Bonsoir, Ci-joint à traduire les annonces de mise à jour de Lenny.
Avis aux amateurs ! (Mais inspirez-vous fortement des précédentes traductions similaires, il y a généralement très peu à changer :-) -- Simon Paillard
<define-tag pagetitle>Debian GNU/Linux 5.0 updated</define-tag> <define-tag release_date>2009-04-11</define-tag> #use wml::debian::news # $Id: 20090411.wml,v 1.3 2009-05-14 19:24:25 kreutzm Exp $ <define-tag release>5.0</define-tag> <define-tag codename>lenny</define-tag> <define-tag revision>5.0.1</define-tag> <define-tag dsa> <tr><td align="center"><a href="$(HOME)/security/%0/dsa-%1">DSA-%1</a></td> <td align="center"><: my @p = (); for my $p (split (/,\s*/, "%2")) { push (@p, sprintf ('<a href="http://packages.debian.org/src:%s">%s</a>', $p, $p)); } print join (", ", @p); :></td><td align="left">%3</td></tr> </define-tag> <define-tag correction> <tr><td><a href="http://packages.debian.org/src:%0">%0</a></td> <td>%1</td></tr> </define-tag> <define-tag srcpkg><a href="http://packages.debian.org/src:%0">%0</a></define-tag> <p>The Debian project is pleased to announce the first update of its stable distribution Debian GNU/Linux <release> (codename <codename>). This update mainly adds corrections for security problems to the stable release, along with a few adjustment to serious problems.</p> <p>Please note that this update does not constitute a new version of Debian GNU/Linux <release> but only updates some of the packages included. There is no need to throw away <release> CDs or DVDs but only to update via an up-to-date Debian mirror after an installation, to cause any out of date packages to be updated.</p> <p>Those who frequently install updates from security.debian.org won't have to update many packages and most updates from security.debian.org are included in this update.</p> <p>New CD and DVD images containing updated packages and the regular installation media accompanied with the package archive respectively will be available soon at the regular locations.</p> <p>Upgrading to this revision online is usually done by pointing the aptitude (or apt) package tool (see the sources.list(5) manual page) to one of Debian's many FTP or HTTP mirrors. A comprehensive list of mirrors is available at:</p> <div class="center"> <a href="$(HOME)/mirror/list">http://www.debian.org/mirror/list</a> </div> <h2>Miscellaneous Bugfixes</h2> <p>This stable update adds a few important corrections to the following packages:</p> <table border=0> <tr><th>Package</th> <th>Reason</th></tr> <Correction barnowl "Fix for CVE-2009-0363 (through testing-security)"> <Correction base-files "Fix a typo to remove <q>base</q> correctly"> <Correction bind9 "Fix atomic operations on alpha and ia64"> <Correction brltty "Upload with fixed version number"> <Correction consolekit "Various fixes"> <Correction fai "Fix typo which prevents perl scripts to work"> <Correction firmware-nonfree "Kernel ABI change"> <Correction flpsed "Fix dependency on ghostscript-x"> <Correction gdm "Fix a double free"> <Correction gthumb "Fix copying loop"> <Correction gtick "Add dependency on oss-compat"> <Correction gtk+2.0 "Fix infinite loop caused by setting color scheme"> <Correction gtkguitune "Add dependency on oss-compat"> <Correction heartbeat "Fix failover and message corruption"> <Correction imagemagick "Replace non-free fonts"> <Correction irqbalance "Do not crash on bogus /proc/irq entries"> <Correction kvm "Fix hang on reboot with virtio"> <Correction libbz2-ruby [armel] "Rebuild to put modules in arm-linux instead of arm-linux-eabi"> <Correction libcgi-application-plugins-perl "Fix information leak"> <Correction libeb-ruby [armel] "Rebuild to put modules in arm-linux instead of arm-linux-eabi"> <Correction libfilesystem-ruby [armel] "Rebuild to put modules in arm-linux instead of arm-linux-eabi"> <Correction libfusefs-ruby [armel] "Rebuild to put