Linux Today: Linux News On Internet Time.
Search Linux Today
Linux News Sections:  Developer -  High Performance -  Infrastructure -  IT Management -  Security -  Storage -
Linux Today Navigation
LT Home
Contribute
Contribute
Link to Us
Linux Jobs


Top White Papers

More on LinuxToday


Advisories: February 24, 2005

Feb 25, 2005, 04:45 (0 Talkback[s])

Fedora Legacy


Fedora Legacy Update Advisory

Synopsis: Updated gdk-pixbuf packages fix security flaws
Advisory ID: FLSA:2005
Issue date: 2005-02-23
Product: Red Hat Linux
Keywords: Bugfix
Cross references: https://bugzilla.fedora.us/show_bug.cgi?id=2005
CVE Names: CAN-2004-0111 CAN-2004-0753 CAN-2004-0782 CAN-2004-0783 CAN-2004-0788



1. Topic:

Updated gdk-pixbuf packages that fix several security flaws are now available.

The gdk-pixbuf package contains an image loading library used with the GNOME GUI desktop environment.

2. Relevant releases/architectures:

Red Hat Linux 7.3 - i386
Red Hat Linux 9 - i386

3. Problem description:

Thomas Kristensen discovered a bitmap file that would cause the Evolution mail reader to crash. This issue was caused by a flaw that affects versions of the gdk-pixbuf package prior to 0.20. To exploit this flaw, a remote attacker could send (via email) a carefully-crafted BMP file, which would cause Evolution to crash. The Common Vulnerabilities and Exposures project (cve.mitre.org/) has assigned the name CAN-2004-0111 to this issue.

During testing of a previously fixed flaw in Qt (CAN-2004-0691), a flaw was discovered in the BMP image processor of gdk-pixbuf. An attacker could create a carefully crafted BMP file which would cause an application to enter an infinite loop and not respond to user input when the file was opened by a victim. The Common Vulnerabilities and Exposures project (cve.mitre.org/) has assigned the name CAN-2004-0753 to this issue.

During a security audit, Chris Evans discovered a stack and a heap overflow in the XPM image decoder. An attacker could create a carefully crafted XPM file which could cause an application linked with gtk2 to crash or possibly execute arbitrary code when the file was opened by a victim. (CAN-2004-0782, CAN-2004-0783)

Chris Evans also discovered an integer overflow in the ICO image decoder. An attacker could create a carefully crafted ICO file which could cause an application linked with gtk2 to crash when the file is opened by a victim. (CAN-2004-0788)

Users of gdk-pixbuf are advised to upgrade to these packages, which contain backported patches and are not vulnerable to these issues.

4. Solution:

Before applying this update, make sure all previously released errata relevant to your system have been applied.

To update all RPMs for your particular architecture, run:

rpm -Fvh [filenames]

where [filenames] is a list of the RPMs you wish to upgrade. Only those RPMs which are currently installed will be updated. Those RPMs which are not installed but included in the list will not be updated. Note that you can also use wildcards (*.rpm) if your current directory only contains the desired RPMs.

Please note that this update is also available via yum and apt. Many people find this an easier way to apply updates. To use yum issue:

yum update

or to use apt:

apt-get update; apt-get upgrade

This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. This assumes that you have yum or apt-get configured for obtaining Fedora Legacy content. Please visit http://www fedoralegacy.org/docs for directions on how to configure yum and apt-get.

5. Bug IDs fixed:

http://bugzilla.fedora.us - bug #2005 - gdk-pixbuf bmp image loader DOS

6. RPMs required:

Red Hat Linux 7.3:

SRPM:
http://download.fedoralegacy.org/redhat/7.3/updates/SRPMS/gdk-pixbuf-0.22.0-7.73.2.legacy.src.rpm

i386:
http://download.fedoralegacy.org/redhat/7.3/updates/i386/gdk-pixbuf-0.22.0-7.73.2.legacy.i386.rpm
http://download.fedoralegacy.org/redhat/7.3/updates/i386/gdk-pixbuf-devel-0.22.0-7.73.2.legacy.i386.rpm
http://download.fedoralegacy.org/redhat/7.3/updates/i386/gdk-pixbuf-gnome-0.22.0-7.73.2.legacy.i386.rpm

Red Hat Linux 9:

