From greg@WIREX.COM Tue Apr 17 06:43:08 2001 From: Greg KH To: BUGTRAQ@SECURITYFOCUS.COM Date: Mon, 16 Apr 2001 16:50:11 -0700 Subject: [BUGTRAQ] Immunix OS Security update for netscape ----------------------------------------------------------------------- Immunix OS Security Advisory Packages updated: netscape Affected products: Immunix OS 6.2, 7.0-beta, and 7.0 Bugs Fixed: immunix/1562 Date: April 14, 2001 Advisory ID: IMNX-2001-70-014-01 Author: Greg Kroah-Hartman ----------------------------------------------------------------------- Description: Florian Wesch has found that Netscape versions prior to 4.77 are vulnerable to a buffer overflow bug in the way Netscape handles gif images (see http://www.securityfocus.com/archive/1/175060 for more information.) Netscape has released new binary packages that fix this problem. Immunix 7.0 does not install the netscape packages by default but provides them in the extras/unsupported directory so they do not need to be upgraded unless they have been installed manually by the system administrator. Package names and locations: Precompiled binary packages for Immunix 6.2 are available at: http://immunix.org/ImmunixOS/6.2/updates/RPMS/netscape-common-4.77-0.6.2_StackGuard.i386.rpm http://immunix.org/ImmunixOS/6.2/updates/RPMS/netscape-communicator-4.77-0.6.2_StackGuard.i386.rpm http://immunix.org/ImmunixOS/6.2/updates/RPMS/netscape-navigator-4.77-0.6.2_StackGuard.i386.rpm Source package for Immunix 6.2 is available at: http://immunix.org/ImmunixOS/6.2/updates/SRPMS/netscape-4.77-0.6.2_StackGuard.src.rpm Precompiled binary packages for Immunix 7.0-beta and 7.0 are available at: http://immunix.org/ImmunixOS/7.0/updates/RPMS/netscape-common-4.77-1_imnx.i386.rpm http://immunix.org/ImmunixOS/7.0/updates/RPMS/netscape-communicator-4.77-1_imnx.i386.rpm http://immunix.org/ImmunixOS/7.0/updates/RPMS/netscape-navigator-4.77-1_imnx.i386.rpm Source package for Immunix 7.0-beta and 7.0 is available at: http://immunix.org/ImmunixOS/7.0/updates/SRPMS/netscape-4.77-1_imnx.src.rpm md5sums of the packages: 40e966b784763331fe94d74dcd10c19c netscape-common-4.77-0.6.2_StackGuard.i386.rpm 5759c9360cbd1571822ba339a5e39cb6 netscape-communicator-4.77-0.6.2_StackGuard.i386.rpm 7cc1855fd130f753a719edff37ba8b62 netscape-navigator-4.77-0.6.2_StackGuard.i386.rpm 921d14e391e67bea3f4f93a2af990463 netscape-4.77-0.6.2_StackGuard.src.rpm 0656a5f8afe960dc22f99ea72170d52b netscape-common-4.77-1_imnx.i386.rpm 0820c0bf2bc60871940f537a80829cb5 netscape-communicator-4.77-1_imnx.i386.rpm 148e2e62e3431b3a987f557453729090 netscape-navigator-4.77-1_imnx.i386.rpm 744a3d5ae4fdc1988c3e9012679f13c5 netscape-4.77-1_imnx.src.rpm Online version of all Immunix 6.2 updates and advisories: http://immunix.org/ImmunixOS/6.2/updates/ Online version of all Immunix 7.0-beta updates and advisories: http://immunix.org/ImmunixOS/7.0-beta/updates/ Online version of all Immunix 7.0 updates and advisories: http://immunix.org/ImmunixOS/7.0/updates/ NOTE: Ibiblio is graciously mirroring our updates, so if the links above are slow, please try: ftp://ftp.ibiblio.org/pub/Linux/distributions/immunix/ or one of the many mirrors available at: http://www.ibiblio.org/pub/Linux/MIRRORS.html [Part 2, Application/PGP-SIGNATURE 240bytes] [Unable to print this part]