AnNyung 1.2 Update Notice

1.2 ��Ʈ ��

�� — Mon, 19 Mar 2007 16:37:39 +0900

1.2 ��Ʈ ��


�󼼳���

1.2 ������Ʈ ����

1.2 ������Ʈ�� ���� �Ǿ����ϴ�. 1.3 �� on-line ������Ʈ�� �Ͻʽÿ�.


Autoupdates ���� : ����

http://annyung.oops.org/?m=white&p=migration ������ ���� �Ͽ� ������Ʈ �Ͻʽÿ�.


update ��Ű��

  ���� ����

���� :
http://annyung.oops.org/?m=white&p=migration

mysql ��Ʈ

�� — Mon, 19 Mar 2007 15:38:18 +0900

mysql ��Ʈ


�󼼳���

- mysql 5.0.37 update


Autoupdates ���� : Packages System
  1.2 ������Ʈ ����. 1.3 ���� migration �� �� �Ŀ� �̿��Ͻʽÿ�.
  pkgadd -F mysql*


update ��Ű��

  RPMS :
    . mysql-5.0.37-1.i686.rpm
    . mysql-devel-5.0.37-1.i686.rpm
    . mysql-client-5.0.37-1.i686.rpm
    . mysql-shared-5.0.37-1.i686.rpm

  SRPMS :

    . mysql-5.0.37-1.src.rpm


���� :

kernel �� Ʈ

�� — Mon, 19 Mar 2007 02:57:41 +0900

kernel �� Ʈ


�󼼳���

2.4.34-6 update

���ȹ���:
  - CVE-2006-5749
  - CVE-2006-4814
  - CVE-2006-6106
  - CVE-2006-5871
  - CVE-2006-4997
  - CVE-2006-1528
  - CVE-2006-4145
  - CVE-2006-3745
  - CVE-2006-4093
  - smbfs: fix problems introduced by last security backport

�߰�����:
  - 2.4.34 update
  - 2.4.35-pre1 ����
  - 4TB partition support
  - netfilter ipt_recent time overflow bug fix
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-CVE-2005-2872
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-CVE-2005-2873
  - netfilter layer7 extension update to 2.9
  - MPT Fusion driver udpate to 2.06.16.02
  - tg3 driver update to 3.66
  - 3ware driver update to 9.4.0.1
  - e1000 driver update to 7.3.20
  - epoll update to 0.23
  - ICH7/ICH8 support
  - SAS (Serial Attached SCSI) support
    adaptec adp94xx serise b11662
    megaraid sas serise v00.00.03.01
    mpt fusion sas serise (include MPT Fusion driver)
  - update sk98lin driver to 8.41.2.3
  - add fstatfs64 symbol
  - forcedeth (0.60), sata_nv (0.11) update
  - update bnx2 module
  - add ipt_time / ipt_dstlimit / ipt_connlimit netfilter driver
  - support pptp

  2.4.22 Ŀ�� Ʈ���� ���̻� �������� �ʽ��ϴ�.


Autoupdates ���� :
  1.2 ������Ʈ ����. 1.3 ���� migration �� ��, pkgkernel �� �̿��Ͻʽÿ�.
  http://annyung.oops.org/?m=white&p=migration
  Packages system �̿�
  http://annyung.oops.org/?m=pkgadm&p=pkgkernel ����


update ��Ű��

  RPMS :

    . kernel-2.4.34-6.i686.rpm
    . kernel-bigmem-2.4.34-6.i686.rpm
    . kernel-PIII-2.4.34-6.i686.rpm
    . kernel-PIV-2.4.34-6.i686.rpm
    . kernel-source-2.4.34-6.i386.rpm
    . kernel-header-2.4.34-6.i386.rpm


  SRPMS :

    . kernel-2.4.34-6.src.rpm

���� :
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2006-5749
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2006-4814
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2006-6106
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2006-5871
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2006-4997
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2006-1528
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2006-4145
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2006-3745
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2006-4093

postgresql �� Ʈ

�� — Mon, 19 Mar 2007 02:29:53 +0900

postgresql �� Ʈ


�󼼳���

8.0.12 update

- fixed CVE-2007-0555

CVE-2007-0555:
PostgreSQL 7.3 before 7.3.13, 7.4 before 7.4.16, 8.0 before 8.0.11, 8.1 before
8.1.7, and 8.2 before 8.2.2 allows attackers to disable certain checks for the
data types of SQL function arguments, which allows remote authenticated users
to cause a denial of service (server crash) and possibly access database content.