modules in arm-linux instead of arm-linux-eabi"> <Correction libkakasi-ruby [armel] "Rebuild to put modules in arm-linux instead of arm-linux-eabi"> <Correction libodbc-ruby [armel] "Rebuild to put modules in arm-linux instead of arm-linux-eabi"> <Correction libopengl-ruby [armel] "Rebuild to put modules in arm-linux instead of arm-linux-eabi"> <Correction librevolution-ruby [armel] "Rebuild to put modules in arm-linux instead of arm-linux-eabi"> <Correction libvorbisfile-ruby [armel] "Rebuild to put modules in arm-linux instead of arm-linux-eabi"> <Correction libwrap-ruby [armel] "Rebuild to put modules in arm-linux instead of arm-linux-eabi"> <Correction linux-2.6 "Several issues"> <Correction linux-kernel-di-alpha-2.6 "New kernel for debian-installer"> <Correction linux-kernel-di-amd64-2.6 "New kernel for debian-installer"> <Correction linux-kernel-di-arm-2.6 "Add minix-modules to orion5x kernel flavour"> <Correction linux-kernel-di-armel-2.6 "New kernel for debian-installer"> <Correction linux-kernel-di-hppa-2.6 "New kernel for debian-installer"> <Correction linux-kernel-di-i386-2.6 "New kernel for debian-installer"> <Correction linux-kernel-di-ia64-2.6 "New kernel for debian-installer"> <Correction linux-kernel-di-mips-2.6 "New kernel for debian-installer"> <Correction linux-kernel-di-mipsel-2.6 "New kernel for debian-installer"> <Correction linux-kernel-di-powerpc-2.6 "New kernel for debian-installer"> <Correction linux-kernel-di-s390-2.6 "New kernel for debian-installer"> <Correction linux-kernel-di-sparc-2.6 "New kernel for debian-installer"> <Correction linux-latest-2.6 "Kernel ABI change"> <Correction linux-modules-contrib-2.6 "Rebuild for kernel ABI change"> <Correction linux-modules-di-alpha-2.6 "New kernel modules for debian-installer"> <Correction linux-modules-di-amd64-2.6 "New kernel modules for debian-installer"> <Correction linux-modules-di-arm-2.6 "New kernel modules for debian-installer"> <Correction linux-modules-di-armel-2.6 "New kernel modules for debian-installer"> <Correction linux-modules-di-hppa-2.6 "New kernel modules for debian-installer"> <Correction linux-modules-di-i386-2.6 "New kernel modules for debian-installer"> <Correction linux-modules-di-ia64-2.6 "New kernel modules for debian-installer"> <Correction linux-modules-di-mips-2.6 "New kernel modules for debian-installer"> <Correction linux-modules-di-mipsel-2.6 "New kernel modules for debian-installer"> <Correction linux-modules-di-powerpc-2.6 "New kernel modules for debian-installer"> <Correction linux-modules-di-s390-2.6 "New kernel modules for debian-installer"> <Correction linux-modules-di-sparc-2.6 "New kernel modules for debian-installer"> <Correction linux-modules-extra-2.6 "Rebuild for kernel ABI change"> <Correction linux-modules-nonfree-2.6 "Rebuild for kernel ABI change"> <Correction live-initramfs "Fix media timeout, boot and shutdown issues"> <Correction lvm2 "Fix lvm on multipath in initrd"> <Correction mediawiki "Fix XSS vulnerabilities"> <Correction mp3gain [i386] "Rebuild in a clean environment"> <Correction mt-daapd "Fix crasher in built-in webserver"> <Correction munin "Fix cgi mode"> <Correction nvidia-graphics-legacy-96xx-modules-amd64 "Rebuild for kernel ABI change"> <Correction nvidia-graphics-legacy-96xx-modules-i386 "Rebuild for kernel ABI change"> <Correction nvidia-graphics-modules-amd64 "Rebuild for kernel ABI change"> <Correction nvidia-graphics-modules-i386 "Rebuild for kernel ABI change"> <Correction oldsys-preseed "Add support for the D-Link DNS-323"> <Correction open-vm-tools "Fix builds with other kernels than the running one"> <Correction openoffice.org "Repacked source to remove RFC text file, various bug fixes"> <Correction optipng "Fix array overflow vulnerability"> <Correction pam "Fix signedness error in _pam_StrTok"> <Correction pcapy "Fix memory leak and capturing on lo"> <Correction