5269855 2000-07-12  18:22  /58 rader/ Postmaster
Mottagare: Bugtraq (import) <11698>
Ärende: Fw: New man packages availible
------------------------------------------------------------
Approved-By: aleph1@SECURITYFOCUS.COM
Delivered-To: bugtraq@lists.securityfocus.com
Delivered-To: BUGTRAQ@SECURITYFOCUS.COM
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2615.200
Message-ID:  <00f801bfeb7a$598fd880$cb00030a@seifried.org>
Date:         Tue, 11 Jul 2000 14:55:30 -0600
Reply-To: Kurt Seifried <listuser@seifried.org>
Sender: Bugtraq List <BUGTRAQ@SECURITYFOCUS.COM>
From: Kurt Seifried <listuser@seifried.org>
X-cc:         erlendbm@trustix.com
To: BUGTRAQ@SECURITYFOCUS.COM

----- Original Message -----
From: Erlend Midttun <erlendbm@trustix.com>
To: <tsl-announce@trustix.com>
Sent: Tuesday, July 11, 2000 6:47 AM
Subject: New man packages availible

Hi

We have released new man packages, fixing the hole in makewhatis, on
our www/ftp/rsync site.

The hole allows any local user to trick the makewhatis script into
overwriting any file on the system, making this update fairly
critical. The hole can not trivially be used to gain higher privileges
on the system.

All users of TSL, 1.0x and 1.1, are encouraged to upgrade to this
version of the man package.

URLs: Binary:
http://www.trustix.net/download/Trustix/updates/1.1/RPMS/man-1.5g-11tr.i586.
rpm
ftp://ftp.trustix.com/pub/Trustix/updates/1.1/RPMS/man-1.5g-11tr.i586.rpm

Source:
http://www.trustix.net/download/Trustix/updates/1.1/SRPMS/man-1.5g-11tr.src.
rpm
ftp://ftp.trustix.com/pub/Trustix/updates/1.1/SRPMS/man-1.5g-11tr.src.rpm


Erlend..
--
Erlend Midttun                                   erlendbm@trustix.com
Product Development Manager, Trustix Secure Linux
http://www.tihlde.org/~erlendbm/                         A Unix Admin
                     Java, the sendmail of WWW
-
To unsubscribe, send a message to majordomo@trustix.com with the
following line in the BODY:
unsubscribe tsl-announce
(5269855) ------------------------------------------(Ombruten)