Autoupdates ���� : Packages System
  1.2 ������Ʈ ����. 1.3 ���� migration �� ��, pkgadd �� �̿��Ͻʽÿ�.
  http://annyung.oops.org/?m=white&p=migration
  pkgadd -F postgresql*


update ��Ű��

  RPMS :

    . postgresql-8.0.12-1.i686.rpm
    . postgresql-jdbc-8.0.12-1.i686.rpm
    . postgresql-contrib-8.0.12-1.i686.rpm
    . postgresql-libs-8.0.12-1.i686.rpm
    . postgresql-devel-8.0.12-1.i686.rpm
    . postgresql-pl-8.0.12-1.i686.rpm
    . postgresql-devel-static-8.0.12-1.i686.rpm
    . postgresql-python-8.0.12-1.i686.rpm
    . postgresql-server-8.0.12-1.i686.rpm

  SRPMS :

    . postgresql-8.0.12-1.src.rpm


���� :
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0555

php �� Ʈ

�� — Mon, 19 Mar 2007 02:07:31 +0900

php �� Ʈ


�󼼳���

* update 5.1.6-3
* security fix

CVE-2007-0906:
A number of buffer overflow flaws were found in the PHP session extension;
the str_replace() function; and the imap_mail_compose() function. If very
long strings were passed to the str_replace() function, an integer
overflow could occur in memory allocation. If a script used the
imap_mail_compose() function to create a new MIME message based on an
input body from an untrusted source, it could result in a heap overflow.
An attacker with access to a PHP application affected by any these issues
could trigger the flaws and possibly execute arbitrary code as the
'apache' user. 

CVE-2007-0907:
A one byte memory read always occurs before the beginning of a buffer.
This could be triggered, for example, by any use of the header() function
in a script. However it is unlikely that this would have any effect.

CVE-2007-0908:
If the wddx extension was used to import WDDX data from an untrusted
source, certain WDDX input packets could expose a random portion of heap
memory.

CVE-2007-0909:
If the odbc_result_all() function was used to display data from a
database, and the database table contents were under an attacker's
control, a format string vulnerability was possible which could allow
arbitrary code execution.

CVE-2007-0910:
Several flaws in PHP could allow attackers to "clobber" certain
super-global variables via unspecified vectors. 

CVE-2007-0988:
When unserializing untrusted data on 64-bit platforms, the
zend_hash_init() function could be forced into an infinite loop, consuming
CPU resources for a limited time, until the script timeout alarm aborted
execution of the script.

CVE-2007-1285:
An input validation bug allowed a remote attacker to trigger a denial of
service attack by submitting an input variable with a deeply-nested-array.

CVE-2006-4812:
An attacker can exploit this vulnerability to execute arbitrary code in the context
of the affected application. Failed exploit attempts will likely cause
denial-of-service conditions.

CVE-2006-5465:
An attacker could exploit these issues to have arbitrary code execute in the context
of an affected webserver. This may lead to the compromise of the webserver. Failed
exploit attempts could cause denial-of-service conditions, denying access to legitimate
users.


Autoupdates ���� :
  1.2 Update ����. 1.3 ���� migration �� pkgadd �� �̿��Ͻʽÿ�.
  http://annyung.oops.org/?m=white&p=migration


update ��Ű��

  RPMS :

    + PHP5

    . php-binary-5.1.6-3.i686.rpm
    .
    . php-5.1.6-3.i686.rpm
    . php-devel-5.1.6-3.i686.rpm
    . php-gd-5.1.6-3.i686.rpm
    . php-mssql-5.1.6-3.i686.rpm
    . php-bcmath-5.1.6-3.i686.rpm
    . php-geoip-5.1.6-3.i686.rpm
    . php-mysql-5.1.6-3.i686.rpm
    . php-gettext-5.1.6-3.i686.rpm
    . php-mysqli-5.1.6-3.i686.rpm
    . php-bz2-5.1.6-3.i686.rpm
    . php-hash-5.1.6-3.i686.rpm
    . php-openssl-5.1.6-3.i686.rpm
    . php-calendar-5.1.6-3.i686.rpm
    . php-iconv-5.1.6-3.i686.rpm
    . php-pdo-5.1.6-3.i686.rpm
    . php-curl-5.1.6-3.i686.rpm
    . php-imap-5.1.6-3.i686.rpm
    . php-pdo-mysql-5.1.6-3.i686.rpm
    . php-dba-5.1.6-3.i686.rpm
    . php-korean-5.1.6-3.i686.rpm
    . php-pdo-pgsql-5.1.6-3.i686.rpm
    . php-krisp-5.1.6-3.i686.rpm
    . php-pgsql-5.1.6-3.i686.rpm
    . php-eaccelerator-5.1.6-3.i686.rpm
    . php-mbstring-5.1.6-3.i686.rpm
    . php-rrd-5.1.6-3.i686.rpm
    . php-exif-5.1.6-3.i686.rpm
    . php-mcrypt-5.1.6-3.i686.rpm
    . php-sockets-5.1.6-3.i686.rpm
    . php-fileinfo-5.1.6-3.i686.rpm
    . php-memcache-5.1.6-3.i686.rpm
    . php-sqlite-5.1.6-3.i686.rpm
    . php-ftp-5.1.6-3.i686.rpm
    . php-mhash-5.1.6-3.i686.rpm
    . php-zlib-5.1.6-3.i686.rpm