pidgin "Fix failure while connecting to ICQ servers due to protocol changes"> <Correction pidgin-otr "Provide translation"> <Correction posixlock [armel] "Rebuild to put modules in arm-linux instead of arm-linux-eabi"> <Correction postgresql-8.3 "New upstream bugfix release"> <Correction pyusb "Fix module for python2.5 on 64 bit arch"> <Correction qwik [armel] "Rebuild to put modules in arm-linux instead of arm-linux-eabi"> <Correction root-system "Add libsm-dev as Build-Dependency"> <Correction roundup "Fix several vulnerabilities"> <Correction ruby-v4l [armel] "Rebuild to put modules in arm-linux instead of arm-linux-eabi"> <Correction samba "Fix two bugs of severity important"> <Correction sary-ruby [armel] "Rebuild to put modules in arm-linux instead of arm-linux-eabi"> <Correction sbnc "Fix sbnc.key file location"> <Correction schroot "Build with pthreads explicitly to fix a crash on alpha"> <Correction smartmontools "Fix target not checking for running daemon"> <Correction snort "Fix possible segfault"> <Correction texlive-extra "Blacklist aurora, non-commercial license"> <Correction toolame "Portability fixes"> <Correction user-mode-linux "Rebuild against updated linux-source"> <Correction xorg-server "Work around broken PCI on sparc in lenny's kernel"> <Correction xserver-xorg-video-savage "Do not add panel modes when there is no panel"> </table> <h2>New version of debian-installer</h2> <p>debian-installer was updated to incorporate the updated Linux kernel (DSA-1749), to add support for the D-Link DNS-323 (a NAS device) and to incorporate new archive keys.</p> <h2>Security Updates</h2> <p>This revision adds the following security updates to the stable release. The Security Team has already released an advisory for each of these updates:</p> <table border=0> <tr><th>Advisory ID</th> <th>Package</th> <th>Correction(s)</th></tr> <dsa 2009 1719 gnutls26 "Certificate validation"> <dsa 2009 1725 websvn "Information leak"> <dsa 2009 1726 python-crypto "Denial of service"> <dsa 2009 1728 dkim-milter "Denial of service"> <dsa 2009 1730 proftpd-dfsg "SQL injection vulnerabilities"> <dsa 2009 1734 opensc "Information disclosure"> <dsa 2009 1735 znc "Privilege escalation"> <dsa 2009 1736 mahara "Cross-site scripting"> <dsa 2009 1737 wesnoth "Several vulnerabilities"> <dsa 2009 1738 curl "Arbitrary file access"> <dsa 2009 1739 mldonkey "Double slash vulnerability"> <dsa 2009 1740 yaws "Denial of service"> <dsa 2009 1741 psi "Denial of service"> <dsa 2009 1742 libsndfile "Arbitrary code execution"> <dsa 2009 1743 libtk-img "Arbitrary code execution"> <dsa 2009 1744 weechat "Denial of service"> <dsa 2009 1745 lcms "Arbitrary code execution"> <dsa 2009 1746 ghostscript "Arbitrary code execution"> <dsa 2009 1747 glib2.0 "Arbitrary code execution"> <dsa 2009 1749 linux-2.6 "Several issues"> <dsa 2009 1750 libpng "Several vulnerabilities"> <dsa 2009 1751 xulrunner "Several vulnerabilities"> <dsa 2009 1752 webcit "Potential remote code execution"> <dsa 2009 1755 systemtap "Local privilege escalation"> <dsa 2009 1756 xulrunner "Multiple vulnerabilities"> <dsa 2009 1757 auth2db "SQL injection"> <dsa 2009 1758 nss-ldapd "Information disclosure"> <dsa 2009 1759 strongswan "Possible denial of service"> <dsa 2009 1760 openswan "Possible denial of service"> </table> <h2>URLs</h2> <p>The complete lists of packages that have changed with this release:</p> <div class="center"> <url "http://ftp.debian.org/debian/dists/<downcase <codename>>/ChangeLog"> </div> <p>The current stable distribution:</p> <div class="center"> <url "http://ftp.debian.org/debian/dists/stable/"> </div> <p>Proposed updates to the stable distribution:</p> <div class="center"> <url "http://ftp.debian.org/debian/dists/proposed-updates/"> </div> <p>Stable distribution information (release notes, errata, etc.):</p> <div class="center"> <a href="$(HOME)/releases/stable/">http://www.debian.org/releases/stable/</a> </div> <p>Security announcements and information:</p> <div class="center"> <a href="$(HOME)/security/">http://security.debian.org/</a> </div> <h2>About Debian</h2> <p>The Debian Project is an association of Free Software developers who volunteer their time and effort in order to produce the completely free operating systems Debian GNU/Linux.