OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Linux Mandrake Security Team (securityLINUX-MANDRAKE.COM)
Date: Fri Apr 27 2001 - 17:24:54 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    ________________________________________________________________________

                    Linux-Mandrake Security Update Advisory
    ________________________________________________________________________

    Package name: gftp
    Date: April 27th, 2001
    Advisory ID: MDKSA-2001:044

    Affected versions: 7.1, 7.2, 8.0, Corporate Server 1.0.1

    References: http://gftp.seul.org/changelog.html
    ________________________________________________________________________

    Problem Description:

     A format string vulnerability exists in all versions of gftp prior to
     version 2.0.8. This vulnerability has been fixed upstream in version
     2.0.8.
    ________________________________________________________________________

    Please verify the update prior to upgrading to ensure the integrity of
    the downloaded package. You can do this with the command:
      rpm --checksig package.rpm
    You can get the GPG public key of the Linux-Mandrake Security Team at
      http://www.linux-mandrake.com/en/security/RPM-GPG-KEYS
    If you use MandrakeUpdate, the verification of md5 checksum and GPG
    signature is performed automatically for you.

    Linux-Mandrake 7.1:
    245b8c2e9be141c516e4f3929392a674 7.1/RPMS/gftp-2.0.8-1.2mdk.i586.rpm
    9ee9e9ee732f268bb5b18a0dbc9d1da4 7.1/SRPMS/gftp-2.0.8-1.2mdk.src.rpm

    Linux-Mandrake 7.2:
    0bb0f6b284a834cac70e5f3f356fcbf7 7.2/RPMS/gftp-2.0.8-1.1mdk.i586.rpm
    056e45f8a2a596baff3aca26215006e6 7.2/SRPMS/gftp-2.0.8-1.1mdk.src.rpm

    Linux-Mandrake 8.0:
    dff897a7e0e887f5fcafd2173b5e1aa6 8.0/RPMS/gftp-2.0.8-1.1mdk.i586.rpm
    056e45f8a2a596baff3aca26215006e6 8.0/SRPMS/gftp-2.0.8-1.1mdk.src.rpm

    Corporate Server 1.0.1:
    245b8c2e9be141c516e4f3929392a674 1.0.1/RPMS/gftp-2.0.8-1.2mdk.i586.rpm
    9ee9e9ee732f268bb5b18a0dbc9d1da4 1.0.1/SRPMS/gftp-2.0.8-1.2mdk.src.rpm
    ________________________________________________________________________

    To upgrade automatically, use MandrakeUpdate.

    If you want to upgrade manually, download the updated package from one
    of our FTP server mirrors and upgrade with "rpm -Fvh *.rpm".

    You can download the updates directly from one of the mirror sites
    listed at:

      http://www.linux-mandrake.com/en/ftp.php3.

    Updated packages are available in the "updates/[ver]/RPMS/" directory.
    For example, if you are looking for an updated RPM package for
    Linux-Mandrake 8.0, look for it in "updates/8.0/RPMS/". Updated source
    RPMs are available as well, but you generally do not need to download
    them.

    Please be aware that sometimes it takes the mirrors a few hours to
    update.

    You can view other security advisories for Linux-Mandrake at:

      http://www.linux-mandrake.com/en/security/

    If you want to report vulnerabilities, please contact

      securitylinux-mandrake.com
    ________________________________________________________________________

    Linux-Mandrake has two security-related mailing list services that
    anyone can subscribe to:

    security-announcelinux-mandrake.com

      Linux-Mandrake's security announcements mailing list. Only
      announcements are sent to this list and it is read-only.

    security-discusslinux-mandrake.com

      Linux-Mandrake's security discussion mailing list. This list is open
      to anyone to discuss Linux-Mandrake security specifically and Linux
      security in general.

    To subscribe to either list, send a message to
      sympalinux-mandrake.com
    with "subscribe [listname]" in the body of the message.

    To remove yourself from either list, send a message to
      sympalinux-mandrake.com
    with "unsubscribe [listname]" in the body of the message.

    To get more information on either list, send a message to
      sympalinux-mandrake.com
    with "info [listname]" in the body of the message.

