gmane.linux.debian.volatile.announce

[VUA 76-2] volatile archive discontinued

Philipp Kern — 2012-02-26T18:07:08

------------------------------------------------------------------------
Debian Volatile Update Announcement VUA 76-2  http://volatile.debian.org
debian-volatile< at >lists.debian.org                            Philipp Kern
February 26th, 2012
------------------------------------------------------------------------

The Debian Volatile archive is now discontinued.  There will be no further
updates. Mirrors will soon cease to carry it.  Starting from Debian 6.0
("squeeze") it was replaced by the suite `squeeze-updates' on the
official mirrors, managed by the Debian Release Team.

This announcement list and the discussion list
`debian-volatile< at >lists.debian.org' will be closed in two weeks time.
Followup questions should be directed at `debian-release< at >lists.debian.org'.

For completeness, here is the announcement text of VUA 76-1, released
January 29th, 2011:

The Debian Volatile archive is discontinued starting from the upcoming
Debian release 6.0 ("squeeze").  It is replaced by the suite
squeeze-updates on the official mirrors.  Its management will move to
the Debian Release Team, who already manage regular updates to Debian
stable and oldstable.

This suite will contain updates that satisfy one of the following criteria:

 * The update is urgent and not of a security nature.  Security updates
   will continue to be pushed through the security archive.  Examples
   include packages broken by the flow of time (c.f. spamassassin and
   the year 2010 problem) and fixes for bugs introduced by point
   releases.
 * The package in question is a data package and the data must be updated
   in a timely manner (e.g. tzdata).
 * Fixes to leaf packages that were broken by external changes (e.g.
   video downloading tools and tor).
 * Packages that need to be current to be useful (e.g. clamav).

These updates will also be included in the next stable point release
after the announcement.  Regular updates not fitting the criteria above
will be pushed through point releases according to the rules of the
Stable Release Management.

The squeeze-updates suite is carried by all official mirrors just like
squeeze itself.  To use it, a snippet such as the following can be used
in `/etc/apt/sources.list':

 deb http://ftp.debian.org/debian squeeze-updates main

Announcements about stable updates pushed through squeeze-updates will be
published on `debian-stable-announce< at >lists.debian.org'.  To subscribe
please visit its web page:

 http://lists.debian.org/debian-stable-announce/

[VUA 85-1] Updated tzdata version

Philipp Kern — 2011-11-01T10:54:05

------------------------------------------------------------------------
Debian Volatile Update Announcement VUA 85-1  http://volatile.debian.org
debian-volatile< at >lists.debian.org                          Aurelien Jarno
November 1st, 2011
------------------------------------------------------------------------

Package              : tzdata
Version              : 2011n-0lenny1
Importance           : medium

Upstream published version 2011n.

Changes since 2011m-0lenny1 currently in lenny-volatile are adjustments
to the DST rules of Cuba, Fiji and the Pridnestrovian Moldavian Republic.

Upgrade Instructions
--------------------

You can get the updated packages at

http://volatile.debian.org/debian-volatile/pool/volatile/main/t/tzdata

and install them with dpkg, or add the volatile archive for Lenny
to your /etc/apt/sources.list:

 deb http://volatile.debian.org/debian-volatile lenny/volatile main
 deb-src http://volatile.debian.org/debian-volatile lenny/volatile main

You can also use any of our mirrors.  See
`http://www.debian.org/volatile/volatile-mirrors' for the full list of
mirrors.  The archive signing keys were included in Debian Lenny.

For further information about debian-volatile, please refer to
`http://www.debian.org/volatile/'.

If there are any issues, please don't hesitate to get in touch with the
debian-volatile team at `debian-volatile< at >lists.debian.org'.

[VUA 83-1] Updated tzdata version

Adam D. Barratt — 2011-10-25T19:21:38

------------------------------------------------------------------------
Debian Volatile Update Announcement VUA 83-1  http://volatile.debian.org
debian-volatile< at >lists.debian.org                          Aurelien Jarno
October 25th, 2011
------------------------------------------------------------------------

Package              : tzdata
Version              : 2011m-0lenny1
Importance           : medium

Upstream published version 2011m.

Changes since 2011l-0lenny1 currently in lenny-volatile are adjustments
to the DST rules of Ukraine and the Pridnestrovian Moldavian Republic.