  SRPMS :

    . php-5.1.6-3.src.rpm
    . php-extension-5.1.6-3.src.rpm


���� :
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0906
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0907
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0908
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0909
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0910
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0988
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1285

bind �� Ʈ

�� — Mon, 19 Mar 2007 01:53:15 +0900

bind �� Ʈ


�󼼳���

Bind �� name server �� ��ϱ� ���� �����̴�.

- 9.4.0 update
- security fixed

. CVE-2007-0493

Use-after-free vulnerability in ISC BIND 9.3.0 up to 9.3.3, 9.4.0a1 up to
9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum only)
allows remote attackers to cause a denial of service (named daemon crash)
via unspecified vectors that cause named to "dereference a freed fetch context."

. CVE-2007-0494:

ISC BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3, 9.4.0a1 up to
9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 (Bind Forum only)
allows remote attackers to cause a denial of service (exit) via a type * (ANY)
DNS query response that contains multiple RRsets, which triggers an assertion
error, aka the "DNSSEC Validation" vulnerability.


Autoupdates ���� :
  1.2 update ����. 1.3 ���� migration �Ŀ� pkgadd �� �̿� �Ͻʽÿ�.
  http://annyung.oops.org/?m=white&p=migration

update ��Ű��

  RPMS :

    . bind-9.4.0-1.i686.rpm
    . bind-utils-9.4.0-1.i686.rpm
    . bind-devel-9.4.0-1.i686.rpm

  SRPMS :

    . bind-9.4.0-1.src.rpm

���� :
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0493
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0494

clamav ��Ʈ

�� — Thu, 15 Mar 2007 17:18:22 +0900

clamav ��Ʈ


�󼼳���

clamav �� sendmail milter �� �۵��ϴ� anti virus ���� �̴�.

0.90.1-2 update
- library soname �������� ���� ������Ʈ ���� ó��
- ���� ���� ���� �������� �۵����� �ʴ� ���� ó��

clamd �� freshclam ����ÿ� ���� ���� �Ľ� ������ �߻��ϸ� �ش� ������ �ɼǰ���
yes ��� ���� ������ �ֽø� �˴ϴ�. 0.80 ������ ���� ���Ͽ� �ɼ��� ������ true
�� �ν��� �Ǿ��µ�, 0.90 ���ʹ� �ɼ��� ������ ���� boolean ���� �Ǻ��ϵ��� ����
�� �Ǿ����� ���� �Ͻñ� �ٶ��ϴ�.

���� �������� ������ ������ �߻��� �� �ֱ� ������, ������ ������ �߻��� ��쿡��
���� ������ �����ϰ� ��ġ�� �ֽʽÿ�.



Autoupdates ���� : Pakcages System �̿�
  pkgadd -F clamav*
  service sendmail restart
  service clamd restart
  killall -9 freshclam
  service freshclam start


update ��Ű��

  RPMS :

    . clamav-0.90.1-2.i686.rpm
    . clamav-devel-0.90.1-2.i686.rpm
    . clamav-milter-0.90.1-2.i686.rpm


  SRPMS :

    . clamav-0.90.1-2.src.rpm


���� :

clamav ��Ʈ

�� — Thu, 15 Mar 2007 02:30:30 +0900

clamav ��Ʈ


�󼼳���

clamav �� sendmail milter �� �۵��ϴ� anti virus ���� �̴�.

0.88.7 expired
0.90.1 update



Autoupdates ���� : Pakcages System �̿�
  pkgadd -F clamav*
  service sendmail restart
  service clamd restart
  killall -9 freshclam
  service freshclam start


update ��Ű��

  RPMS :

    . clamav-0.90.1-1.i686.rpm
    . clamav-devel-0.90.1-1.i686.rpm
    . clamav-milter-0.90.1-1.i686.rpm


  SRPMS :

    . clamav-0.90.1-1.src.rpm


���� :

sendmail ��Ʈ

�� — Thu, 15 Mar 2007 02:29:30 +0900

sendmail ��Ʈ


�󼼳���

8.14.0 update


Autoupdates ���� : Packages System
  pkgadd -F "sendmail*"

update ��Ű��

  RPMS :

    . sendmail-8.14.0-1.i686.rpm
    . sendmail-cf-8.14.0-1.i686.rpm

  SRPMS :

    . sendmail-8.14.0-1.src.rpm

���� :

imap ��Ʈ

�� — Thu, 15 Mar 2007 02:27:14 +0900

imap ��Ʈ


�󼼳���

imap package �� pop3 �� imap daemon �� �����ϰ� �ִ�.

