Debian 6.0.2

De tweede update van versie 6.0 van Debian is uitgekomen. Debian is een opensource-besturingssysteem, dat zowel voor desktops als servers gebruikt kan worden en waarbij de nadruk op stabiliteit en veiligheid ligt. Het wordt dan ook als basis voor diverse Linux-distributies gebruikt. In versie 6.0, die als codenaam 'Squeeze' meegekregen heeft, zien we voor het eerst ook een GNU/kFreeBSD-uitvoering. In deze update treffen we geen grote veranderingen aan; wel zijn er diverse verbeteringen aan bestaande onderdelen doorgevoerd.

Updated Debian 6.0: 6.0.2 released

The Debian project is pleased to announce the second update of its stable distribution Debian 6.0 (codename "squeeze"). This update mainly adds corrections for security problems to the stable release, along with a few adjustments to serious problems. Security advisories were already published separately and are referenced where available.

Please note that this update does not constitute a new version of Debian 6.0 but only updates some of the packages included. There is no need to throw away 6.0 CDs or DVDs but only to update via an up-to-date Debian mirror after an installation, to cause any out of date packages to be updated.

Those who frequently install updates from security.debian.org won't have to update many packages and most updates from security.debian.org are included in this update.

New installation media and CD and DVD images containing updated packages will be available soon at the regular locations.

Upgrading to this revision online is usually done by pointing the aptitude (or apt) package tool (see the sources.list(5) manual page) to one of Debian's many FTP or HTTP mirrors. A comprehensive list of mirrors is available here.

Miscellaneous Bugfixes

This stable update adds a few important corrections to the following packages:

Package	Reason
aide	Properly support large files on 32-bit systems; fix group for bind9 log files
approx	Don't try caching InRelease or non-.gz compressed files
apr	Fix apr_ino_t changing size depending on -D_FILE_OFFSET_BITS on kfreebsd-*
apt	Fix file size calculation on big-endian arches; don't prompt for CD re-insertion on apt-get
apt-listchanges	Correctly handle NEWS files containing only one entry
base-files	Update /etc/debian_version
clive	Adapt for liveleak.com changes
dbus	Fix local DoS for system services (CVE-2011-2200)
deborphan	Exclude libreoffice from --guess-section output; trap WINCH in a POSIX way; minor translation fixes
dokuwiki	Fix an ACL bypass issue in the XMLRPC interface
dpkg	Fix regression in 'dpkg-divert --rename'; dpkg-split: don't corrupt metadata on 32-bit systems; fix vsnprintf() compat declaration
e2fsprogs	Various bug fixes
fakechroot	Fix 'debootstrap --variant=fakechroot'
fcgiwrap	Fix init script's 'stop' target
gdm3	Reset SIGPIPE handler before starting the session; execute the PostSession script even when GDM is killed or shut down
git	Allow remove and purge in one step by terminating the git-daemon/log service before removing the gitlog user
gnome-settings-daemon	Work around possible race condition when starting Xsettings manager
ia32-libs	Refresh packages from stable and proposed-updates.
iceowl	Security updates
im-config	Avoid breaking login via GDM if im-config is removed but not purged
inn	Stop using 'sort +1n' in makehistory; disable outdated CHECK_INCLUDED_TEXT option by default
josm	Give more verbose explanation to users who haven't agreed to the new OSM license
kde4libs	Wildcard SSL certificate and XSS security fixes; ktar checksum and UTF-8 longlink fixes
kdenetwork	Improve fix for CVE-2010-1000 directory traversal issue
kernel-wedge	Add hpsa and pm8001 to scsi-extra-modules; add bna to nic-extra-modules
kerneltop	Increase line buffer size to 1024 bytes
klibc	ipconfig: escape DHCP options and correctly handle multiple connected network devices (CVE-2011-1930)
krb5	Fix DoS; fix interoperability with w2k8r2 KDCs; fix invalid free and double free; don't make authentication fail if PAC verification fails
kupfer	Use correct parameter type to allow keybindings to work again
libapache2-mod-perl2	Rebuild against apr 1.4.2-6+squeeze3 to pick up apr_ino_t size fix on kFreeBSD
libburn	Don't create images with overly-restrictive permissions
libfinance-quotehist-perl	Disable test suite, broken by website changes
libmms	Fix alignment issues on arm
linux-2.6	New hardware support; add longterm 2.6.32.41; fix oops via corrupted partition tables
linux-kernel-di-amd64-2.6	Rebuild against kernel-wedge 2.74+squeeze3
linux-kernel-di-armel-2.6	Rebuild against kernel-wedge 2.74+squeeze3
linux-kernel-di-i386-2.6	Rebuild against kernel-wedge 2.74+squeeze3
linux-kernel-di-ia64-2.6	Rebuild against kernel-wedge 2.74+squeeze3
linux-kernel-di-mips-2.6	Rebuild against kernel-wedge 2.74+squeeze3
linux-kernel-di-mipsel-2.6	Rebuild against kernel-wedge 2.74+squeeze3
linux-kernel-di-powerpc-2.6	Rebuild against kernel-wedge 2.74+squeeze3
linux-kernel-di-s390-2.6	Rebuild against kernel-wedge 2.74+squeeze3
linux-kernel-di-sparc-2.6	Rebuild against kernel-wedge 2.74+squeeze3
lua-expat	Fix the 'billion laughs' DoS attack
monkeysphere	Fix monkeysphere-host revoke-key
nagios-plugins	Allocate a big enough buffer to handle all IPs of hosts being pinged
nsd3	Remove statoverride before removing the package's user
openldap	Fix possible database corruption issues, several security issues and dpkg-reconfigure
php-svn	Rebuild against apr 1.4.2-6+squeeze3 to pick up apr_ino_t size fix on kFreeBSD
php5	Rebuild against apr 1.4.2-6+squeeze3 to pick up apr_ino_t size fix on kFreeBSD
pianobar	Update API keys for XMLRPC v30
postgresql-8.4	New upstream bugfix release; fix pg_upgrade use with TOAST tables
prosody	Fix the 'billion laughs' DoS attack
puppet	Fix service provider to properly use update-rc.d disable API
python-apt	Strip multiarch by default in RealParseDepends; add XZ support
python-gudev	Add missing dependency on python-gobject
q4wine	Stop shipping the library in lib64
qemu	Don't register qemu-mips(el) with binfmt on mips(el)
qemu-kvm	Fix division by 0 with some guests; fix vnc zlib overflow; don't abort on user hardware errors; fix migration on 32-bit
qt4-x11	Blacklist some fraudulent SSL certificates; fix weakness in wildcard certificate verification
rapidsvn	Rebuild against apr 1.4.2-6+squeeze3 to pick up apr_ino_t size fix on kFreeBSD
refpolicy	Various permissions fixes
reprepro	Handle Release files which don't contain md5sums
ruby1.8	Fix upgrades from lenny by making libruby1.8 conflict/replace irb1.8 and rdoc1.8
samba	Fix undefined symbol error from tdb2.so; several printing related bugs and a gid leak in winbind / idmap. Document the new and potentially disruptive 'map untrusted to domain'
schroot	Fix loading of dchroot.conf
softhsm	Remove statoverride entries before the package's user
sun-java6	New upstream security update
tzdata	New upstream version
vimperator	Resolve compatibility issues with iceweasel
widelands	Fix potential security issue in Internet games
xenomai	Adapt kernel patch to apply cleanly to squeeze's kernel
xserver-xorg-video-tseng	Fix driver initialisation