The changes take effect during the coming weekend.

Upgrade Instructions
--------------------

You can get the updated packages at

http://volatile.debian.org/debian-volatile/pool/volatile/main/t/tzdata

and install them with dpkg, or add the volatile archive for Lenny
to your /etc/apt/sources.list:

 deb http://volatile.debian.org/debian-volatile lenny/volatile main
 deb-src http://volatile.debian.org/debian-volatile lenny/volatile main

You can also use any of our mirrors.  See
`http://www.debian.org/volatile/volatile-mirrors' for the full list of
mirrors.  The archive signing keys were included in Debian Lenny.

For further information about debian-volatile, please refer to
`http://www.debian.org/volatile/'.

If there are any issues, please don't hesitate to get in touch with the
debian-volatile team at `debian-volatile< at >lists.debian.org'.

[VUA 84-1] Updated clamav version

Adam D. Barratt — 2011-10-25T19:28:02

------------------------------------------------------------------------
Debian Volatile Update Announcement VUA 84-1  http://volatile.debian.org
debian-volatile< at >lists.debian.org                      Michael Tautschnig
October 25th, 2011
------------------------------------------------------------------------

Package              : clamav
Version              : 0.97.3+dfsg-1~lenny1
Importance           : medium

Upstream published version 0.97.3.

This is a bugfix release. The changes are not strictly required for
operation, but users of the previous version in volatile might get
warnings.

The bug-fixes that are part of this release include security-relevant
fixes relating to issues with specially prepared messages
(CVE-2011-3627). If you use clamav, we highly recommend you upgrade to
this version.

Upgrade Instructions
--------------------

You can get the updated packages at

http://volatile.debian.org/debian-volatile/pool/volatile/main/c/clamav

and install them with dpkg, or add the volatile archive for Lenny
to your /etc/apt/sources.list:

 deb http://volatile.debian.org/debian-volatile lenny/volatile main
 deb-src http://volatile.debian.org/debian-volatile lenny/volatile main

You can also use any of our mirrors.  See
`http://www.debian.org/volatile/volatile-mirrors' for the full list of
mirrors.  The archive signing keys were included in Debian Lenny.

For further information about debian-volatile, please refer to
`http://www.debian.org/volatile/'.

If there are any issues, please don't hesitate to get in touch with the
debian-volatile team at `debian-volatile< at >lists.debian.org'.

[VUA 82-1] Updated tzdata version

Adam D. Barratt — 2011-10-21T18:06:31

------------------------------------------------------------------------
Debian Volatile Update Announcement VUA 82-1  http://volatile.debian.org
debian-volatile< at >lists.debian.org                          Aurelien Jarno
October 21st, 2011
------------------------------------------------------------------------

Package              : tzdata
Version              : 2011l-0lenny1
Importance           : medium

Upstream published version 2011l.

Changes since 2011k-0lenny1 currently in lenny are adjustments to
the DST rules of the West Bank, Fiji and the Brazilian state of
Bahai.  The changes for Fiji take effect during the coming weekend; the
other changes are already in effect.

Upgrade Instructions
--------------------

You can get the updated packages at

http://volatile.debian.org/debian-volatile/pool/volatile/main/t/tzdata

and install them with dpkg, or add the volatile archive for Lenny
to your /etc/apt/sources.list:

 deb http://volatile.debian.org/debian-volatile lenny/volatile main
 deb-src http://volatile.debian.org/debian-volatile lenny/volatile main

You can also use any of our mirrors.  See
`http://www.debian.org/volatile/volatile-mirrors' for the full list of
mirrors.  The archive signing keys were included in Debian Lenny.

For further information about debian-volatile, please refer to
`http://www.debian.org/volatile/'.

If there are any issues, please don't hesitate to get in touch with the
debian-volatile team at `debian-volatile< at >lists.debian.org'.

[VUA81-1] Updated clamav version

Adam D. Barratt — 2011-07-31T20:56:25

------------------------------------------------------------------------
Debian Volatile Update Announcement VUA 81-1  http://volatile.debian.org
debian-volatile< at >lists.debian.org                      Michael Tautschnig
July 31st, 2011
------------------------------------------------------------------------

Package              : clamav
Version              : 0.97.2+dfsg-1~lenny1 
Importance           : high

Upstream published version 0.97.2.