�������

. 2006f �� ������Ʈ

. imap, imaps, ipop3, pop3s �� xinetd ���� ���� ������ imap-init-@servicename@
  ���� �и���


Autoupdates ���� : Packages System
  pkgadd -F imap*
  pkgadd -u imap-init-imap2 (if use port 143)
  pkgadd -u imap-init-pop3  (if use port 110)
  pkgadd -u imap-init-imaps (is use port 993)
  pkgadd -u imap-init-pop3s (is use port 995)

  * ������Ʈ �Ŀ�, ������ �ȵ� ���, service xinetd reload ������ ������
    �ֽʽÿ�.

update ��Ű��

  RPMS :

    . imap-2006f-1.i686.rpm
    . imap-devel-2006f-1.i686.rpm
    . imap-init-imap2-1.0.0-1.i686.rpm
    . imap-init-imaps-1.0.0-1.i686.rpm
    . imap-init-pop3-1.0.0-1.i686.rpm
    . imap-init-pop3s-1.0.0-1.i686.rpm

  SRPMS :

    . imap-2006f-1.src.rpm
    . imap-init-1.0.0-1.src.rpm

���� :

iptables ��Ʈ

�� — Thu, 15 Mar 2007 02:24:57 +0900

iptables ��Ʈ


�󼼳���

- add dstlimit extension
- add time extension
- add connlimit extension

�ش� ������ �ȳ� ������ 1.3 �� Ŀ�ο��� ����� �� �ִ� ������� 1.3 ������
���� �̸� ������Ʈ �մϴ�. (�ȳ� Ŀ�� 2.4.34-6 ���� ��� ���� �մϴ�.)

Autoupdates ���� : ����
  iptables-ipv6 / iptables-devel �� Packages System ���� ���� �մϴ�.
  pkgadm -[U|F] iptables-ipv6 iptables-devel


update ��Ű��

  RPMS :

    . iptables-1.3.7-2.i686.rpm
    . iptables-devel-1.3.7-2.i686.rpm
    . iptables-ipv6-1.3.7-2.i686.rpm

  SRPMS :

    . iptables-1.3.7-2.src.rpm


���� :

gnupg �� Ʈ

�� — Thu, 15 Mar 2007 02:22:43 +0900

gnupg �� Ʈ


�󼼳���

. CVE-2007-1263

GnuPG 1.4.6 and earlier and GPGME before 1.1.4, when run from the command
line, does not visually distinguish signed and unsigned portions of OpenPGP
messages with multiple components, which might allow remote attackers to
forge the contents of a message without detection.


Autoupdates ���� : ����


update ��Ű��

  RPMS :

    . gnupg-1.2.6-9.i686.rpm

  SRPMS :

    . gnupg-1.2.6-9.src.rpm


���� :
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1263

php 4.x ��Ʈ

�� — Tue, 27 Feb 2007 03:06:50 +0900

php 4.x ��Ʈ


�󼼳���

���� �ǰ����� �ȳ� 1.x ���� ���ǻ� php 5.x �� ������Ʈ�� ���� ���Ͻ� �е���
���� ��Ű�� �Դϴ�. php 4.x �� ����Ͻô� �е��� �Ʒ��� �ǰ��ȿ� ���� ����
�������� ������Ʈ�� �Ͻñ� �ٶ��ϴ�.

** ���� **
  1. �ȳ��� php 4.4.4 ���ʹ� php-gdbm �� php-dba �� ������ �Ǿ����ϴ�.
     php-gdbm extension �� ����ϼ̴ٸ�, php-gdbm �� ���� �Ͻð� php-dba ��
     ��ġ�ϼž� �մϴ�.

  2. php-mbstring �� php core package �� ������ �Ǿ����ϴ�. php-mbstring ��
     ��ġ�� �Ǿ� �ִٸ� ���� �ϼž� �մϴ�.

  3. php-socket extension �� php-sockets �� ������ �Ǿ����ϴ�. php-socket��
     ���� �Ͻ� �� php-sockets �� ��ġ �ϼž� �մϴ�.

