Subject: [yellowdog-updates] Yellow Dog Linux Security Advisory: YDU-20010809-1
dburcaw@newhope.terraplex.com
Date: Thu Aug 09 2001 - 21:15:55 MDT
Yellow Dog Linux Bugfix Announcement
------------------------------------
Package: yaboot/ybin
Issue Date: August 09, 2001
Priority: high
Advisory ID: YDU-20010809-1
1. Topic:
Updated yaboot packages are available.
which fix a harmful problem. New ybin
packages are also available
2. Problem:
All versions of yaboot older then 1.2.3 could
cause issues with the Linux kernel's memory
mapping functionality. Users of yaboot are
urged to upgrade to 1.2.3 immediately.
Updated ybin packages are also available via
this advisory. While ybin is not the cause
of the above problem, we do recommend the use
of ybin 1.2.4 as it fixes bugs and adds useful
features not found in YDL 2's shipping version.
Please see the ybin man page for information
on what has changed.
3. Solution:
a) Updating via yup...
We suggest that you use the Yellow Dog Update Program (yup)
to keep your system up-to-date. The following command(s) will
automatically retrieve and install the fixed version of
this update onto your system:
yup update yaboot
yup update ybin
b) Updating manually...
The update can also be retrieved manually from our ftp site
below along with the rpm command that should be used to install
the update. (Please use a mirror site)
ftp://ftp.yellowdoglinux.com/pub/yellowdog/updates/yellowdog-2.0/ppc/RPMS/
rpm -Fvh yaboot-1.2.3-1.ppc.rpm
rpm -Fvh ybin-1.2.4-2.ppc.rpm
IMPORTANT NOTE:
Please be sure to re-run /usr/sbin/ybin
in order for the new yaboot to be copied
to your bootloader partition properly
4. Verification
MD5 checksum Package
-------------------------------- ----------------------------
6ff946a44ef579d5ff3ac3827a0a5897 SRPMS/yaboot-1.2.3-1.src.rpm
8b70cfdaa6184a58a6c658fe80271c3a SRPMS/ybin-1.2.4-2.src.rpm
2555d77c71a9c4b9cb41e5e0e4a58542 ppc/RPMS/yaboot-1.2.3-1.ppc.rpm
8322d58efddfb4cd74c7d722d514c7bd ppc/RPMS/ybin-1.2.4-2.ppc.rpm
If you wish to verify that each package has not been corrupted or tampered with,
examine the md5sum with the following command: rpm --checksig --nogpg filename
5. Misc.
Terra Soft has setup a moderated mailing list where these security, bugfix, and package
enhancement announcements will be posted. See http://lists.yellowdoglinux.com/ for more
information.
For information regarding the usage of yup, the Yellow Dog Update Program, see
http://devel.yellowdoglinux.com/rp_yup.shtml
This archive was generated by hypermail 2a24 : Thu Aug 09 2001 - 21:19:13 MDT