This is a bug-fix release. The changes are not strictly required for
operation, but users of the previous version in volatile might get
warnings.

The bug-fixes that are part of this release include security-relevant
fixes relating to issues with specifically prepared messages
(CVE-2011-2721). If you use clamav, we highly recommend you upgrade to
this version.

Upgrade Instructions
--------------------

You can get the updated packages at

http://volatile.debian.org/debian-volatile/pool/volatile/main/c/clamav

and install them with dpkg, or add the volatile archive for Lenny
to your /etc/apt/sources.list:

 deb http://volatile.debian.org/debian-volatile lenny/volatile main
 deb-src http://volatile.debian.org/debian-volatile lenny/volatile main

You can also use any of our mirrors.  See
`http://www.debian.org/volatile/volatile-mirrors' for the full list of
mirrors.  The archive signing keys were included in Debian Lenny.

For further information about debian-volatile, please refer to
`http://www.debian.org/volatile/'.

If there are any issues, please don't hesitate to get in touch with the
debian-volatile team at `debian-volatile< at >lists.debian.org'.

[VUA 80-1] Updated clamav version

Adam D. Barratt — 2011-07-09T12:49:09

------------------------------------------------------------------------
Debian Volatile Update Announcement VUA 80-1  http://volatile.debian.org
debian-volatile< at >lists.debian.org                      Michael Tautschnig
July 8th, 2011
------------------------------------------------------------------------

Package              : clamav
Version              : 0.97.1+dfsg-1~lenny1 
Importance           : medium

Upstream published version 0.97.1.

This is a bugfix release. The changes are not strictly required for
operation, but users of the previous version in volatile might get
warnings.

The bugfixes that are part of this release include security-relevant
fixes for handling LZMA-packed files (no CVE ID).  If you use clamav,
we highly recommend that you upgrade to this version.

Upgrade Instructions
--------------------

You can get the updated packages at

http://volatile.debian.org/debian-volatile/pool/volatile/main/c/clamav

and install them with dpkg, or add the volatile archive for Lenny
to your /etc/apt/sources.list:

 deb http://volatile.debian.org/debian-volatile lenny/volatile main
 deb-src http://volatile.debian.org/debian-volatile lenny/volatile main

You can also use any of our mirrors.  See
`http://www.debian.org/volatile/volatile-mirrors' for the full list of
mirrors.  The archive signing keys were included in Debian Lenny.

For further information about debian-volatile, please refer to
`http://www.debian.org/volatile/'.

If there are any issues, please don't hesitate to get in touch with the
debian-volatile team at `debian-volatile< at >lists.debian.org'.

[VUA 79-1] Updated tzdata version

Philipp Kern — 2011-03-24T11:10:29

---------------------------------------------------------------------------
Debian Volatile Update Announcement VUA 79-1     http://volatile.debian.org
debian-volatile< at >lists.debian.org                             Aurelien Jarno
March 24th, 2011
---------------------------------------------------------------------------

Package              : tzdata
Version              : 2011d-0lenny1
Importance           : medium

Upstream published version 2011d.

Changes since 2011c-0lenny1 currently in lenny-volatile are adjustments to
the DST rules of Turkey, West Samoa and Cuba.  The changes for Cuba
already took effect a few days ago, the other two will be in effect soon.

Upgrade Instructions
--------------------

You can get the updated packages at

http://volatile.debian.org/debian-volatile/pool/volatile/main/t/tzdata

and install them with dpkg, or add the volatile archive for Lenny
to your /etc/apt/sources.list:

 deb http://volatile.debian.org/debian-volatile lenny/volatile main
 deb-src http://volatile.debian.org/debian-volatile lenny/volatile main

You can also use any of our mirrors.  See
`http://www.debian.org/volatile/volatile-mirrors' for the full list of
mirrors.  The archive signing keys were included in Debian Lenny.

For further information about debian-volatile, please refer to
`http://www.debian.org/volatile/'.

If there are any issues, please don't hesitate to get in touch with the
debian-volatile team at `debian-volatile< at >lists.debian.org'.

