[LWN Logo]

To: redhat-announce-list@redhat.com
Subject: pine-4.10-3 - security update
From: Simon Liddington <sjl96v@ecs.soton.ac.uk>
Date: 09 Feb 1999 17:48:00 +0000


Here we go again. If only I had released this a week later ;->

A remote exploit has been found in pine and a patch was posted on
BUGTRAQ by "Terence C. Haddock" <thaddock@POBOXES.COM>. I have added
this patch to my rpms 'as is'.

DISCLAIMER: I make no guarantee about the security of these rpms.

Uploaded to incoming.redhat.com:/libc6, also available from
ftp://rayleigh.ecs.soton.ac.uk/pub until they are moved to contrib.

Name        : pine                        Distribution: (none)
Version     : 4.10                              Vendor: (none)
Release     : 3                             Build Date: Tue Feb  9 16:47:17 1999
Install date: Tue Feb  9 17:28:37 1999      Build Host: rayleigh.ecs.soton.ac.uk
Group       : Applications/Mail             Source RPM: pine-4.10-3.src.rpm
Size        : 3508597                     Architecture: i386
License     : distributable
Packager    : Simon Liddington <sjl96v@ecs.soton.ac.uk>
URL         : http://www.washington.edu/pine
Summary     : MIME compliant mail reader w/ news support as well
Description :
Pine is a very full featured text based mail and news client. It is
aimed at both novice and expert users. It includes an easy to use editor,
pico, for composing messages. Pico has gained popularity as a stand
alone text editor in it's own right. It features MIME support, address
books, and support for IMAP, mail, and MH style folders.
* Tue Feb 09 1999 Simon Liddington <sjl96v@ecs.soton.ac.uk>

- fixed glibc patch which had lost bits in upgrade to 4.10
- added patch by "Terence C. Haddock" <thaddock@POBOXES.COM> posted on BUGTRAQ to fix remote exploit hole

* Mon Feb 08 1999 Simon Liddington <sjl96v@ecs.soton.ac.uk>

- added patch from Charles R. Anderson <cra@angus.ind.WPI.EDU> to (possibly) fix resizing bug

* Fri Feb 05 1999 Simon Liddington <sjl96v@ecs.soton.ac.uk>

- upgrade to 4.10

* Tue Feb 02 1999 Simon Liddington <sjl96v@ecs.soton.ac.uk>

- added a patch to make sure X-Sender gets set with real login name
- added a patch to include user_id in configurable options under UNIX
- added patch to do pretty colours

* Fri Oct 09 1998 Cristian Gafton <gafton@redhat.com>

- use termios instead of termio (patch used to be in here...)
- use terminfo instead of termcap and link against ncurses instead of termcap
- supply -lcrypt as a standard lib

-- 
-----------------------------------------------------------------------
| Simon Liddington                 |                                  |
| E-Mail : sjl96v@ecs.soton.ac.uk  |  Tel (work) : +44 (0)1703 592422 |
-----------------------------------------------------------------------


-- 
To unsubscribe:
mail -s unsubscribe redhat-announce-list-request@redhat.com < /dev/null