</p> <h2>Contact Information</h2> <p>For further information, please visit the Debian web pages at <a href="$(HOME)/">http://www.debian.org/</a>, send mail to <pr...@debian.org>, or contact the stable release team at <debian-rele...@lists.debian.org>.</p>
<define-tag pagetitle>Debian GNU/Linux 5.0 updated</define-tag> <define-tag release_date>2009-06-27</define-tag> #use wml::debian::news # $Id: 20090627.wml,v 1.2 2009-07-01 17:49:26 kreutzm Exp $ <define-tag release>5.0</define-tag> <define-tag codename>lenny</define-tag> <define-tag revision>5.0.2</define-tag> <define-tag dsa> <tr><td align="center"><a href="$(HOME)/security/%0/dsa-%1">DSA-%1</a></td> <td align="center"><: my @p = (); for my $p (split (/,\s*/, "%2")) { push (@p, sprintf ('<a href="http://packages.debian.org/src:%s">%s</a>', $p, $p)); } print join (", ", @p); :></td><td align="left">%3</td></tr> </define-tag> <define-tag correction> <tr><td><a href="http://packages.debian.org/src:%0">%0</a></td> <td>%1</td></tr> </define-tag> <define-tag srcpkg><a href="http://packages.debian.org/src:%0">%0</a></define-tag> <p>The Debian project is pleased to announce the second update of its stable distribution Debian GNU/Linux <release> (codename <q><codename></q>). This update mainly adds corrections for security problems to the stable release, along with a few adjustment to serious problems.</p> <p>Please note that this update does not constitute a new version of Debian GNU/Linux <release> but only updates some of the packages included. There is no need to throw away <release> CDs or DVDs but only to update via an up-to- date Debian mirror after an installation, to cause any out of date packages to be updated.</p> <p>Those who frequently install updates from security.debian.org won't have to update many packages and most updates from security.debian.org are included in this update.</p> <p>New CD and DVD images containing updated packages and the regular installation media accompanied with the package archive respectively will be available soon at the regular locations.</p> <p>Upgrading to this revision online is usually done by pointing the aptitude (or apt) package tool (see the sources.list(5) manual page) to one of Debian's many FTP or HTTP mirrors. A comprehensive list of mirrors is available at:</p> <div class="center"> <a href="$(HOME)/mirror/list">http://www.debian.org/mirror/list</a> </div> <h2>Miscellaneous Bugfixes</h2> <p>This stable update adds a few important corrections to the following packages:</p> <table border=0> <tr><th>Package</th> <th>Reason</th></tr> <correction apr-util "Fix information disclosure (<a href='http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1956'>CVE-2009-1956</a>)"> <correction asciidoc "Replace fop with dblatex"> <correction backuppc "Fix permissions of CGI script and ht* files"> <correction base-files "Bump version to 5.0.2"> <correction bind9 "Fix DNSSEC lookaside validation failed to handle unknown algorithms"> <correction cdebconf "Optimize screen usage in newt frontend"> <correction choose-mirror "Make preseeding of oldstable possible"> <correction glib2.0 "Fix crashes in gvfs"> <correction gnupg "Fix memory leak and cleanup terminal attributes on interrupt"> <correction hobbit "Create /var/run/hobbit if missing"> <correction installation-guide "New sections on accessibility support"> <correction iodine "Fix segfault when 5.x client connects"> <correction jd "Fix posting comments"> <correction kfreebsd-7 "Fix several