[VUA 78-1] Updated clamav version

Philipp Kern — 2011-03-13T10:32:41

---------------------------------------------------------------------------
Debian Volatile Update Announcement VUA 78-1     http://volatile.debian.org
debian-volatile< at >lists.debian.org                         Michael Tautschnig
March 13th, 2011
---------------------------------------------------------------------------

Package              : clamav
Version              : 0.97+dfsg-2~lenny1
Importance           : medium

Upstream published version 0.97.

This is a bugfix release. The changes are not strictly required for operation,
but users of the previous version in volatile might get warnings.

The bugfixes that are part of this release include security-relevant fixes for
a potentially exploitable double free (CVE-2011-1003).  If you use clamav, we
highly recommend you upgrade to this version.

Upgrade Instructions
--------------------

You can get the updated packages at

http://volatile.debian.org/debian-volatile/pool/volatile/main/c/clamav

and install them with dpkg, or add the volatile archive for Lenny
to your /etc/apt/sources.list:

 deb http://volatile.debian.org/debian-volatile lenny/volatile main
 deb-src http://volatile.debian.org/debian-volatile lenny/volatile main

You can also use any of our mirrors.  See
`http://www.debian.org/volatile/volatile-mirrors' for the full list of
mirrors.  The archive signing keys were included in Debian Lenny.

For further information about debian-volatile, please refer to
`http://www.debian.org/volatile/'.

If there are any issues, please don't hesitate to get in touch with the
debian-volatile team at `debian-volatile< at >lists.debian.org'.

[VUA 77-1] Updated tzdata version

Philipp Kern — 2011-03-12T19:58:26

---------------------------------------------------------------------------
Debian Volatile Update Announcement VUA 77-1     http://volatile.debian.org
debian-volatile< at >lists.debian.org                                Clint Adams
March 12th, 2011
---------------------------------------------------------------------------

Package              : tzdata
Version              : 2011c-0lenny1
Importance           : medium

Upstream published version 2011c.

Changes since 2010o-1 currently in Lenny include a change to Chilean
DST which takes affect over the current weekend and changes to
historical definitions of some Australian, Indonesian and American
zones.

Upgrade Instructions
--------------------

You can get the updated packages at

http://volatile.debian.org/debian-volatile/pool/volatile/main/t/tzdata

and install them with dpkg, or add the volatile archive for Lenny
to your /etc/apt/sources.list:

 deb http://volatile.debian.org/debian-volatile lenny/volatile main
 deb-src http://volatile.debian.org/debian-volatile lenny/volatile main

You can also use any of our mirrors.  See
`http://www.debian.org/volatile/volatile-mirrors' for the full list of
mirrors.  The archive signing keys were included in Debian Lenny.

For further information about debian-volatile, please refer to
`http://www.debian.org/volatile/'.

If there are any issues, please don't hesitate to get in touch with the
debian-volatile team at `debian-volatile< at >lists.debian.org'.

[VUA 76-1] volatile replaced by new updates suite

Philipp Kern — 2011-01-28T23:39:26

---------------------------------------------------------------------------
Debian Volatile Update Announcement VUA 76-1     http://volatile.debian.org
debian-volatile< at >lists.debian.org                               Philipp Kern
January 28th, 2011
---------------------------------------------------------------------------

The Debian Volatile archive is discontinued starting from the upcoming
Debian release 6.0 (squeeze).  It is replaced by the suite
squeeze-updates on the official mirrors.  Its management will move to
the Debian Release Team, who already manage regular updates to Debian
stable and oldstable.

This suite will contain updates that satisfy one of the following criteria:

 * The update is urgent and not of a security nature.  Security updates
   will continue to be pushed through the security archive.  Examples
   include packages broken by the flow of time (c.f. spamassassin and
   the year 2010 problem) and fixes for bugs introduced by point
   releases.
 * The package in question is a data package and the data must be updated
   in a timely manner (e.g. tzdata).
 * Fixes to leaf packages that were broken by external changes (e.g.
   video downloading tools and tor).
 * Packages that need to be current to be useful (e.g. clamav).

These updates will also be included in the next stable point release
after the announcement.  Regular updates not fitting the criteria above
will be pushed through point releases according to the rules of the
Stable Release Management.

