[LWN Logo]
[LWN.net]
Date:         Mon, 16 Apr 2001 16:50:45 -0700
From: Greg KH <greg@WIREX.COM>
Subject:      Immunix OS Security update for pine
To: BUGTRAQ@SECURITYFOCUS.COM

--ffoCPvUAPMgSXi6H
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline


-----------------------------------------------------------------------
	Immunix OS Security Advisory

Packages updated:	pine
Affected products:	Immunix OS 6.2, 7.0-beta, and 7.0
Bugs Fixed:		immunix/1563
Date:			April 14, 2001
Advisory ID:		IMNX-2001-70-015-01
Author:			Greg Kroah-Hartman <greg@wirex.com>
-----------------------------------------------------------------------

Description:

  Versions of pine that shipped with Immunix 6.2, 7.0-beta, and 7.0 are
  vulnerable to temp file races which could allow malicious users to
  obtain root privileges.  This release fixes this problem, and many
  other pine bugs (see http://www.washington.edu/pine/changes.html for a
  full list of all of the bug fixed.)

  Immunix 7.0 does not install the pine packages by default but provides
  them in the extras/unsupported directory so they do not need to be
  upgraded unless they have been installed manually by the system
  administrator.


Package names and locations:

  Precompiled binary package for Immunix 6.2 is available at:
    http://immunix.org/ImmunixOS/6.2/updates/RPMS/pine-4.33-6.6x_StackGuard.i386.rpm

  Source package for Immunix 6.2 is available at:
    http://immunix.org/ImmunixOS/6.2/updates/SRPMS/pine-4.33-6.6x_StackGuard.src.rpm

  Precompiled binary package for Immunix 7.0-beta and 7.0 is available at:
    http://immunix.org/ImmunixOS/7.0/updates/RPMS/pine-4.33-7_imnx.i386.rpm

  Source package for Immunix 7.0-beta and 7.0 is available at:
    http://immunix.org/ImmunixOS/7.0/updates/SRPMS/pine-4.33-7_imnx.src.rpm


md5sums of the packages:
  a43ca7118fd2d59d3699bce8962435e6  pine-4.33-6.6x_StackGuard.i386.rpm
  da821b5245bbfaa669f56a3a462e014f  pine-4.33-6.6x_StackGuard.src.rpm

  4ecbd610fb2f02d057275dac75acaef1  pine-4.33-7_imnx.i386.rpm
  392c5018b3615617e2b14aa6a0d2414c  pine-4.33-7_imnx.src.rpm


Online version of all Immunix 6.2 updates and advisories:
  http://immunix.org/ImmunixOS/6.2/updates/

Online version of all Immunix 7.0-beta updates and advisories:
  http://immunix.org/ImmunixOS/7.0-beta/updates/

Online version of all Immunix 7.0 updates and advisories:
  http://immunix.org/ImmunixOS/7.0/updates/

NOTE:
  Ibiblio is graciously mirroring our updates, so if the links above are
  slow, please try:
    ftp://ftp.ibiblio.org/pub/Linux/distributions/immunix/
  or one of the many mirrors available at:
    http://www.ibiblio.org/pub/Linux/MIRRORS.html


--ffoCPvUAPMgSXi6H
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE624VUAl5ylTeuKpURAq/nAKCDYiNlxHBPCu7YFmsZRJ9e2zztbQCdHFGK
sGpltD5EncBY5Xv6+d/35dc=
=cS6g
-----END PGP SIGNATURE-----

--ffoCPvUAPMgSXi6H--