From greg@WIREX.COM Tue Feb 27 01:31:33 2001 From: Greg KH To: BUGTRAQ@SECURITYFOCUS.COM Date: Mon, 26 Feb 2001 09:35:19 -0800 Subject: [BUGTRAQ] Immunix OS 6.2 Security updates for php, dump, and lpr ----------------------------------------------------------------------- Immunix OS Security Advisory Packages updated: php, dump, lpr Affected products: Immunix OS 6.2 Bugs Fixed: immunix/1327 Date: February 26, 2001 Advisory ID: IMNX-2001-62-002-01 Author: Greg Kroah-Hartman ----------------------------------------------------------------------- Description: WireX was recently notified that three packages had not been updated for which there had been security updates for in the past. We regret this error, and thank Mario Lorenz for notifying us of this. The dump package shipped with Immunix OS 6.2 had setuid bits set on it. Also a buffer overflow was found in dump, but was stopped by StackGuard. A new package has been released. The lpr package shipped with Immunix OS 6.2 had a format string security bug, a potential race condition, and a few LPRng compatibility issues. A new package has been released fixing these problems. The php3 package shipped with Immunix OS 6.2 had a number of logic bugs, which this 3.0.18 release should solve. Package names and locations: Precompiled binary packages for Immunix 6.2 are available at: http://immunix.org/ImmunixOS/6.2/updates/RPMS/dump-0.4b19-5.6x_StackGuard.i386.rpm http://immunix.org/ImmunixOS/6.2/updates/RPMS/dump-static-0.4b19-5.6x_StackGuard.i386.rpm http://immunix.org/ImmunixOS/6.2/updates/RPMS/rmt-0.4b19-5.6x_StackGuard.i386.rpm http://immunix.org/ImmunixOS/6.2/updates/RPMS/lpr-0.50-7.6.x_StackGuard.i386.rpm http://immunix.org/ImmunixOS/6.2/updates/RPMS/php-3.0.18-1.6.x_StackGuard.i386.rpm http://immunix.org/ImmunixOS/6.2/updates/RPMS/php-imap-3.0.18-1.6.x_StackGuard.i386.rpm http://immunix.org/ImmunixOS/6.2/updates/RPMS/php-ldap-3.0.18-1.6.x_StackGuard.i386.rpm http://immunix.org/ImmunixOS/6.2/updates/RPMS/php-manual-3.0.18-1.6.x_StackGuard.i386.rpm http://immunix.org/ImmunixOS/6.2/updates/RPMS/php-pgsql-3.0.18-1.6.x_StackGuard.i386.rpm Source packages for Immunix 6.2 are available at: http://immunix.org/ImmunixOS/6.2/updates/SRPMS/dump-0.4b19-5.6x_StackGuard.src.rpm http://immunix.org/ImmunixOS/6.2/updates/SRPMS/lpr-0.50-7.6.x_StackGuard.src.rpm http://immunix.org/ImmunixOS/6.2/updates/SRPMS/php-3.0.18-1.6.x_StackGuard.src.rpm md5sums of the packages: 910d99fedbdc98920c9eac3009e4b701 RPMS/dump-0.4b19-5.6x_StackGuard.i386.rpm e16624080196103d0f12708548ad8ff4 RPMS/dump-static-0.4b19-5.6x_StackGuard.i386.rpm 84679604e26208e702d7ab6679e6204d RPMS/rmt-0.4b19-5.6x_StackGuard.i386.rpm 2a629d1d5c8d796acc1a69288f702bc0 RPMS/lpr-0.50-7.6.x_StackGuard.i386.rpm 2e44623464733c91091100e2a61c6c5e RPMS/php-3.0.18-1.6.x_StackGuard.i386.rpm c7eeffb9782db48201978991ac893155 RPMS/php-imap-3.0.18-1.6.x_StackGuard.i386.rpm cb6682aab19a64b0f325c8c5ad753f1c RPMS/php-ldap-3.0.18-1.6.x_StackGuard.i386.rpm 92e2469b2a53eed5170e9afaf514ce1f RPMS/php-manual-3.0.18-1.6.x_StackGuard.i386.rpm cd7f34a91b0452514b5af50d3401ed3b RPMS/php-pgsql-3.0.18-1.6.x_StackGuard.i386.rpm 5d3e250426e15e5648aec947a16883b2 SRPMS/dump-0.4b19-5.6x_StackGuard.src.rpm ae7431f8a6677a682e1b0fc52a08ccb1 SRPMS/lpr-0.50-7.6.x_StackGuard.src.rpm ea4b490547db00905866c07e331dd6ff SRPMS/php-3.0.18-1.6.x_StackGuard.src.rpm Online version of all Immunix 6.2 updates and advisories: http://immunix.org/ImmunixOS/6.2/updates/ NOTE: Ibiblio is graciously mirroring our updates, so if the links above are slow, please try: ftp://ftp.ibiblio.org/pub/Linux/distributions/immunix/ or one of the many mirrors available at: http://www.ibiblio.org/pub/Linux/MIRRORS.html [Part 2, Application/PGP-SIGNATURE 240bytes] [Unable to print this part]