The squeeze-updates suite is carried by all official mirrors just like
squeeze itself.  To use it, a snippet such as the following can be used
in `/etc/apt/sources.list':

 deb http://ftp.debian.org/debian squeeze-updates main

Announcements about stable updates pushed through squeeze-updates will be
published on `debian-stable-announce< at >lists.debian.org'.  To subscribe
please visit its web page:

 http://lists.debian.org/debian-stable-announce/

Lenny's Volatile suite might still get updates on a case-by-case basis
after the release of Squeeze as the next stable version.


About Debian Volatile
---------------------

For further information about debian-volatile, please refer to
`http://www.debian.org/volatile/'.

If there are any issues, please don't hesitate to get in touch with the
debian-volatile team at `debian-volatile< at >lists.debian.org'.

[VUA 75-1] Updated clamav version

Philipp Kern — 2010-12-07T18:51:09

---------------------------------------------------------------------------
Debian Volatile Update Announcement VUA 75-1     http://volatile.debian.org
debian-volatile< at >lists.debian.org                         Michael Tautschnig
December 7th, 2010
---------------------------------------------------------------------------

Package              : clamav
Version              : 0.96.5+dfsg-1~volatile1 (Lenny)
Importance           : medium

Upstream published version 0.96.5.

This is a bugfix release. The changes are not strictly required for
operation, but users of the previous version in volatile might get
warnings.

The bugfixes that are part of this release include security-relevant
fixes for a potential buffer overflow and a potential DoS (these issues
will likely be identified as CVE-2010-4260 and CVE-2010-4261).  If you
use clamav, we highly recommend you upgrade to this version.


Upgrade Instructions
--------------------

You can get the updated packages at

http://volatile.debian.org/debian-volatile/pool/volatile/main/c/clamav

and install them with dpkg, or add the volatile archive for Lenny
to your /etc/apt/sources.list:

 deb http://volatile.debian.org/debian-volatile lenny/volatile main
 deb-src http://volatile.debian.org/debian-volatile lenny/volatile main

You can also use any of our mirrors.  See
`http://www.debian.org/volatile/volatile-mirrors' for the full list of
mirrors.  The archive signing keys were included in Debian Lenny.

For further information about debian-volatile, please refer to
`http://www.debian.org/volatile/'.

If there are any issues, please don't hesitate to get in touch with the
debian-volatile team at `debian-volatile< at >lists.debian.org'.

[VUA 74-1] Updated tor version

Philipp Kern — 2010-11-22T20:06:27

---------------------------------------------------------------------------
Debian Volatile Update Announcement VUA 74-1     http://volatile.debian.org
debian-volatile< at >lists.debian.org                            Peter Palfrader
November 22nd, 2010
---------------------------------------------------------------------------

Package              : tor
Version              : 0.2.1.26-1~lennyvolatile2 (Lenny)
Importance           : medium

The recent openssl security update in stable (DSA-2125-1), which fixes a
TLS extension parsing race condition, unfortunately also causes a
particular behaviour change in the libssl library.  This change results
in all Tor relays (including bridge relays) running Tor versions 0.2.1.x
or 0.2.2.x to silently cease to work.

The previous version released through lenny-volatile
(0.2.1.26-1~lennyvolatile1) is affected by this problem.

This Debian Volatile update incorporates a patch from the upcoming Tor
0.2.1.27 release which resolves the incompatibility, thus restoring
relay functionality.


We recommend that all Tor relays or bridge relays running Tor 0.2.1.26
on Debian lenny (Debian 5.0, stable) update their Tor package to version
0.2.1.26-1~lennyvolatile2 (now in volatile), or any other similarly
fixed package.


Tor 0.2.0.35 - the version currently in stable - is not affected by this
particular problem, however a different upcoming openssl change will
also break tor 0.2.0.x relays.  Therefore an update to the version in
stable is planned for the near future.


Upgrade Instructions
--------------------

You can get the updated packages at

http://volatile.debian.org/debian-volatile/pool/volatile/main/t/tor

and install them with dpkg, or add the volatile archive for Lenny
to your /etc/apt/sources.list:

 deb http://volatile.debian.org/debian-volatile lenny/volatile main
 deb-src http://volatile.debian.org/debian-volatile lenny/volatile main

You can also use any of our mirrors.  See
`http://www.debian.org/volatile/volatile-mirrors' for the full list of
mirrors.  The archive signing keys were included in Debian Lenny.

