OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Linux Mandrake Security Team (securityLINUX-MANDRAKE.COM)
Date: Wed Jan 10 2001 - 19:41:45 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    ________________________________________________________________________

                    Linux-Mandrake Security Update Advisory
    ________________________________________________________________________

    Package name: diffutils
    Date: January 10th, 2001
    Advisory ID: MDKSA-2001:008

    Affected versions: 6.0, 6.1, 7.0, 7.1, 7.2
    ________________________________________________________________________

    Problem Description:

     WireX discovered a potential temporary file race condition in the sdiff
     program within the diffutils package. This update corrects the
     problem.
    ________________________________________________________________________

    Please verify the update prior to upgrading to ensure the integrity of
    the downloaded package. You can do this with the command:
      rpm --checksig package.rpm
    You can get the GPG public key of the Linux-Mandrake Security Team at
      http://www.linux-mandrake.com/en/security/RPM-GPG-KEYS
    If you use MandrakeUpdate, the verification of md5 checksum and GPG
    signature is performed automatically for you.

    Linux-Mandrake 6.0:
    07f772ddd79ba6403441746be476a139 6.0/RPMS/diffutils-2.7-25.2mdk.i586.rpm
    b9bf1de19be05c040b1542839d54f55c 6.0/SRPMS/diffutils-2.7-25.2mdk.src.rpm

    Linux-Mandrake 6.1:
    02163569f57a64a7ae58506f96e5b088 6.1/RPMS/diffutils-2.7-25.2mdk.i586.rpm
    b9bf1de19be05c040b1542839d54f55c 6.1/SRPMS/diffutils-2.7-25.2mdk.src.rpm

    Linux-Mandrake 7.0:
    1ab31665623d20101fd73c35b81cbc6b 7.0/RPMS/diffutils-2.7-25.2mdk.i586.rpm
    b9bf1de19be05c040b1542839d54f55c 7.0/SRPMS/diffutils-2.7-25.2mdk.src.rpm

    Linux-Mandrake 7.1:
    fe29a7f9b1aefbd5945fe9b5e9cdff77 7.1/RPMS/diffutils-2.7-25.2mdk.i586.rpm
    b9bf1de19be05c040b1542839d54f55c 7.1/SRPMS/diffutils-2.7-25.2mdk.src.rpm

    Linux-Mandrake 7.2:
    d8bb189bc4b7c03cba522cf055af20cf 7.2/RPMS/diffutils-2.7-25.1mdk.i586.rpm
    56a98958389420a0d97b19d228e37b3c 7.2/SRPMS/diffutils-2.7-25.1mdk.src.rpm
    ________________________________________________________________________

    To upgrade automatically, use MandrakeUpdate.

    If you want to upgrade manually, download the updated package from one
    of our FTP server mirrors and upgrade with "rpm -Fvh *.rpm".

    You can download the updates directly from one of the mirror sites
    listed at:

      http://www.linux-mandrake.com/en/ftp.php3.

    Updated packages are available in the "updates/[ver]/RPMS/" directory.
    For example, if you are looking for an updated RPM package for
    Linux-Mandrake 7.2, look for it in "updates/7.2/RPMS/". Updated source
    RPMs are available as well, but you generally do not need to download
    them.

    Please be aware that sometimes it takes the mirrors a few hours to
    update.

    You can view other security advisories for Linux-Mandrake at:

      http://www.linux-mandrake.com/en/security/

    If you want to report vulnerabilities, please contact

      securitylinux-mandrake.com
    ________________________________________________________________________

    Linux-Mandrake has two security-related mailing list services that
    anyone can subscribe to:

    security-announcelinux-mandrake.com

      Linux-Mandrake's security announcements mailing list. Only
      announcements are sent to this list and it is read-only.

    security-discusslinux-mandrake.com

      Linux-Mandrake's security discussion mailing list. This list is open
      to anyone to discuss Linux-Mandrake security specifically and Linux
      security in general.

    To subscribe to either list, send a message to
      sympalinux-mandrake.com
    with "subscribe [listname]" in the body of the message.

    To remove yourself from either list, send a message to
      sympalinux-mandrake.com
    with "unsubscribe [listname]" in the body of the message.

