The update corrects mainly security issues

Feb 18, 2008 10:04 GMT  ·  By

The Debian project announced yesterday the availability of the third update for its stable distribution, Debian GNU/Linux 4.0 "Etch". It corrects mainly security problems and adds a few adjustments to serious problems.

The installer now uses and supports the updated kernels included in this release. The update also includes stability improvements and new support for SGI O2 machines with 300Mhz RM5200SC (Nevada) CPUs. These were announced for the second update, but were not actually included in it.

The updated versions of the bcm43xx-fwcutter package will be distributed through volatile.debian.org. This package will be removed from Etch in the next update. Speaking of removing packages, the flashplugin-nonfree one was removed in this update, because it's closed source and the developers don't get security support for it.

This stable update brings some binary updates for different architectures. It also adds fixes to the following packages:

■ apache - Fix of several vulnerabilities ■ apache2 - Fix of several vulnerabilities ■ apache2-mpm-itk - Rebuild for apache2 rebuilds ■ bos - Remove non-free content ■ clamav - Remove non-free (and undistributable) unrar-code ■ cpio - Fix malformed creation of ustar archives ■ denyhosts - Fix improper parsing of ssh logfiles ■ ircproxy - Fix denial of service ■ glibc - Fix sunrpc memory leak ■ gpsd - Fix problem with leap years ■ ipmitool - Bring architectures back in sync ■ kdebase - Add support for latest flash plugin ■ kdelibs - Add support for latest flash plugin ■ kdeutils - Prevent unauthorised access when hibernated ■ libchipcard2 - Add missing dependency ■ linux-2.6 - Fix several bugs ■ loop-aes - Updated linux-2.6 kernel ■ madwifi - Fix possible denial of service ■ net-snmp - Fix broken snmpbulkwalk ■ ngircd - Fix possible denial of service ■ sing - Fix privilege escalation ■ sun-java5 - Fix remote program execution ■ unrar-nonfree - Fix arbitrary code execution ■ viewcvs - Fix cvs parsing ■ xorg-server - Fix inline assembler for processors without cpuid

The next packages were updated to support the newer kernels:

■ linux-modules-contrib-2.6 ■ linux-modules-extra-2.6 ■ linux-modules-nonfree-2.6 ■ nvidia-graphics-legacy-modules-amd64 ■ nvidia-graphics-legacy-modules-i386 ■ nvidia-graphics-modules-amd64 ■ nvidia-graphics-modules-i386

Download Debian GNU/Linux 4.0r3 right now from Softpedia!