For further information about debian-volatile, please refer to
`http://www.debian.org/volatile/'.

If there are any issues, please don't hesitate to get in touch with the
debian-volatile team at `debian-volatile< at >lists.debian.org'.

[VUA 73-1] Updated tzdata version

Philipp Kern — 2010-11-17T10:33:21

---------------------------------------------------------------------------
Debian Volatile Update Announcement VUA 73-1     http://volatile.debian.org
debian-volatile< at >lists.debian.org                               Philipp Kern
November 17th, 2010
---------------------------------------------------------------------------

Package              : tzdata
Version              : 2010o-0lenny1 (Lenny)
Importance           : low

Upstream published version 2010o.

Changes since version 2010j currently in Lenny include a DST change for
2011 in Fiji and changes to historical definitions of Egypt, Hong Kong,
Palestine, Micronesia, Finland and Mexico.

This update will also be included in the next Lenny point release.


Upgrade Instructions
--------------------

You can get the updated packages at

http://volatile.debian.org/debian-volatile/pool/volatile/main/t/tzdata

and install them with dpkg, or add the volatile archive for Lenny
to your /etc/apt/sources.list:

 deb http://volatile.debian.org/debian-volatile lenny/volatile main
 deb-src http://volatile.debian.org/debian-volatile lenny/volatile main

You can also use any of our mirrors.  See
`http://www.debian.org/volatile/volatile-mirrors' for the full list of
mirrors.  The archive signing keys were included in Debian Lenny.

For further information about debian-volatile, please refer to
`http://www.debian.org/volatile/'.

If there are any issues, please don't hesitate to get in touch with the
debian-volatile team at `debian-volatile< at >lists.debian.org'.

[VUA 72-1] Updated libclamunrar version

Philipp Kern — 2010-10-31T21:53:52

---------------------------------------------------------------------------
Debian Volatile Update Announcement VUA 72-1     http://volatile.debian.org
debian-volatile< at >lists.debian.org                         Michael Tautschnig
October 31st, 2010
---------------------------------------------------------------------------

Package              : libclamunrar
Version              : 0.96.4-1~volatile1 (Lenny)
Importance           : low

Upstream published version 0.96.4 of the clamav suite, a new release (see
[VUA 71-1] for information about the corresponding volatile update).  Hence
libclamunrar was uploaded to keep the two packages in sync.  The changes are
not strictly required for operation of the libclamunrar package.

If you use clamav and libclamunrar, we recommend you upgrade to this version.


Upgrade Instructions
--------------------

You can get the updated packages at

http://volatile.debian.org/debian-volatile/pool/volatile/non-free/libc/libclamunrar

and install them with dpkg, or add the volatile archive for Lenny
to your /etc/apt/sources.list:

 deb http://volatile.debian.org/debian-volatile lenny/volatile main
 deb-src http://volatile.debian.org/debian-volatile lenny/volatile main

You can also use any of our mirrors.  See
`http://www.debian.org/volatile/volatile-mirrors' for the full list of
mirrors.  The archive signing keys were included in Debian Lenny.

For further information about debian-volatile, please refer to
`http://www.debian.org/volatile/'.

If there are any issues, please don't hesitate to get in touch with the
debian-volatile team at `debian-volatile< at >lists.debian.org'.

[VUA 71-1] Updated clamav version

Philipp Kern — 2010-10-31T21:58:35

---------------------------------------------------------------------------
Debian Volatile Update Announcement VUA 71-1     http://volatile.debian.org
debian-volatile< at >lists.debian.org                         Michael Tautschnig
October 31st, 2010
---------------------------------------------------------------------------

Package              : clamav
Version              : 0.96.4+dfsg-1~volatile1 (Lenny)
Importance           : low

Upstream published version 0.96.4.

This is a bugfix release. The changes are not strictly required for
operation, but users of the previous version in volatile might get
warnings.

The bugfixes that are part of this release include fixes for memory
leaks and work around problems with broken PDF files.  If you use
clamav, we highly recommend you upgrade to this version.