    Optionally, you can use the web interface to subscribe to or unsubscribe
    from either list:

      http://www.linux-mandrake.com/en/flists.php3#security
    ________________________________________________________________________

    Type Bits/KeyID Date User ID
    pub 1024D/22458A98 2000-07-10 Linux Mandrake Security Team
      <securitylinux-mandrake.com>

    - -----BEGIN PGP PUBLIC KEY BLOCK-----
    Version: GnuPG v1.0.4 (GNU/Linux)
    Comment: For info see http://www.gnupg.org

    mQGiBDlp594RBAC2tDozI3ZgQsE7XwxurJCJrX0L5vx7SDByR5GHDdWekGhdiday
    L4nfUax+SeR9SCoCgTgPW1xB8vtQc8/sinJlMjp9197a2iKM0FOcPlkpa3HcOdt7
    WKJqQhlMrHvRcsivzcgqjH44GBBJIT6sygUF8k0lU6YnMHj5MPc/NGWt8wCg9vKo
    P0l5QVAFSsHtqcU9W8cc7wMEAJzQsAlnvPXDBfBLEH6u7ptWFdp0GvbSuG2wRaPl
    hynHvRiE01ZvwbJZXsPsKm1z7uVoW+NknKLunWKB5axrNXDHxCYJBzY3jTeFjsqx
    PFZkIEAQphLTkeXXelAjQ5u9tEshPswEtMvJvUgNiAfbzHfPYmq8D6x5xOw1IySg
    2e/LBACxr2UJYCCB2BZ3p508mAB0RpuLGukq+7UWiOizy+kSskIBg2O7sQkVY/Cs
    iyGEo4XvXqZFMY39RBdfm2GY+WB/5NFiTOYJRKjfprP6K1YbtsmctsX8dG+foKsD
    LLFs7OuVfaydLQYp1iiN6D+LJDSMPM8/LCWzZsgr9EKJ8NXiyrQ6TGludXggTWFu
    ZHJha2UgU2VjdXJpdHkgVGVhbSA8c2VjdXJpdHlAbGludXgtbWFuZHJha2UuY29t
    PohWBBMRAgAWBQI5aefeBAsKBAMDFQMCAxYCAQIXgAAKCRCaqNDQIkWKmK6LAKCy
    /NInDsaMSI+WHwrquwC5PZrcnQCeI+v3gUDsNfQfiKBvQSANu1hdulqIRgQQEQIA
    BgUCOtNVGQAKCRBZ5w3um0pAJJWQAKDUoL5He+mKbfrMaTuyU5lmRyJ0fwCgoFAP
    WdvQlu/kFjphF740XeOwtOqIRgQQEQIABgUCOtOieAAKCRCv2bZyU0yB80MeAJ9K
    +jXt0cKuaUonRU+CRGetk6t9dgCfTRRL6/puOKdD6md70+K5EBBSvsG5AQ0EOWnn
    7xAEAOQlTVY4TiNo5V/iP0J1xnqjqlqZsU7yEBKo/gZz6/+hx75RURe1ebiJ9F77
    9FQbpJ9Epz1KLSXvq974rnVb813zuGdmgFyk+ryA/rTR2RQ8h+EoNkwmATzRxBXV
    Jb57fFQjxOu4eNjZAtfII/YXb0uyXXrdr5dlJ/3eXrcO4p0XAAMFBACCxo6Z269s
    +A4v8C6Ui12aarOQcCDlV8cVG9LkyatU3FNTlnasqwo6EkaP572448weJWwN6SCX
    Vl+xOYLiK0hL/6Jb/O9Agw75yUVdk+RMM2I4fNEi+y4hmfMh2siBv8yEkEvZjTcl
    3TpkTfzYky85tu433wmKaLFOv0WjBFSikohGBBgRAgAGBQI5aefvAAoJEJqo0NAi
    RYqYid0AoJgeWzXrEdIClBOSW5Q6FzqJJyaqAKC0Y9YI3UFlE4zSIGjcFlLJEJGX
    lA==
    =dVwX
    - -----END PGP PUBLIC KEY BLOCK-----

    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.0.4 (GNU/Linux)
    Comment: For info see http://www.gnupg.org

    iD8DBQE66cSNmqjQ0CJFipgRApWPAKDuSLL7lkG5EHO4Pc87StSp/lOKVACdFPSX
    fLNBqoC48i2wMC82fLyGZ2M=
    =q5o9
    -----END PGP SIGNATURE-----