vulnerabilities"> <correction libapache2-authcassimple-perl "Fix POST request handling"> <correction libaqbanking "Fix segfault in qt3-wizard"> <correction libnet-rawip-perl "Fix segmentation fault"> <correction libxcb "Fix important performance issues"> <correction linux-2.6 "Several fixes"> <correction linux-kernel-di-alpha-2.6 "Rebuild against latest kernel"> <correction linux-kernel-di-amd64-2.6 "Rebuild against latest kernel"> <correction linux-kernel-di-arm-2.6 "Rebuild against latest kernel"> <correction linux-kernel-di-armel-2.6 "Rebuild against latest kernel"> <correction linux-kernel-di-hppa-2.6 "Rebuild against latest kernel"> <correction linux-kernel-di-i386-2.6 "Rebuild against latest kernel"> <correction linux-kernel-di-ia64-2.6 "Rebuild against latest kernel"> <correction linux-kernel-di-mips-2.6 "Rebuild against latest kernel"> <correction linux-kernel-di-mipsel-2.6 "Rebuild against latest kernel"> <correction linux-kernel-di-powerpc-2.6 "Rebuild against latest kernel"> <correction linux-kernel-di-s390-2.6 "Rebuild against latest kernel"> <correction linux-kernel-di-sparc-2.6 "Rebuild against latest kernel"> <correction live-initramfs "Better support for persistent mode"> <correction live-magic "Fix handling of /etc/debian_version"> <correction mdadm "Fix stability issues"> <correction mt-daapd "Add musepack to transcoding list"> <correction nagios3 "Fix nagios3-common's prerm script"> <correction nss "Fix alignment issues on sparc and ia64"> <correction onak "Always open db read/write"> <correction pango1.0 "Fix arbitrary code execution"> <correction pidgin-otr "Sourceful upload with bumped version number to fix a collision with a binNMU"> <correction poppler "Fix several vulnerabilities"> <correction pygobject "Fix inconsistent use of tabs and spaces in indentation"> <correction samba "Fix memory leak, winbind crashes and Win200 SP4 joining issues"> <correction screen "Fix symlink attack"> <correction slime "Remove non-free xref.lisp"> <correction smstools "Fix modem timeouts"> <correction solr "Fix simultaneous installation of tomcat5.5 with solr-tomcat5.5"> <correction sound-juicer "Fix a crash on invocation of the preferences dialog"> <correction system-config-printer "New Romanian translation"> <correction system-tools-backends "Fix limiting effective password length to 8 characters (CVE-2008-6792) and handle new format of /etc/debian_version"> <correction tzdata "New timezone information"> <correction user-mode-linux "Several fixes"> <correction xorg "Default to fbdev driver on sparc"> <correction xorg-server "Fix wakeup storm in idletime xsync counter"> </table> <h2>New version of the debian-installer</h2> <p>The debian-installer has been updated to allow the installation of the previous stable release (Debian 4.0 <q>etch</q>) and to include an updated cdebconf package which resolves several issues with installation menu rendering using the newt frontend, including:</p> <ul> <li>explanatory text overlapping with the input box due to a height miscalculation</li> <li>overlapping of the <q>Go Back</q> button and the select list on certain screens</li> <li>suboptimal screen usage, particularly affecting debian-edu installations</li> </ul> <p>The installer has been rebuilt to use the updated kernel packages included in this point release, resolving issues with installation on s390 G5 systems and IBM summit-based i386 systems.