Upgrade Instructions
--------------------

You can get the updated packages at

http://volatile.debian.org/debian-volatile/pool/volatile/main/c/clamav

and install them with dpkg, or add the volatile archive for Lenny
to your /etc/apt/sources.list:

 deb http://volatile.debian.org/debian-volatile lenny/volatile main
 deb-src http://volatile.debian.org/debian-volatile lenny/volatile main

You can also use any of our mirrors.  See
`http://www.debian.org/volatile/volatile-mirrors' for the full list of
mirrors.  The archive signing keys were included in Debian Lenny.

For further information about debian-volatile, please refer to
`http://www.debian.org/volatile/'.

If there are any issues, please don't hesitate to get in touch with the
debian-volatile team at `debian-volatile< at >lists.debian.org'.

[VUA 70-1] Updated clamav version

Philipp Kern — 2010-10-11T07:05:22

---------------------------------------------------------------------------
Debian Volatile Update Announcement VUA 69-1     http://volatile.debian.org
debian-volatile< at >lists.debian.org                         Michael Tautschnig
October 11th, 2010
---------------------------------------------------------------------------

Package              : clamav
Version              : 0.96.3+dfsg-2~volatile1 (Lenny)
Importance           : low

ClamAV 0.96.3 signals errors on certain PDF files, even though these
files have been processed properly. Upstream will include a bugfix in
0.96.4, which has been cherry-picked. Furthermore, a spurious
RLIMIT_DATA warning has been removed and minor Debian packaging
improvements are included.
                                                                                                       
This is a bugfix release. The changes are not strictly required for
operation.  If you use clamav, we recommend you upgrade to this version.


Upgrade Instructions
--------------------

You can get the updated packages at

http://volatile.debian.org/debian-volatile/pool/volatile/main/c/clamav

and install them with dpkg, or add the volatile archive for Lenny
to your /etc/apt/sources.list:

 deb http://volatile.debian.org/debian-volatile lenny/volatile main
 deb-src http://volatile.debian.org/debian-volatile lenny/volatile main

You can also use any of our mirrors.  See
http://www.debian.org/volatile/volatile-mirrors for the full list of
mirrors.  The archive signing keys were included in Debian Lenny.

For further information about debian-volatile, please refer to
http://www.debian.org/volatile/.

If there are any issues, please don't hesitate to get in touch with the
debian-volatile team.

[VUA 69-1] Updated clamav version

Philipp Kern — 2010-09-25T11:51:42

---------------------------------------------------------------------------
Debian Volatile Update Announcement VUA 69-1     http://volatile.debian.org
debian-volatile< at >lists.debian.org                         Michael Tautschnig
September 25th, 2010
---------------------------------------------------------------------------

Package              : clamav
Version              : 0.96.3+dfsg-1~volatile1 (Lenny)
Importance           : high

Upstream published version 0.96.3.

Besides various bugfixes, this update includes a security fix for
CVE-2010-0405, a bzip2 arbitrary code execution vulnerability.  Users of
clamav are strongly urged to upgrade.


Upgrade Instructions
--------------------

You can get the updated packages at

http://volatile.debian.org/debian-volatile/pool/volatile/main/c/clamav

and install them with dpkg, or add the volatile archive for Lenny
to your /etc/apt/sources.list:

 deb http://volatile.debian.org/debian-volatile lenny/volatile main
 deb-src http://volatile.debian.org/debian-volatile lenny/volatile main

You can also use any of our mirrors.  See
http://www.debian.org/volatile/volatile-mirrors for the full list of
mirrors.  The archive signing keys were included in Debian Lenny.

For further information about debian-volatile, please refer to
http://www.debian.org/volatile/.

If there are any issues, please don't hesitate to get in touch with the
debian-volatile team.

[VUA 68-1] git-core rebuild on i386

Philipp Kern — 2010-09-15T12:17:41

---------------------------------------------------------------------------
Debian Volatile Update Announcement VUA 68-1     http://volatile.debian.org
debian-volatile< at >lists.debian.org                               Philipp Kern
September 15th, 2010
---------------------------------------------------------------------------

Package              : git-core
Version              : 1:1.5.6.5-3+lenny3.1+b1~volatile1 (Lenny)
Importance           : medium

A tight umask on the machine used to build the non-maintainer upload of
the recent git-core stable update caused some files to have overly tight
permissions.  This breaks calling `git clone' and `git init'.  The
only affected build is i386, the buildd uploads of the other
architectures are fine.