* php 4.4.5-2 fix issue

 - fix possible off-by-one in str_(i)replace()
 - fix segfault in php_add_session_var()
 - Fixed bug #40286 (PHP fastcgi with PHP_FCGI_CHILDREN don't kill children when parent is killed)
 - fix #40578 (imagettftext() multithreading issue)
 - Fixed bug #40611 (possible cURL memory error)
 - update PCRE symbols list
 - Fixed bug #40635 (segfault in cURL extension)


Autoupdates ���� : ���� ����
  ������ ������ �̿��Ͽ� ������Ʈ

  # PKGHOME �� http://annyung.oops.org/?m=data&p=download ���� ���� ����� �̷�
  # ������ ���� �ϵ��� �մϴ�. (nslookup mirror.xx.oops.org ������ �̿��Ͽ� IP ��
  # ��� �մϴ�.)

  export PKGHOME=10.0.0.xxx
  rpm -Uhv ftp://${PKGHOME}/pub/AnNyung/1.0/Packages/old/php-binary-4.4.5-2.i686.rpm
  rpm -Uhv ftp://${PKGHOME}/pub/AnNyung/1.0/Packages/old/php-devel-4.4.5-2.i686.rpm
  rpm -Uhv ftp://${PKGHOME}/pub/AnNyung/1.0/i686/OOPS/RPMS/php-pear-1.4.6-1.noarch.rpm

  pkgadd -F php-21:4.4.5-2-i686
  pkgadd -F php-bcmath-21:4.4.5-2-i686
  pkgadd -F php-bz2-21:4.4.5-2.i686.rpm
  pkgadd -F php-calendar-21:4.4.5-2.i686.rpm
  pkgadd -F php-curl-21:4.4.5-2-i686
  pkgadd -F php-dba-21:4.4.5-2-i686
  pkgadd -F php-eaccelerator-21:4.4.5-2-i686
  pkgadd -F php-exif-21:4.4.5-2-i686
  pkgadd -F php-ftp-21:4.4.5-2-i686
  pkgadd -F php-gd-21:4.4.5-2-i686
  pkgadd -F php-geoip-21:4.4.5-2-i686
  pkgadd -F php-gettext-21:4.4.5-2-i686
  pkgadd -F php-iconv-21:4.4.5-2-i686
  pkgadd -F php-imap-21:4.4.5-2-i686
  pkgadd -F php-korean-21:4.4.5-2-i686
  pkgadd -F php-mcrypt-21:4.4.5-2-i686
  pkgadd -F php-memcache-21:4.4.5-2-i686
  pkgadd -F php-mhash-21:4.4.5-2-i686
  pkgadd -F php-mssql-21:4.4.5-2-i686
  pkgadd -F php-mysql-21:4.4.5-2-i686
  pkgadd -F php-openssl-21:4.4.5-2-i686
  pkgadd -F php-pgsql-21:4.4.5-2-i686
  pkgadd -F php-rrd-21:4.4.5-2-i686
  pkgadd -F php-sockets-21:4.4.5-2-i686
  pkgadd -F php-sqlite-21:4.4.5-2-i686
  pkgadd -F php-zlib-21:4.4.5-2-i686


update ��Ű��

  RPMS :

    + PHP4
    . php-binary-4.4.5-2.i686.rpm
    . php-devel-4.4.5-2.i686.rpm
    . php-pear-1.4.6-1.i686.rpm

    . php-4.4.5-2.i686.rpm
    . php-bcmath-4.4.5-2.i686.rpm
    . php-bz2-4.4.5-2.i686.rpm
    . php-calendar-4.4.5-2.i686.rpm
    . php-curl-4.4.5-2.i686.rpm
    . php-dba-4.4.5-2.i686.rpm
    . php-eaccelerator-4.4.5-2.i686.rpm
    . php-exif-4.4.5-2.i686.rpm
    . php-ftp-4.4.5-2.i686.rpm
    . php-gd-4.4.5-2.i686.rpm
    . php-geoip-4.4.5-2.i686.rpm
    . php-gettext-4.4.5-2.i686.rpm
    . php-iconv-4.4.5-2.i686.rpm
    . php-imap-4.4.5-2.i686.rpm
    . php-korean-4.4.5-2.i686.rpm
    . php-mcrypt-4.4.5-2.i686.rpm
    . php-memcache-4.4.5-2.i686.rpm
    . php-mhash-4.4.5-2.i686.rpm
    . php-mssql-4.4.5-2.i686.rpm
    . php-mysql-4.4.5-2.i686.rpm
    . php-openssl-4.4.5-2.i686.rpm
    . php-pgsql-4.4.5-2.i686.rpm
    . php-rrd-4.4.5-2.i686.rpm
    . php-sockets-4.4.5-2.i686.rpm
    . php-sqlite-4.4.5-2.i686.rpm
    . php-zlib-4.4.5-2.i686.rpm