</p> <h2>Security Updates</h2> <p>This revision adds the following security updates to the stable release. The Security Team has already released an advisory for each of these updates:</p> <table border=0> <tr><th>Advisory ID</th> <th>Package</th> <th>Correction(s)</th></tr> <dsa 2009 1761 moodle "File disclosure"> <dsa 2009 1762 icu "Cross-site scripting"> <dsa 2009 1763 openssl "Denial of service"> <dsa 2009 1764 tunapie "Several vulnerabilities"> <dsa 2009 1766 krb5 "Several vulnerabilities"> <dsa 2009 1767 multipath-tools "Denial of service"> <dsa 2009 1768 openafs "Potential code execution"> <dsa 2009 1771 clamav "Several vulnerabilities"> <dsa 2009 1772 udev "Critical privilege escalation"> <dsa 2009 1773 cups "Arbitrary code execution"> <dsa 2009 1774 ejabberd "Cross-site scripting"> <dsa 2009 1776 slurm-llnl "Privilege escalation"> <dsa 2009 1777 git-core "Privilege escalation"> <dsa 2009 1778 mahara "Cross-site scripting"> <dsa 2009 1779 apt "Several vulnerabilities"> <dsa 2009 1781 ffmpeg-debian "Arbitrary code execution"> <dsa 2009 1783 mysql-dfsg-5.0 "Several vulnerabilities"> <dsa 2009 1784 freetype "Arbitrary code execution"> <dsa 2009 1785 wireshark "Several vulnerabilities"> <dsa 2009 1786 acpid "Denial of service"> <dsa 2009 1788 quagga "Denial of service"> <dsa 2009 1789 php5 "Several vulnerabilities"> <dsa 2009 1790 xpdf "Multiple vulnerabilities"> <dsa 2009 1791 moin "Cross-site scripting"> <dsa 2009 1792 drupal6 "Multiple vulnerabilities"> <dsa 2009 1793 kdegraphics "Multiple vulnerabilities"> <dsa 2009 1795 ldns "Arbitrary code execution"> <dsa 2009 1797 xulrunner "Multiple vulnerabilities"> <dsa 2009 1798 pango1.0 "Arbitrary code execution"> <dsa 2009 1799 qemu "Several vulnerabilities"> <dsa 2009 1800 linux-2.6 "Several vulnerabilities"> <dsa 2009 1800 user-mode-linux "Several vulnerabilities"> <dsa 2009 1801 ntp "Several vulnerabilities"> <dsa 2009 1802 squirrelmail "Several vulnerabilities"> <dsa 2009 1803 nsd "Denial of service"> <dsa 2009 1803 nsd3 "Denial of service"> <dsa 2009 1804 ipsec-tools "Denial of service"> <dsa 2009 1805 pidgin "Several vulnerabilities"> <dsa 2009 1806 cscope "Arbitrary code execution"> <dsa 2009 1807 cyrus-sasl2 "Arbitrary code execution"> <dsa 2009 1807 cyrus-sasl2-heimdal "Arbitrary code execution"> <dsa 2009 1808 drupal6 "Insufficient input sanitising"> <dsa 2009 1809 linux-2.6 "Several vulnerabilities"> <dsa 2009 1809 user-mode-linux "Several vulnerabilities"> <dsa 2009 1810 libapache-mod-jk "Information disclosure"> <dsa 2009 1811 cups "Denial of service"> <dsa 2009 1812 apr-util "Several vulnerabilities"> <dsa 2009 1813 evolution-data-server "Several vulnerabilities"> <dsa 2009 1814 libsndfile "Arbitrary code execution"> <dsa 2009 1815 libtorrent-rasterbar "Denial of service"> <dsa 2009 1817 ctorrent "Arbitrary code execution"> <dsa 2009 1818 gforge "Insufficient input sanitising"> <dsa 2009 1820 xulrunner "Several vulnerabilities"> <dsa 2009 1821 amule "Insufficient input sanitising"> <dsa 2009 1822 mahara "Cross-site scripting"> <dsa 2009 1823 samba "Several vulnerabilities"> <dsa 2009 1824 phpmyadmin "Several vulnerabilities"> </table> <h2>URLs</h2> <p>The complete lists of packages that have changed with this release:</p> <div class="center"> <url "http://ftp.debian.org/debian/dists/<downcase <codename>>/ChangeLog"> </div> <p>The current stable distribution:</p> <div class="center"> <url "http://ftp.debian.org/debian/dists/stable/"> </div> <p>Proposed updates to the stable distribution:</p> <div class="center"> <url "http://ftp.debian.org/debian/dists/proposed-updates/"> </div> <p>Stable distribution information (release notes, errata, etc.):</p> <div class="center"> <a href="$(HOME)/releases/stable/">http://www.debian.org/releases/stable/</a> </div> <p>Security announcements and information:</p> <div class="center"> <a href="$(HOME)/security/">http://security.debian.org/</a> </div> <h2>About Debian</h2> <p>The Debian Project is an association of Free Software developers who volunteer their time and effort in order to produce the completely free operating systems Debian GNU/Linux.</p> <h2>Contact Information</h2> <p>For further information, please visit the Debian web pages at <a href="$(HOME)/">http://www.debian.org/</a>, send mail to <pr...@debian.org>, or contact the stable release team at <debian-rele...@lists.debian.org>.</p>