6369810 2001-04-16 16:50 -0700 /67 rader/ Greg KH <greg@WIREX.COM>
Sänt av: joel@lysator.liu.se
Importerad: 2001-04-17 09:55 av Brevbäraren
Extern mottagare: BUGTRAQ@SECURITYFOCUS.COM
Externa svar till: greg@WIREX.COM
Mottagare: Bugtraq (import) <16579>
Ärende: Immunix OS Security update for pine
------------------------------------------------------------
-----------------------------------------------------------------------
Immunix OS Security Advisory
Packages updated: pine
Affected products: Immunix OS 6.2, 7.0-beta, and 7.0
Bugs Fixed: immunix/1563
Date: April 14, 2001
Advisory ID: IMNX-2001-70-015-01
Author: Greg Kroah-Hartman <greg@wirex.com>
-----------------------------------------------------------------------
Description:
Versions of pine that shipped with Immunix 6.2, 7.0-beta, and 7.0
are vulnerable to temp file races which could allow malicious users
to obtain root privileges. This release fixes this problem, and
many other pine bugs (see
http://www.washington.edu/pine/changes.html for a full list of all
of the bug fixed.)
Immunix 7.0 does not install the pine packages by default but
provides them in the extras/unsupported directory so they do not
need to be upgraded unless they have been installed manually by the
system administrator.
Package names and locations:
Precompiled binary package for Immunix 6.2 is available at:
http://immunix.org/ImmunixOS/6.2/updates/RPMS/pine-4.33-6.6x_StackGuard.i386.rpm
Source package for Immunix 6.2 is available at:
http://immunix.org/ImmunixOS/6.2/updates/SRPMS/pine-4.33-6.6x_StackGuard.src.rpm
Precompiled binary package for Immunix 7.0-beta and 7.0 is available at:
http://immunix.org/ImmunixOS/7.0/updates/RPMS/pine-4.33-7_imnx.i386.rpm
Source package for Immunix 7.0-beta and 7.0 is available at:
http://immunix.org/ImmunixOS/7.0/updates/SRPMS/pine-4.33-7_imnx.src.rpm
md5sums of the packages:
a43ca7118fd2d59d3699bce8962435e6 pine-4.33-6.6x_StackGuard.i386.rpm
da821b5245bbfaa669f56a3a462e014f pine-4.33-6.6x_StackGuard.src.rpm
4ecbd610fb2f02d057275dac75acaef1 pine-4.33-7_imnx.i386.rpm
392c5018b3615617e2b14aa6a0d2414c pine-4.33-7_imnx.src.rpm
Online version of all Immunix 6.2 updates and advisories:
http://immunix.org/ImmunixOS/6.2/updates/
Online version of all Immunix 7.0-beta updates and advisories:
http://immunix.org/ImmunixOS/7.0-beta/updates/
Online version of all Immunix 7.0 updates and advisories:
http://immunix.org/ImmunixOS/7.0/updates/
NOTE:
Ibiblio is graciously mirroring our updates, so if the links above are
slow, please try:
ftp://ftp.ibiblio.org/pub/Linux/distributions/immunix/
or one of the many mirrors available at:
http://www.ibiblio.org/pub/Linux/MIRRORS.html
(6369810) /Greg KH <greg@WIREX.COM>/------(Ombruten)
Bilaga (application/pgp-signature) i text 6369811
6369811 2001-04-16 16:50 -0700 /10 rader/ Greg KH <greg@WIREX.COM>
Importerad: 2001-04-17 09:55 av Brevbäraren
Extern mottagare: BUGTRAQ@SECURITYFOCUS.COM
Externa svar till: greg@WIREX.COM
Mottagare: Bugtraq (import) <16580>
Bilaga (text/plain) till text 6369810
Ärende: Bilaga till: Immunix OS Security update for pine
------------------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (GNU/Linux)
Comment: For info see http://www.gnupg.org
iD8DBQE624VUAl5ylTeuKpURAq/nAKCDYiNlxHBPCu7YFmsZRJ9e2zztbQCdHFGK
sGpltD5EncBY5Xv6+d/35dc=
=cS6g
-----END PGP SIGNATURE-----
(6369811) /Greg KH <greg@WIREX.COM>/----------------