SRPM:
http://download.fedoralegacy.org/redhat/9/updates/SRPMS/gdk-pixbuf-0.22.0-7.90.2.legacy.src.rpm

i386:
http://download.fedoralegacy.org/redhat/9/updates/i386/gdk-pixbuf-0.22.0-7.90.2.legacy.i386.rpm
http://download.fedoralegacy.org/redhat/9/updates/i386/gdk-pixbuf-devel-0.22.0-7.90.2.legacy.i386.rpm
http://download.fedoralegacy.org/redhat/9/updates/i386/gdk-pixbuf-gnome-0.22.0-7.90.2.legacy.i386.rpm

7. Verification:

SHA1 sum Package Name


a29384912cdf63b635694050c1ecf2f8f56f2e3c redhat/7.3/updates/i386/gdk-pixbuf-0.22.0-7.73.2.legacy.i386.rpm
2e9223509766118f53b1934f77ed9d625558772c redhat/7.3/updates/i386/gdk-pixbuf-devel-0.22.0-7.73.2.legacy.i386.rpm
550e131ff9707a021c1949472ed94c23aec2391c redhat/7.3/updates/i386/gdk-pixbuf-gnome-0.22.0-7.73.2.legacy.i386.rpm
ed74d85b0419e4b3eba53a2a65cd87be1b460572 redhat/7.3/updates/SRPMS/gdk-pixbuf-0.22.0-7.73.2.legacy.src.rpm
1783c789f1eca62ee264eb7dd5aaef93084a154a redhat/9/updates/i386/gdk-pixbuf-0.22.0-7.90.2.legacy.i386.rpm
a7c5d85e2d367b81425ddd0eab32fb18b1b316b2 redhat/9/updates/i386/gdk-pixbuf-devel-0.22.0-7.90.2.legacy.i386.rpm
50eea5f1886468a5ec6c9d0d10765afcae9791a1 redhat/9/updates/i386/gdk-pixbuf-gnome-0.22.0-7.90.2.legacy.i386.rpm
ccc7442f3dd7dd696a5000cbd5cc1d9624f89673 redhat/9/updates/SRPMS/gdk-pixbuf-0.22.0-7.90.2.legacy.src.rpm

These packages are GPG signed by Fedora Legacy for security. Our key is available from http://www.fedoralegacy org/about/security.php

You can verify each package with the following command:

rpm --checksig -v <filename>

If you only wish to verify that each package has not been corrupted or tampered with, examine only the sha1sum with the following command:

sha1sum <filename>

8. References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0111
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0753
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0782
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0783
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0788
http://bugzilla.gnome.org/show_bug.cgi?id=150601

9. Contact:

The Fedora Legacy security contact is <secnotice@fedoralegacy.org>. More project details at http://www.fedoralegacy.org



Fedora Legacy Update Advisory

Synopsis: Updated zlib package fixes security issues
Advisory ID: FLSA:2043
Issue date: 2005-02-23
Product: Fedora Core
Keywords: Bugfix
Cross references: https://bugzilla.fedora.us/show_bug.cgi?id=2043
CVE Names: CAN-2004-0797



1. Topic:

An updated zlib package that fixes a security flaw is now available.

Zlib is a general-purpose, patent-free, lossless data compression library which is used by many different programs.

2. Relevant releases/architectures:

Fedora Core 1 - i386

3. Problem description:

Johan Thelmen reported that a specially crafted file can cause a segmentation fault in zlib as the inflate() and inflateBack() functions do not properly handle errors. An attacker could construct a carefully crafted file that could cause a crash or possibly execute arbitrary code when opened. The specific impact depends on the application using zlib. The Common Vulnerabilities and Exposures project (cve.mitre.org/) has assigned the name CAN-2004-0797 to this issue.

Users of zlib are advised to upgrade to this errata package, which contains a backported patch correcting this issue.

4. Solution:

Before applying this update, make sure all previously released errata relevant to your system have been applied.

To update all RPMs for your particular architecture, run:

rpm -Fvh [filenames]

where [filenames] is a list of the RPMs you wish to upgrade. Only those RPMs which are currently installed will be updated. Those RPMs which are not installed but included in the list will not be updated. Note that you can also use wildcards (*.rpm) if your current directory only contains the desired RPMs.

Please note that this update is also available via yum and apt. Many people find this an easier way to apply updates. To use yum issue:

yum update

or to use apt:

apt-get update; apt-get upgrade

This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. This assumes that you have yum or apt-get configured for obtaining Fedora Legacy content. Please visit http://www fedoralegacy.org/docs for directions on how to configure yum and apt-get.