    To get more information on either list, send a message to
      sympalinux-mandrake.com
    with "info [listname]" in the body of the message.

    Optionally, you can use the web interface to subscribe to or unsubscribe
    from either list:

      http://www.linux-mandrake.com/en/flists.php3#security
    ________________________________________________________________________

    Type Bits/KeyID Date User ID
    pub 1024D/22458A98 2000-07-10 Linux Mandrake Security Team
      <securitylinux-mandrake.com>

    - -----BEGIN PGP PUBLIC KEY BLOCK-----
    Version: GnuPG v1.0.1 (GNU/Linux)
    Comment: For info see http://www.gnupg.org

    mQGiBDlp594RBAC2tDozI3ZgQsE7XwxurJCJrX0L5vx7SDByR5GHDdWekGhdiday
    L4nfUax+SeR9SCoCgTgPW1xB8vtQc8/sinJlMjp9197a2iKM0FOcPlkpa3HcOdt7
    WKJqQhlMrHvRcsivzcgqjH44GBBJIT6sygUF8k0lU6YnMHj5MPc/NGWt8wCg9vKo
    P0l5QVAFSsHtqcU9W8cc7wMEAJzQsAlnvPXDBfBLEH6u7ptWFdp0GvbSuG2wRaPl
    hynHvRiE01ZvwbJZXsPsKm1z7uVoW+NknKLunWKB5axrNXDHxCYJBzY3jTeFjsqx
    PFZkIEAQphLTkeXXelAjQ5u9tEshPswEtMvJvUgNiAfbzHfPYmq8D6x5xOw1IySg
    2e/LBACxr2UJYCCB2BZ3p508mAB0RpuLGukq+7UWiOizy+kSskIBg2O7sQkVY/Cs
    iyGEo4XvXqZFMY39RBdfm2GY+WB/5NFiTOYJRKjfprP6K1YbtsmctsX8dG+foKsD
    LLFs7OuVfaydLQYp1iiN6D+LJDSMPM8/LCWzZsgr9EKJ8NXiyrQ6TGludXggTWFu
    ZHJha2UgU2VjdXJpdHkgVGVhbSA8c2VjdXJpdHlAbGludXgtbWFuZHJha2UuY29t
    PohWBBMRAgAWBQI5aefeBAsKBAMDFQMCAxYCAQIXgAAKCRCaqNDQIkWKmK6LAKCy
    /NInDsaMSI+WHwrquwC5PZrcnQCeI+v3gUDsNfQfiKBvQSANu1hdulq5AQ0EOWnn
    7xAEAOQlTVY4TiNo5V/iP0J1xnqjqlqZsU7yEBKo/gZz6/+hx75RURe1ebiJ9F77
    9FQbpJ9Epz1KLSXvq974rnVb813zuGdmgFyk+ryA/rTR2RQ8h+EoNkwmATzRxBXV
    Jb57fFQjxOu4eNjZAtfII/YXb0uyXXrdr5dlJ/3eXrcO4p0XAAMFBACCxo6Z269s
    +A4v8C6Ui12aarOQcCDlV8cVG9LkyatU3FNTlnasqwo6EkaP572448weJWwN6SCX
    Vl+xOYLiK0hL/6Jb/O9Agw75yUVdk+RMM2I4fNEi+y4hmfMh2siBv8yEkEvZjTcl
    3TpkTfzYky85tu433wmKaLFOv0WjBFSikohGBBgRAgAGBQI5aefvAAoJEJqo0NAi
    RYqYid0AoJgeWzXrEdIClBOSW5Q6FzqJJyaqAKC0Y9YI3UFlE4zSIGjcFlLJEJGX
    lA==
    =WxWn
    - -----END PGP PUBLIC KEY BLOCK-----

    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.0.4 (GNU/Linux)
    Comment: For info see http://www.gnupg.org

    iD8DBQE6XPdBmqjQ0CJFipgRAkYQAJ4g8bvy+D5W6BTYnzIIGvTSbYqcFgCeNv/F
    RLlD/rgzdJCx/D5K3n0HpSU=
    =BR8Q
    -----END PGP SIGNATURE-----