----------------------------------------------------------------------- Immunix OS Security Advisory Packages updated: pine Affected products: Immunix OS 6.2, 7.0-beta, and 7.0 Bugs Fixed: immunix/1563 Date: April 14, 2001 Advisory ID: IMNX-2001-70-015-01 Author: Greg Kroah-Hartman <gregat_private> ----------------------------------------------------------------------- Description: Versions of pine that shipped with Immunix 6.2, 7.0-beta, and 7.0 are vulnerable to temp file races which could allow malicious users to obtain root privileges. This release fixes this problem, and many other pine bugs (see http://www.washington.edu/pine/changes.html for a full list of all of the bug fixed.) Immunix 7.0 does not install the pine packages by default but provides them in the extras/unsupported directory so they do not need to be upgraded unless they have been installed manually by the system administrator. Package names and locations: Precompiled binary package for Immunix 6.2 is available at: http://immunix.org/ImmunixOS/6.2/updates/RPMS/pine-4.33-6.6x_StackGuard.i386.rpm Source package for Immunix 6.2 is available at: http://immunix.org/ImmunixOS/6.2/updates/SRPMS/pine-4.33-6.6x_StackGuard.src.rpm Precompiled binary package for Immunix 7.0-beta and 7.0 is available at: http://immunix.org/ImmunixOS/7.0/updates/RPMS/pine-4.33-7_imnx.i386.rpm Source package for Immunix 7.0-beta and 7.0 is available at: http://immunix.org/ImmunixOS/7.0/updates/SRPMS/pine-4.33-7_imnx.src.rpm md5sums of the packages: a43ca7118fd2d59d3699bce8962435e6 pine-4.33-6.6x_StackGuard.i386.rpm da821b5245bbfaa669f56a3a462e014f pine-4.33-6.6x_StackGuard.src.rpm 4ecbd610fb2f02d057275dac75acaef1 pine-4.33-7_imnx.i386.rpm 392c5018b3615617e2b14aa6a0d2414c pine-4.33-7_imnx.src.rpm Online version of all Immunix 6.2 updates and advisories: http://immunix.org/ImmunixOS/6.2/updates/ Online version of all Immunix 7.0-beta updates and advisories: http://immunix.org/ImmunixOS/7.0-beta/updates/ Online version of all Immunix 7.0 updates and advisories: http://immunix.org/ImmunixOS/7.0/updates/ NOTE: Ibiblio is graciously mirroring our updates, so if the links above are slow, please try: ftp://ftp.ibiblio.org/pub/Linux/distributions/immunix/ or one of the many mirrors available at: http://www.ibiblio.org/pub/Linux/MIRRORS.html
This archive was generated by hypermail 2b30 : Mon Apr 16 2001 - 23:47:54 PDT