[LWN Logo]
[LWN.net]
Date:         Mon, 16 Apr 2001 16:50:11 -0700
From: Greg KH <greg@WIREX.COM>
Subject:      Immunix OS Security update for netscape
To: BUGTRAQ@SECURITYFOCUS.COM

--wULyF7TL5taEdwHz
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline


-----------------------------------------------------------------------
	Immunix OS Security Advisory

Packages updated:	netscape
Affected products:	Immunix OS 6.2, 7.0-beta, and 7.0
Bugs Fixed:		immunix/1562
Date:			April 14, 2001
Advisory ID:		IMNX-2001-70-014-01
Author:			Greg Kroah-Hartman <greg@wirex.com>
-----------------------------------------------------------------------

Description:

  Florian Wesch has found that Netscape versions prior to 4.77 are
  vulnerable to a buffer overflow bug in the way Netscape handles gif
  images (see http://www.securityfocus.com/archive/1/175060 for more
  information.)  Netscape has released new binary packages that fix this
  problem.

  Immunix 7.0 does not install the netscape packages by default but
  provides them in the extras/unsupported directory so they do not need
  to be upgraded unless they have been installed manually by the system
  administrator.


Package names and locations:

  Precompiled binary packages for Immunix 6.2 are available at:
    http://immunix.org/ImmunixOS/6.2/updates/RPMS/netscape-common-4.77-0.6.2_StackGuard.i386.rpm
    http://immunix.org/ImmunixOS/6.2/updates/RPMS/netscape-communicator-4.77-0.6.2_StackGuard.i386.rpm
    http://immunix.org/ImmunixOS/6.2/updates/RPMS/netscape-navigator-4.77-0.6.2_StackGuard.i386.rpm

  Source package for Immunix 6.2 is available at:
    http://immunix.org/ImmunixOS/6.2/updates/SRPMS/netscape-4.77-0.6.2_StackGuard.src.rpm

  Precompiled binary packages for Immunix 7.0-beta and 7.0 are available at:
    http://immunix.org/ImmunixOS/7.0/updates/RPMS/netscape-common-4.77-1_imnx.i386.rpm
    http://immunix.org/ImmunixOS/7.0/updates/RPMS/netscape-communicator-4.77-1_imnx.i386.rpm
    http://immunix.org/ImmunixOS/7.0/updates/RPMS/netscape-navigator-4.77-1_imnx.i386.rpm

  Source package for Immunix 7.0-beta and 7.0 is available at:
    http://immunix.org/ImmunixOS/7.0/updates/SRPMS/netscape-4.77-1_imnx.src.rpm


md5sums of the packages:
  40e966b784763331fe94d74dcd10c19c  netscape-common-4.77-0.6.2_StackGuard.i386.rpm
  5759c9360cbd1571822ba339a5e39cb6  netscape-communicator-4.77-0.6.2_StackGuard.i386.rpm
  7cc1855fd130f753a719edff37ba8b62  netscape-navigator-4.77-0.6.2_StackGuard.i386.rpm
  921d14e391e67bea3f4f93a2af990463  netscape-4.77-0.6.2_StackGuard.src.rpm

  0656a5f8afe960dc22f99ea72170d52b  netscape-common-4.77-1_imnx.i386.rpm
  0820c0bf2bc60871940f537a80829cb5  netscape-communicator-4.77-1_imnx.i386.rpm
  148e2e62e3431b3a987f557453729090  netscape-navigator-4.77-1_imnx.i386.rpm
  744a3d5ae4fdc1988c3e9012679f13c5  netscape-4.77-1_imnx.src.rpm


Online version of all Immunix 6.2 updates and advisories:
  http://immunix.org/ImmunixOS/6.2/updates/

Online version of all Immunix 7.0-beta updates and advisories:
  http://immunix.org/ImmunixOS/7.0-beta/updates/

Online version of all Immunix 7.0 updates and advisories:
  http://immunix.org/ImmunixOS/7.0/updates/

NOTE:
  Ibiblio is graciously mirroring our updates, so if the links above are
  slow, please try:
    ftp://ftp.ibiblio.org/pub/Linux/distributions/immunix/
  or one of the many mirrors available at:
    http://www.ibiblio.org/pub/Linux/MIRRORS.html


--wULyF7TL5taEdwHz
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE624UyAl5ylTeuKpURAv1UAJ49RL3PRbJEAXYD7mvG35VzZagDLwCg2Yvi
3wZbSyVog58zEJ3rgMrcb64=
=ZfYF
-----END PGP SIGNATURE-----

--wULyF7TL5taEdwHz--