  SRPMS :

    . php-4.4.5-2.src.rpm
    . php-extension-4.4.5-2.src.rpm


���� :
http://kr.php.net/releases/4_4_5.php

apache-bandwidth ��Ʈ

�� — Sun, 18 Feb 2007 03:48:06 +0900

apache-bandwidth ��Ʈ


�󼼳���

apache-bandwidth �� apache �� traffic bandwidth �� �����ϴ� ����̴�.
apache-throttle �� ���۷��� �����ϴ� ����̸�, ���� ����ϳ� �ٸ� �����
�����Ѵ�.


�������

. data dir ����
  /var/lib/apachebw/{link,master}

. ���� ����
  link,master ���丮�� ��Ű���� ������ ���� �ʾ� ���� �۵����� ���ϴ� ����
  ����


Autoupdates ���� : Packages System
  pkgadd -F apache-bandwidth


update ��Ű��

  RPMS :

    . apache-bandwidth-2.0.6-3.i686.rpm

  SRPMS :

    . apache-bandwidth-2.0.6-3.src.rpm


���� :

imap ��Ʈ

�� — Sun, 18 Feb 2007 03:20:08 +0900

imap ��Ʈ


�󼼳���

imap package �� pop3 �� imap daemon �� �����ϰ� �ִ�.

�������

. 2006e �� ������Ʈ

. imap, imaps, ipop3, pop3s �� xinetd ���� ���� ������ imap-init-@servicename@
  ���� �и���


Autoupdates ���� : Packages System
  pkgadd -F imap*
  pkgadd -u imap-init-imap2 (if use port 143)
  pkgadd -u imap-init-pop3  (if use port 110)
  pkgadd -u imap-init-imaps (is use port 993)
  pkgadd -u imap-init-pop3s (is use port 995)

  * ������Ʈ �Ŀ�, ������ �ȵ� ���, service xinetd reload ������ ������
    �ֽʽÿ�.

update ��Ű��

  RPMS :

    . imap-2006e-1.i686.rpm
    . imap-devel-2006e-1.i686.rpm
    . imap-init-imap2-1.0.0-1.i686.rpm
    . imap-init-imaps-1.0.0-1.i686.rpm
    . imap-init-pop3-1.0.0-1.i686.rpm
    . imap-init-pop3s-1.0.0-1.i686.rpm

  SRPMS :

    . imap-2006e-1.src.rpm
    . imap-init-1.0.0-1.src.rpm

���� :

php 4.x �� Ʈ

�� — Sun, 18 Feb 2007 02:58:53 +0900

php 4.x �� Ʈ


�󼼳���

���� �ǰ����� �ȳ� 1.x ���� ���ǻ� php 5.x �� ������Ʈ�� ���� ���Ͻ� �е���
���� ��Ű�� �Դϴ�. php 4.x �� ����Ͻô� �е��� �Ʒ��� �ǰ��ȿ� ���� ����
�������� ������Ʈ�� �Ͻñ� �ٶ��ϴ�.

4.x �� ����Ͻô� �е��� �ݵ�� ������Ʈ�� �ؾ� �ϸ�, 4.4.4 ������ ���ȹ���
�Ƚ��� 4.4.5-1 �� ���׸� �Ƚ��� �����Դϴ�.

** ���� **
  1. �ȳ��� php 4.4.4 ���ʹ� php-gdbm �� php-dba �� ������ �Ǿ����ϴ�.
     php-gdbm extension �� ����ϼ̴ٸ�, php-gdbm �� ���� �Ͻð� php-dba ��
     ��ġ�ϼž� �մϴ�.

  2. php-mbstring �� php core package �� ������ �Ǿ����ϴ�. php-mbstring ��
     ��ġ�� �Ǿ� �ִٸ� ���� �ϼž� �մϴ�.

  3. php-socket extension �� php-sockets �� ������ �Ǿ����ϴ�. php-socket��
     ���� �Ͻ� �� php-sockets �� ��ġ �ϼž� �մϴ�.

* php 4.4.5 fix issue

 + Fixed possible safe_mode & open_basedir bypasses inside the session extension.
 + Fixed unserialize() abuse on 64 bit systems with certain input strings.
 + Fixed possible overflows and stack corruptions in the session extension.
 + Fixed an underflow inside the internal sapi_header_op() function.
 + Fixed non-validated resource destruction inside the shmop extension.
 + Fixed a possible overflow in the str_replace() function.
 + Fixed possible clobbering of super-globals in several code paths.
 + Fixed a possible information disclosure inside the wddx extension.
 + Fixed a possible string format vulnerability in *print() functions on 64 bit systems.
 + Fixed a possible buffer overflow inside ibase_{delete,add,modify}_user() functions.
 + Fixed a string format vulnerability inside the odbc_result_all() function.
 + Fixed possible overflows inside zip & imap extensions.
 + Fixed a possible buffer overflow inside mail() function on Windows.
 + Unbundled the ovrimos extension.