5. Bug IDs fixed:

http://bugzilla.fedora.us - bug #2043 - Zlib Compression Library Denial Of Service Vulnerability

6. RPMs required:

Fedora Core 1:

SRPM:
http://download.fedoralegacy.org/fedora/1/updates/SRPMS/zlib-1.2.0.7-2.1.legacy.src.rpm

i386:
http://download.fedoralegacy.org/fedora/1/updates/i386/zlib-1.2.0.7-2.1.legacy.i386.rpm
http://download.fedoralegacy.org/fedora/1/updates/i386/zlib-devel-1.2.0.7-2.1.legacy.i386.rpm

7. Verification:

SHA1 sum Package Name


815ce5cc7d77184e8075d7b81f16ae94f620ffea fedora/1/updates/i386/zlib-1.2.0.7-2.1.legacy.i386.rpm
e7364e589e0a06615c3a02235e54619ca58d0997 fedora/1/updates/i386/zlib-devel-1.2.0.7-2.1.legacy.i386.rpm
4013ab1384694342ed5083f843c2b78d1f4082a7 fedora/1/updates/SRPMS/zlib-1.2.0.7-2.1.legacy.src.rpm

These packages are GPG signed by Fedora Legacy for security. Our key is available from http://www.fedoralegacy org/about/security.php

You can verify each package with the following command:

rpm --checksig -v <filename>

If you only wish to verify that each package has not been corrupted or tampered with, examine only the sha1sum with the following command:

sha1sum <filename>

8. References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0797

9. Contact:

The Fedora Legacy security contact is <secnotice@fedoralegacy.org>. More project details at http://www.fedoralegacy.org



Fedora Legacy Update Advisory

Synopsis: Updated vim packages fix security issues
Advisory ID: FLSA:2343
Issue date: 2005-02-23
Product: Red Hat Linux, Fedora Core
Keywords: Bugfix
Cross references: https://bugzilla.fedora.us/show_bug.cgi?id=2343
CVE Names: CAN-2004-1138 CAN-2005-0069



1. Topic:

Updated vim packages that fix multiple vulnerabilities are now available.

VIM (Vi IMproved) is an updated and improved version of the vi screenbased editor.

2. Relevant releases/architectures:

Red Hat Linux 7.3 - i386
Red Hat Linux 9 - i386
Fedora Core 1 - i386

3. Problem description:

Ciaran McCreesh discovered a modeline vulnerability in VIM. It is possible that a malicious user could create a file containing a specially crafted modeline which could cause arbitrary command execution when viewed by a victim. Please note that this issue only affects users who have modelines and filetype plugins enabled, which is not the default. The Common Vulnerabilities and Exposures project has assigned the name CAN-2004-1138 to this issue.

The Debian Security Audit Project discovered an insecure temporary file usage in VIM. A local user could overwrite or create files as a different user who happens to run one of the the vulnerable utilities. The Common Vulnerabilities and Exposures project (cve.mitre.org/) has assigned the name CAN-2005-0069 to this issue.

All users of VIM are advised to upgrade to these erratum packages, which contain backported patches for these issues.

4. Solution:

Before applying this update, make sure all previously released errata relevant to your system have been applied.

To update all RPMs for your particular architecture, run:

rpm -Fvh [filenames]

where [filenames] is a list of the RPMs you wish to upgrade. Only those RPMs which are currently installed will be updated. Those RPMs which are not installed but included in the list will not be updated. Note that you can also use wildcards (*.rpm) if your current directory only contains the desired RPMs.

Please note that this update is also available via yum and apt. Many people find this an easier way to apply updates. To use yum issue:

yum update

or to use apt:

apt-get update; apt-get upgrade

This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. This assumes that you have yum or apt-get configured for obtaining Fedora Legacy content. Please visit http://www fedoralegacy.org/docs for directions on how to configure yum and apt-get.

