there to prevent inadvertent cancellations. The old
        behavior may be restored by setting the feature
        Compose-Cancel-Confirm-Uses-Yes.
      * Command-line option "-url" can now be used with "-attach" and
        similar options
      * Quell-User-Id-Prompt no longer falls back on prompting for user-id
        if a connection to the INBOX can't be established
      * New token _CURNEWS_ which is equal to the current newsgroup if
        there is one, mostly for use with the Reply-Leadin option
      * New token ARROW for use in the Index-Format option for the MESSAGE
        INDEX screen. This causes the current message to be indicated by
        an arrow instead of being shown in reverse video. It may also be
        colored if desired.
      * New feature Force-Arrow-Cursor turns on an "arrow" cursor in the
        MESSAGE INDEX just like you get with the Assume-Slow-Link feature
        turned on, except the coloring of the index line will still take
        place.
      * Address book entries can be exported to a file in tab-separated
        columns for more convenient import to some other clients
      * New variable Quote-Replace-String and feature
        Quote-Replace-Nonflowed allow for replacing quotes with the string
        of the user's choice when viewing a message
      * Character Set matching can now be done conveniently in Rules
      * Field for comments added to Rules. Warning: Don't use this field
        until all of the Pines that you run are version 4.63 or higher,
        since it will cause the Rule to be ignored in previous versions.
      * There is a new filterNow command located under Setup/Rules which
        causes your filters to be re-run immediately. This is _not_ useful
        for most users since filters are run immediately as new mail
        arrives, but it may be useful if you want to re-run filters after
        changing the status (New, Important, Deleted, and so on) of
        messages and you don't want to wait until exiting the folder or
        expunging.

Some of the bugs that have been addressed in this release include:

      * Crash when an IMAP server dies while browsing the server's
        collection of folders
      * Crash with message "Lock when already locked" when saving multiple
        messages where some of those messages have had attachments deleted
      * Possible crash when viewing an attachment with an encoded name
      * Crash when saving from a local folder which has been closed due to
        external modification
      * TABbing for new mail in a news maildrop with multiple newsrcs was
        broken
      * Role inheritance only worked one level deep
      * When viewing messages with the Quote-Suppression-Threshold turned
        on, non-flowed messages with long lines that wrapped caused
        confusion with the quoted line counting
      * Malformed addresses were not always handled cleanly when replying.
        Now the original address should be presented to the user who must
        sort it out.
      * In PC-Pine, Postponed tab was needlessly grayed out when editing
        headers.
      * It wasn't possible to add a collection that was a sub-collection
        of the open Inbox on a cyrus server because Pine tried to create
        the directory Inbox and that Folder/Directory already existed
      * Handles (for example, for URLs) would sometimes be selectable even
        though they had been scrolled off the screen one line, causing
        confusion
      * Failed to notice expunges in local folders which were in mbx
        format
      * In composer: ^R to reveal Attachment line, attach a file without
        leaving the line (e.g. with ^T), then ^R while still in the
        Attachment line, and the attachment was not sent
      * When viewing format=flowed messages with the DelSp=yes parameter
        urls were not recognized if they were split in the middle. It is
        recommended that messages not be sent with this format but it is
        known that some clients (Apple Mail is one) do send such mail.
      * Avoid unnecessary re-sort of the folder when re-filtering in
        preparation for an expunge
      * In PC-Pine, crash when fonts with unknown character sets are
        loaded
      * Bug in composer when cleaning up a flowed message with
        indentations inside of quotes.
      * Preserve Literal-Signature leading spaces in config file
      * Strip trailing spaces from signatures so that they won't be
        recognized as flowed text
      * Fix race condition in rpdump that could cause overwriting of
        arbitrary local files owned by the user running rpdump if a
        malicious user has write permission in the same directory as the
        local file specified on the command line.
      * When running Pine in function key mode, make it possible to
        Reverse the sort

As with all Pine releases, it is important that you carefully test and
determine for yourself that it performs suitably in your environment
before placing Pine into production use.

The Pine Development Team
_______________________________________________
Pine-announce mailing list
Pine-announce@u.washington.edu
http://mailman1.u.washington.edu/mailman/listinfo/pine-announce

##########################################################################
# Send submissions for comp.os.linux.announce to: cola@stump.algebra.com #
# PLEASE remember a short description of the software and the LOCATION.  #
# This group is archived at http://stump.algebra.com/~cola/              #
##########################################################################


------------------------------

Date: Sun, 1 May 2005 06:17:18 CST
From: "Frederick Noronha (FN)" <fred@bytesforall.org>
Subject: GNU Libtool 1.5.16 released. (fwd)

========== Forwarded message ==========

The Libtool Team is pleased to announce the release of GNU Libtool
1.5.16.

GNU Libtool hides the complexity of using shared libraries behind a
consistent, portable interface. GNU Libtool ships with GNU libltdl,
which hides the comlexity of loading dynamic runtime libraries
(modules) behind a consistent, portable interface.

This release has a number of improvements and bug fixes.