Autoupdates ���� : ���� ����
  ������ ������ �̿��Ͽ� ������Ʈ

  # PKGHOME �� http://annyung.oops.org/?m=data&p=download ���� ���� ����� �̷�
  # ������ ���� �ϵ��� �մϴ�. (nslookup mirror.xx.oops.org ������ �̿��Ͽ� IP ��
  # ��� �մϴ�.)

  export PKGHOME=10.0.0.xxx
  rpm -Uhv ftp://${PKGHOME}/pub/AnNyung/1.0/Packages/old/php-binary-4.4.5-1.i686.rpm
  rpm -Uhv ftp://${PKGHOME}/pub/AnNyung/1.0/Packages/old/php-devel-4.4.5-1.i686.rpm
  rpm -Uhv ftp://${PKGHOME}/pub/AnNyung/1.0/i686/OOPS/RPMS/php-pear-1.4.6-1.noarch.rpm

  pkgadd -F php-20:4.4.5-1-i686
  pkgadd -F php-bcmath-20:4.4.5-1-i686
  pkgadd -F php-bz2-20:4.4.5-1.i686.rpm
  pkgadd -F php-calendar-20:4.4.5-1.i686.rpm
  pkgadd -F php-curl-20:4.4.5-1-i686
  pkgadd -F php-dba-20:4.4.5-1-i686
  pkgadd -F php-eaccelerator-20:4.4.5-1-i686
  pkgadd -F php-exif-20:4.4.5-1-i686
  pkgadd -F php-ftp-20:4.4.5-1-i686
  pkgadd -F php-gd-20:4.4.5-1-i686
  pkgadd -F php-geoip-20:4.4.5-1-i686
  pkgadd -F php-gettext-20:4.4.5-1-i686
  pkgadd -F php-iconv-20:4.4.5-1-i686
  pkgadd -F php-imap-20:4.4.5-1-i686
  pkgadd -F php-korean-20:4.4.5-1-i686
  pkgadd -F php-mcrypt-20:4.4.5-1-i686
  pkgadd -F php-memcache-20:4.4.5-1-i686
  pkgadd -F php-mhash-20:4.4.5-1-i686
  pkgadd -F php-mssql-20:4.4.5-1-i686
  pkgadd -F php-mysql-20:4.4.5-1-i686
  pkgadd -F php-openssl-20:4.4.5-1-i686
  pkgadd -F php-pgsql-20:4.4.5-1-i686
  pkgadd -F php-rrd-20:4.4.5-1-i686
  pkgadd -F php-sockets-20:4.4.5-1-i686
  pkgadd -F php-sqlite-20:4.4.5-1-i686
  pkgadd -F php-zlib-20:4.4.5-1-i686


update ��Ű��

  RPMS :

    + PHP4
    . php-binary-4.4.5-1.i686.rpm
    . php-devel-4.4.5-1.i686.rpm
    . php-pear-1.4.6-1.i686.rpm

    . php-4.4.5-1.i686.rpm
    . php-bcmath-4.4.5-1.i686.rpm
    . php-bz2-4.4.5-1.i686.rpm
    . php-calendar-4.4.5-1.i686.rpm
    . php-curl-4.4.5-1.i686.rpm
    . php-dba-4.4.5-1.i686.rpm
    . php-eaccelerator-4.4.5-1.i686.rpm
    . php-exif-4.4.5-1.i686.rpm
    . php-ftp-4.4.5-1.i686.rpm
    . php-gd-4.4.5-1.i686.rpm
    . php-geoip-4.4.5-1.i686.rpm
    . php-gettext-4.4.5-1.i686.rpm
    . php-iconv-4.4.5-1.i686.rpm
    . php-imap-4.4.5-1.i686.rpm
    . php-korean-4.4.5-1.i686.rpm
    . php-mcrypt-4.4.5-1.i686.rpm
    . php-memcache-4.4.5-1.i686.rpm
    . php-mhash-4.4.5-1.i686.rpm
    . php-mssql-4.4.5-1.i686.rpm
    . php-mysql-4.4.5-1.i686.rpm
    . php-openssl-4.4.5-1.i686.rpm
    . php-pgsql-4.4.5-1.i686.rpm
    . php-rrd-4.4.5-1.i686.rpm
    . php-sockets-4.4.5-1.i686.rpm
    . php-sqlite-4.4.5-1.i686.rpm
    . php-zlib-4.4.5-1.i686.rpm