This update corrects the permissions on the `templates' directory
in the git-core binary package.  Users that have upgraded to the
i386 git-core build in stable are strongly advised to upgrade to
this version.  Other architectures are not shipped with this update.


Upgrade Instructions
--------------------

You can get the updated packages at

http://volatile.debian.org/debian-volatile/pool/volatile/main/g/git-core

and install them with dpkg, or add the volatile archive for Lenny
to your /etc/apt/sources.list:

 deb http://volatile.debian.org/debian-volatile lenny/volatile main
 deb-src http://volatile.debian.org/debian-volatile lenny/volatile main

You can also use any of our mirrors.  See
http://www.debian.org/volatile/volatile-mirrors for the full list of
mirrors.  The archive signing keys were included in Debian Lenny.

For further information about debian-volatile, please refer to
http://www.debian.org/volatile/.

If there are any issues, please don't hesitate to get in touch with the
debian-volatile team.

[VUA 67-1] Updated clamav version

Philipp Kern — 2010-06-07T20:17:57

---------------------------------------------------------------------------
Debian Volatile Update Announcement VUA 67-1     http://volatile.debian.org
debian-volatile< at >lists.debian.org                         Michael Tautschnig
June 7th, 2010
---------------------------------------------------------------------------

Package              : clamav
Version              : 0.96.1+dfsg-1~volatile1 (Lenny)
Importance           : medium

Upstream published version 0.96.1.

This is a bugfix release. The changes are not strictly required for
operation, but users of the previous version in volatile might get
warnings.

The bugfixes that are part of this release include security fixes.  If
you use clamav, we highly recommend you upgrade to this version.


Upgrade Instructions
--------------------

You can get the updated packages at

http://volatile.debian.org/debian-volatile/pool/volatile/main/c/clamav

and install them with dpkg, or add the volatile archive for Lenny
to your /etc/apt/sources.list:

 deb http://volatile.debian.org/debian-volatile lenny/volatile main
 deb-src http://volatile.debian.org/debian-volatile lenny/volatile main

You can also use any of our mirrors.  See
http://www.debian.org/volatile/volatile-mirrors for the full list of
mirrors.  The archive signing keys were included in Debian Lenny.

For further information about debian-volatile, please refer to
http://www.debian.org/volatile/.

If there are any issues, please don't hesitate to get in touch with the
debian-volatile team.

[VUA 66-1] Updated tor version

Philipp Kern — 2010-06-06T11:27:12

---------------------------------------------------------------------------
Debian Volatile Update Announcement VUA 66-1     http://volatile.debian.org
debian-volatile< at >lists.debian.org                            Peter Palfrader
June 6th, 2010
---------------------------------------------------------------------------

Package              : tor
Version              : 0.2.1.26-1~lennyvolatile1 (Lenny)
Importance           : medium

The 0.2.0.x tree in Debian stable (lenny) is end-of-life'd by upstream.

These versions still work for now as we have updated the list of
authority keys that come with Tor to keep our packages functional.
However, there are significant benefits to running a more current
version which this volatile update delivers.

If relays that currently run our 0.2.0.x package upgrade to a newer
version the network as a whole should become faster.  If clients
upgrade they should pick smarter paths through the network.

Access to hidden services might be completely broken or at least
unreliable for old clients; updating to the 0.2.1.x tree restores
that functionality.

An upgrade to the volatile version is thus strongly recommended to all
tor users on Debian stable (lenny).


Upgrade Instructions
--------------------

You can get the updated packages at

http://volatile.debian.org/debian-volatile/pool/volatile/main/t/tor/

and install them with dpkg, or add the volatile archive for Lenny
to your /etc/apt/sources.list:

 deb http://volatile.debian.org/debian-volatile lenny/volatile main
 deb-src http://volatile.debian.org/debian-volatile lenny/volatile main

You can also use any of our mirrors.  See
http://www.debian.org/volatile/volatile-mirrors for the full list of
mirrors.  The archive signing keys were included in Debian Lenny.

For further information about debian-volatile, please refer to
http://www.debian.org/volatile/.

If there are any issues, please don't hesitate to get in touch with the
debian-volatile team.