-------------------------------------------------------------------------- Trustix Secure Linux Bugfix Advisory #2007-0008 Package names: clamav, cups, hwdata, sqlgrey, vsftpd Summary: Various bug fixes Date: 2007-03-09 Affected versions: Trustix Secure Linux 2.2 Trustix Secure Linux 3.0 -------------------------------------------------------------------------- Package description: clamav Clam AntiVirus is a GPL anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers (attachment scanning). The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs are based on a shared library distributed with package, which you can use with your own software. Most importantly, the virus database is kept up to date. cups The Common UNIX Printing System provides a portable printing layer for UNIX(R) operating systems. It has been developed by Easy Software Products to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces. hwdata hwdata contains various hardware identification and configuration data, such as the pci.ids database, the XFree86 Cards and MonitorsDb databases. sqlgrey SQLgrey is a Postfix grey-listing policy service with auto-white-listing written in Perl with SQL database as storage backend. Greylisting stops 50 to 90 % junk mails (spam and virus) before they reach your Postfix server (saves BW, user time and CPU time). vsftpd vsftpd is a Very Secure FTP daemon. It was written completely from scratch. Problem description: clamav < TSL 3.0 > < TSL 2.2 > - New upstream. cups < TSL 3.0 > - Load usblp module for USB printers, Bug #1699. hwdata < TSL 2.2 > - Updated pci.ids and usb.ids, Bug #2098. sqlgrey < TSL 3.0 > < TSL 2.2 > - Removed sqlite dependencies, Bug #1731. - Changed init priority, Bug #1647. vsftpd < TSL 3.0 > - New upstream, Bug #2064. - Built with GnuTLS, Bug #2068. Action: We recommend that all systems with this package installed be upgraded. Please note that if you do not need the functionality provided by this package, you may want to remove it from your system. Location: All Trustix Secure Linux updates are available from About Trustix Secure Linux: Trustix Secure Linux is a small Linux distribution for servers. With focus on security and stability, the system is painlessly kept safe and up to date from day one using swup, the automated software updater. Automatic updates: Users of the SWUP tool can enjoy having updates automatically installed using 'swup --upgrade'. Questions? Check out our mailing lists: Verification: This advisory along with all Trustix packages are signed with the TSL sign key. This key is available from: The advisory itself is available from the errata pages at and or directly at MD5sums of the packages: -------------------------------------------------------------------------- daab6e141b34b02825ff2ab629ec8c53 3.0/rpms/clamav-0.90.1-1tr.i586.rpm f48d45a784b20d1d86df7a85d02154da 3.0/rpms/clamav-devel-0.90.1-1tr.i586.rpm 86bba875e6c6ef9771bbe2e06b5cfca3 3.0/rpms/cups-1.1.23-12tr.i586.rpm c00e7ba9d8e9c2a3a38819c89a7dce03 3.0/rpms/cups-devel-1.1.23-12tr.i586.rpm 713e34df560d4746ebb41ca5c36e0f93 3.0/rpms/cups-libs-1.1.23-12tr.i586.rpm 0afb9c658eec11fa0114b013cf58b835 3.0/rpms/cups-samba-1.1.23-12tr.i586.rpm 89137aa610f4609416c01564726a14d8 3.0/rpms/sqlgrey-1.6.7-4tr.i586.rpm 9492961b9bbee623cf578dd7fbc49b00 3.0/rpms/vsftpd-2.0.5-1tr.i586.rpm cfed74870880d8932e0f30b21d22961d 2.2/rpms/clamav-0.90.1-1tr.i586.rpm e0b10a3ddf305ba0619c98f283747d20 2.2/rpms/clamav-devel-0.90.1-1tr.i586.rpm 98ba5a68247ba14a0c31fdafb1323f04 2.2/rpms/hwdata-0.44-26tr.i586.rpm 9254003b0f1bd8d2ce991a824f8be1bd 2.2/rpms/hwdata-devel-0.44-26tr.i586.rpm c01175aaf69bfc194ad20f4cb8964819 2.2/rpms/sqlgrey-1.6.7-3tr.i586.rpm -------------------------------------------------------------------------- Trustix Security Team