5. Bug IDs fixed:

http://bugzilla.fedora.us - bug #2343 - multiple vim vulns

6. RPMs required:

Red Hat Linux 7.3:

SRPM:
http://download.fedoralegacy.org/redhat/7.3/updates/SRPMS/vim-6.1-18.7x.2.3.legacy.src.rpm

i386:
http://download.fedoralegacy.org/redhat/7.3/updates/i386/vim-common-6.1-18.7x.2.3.legacy.i386.rpm
http://download.fedoralegacy.org/redhat/7.3/updates/i386/vim-enhanced-6.1-18.7x.2.3.legacy.i386.rpm
http://download.fedoralegacy.org/redhat/7.3/updates/i386/vim-minimal-6.1-18.7x.2.3.legacy.i386.rpm
http://download.fedoralegacy.org/redhat/7.3/updates/i386/vim-X11-6.1-18.7x.2.3.legacy.i386.rpm

Red Hat Linux 9:

SRPM:
http://download.fedoralegacy.org/redhat/9/updates/SRPMS/vim-6.1-29.3.legacy.src.rpm

i386:
http://download.fedoralegacy.org/redhat/9/updates/i386/vim-common-6.1-29.3.legacy.i386.rpm
http://download.fedoralegacy.org/redhat/9/updates/i386/vim-enhanced-6.1-29.3.legacy.i386.rpm
http://download.fedoralegacy.org/redhat/9/updates/i386/vim-minimal-6.1-29.3.legacy.i386.rpm
http://download.fedoralegacy.org/redhat/9/updates/i386/vim-X11-6.1-29.3.legacy.i386.rpm

Fedora Core 1:

SRPM:
http://download.fedoralegacy.org/fedora/1/updates/SRPMS/vim-6.2.532-1.3.legacy.src.rpm

i386:
http://download.fedoralegacy.org/fedora/1/updates/i386/vim-common-6.2.532-1.3.legacy.i386.rpm
http://download.fedoralegacy.org/fedora/1/updates/i386/vim-enhanced-6.2.532-1.3.legacy.i386.rpm
http://download.fedoralegacy.org/fedora/1/updates/i386/vim-minimal-6.2.532-1.3.legacy.i386.rpm
http://download.fedoralegacy.org/fedora/1/updates/i386/vim-X11-6.2.532-1.3.legacy.i386.rpm

7. Verification:

SHA1 sum Package Name


06e66495cc5204b04791af26d8f907a04230f23e redhat/7.3/updates/i386/vim-common-6.1-18.7x.2.3.legacy.i386.rpm
c04107fabe009eb3de20c6835a5dbdbbe65f0683 redhat/7.3/updates/i386/vim-enhanced-6.1-18.7x.2.3.legacy.i386.rpm
216fa044df92639f713b646af18a60dfc5c64b9e redhat/7.3/updates/i386/vim-minimal-6.1-18.7x.2.3.legacy.i386.rpm
9d392b1080667ab00958382c85aeaaac8dcc998b redhat/7.3/updates/i386/vim-X11-6.1-18.7x.2.3.legacy.i386.rpm
6619cf7606ef880604c02d794f379d5bfad274d0 redhat/7.3/updates/SRPMS/vim-6.1-18.7x.2.3.legacy.src.rpm
3beeb08ce9c22babf5f24e6441b38789fedbebe3 redhat/9/updates/i386/vim-common-6.1-29.3.legacy.i386.rpm
f8e91400360d150e31ac789582aed420711b2ce6 redhat/9/updates/i386/vim-enhanced-6.1-29.3.legacy.i386.rpm
876055e7796964cbf738a0c400d8e6aa2fbb8aa5 redhat/9/updates/i386/vim-minimal-6.1-29.3.legacy.i386.rpm
75bd07034c2c09c932ea62aea6dc44cf54e429b1 redhat/9/updates/i386/vim-X11-6.1-29.3.legacy.i386.rpm
b9a8e25c2910eb2d14a524750799351307f310f0 redhat/9/updates/SRPMS/vim-6.1-29.3.legacy.src.rpm
e770d44e4b1d8da203d60adaf1974123deefc1fb fedora/1/updates/i386/vim-common-6.2.532-1.3.legacy.i386.rpm
39f3cb5e4060acb72db1b4ca26d213d2e9be21cd fedora/1/updates/i386/vim-enhanced-6.2.532-1.3.legacy.i386.rpm
e2a394b9d036365671464985009e7fc7ae40bec4 fedora/1/updates/i386/vim-minimal-6.2.532-1.3.legacy.i386.rpm
9b2121dc0fd781f613fc7440483f94c9ff099aad fedora/1/updates/i386/vim-X11-6.2.532-1.3.legacy.i386.rpm
e63c2df5b9c58c83e555e68eff9c38947481f8ac fedora/1/updates/SRPMS/vim-6.2.532-1.3.legacy.src.rpm

