6369755 2001-04-16 16:50 -0700 /75 rader/ Greg KH <greg@WIREX.COM> Sänt av: joel@lysator.liu.se Importerad: 2001-04-17 09:47 av Brevbäraren Extern mottagare: BUGTRAQ@SECURITYFOCUS.COM Externa svar till: greg@WIREX.COM Mottagare: Bugtraq (import) <16577> Ärende: Immunix OS Security update for netscape ------------------------------------------------------------ ----------------------------------------------------------------------- Immunix OS Security Advisory Packages updated: netscape Affected products: Immunix OS 6.2, 7.0-beta, and 7.0 Bugs Fixed: immunix/1562 Date: April 14, 2001 Advisory ID: IMNX-2001-70-014-01 Author: Greg Kroah-Hartman <greg@wirex.com> ----------------------------------------------------------------------- Description: Florian Wesch has found that Netscape versions prior to 4.77 are vulnerable to a buffer overflow bug in the way Netscape handles gif images (see http://www.securityfocus.com/archive/1/175060 for more information.) Netscape has released new binary packages that fix this problem. Immunix 7.0 does not install the netscape packages by default but provides them in the extras/unsupported directory so they do not need to be upgraded unless they have been installed manually by the system administrator. Package names and locations: Precompiled binary packages for Immunix 6.2 are available at: http://immunix.org/ImmunixOS/6.2/updates/RPMS/netscape-common-4.77-0.6.2_StackGuard.i386.rpm http://immunix.org/ImmunixOS/6.2/updates/RPMS/netscape-communicator-4.77-0.6.2_StackGuard.i386.rpm http://immunix.org/ImmunixOS/6.2/updates/RPMS/netscape-navigator-4.77-0.6.2_StackGuard.i386.rpm Source package for Immunix 6.2 is available at: http://immunix.org/ImmunixOS/6.2/updates/SRPMS/netscape-4.77-0.6.2_StackGuard.src.rpm Precompiled binary packages for Immunix 7.0-beta and 7.0 are available at: http://immunix.org/ImmunixOS/7.0/updates/RPMS/netscape-common-4.77-1_imnx.i386.rpm http://immunix.org/ImmunixOS/7.0/updates/RPMS/netscape-communicator-4.77-1_imnx.i386.rpm http://immunix.org/ImmunixOS/7.0/updates/RPMS/netscape-navigator-4.77-1_imnx.i386.rpm Source package for Immunix 7.0-beta and 7.0 is available at: http://immunix.org/ImmunixOS/7.0/updates/SRPMS/netscape-4.77-1_imnx.src.rpm md5sums of the packages: 40e966b784763331fe94d74dcd10c19c netscape-common-4.77-0.6.2_StackGuard.i386.rpm 5759c9360cbd1571822ba339a5e39cb6 netscape-communicator-4.77-0.6.2_StackGuard.i386.rpm 7cc1855fd130f753a719edff37ba8b62 netscape-navigator-4.77-0.6.2_StackGuard.i386.rpm 921d14e391e67bea3f4f93a2af990463 netscape-4.77-0.6.2_StackGuard.src.rpm 0656a5f8afe960dc22f99ea72170d52b netscape-common-4.77-1_imnx.i386.rpm 0820c0bf2bc60871940f537a80829cb5 netscape-communicator-4.77-1_imnx.i386.rpm 148e2e62e3431b3a987f557453729090 netscape-navigator-4.77-1_imnx.i386.rpm 744a3d5ae4fdc1988c3e9012679f13c5 netscape-4.77-1_imnx.src.rpm Online version of all Immunix 6.2 updates and advisories: http://immunix.org/ImmunixOS/6.2/updates/ Online version of all Immunix 7.0-beta updates and advisories: http://immunix.org/ImmunixOS/7.0-beta/updates/ Online version of all Immunix 7.0 updates and advisories: http://immunix.org/ImmunixOS/7.0/updates/ NOTE: Ibiblio is graciously mirroring our updates, so if the links above are slow, please try: ftp://ftp.ibiblio.org/pub/Linux/distributions/immunix/ or one of the many mirrors available at: http://www.ibiblio.org/pub/Linux/MIRRORS.html (6369755) /Greg KH <greg@WIREX.COM>/------(Ombruten) Bilaga (application/pgp-signature) i text 6369756 6369756 2001-04-16 16:50 -0700 /10 rader/ Greg KH <greg@WIREX.COM> Importerad: 2001-04-17 09:47 av Brevbäraren Extern mottagare: BUGTRAQ@SECURITYFOCUS.COM Externa svar till: greg@WIREX.COM Mottagare: Bugtraq (import) <16578> Bilaga (text/plain) till text 6369755 Ärende: Bilaga till: Immunix OS Security update for netscape ------------------------------------------------------------ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.4 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE624UyAl5ylTeuKpURAv1UAJ49RL3PRbJEAXYD7mvG35VzZagDLwCg2Yvi 3wZbSyVog58zEJ3rgMrcb64= =ZfYF -----END PGP SIGNATURE----- (6369756) /Greg KH <greg@WIREX.COM>/----------------