  SRPMS :

    . php-4.4.5-1.src.rpm
    . php-extension-4.4.5-1.src.rpm


���� :
http://kr.php.net/releases/4_4_5.php

ebtables ��Ʈ

�� — Sun, 18 Feb 2007 02:57:01 +0900

ebtables ��Ʈ


�󼼳���

2.0.8rc3 update

Autoupdates ���� : ����


update ��Ű��

  RPMS :

    . ebtables-2.0.8-2.i686.rpm

  SRPMS :

    . ebtables-2.0.8-2.src.rpm


���� :

iptables ��Ʈ

�� — Sun, 18 Feb 2007 02:52:30 +0900

iptables ��Ʈ


�󼼳���

1.3.7 ������Ʈ

Autoupdates ���� : ����
  iptables-ipv6 / iptables-devel �� Packages System ���� ���� �մϴ�.
  pkgadm -[U|F] iptables-ipv6 iptables-devel


update ��Ű��

  RPMS :

    . iptables-1.3.7-1.i686.rpm
    . iptables-devel-1.3.7-1.i686.rpm
    . iptables-ipv6-1.3.7-1.i686.rpm

  SRPMS :

    . iptables-1.3.7-1.src.rpm


���� :

XFree86 �� Ʈ

�� — Fri, 12 Jan 2007 15:53:00 +0900

XFree86 �� Ʈ


�󼼳���

CVE-2006-6101 :
Integer overflow in the ProcRenderAddGlyphs function in the Render extension
for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users
to execute arbitrary code via a crafted X protocol request that triggers memory
corruption during processing of glyph management data structures.

CVE-2006-6102 :
Integer overflow in the ProcDbeGetVisualInfo function in the DBE extension for
X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to
execute arbitrary code via a crafted X protocol request that triggers memory
corruption during processing of unspecified data structures.

CVE-2006-6103 :
Integer overflow in the ProcDbeSwapBuffers function in the DBE extension for
X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to
execute arbitrary code via a crafted X protocol request that triggers memory
corruption during processing of unspecified data structures.


Autoupdates ���� : ����


update ��Ű��

  RPMS :

    . XFree86-libs-4.1.0-78.i686.rpm
    . XFree86-devel-4.1.0-78.i686.rpm
    . XFree86-4.1.0-78.i686.rpm
    . XFree86-xfs-4.1.0-78.i686.rpm

  SRPMS :

    . XFree86-4.1.0-78.src.rpm


���� :
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6101
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6102
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6103

clamav ��Ʈ

�� — Wed, 10 Jan 2007 16:07:13 +0900

clamav ��Ʈ


�󼼳���

clamav �� sendmail milter �� �۵��ϴ� anti virus ���� �̴�.

0.88.6 expired
0.88.7 update



Autoupdates ���� : Pakcages System �̿�
  pkgadd -F clamav*
  service sendmail restart
  service clamd restart
  killall -9 freshclam
  service freshclam start


update ��Ű��

  RPMS :

    . clamav-0.88.7-1.i686.rpm
    . clamav-devel-0.88.7-1.i686.rpm
    . clamav-milter-0.88.7-1.i686.rpm


  SRPMS :

    . clamav-0.88.7-1.src.rpm


���� :

AnNyung 1.2 Update Notice

1.2 ������Ʈ ����

mysql ������Ʈ

kernel ���� ������Ʈ

postgresql ���� ������Ʈ

php ���� ������Ʈ

bind ���� ������Ʈ

clamav ������Ʈ

clamav ������Ʈ

sendmail ������Ʈ

imap ������Ʈ

iptables ������Ʈ

gnupg ���� ������Ʈ

php 4.x ������Ʈ

apache-bandwidth ������Ʈ

imap ������Ʈ

php 4.x ���� ������Ʈ

ebtables ������Ʈ

iptables ������Ʈ

XFree86 ���� ������Ʈ

clamav ������Ʈ

1.2 ��Ʈ ��

mysql ��Ʈ

kernel �� Ʈ

postgresql �� Ʈ

php �� Ʈ

bind �� Ʈ

clamav ��Ʈ

clamav ��Ʈ

sendmail ��Ʈ

imap ��Ʈ

iptables ��Ʈ

gnupg �� Ʈ

php 4.x ��Ʈ

apache-bandwidth ��Ʈ

imap ��Ʈ

php 4.x �� Ʈ

ebtables ��Ʈ

iptables ��Ʈ

XFree86 �� Ʈ

clamav ��Ʈ