Yellow Dog Linux Security Announcement -------------------------------------- Package: gtkhtml Issue Date: Apr 23,2003 Priority: medium Advisory ID: YDU-20030423-8 1. Topic: Updated gtkhtml packages are available. 2. Problem: "GtkHTML is the HTML rendering widget used by the Evolution mail reader. GtkHTML supplied with versions of Evolution prior to 1.2.4 contain a bug when handling HTML messages. Alan Cox discovered that certain malformed messages could cause the Evolution mail component to crash. Users of Evolution are advised to upgrade to these erratum packages, which contain a backported fix correcting this issue." (From Red Hat Advisory) 3. Solution: a) Updating via apt... We suggest that you use the apt-get program to keep your system up-to-date. The following command(s) will retrieve and install the fixed version of this update onto your system: apt-get gtkhtml apt-get gtkhtml-devel apt-get install gtkhtml apt-get install gtkhtml-devel b) Updating manually... Download the updates below and then run the following rpm command. (Please use a mirror site) rpm -Fvh [filenames] Yellow Dog Linux 3.0 ftp://ftp.yellowdoglinux.com/pub/yellowdog/updates/yellowdog-3.0/ ppc/gtkhtml-1.1.9-0.9.ppc.rpm ppc/gtkhtml-devel-1.1.9-0.9.ppc.rpm 4. Verification MD5 checksum Package -------------------------------- ---------------------------- [Yellow Dog Linux 3.0] 9ea84089d5475e74340421f74e6a6933 SRPMS/gtkhtml-1.1.9-0.9.src.rpm cd6b7f7da64e07551cab622178edd3b5 ppc/gtkhtml-1.1.9-0.9.ppc.rpm 5f64753eed907586a2df9f194dc0c36c ppc/gtkhtml-devel-1.1.9-0.9.ppc.rpm If you wish to verify that each package has not been corrupted or tampered with, examine the md5sum with the following command: md5sum 5. Misc. Terra Soft has setup a moderated mailing list where these security, bugfix, and package enhancement announcements will be posted. See http://lists.terrasoftsolutions.com/ for more information. For information regarding the usage of apt-get, see: http://www.yellowdoglinux.com/support/solutions/ydl_general/apt-get.shtml