Date: Mon, 16 Apr 2001 16:50:45 -0700 From: Greg KH <greg@WIREX.COM> Subject: Immunix OS Security update for pine To: BUGTRAQ@SECURITYFOCUS.COM --ffoCPvUAPMgSXi6H Content-Type: text/plain; charset=us-ascii Content-Disposition: inline ----------------------------------------------------------------------- Immunix OS Security Advisory Packages updated: pine Affected products: Immunix OS 6.2, 7.0-beta, and 7.0 Bugs Fixed: immunix/1563 Date: April 14, 2001 Advisory ID: IMNX-2001-70-015-01 Author: Greg Kroah-Hartman <greg@wirex.com> ----------------------------------------------------------------------- Description: Versions of pine that shipped with Immunix 6.2, 7.0-beta, and 7.0 are vulnerable to temp file races which could allow malicious users to obtain root privileges. This release fixes this problem, and many other pine bugs (see http://www.washington.edu/pine/changes.html for a full list of all of the bug fixed.) Immunix 7.0 does not install the pine packages by default but provides them in the extras/unsupported directory so they do not need to be upgraded unless they have been installed manually by the system administrator. Package names and locations: Precompiled binary package for Immunix 6.2 is available at: http://immunix.org/ImmunixOS/6.2/updates/RPMS/pine-4.33-6.6x_StackGuard.i386.rpm Source package for Immunix 6.2 is available at: http://immunix.org/ImmunixOS/6.2/updates/SRPMS/pine-4.33-6.6x_StackGuard.src.rpm Precompiled binary package for Immunix 7.0-beta and 7.0 is available at: http://immunix.org/ImmunixOS/7.0/updates/RPMS/pine-4.33-7_imnx.i386.rpm Source package for Immunix 7.0-beta and 7.0 is available at: http://immunix.org/ImmunixOS/7.0/updates/SRPMS/pine-4.33-7_imnx.src.rpm md5sums of the packages: a43ca7118fd2d59d3699bce8962435e6 pine-4.33-6.6x_StackGuard.i386.rpm da821b5245bbfaa669f56a3a462e014f pine-4.33-6.6x_StackGuard.src.rpm 4ecbd610fb2f02d057275dac75acaef1 pine-4.33-7_imnx.i386.rpm 392c5018b3615617e2b14aa6a0d2414c pine-4.33-7_imnx.src.rpm Online version of all Immunix 6.2 updates and advisories: http://immunix.org/ImmunixOS/6.2/updates/ Online version of all Immunix 7.0-beta updates and advisories: http://immunix.org/ImmunixOS/7.0-beta/updates/ Online version of all Immunix 7.0 updates and advisories: http://immunix.org/ImmunixOS/7.0/updates/ NOTE: Ibiblio is graciously mirroring our updates, so if the links above are slow, please try: ftp://ftp.ibiblio.org/pub/Linux/distributions/immunix/ or one of the many mirrors available at: http://www.ibiblio.org/pub/Linux/MIRRORS.html --ffoCPvUAPMgSXi6H Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.4 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE624VUAl5ylTeuKpURAq/nAKCDYiNlxHBPCu7YFmsZRJ9e2zztbQCdHFGK sGpltD5EncBY5Xv6+d/35dc= =cS6g -----END PGP SIGNATURE----- --ffoCPvUAPMgSXi6H--