New in 1.5.16: 2005-04-23

* Allow shell special characters like `$' in source file names, but
   not in object names, to enhance GCJ support.
* Detection of compiler wrappers like distcc/ccache and $host_alias
   prefix.
* More robust tests for PIC flag, `-c -o', in presence of warnings.
* Bug Fixes, among others for convenience archives regression on
   Solaris and timestamp-preserving `libtoolize --copy --ltdl'.

libtool-1.5.16 is available now from ftp.gnu.org, along with diffs
and xdeltas against libtool-1.5.14 that are also available from
ftp.gnu.org.  Please use a mirror to reduce stress on the main gnu
machine:

   http://www.gnu.org/order/ftp.html

Here are the compressed sources:

   ftp://ftp.gnu.org/gnu/libtool/libtool-1.5.16.tar.gz

Here are the xdeltas and diffs against libtool-1.5.14:

   ftp://ftp.gnu.org/gnu/libtool/libtool-1.5.14-1.5.16.diff.gz
   ftp://ftp.gnu.org/gnu/libtool/libtool-1.5.14-1.5.16.xdelta

Here are the gpg detached signatures:

   ftp://ftp.gnu.org/gnu/libtool/libtool-1.5.16.tar.gz.sig
   ftp://ftp.gnu.org/gnu/libtool/libtool-1.5.14-1.5.16.diff.gz.sig
   ftp://ftp.gnu.org/gnu/libtool/libtool-1.5.14-1.5.16.xdelta.sig

You should download the signature named after any tarball you download,
and then verify its integrity with, for example:

   gpg --verify libtool-1.5.16.tar.gz.sig

Here are the MD5 and SHA1 checksums:

   5f3c344ae62a1d1fd789877e8080ae57  libtool-1.5.16.tar.gz
   10fafa3c5283f25c007dece342adf21b  libtool-1.5.14-1.5.16.diff.gz
   d0996b199c4e8325fa50bdc2dde7c7e0  libtool-1.5.14-1.5.16.xdelta
   8343e980f55855db5a3a99a3edaada8a80aef81f  libtool-1.5.16.tar.gz
   fb510a2edf9ed831266cae8039feddf11fb86b06 libtool-1.5.14-1.5.16.diff.gz
   0f6521475c3759b18a3f8319a3f134308f35111d  libtool-1.5.14-1.5.16.xdelta

This release was bootstrapped with Autoconf 2.59 and Automake 1.9.5,
but is useable with Autoconf 2.50 & later and Automake 1.4 & later in
your own projects.

Alternatively, you can fetch the unbootstrapped sourcecode from
anonymous cvs by using the following commands (just hit return when
you are prompted for the password):

   $ export CVS_RSH=ssh
   $ cvs -z3 -d :ext:anoncvs@savannah.gnu.org:/cvsroot/libtool \
         co -r release-1-5-16 libtool

You will then need to have the latest release versions of Automake
(1.9.5) and Autoconf (2.59) installed to bootstrap the checked out
sources yourself.

Please report bugs to <bug-libtool@gnu.org>, along with the verbose
output of any failed test groups, and the output from `./libtool --help.'


_______________________________________________
GNU Announcement mailing list <info-gnu@gnu.org>
http://lists.gnu.org/mailman/listinfo/info-gnu

##########################################################################
# Send submissions for comp.os.linux.announce to: cola@stump.algebra.com #
# PLEASE remember a short description of the software and the LOCATION.  #
# This group is archived at http://stump.algebra.com/~cola/              #
##########################################################################


------------------------------

From: "Frederick Noronha (FN)" <fred@bytesforall.org>
Subject: GNUsound 0.7 released (fwd)
Date: 1 May 2005 11:20:08 GMT

========== Forwarded message ==========

Hi,

GNUsound 0.7 was released. This is a major update that has been in
development for more than a year. It provides a large number of
feature enhancements, GUI improvements and bug fixes.

Significant changes from version 0.6.2 include:

- Support for ALSA and JACK in addition to OSS.
- Support for AudioFile, FFmpeg, FLAC, libmp3lame, sndfile for file I/O.
- Major GUI redesign.
- Improved Undo/Redo capability.
- Improved GNOME2 support.

And more...

GNUsound is now a part of the GNU project. The homepage and download
locations have changed accordingly:

http://www.gnu.org/software/gnusound

Thanks,
Pascal.


_______________________________________________
GNU Announcement mailing list <info-gnu@gnu.org>
http://lists.gnu.org/mailman/listinfo/info-gnu

##########################################################################
# Send submissions for comp.os.linux.announce to: cola@stump.algebra.com #
# PLEASE remember a short description of the software and the LOCATION.  #
# This group is archived at http://stump.algebra.com/~cola/              #
##########################################################################


------------------------------


** FOR YOUR REFERENCE **

The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:

    Internet: Linux-Announce-Request@NEWS-DIGESTS.MIT.EDU

You can submit announcements to be moderated via:

    Internet: linux-announce@NEWS.ORNL.GOV

Linux may be obtained via one of these FTP sites:
    ftp.funet.fi				pub/Linux
    tsx-11.mit.edu				pub/linux
    sunsite.unc.edu				pub/Linux

End of Linux-Announce Digest
******************************

home help back first fref pref prev next nref lref last post