These packages are GPG signed by Fedora Legacy for security. Our key is available from http://www.fedoralegacy org/about/security.php

You can verify each package with the following command:

rpm --checksig -v <filename>

If you only wish to verify that each package has not been corrupted or tampered with, examine only the sha1sum with the following command:

sha1sum <filename>

8. References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-1138
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0069
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=289560

9. Contact:

The Fedora Legacy security contact is <secnotice@fedoralegacy.org>. More project details at http://www.fedoralegacy.org


Mandrakelinux


Mandrakelinux Security Update Advisory


Package name: squid
Advisory ID: MDKSA-2005:047
Date: February 24th, 2005
Affected versions: 10.0, 10.1, 9.2, Corporate 3.0, Corporate Server 2.1


Problem Description:

The squid developers discovered that a remote attacker could cause squid to crash via certain DNS responses.

The updated packages are patched to fix the problem.


References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0446


Updated Packages:

Mandrakelinux 10.0:
3c386f28371608783183565bd837544b 10.0/RPMS/squid-2.5.STABLE4-2.5.100mdk.i586.rpm
05401319af15c90fa418571d387495a5 10.0/SRPMS/squid-2.5.STABLE4-2.5.100mdk.src.rpm

Mandrakelinux 10.0/AMD64:
c6517cadfb220acf1b247ac0aca9c2e2 amd64/10.0/RPMS/squid-2.5.STABLE4-2.5.100mdk.amd64.rpm
05401319af15c90fa418571d387495a5 amd64/10.0/SRPMS/squid-2.5.STABLE4-2.5.100mdk.src.rpm

Mandrakelinux 10.1:
258f532d766624e4f21936fa31150379 10.1/RPMS/squid-2.5.STABLE6-2.4.101mdk.i586.rpm
387f2525c892539434ea785f6afc9412 10.1/SRPMS/squid-2.5.STABLE6-2.4.101mdk.src.rpm

Mandrakelinux 10.1/X86_64:
c315c0027e40161dedb8e890aeeba963 x86_64/10.1/RPMS/squid-2.5.STABLE6-2.4.101mdk.x86_64.rpm
387f2525c892539434ea785f6afc9412 x86_64/10.1/SRPMS/squid-2.5.STABLE6-2.4.101mdk.src.rpm

Corporate Server 2.1:
b9c9bd1f484d679e97da43ab091bade7 corporate/2.1/RPMS/squid-2.4.STABLE7-2.5.C21mdk.i586.rpm
8555b2eb1741cf7df61f132fcfa58d15 corporate/2.1/SRPMS/squid-2.4.STABLE7-2.5.C21mdk.src.rpm

Corporate Server 2.1/X86_64:
16d583d3930fe2086d9d85de4fb90915 x86_64/corporate/2.1/RPMS/squid-2.4.STABLE7-2.5.C21mdk.x86_64.rpm
8555b2eb1741cf7df61f132fcfa58d15 x86_64/corporate/2.1/SRPMS/squid-2.4.STABLE7-2.5.C21mdk.src.rpm

Corporate 3.0:
cf1542bd32913d9d0124013de664fcf8 corporate/3.0/RPMS/squid-2.5.STABLE4-2.5.C30mdk.i586.rpm
d953dfffca94d708334237ed052442ee corporate/3.0/SRPMS/squid-2.5.STABLE4-2.5.C30mdk.src.rpm

Corporate 3.0/X86_64:
dcef6aba5715971fd96a36d9ec4bbfff x86_64/corporate/3.0/RPMS/squid-2.5.STABLE4-2.5.C30mdk.x86_64.rpm
d953dfffca94d708334237ed052442ee x86_64/corporate/3.0/SRPMS/squid-2.5.STABLE4-2.5.C30mdk.src.rpm

Mandrakelinux 9.2:
9e2f98d688e46f205c2c7cdb6e4d083e 9.2/RPMS/squid-2.5.STABLE3-3.7.92mdk.i586.rpm
1d6372f63bcccb66a348b7cca51588bd 9.2/SRPMS/squid-2.5.STABLE3-3.7.92mdk.src.rpm

Mandrakelinux 9.2/AMD64:
b10ef185be87bd8bb662b0c153016b05 amd64/9.2/RPMS/squid-2.5.STABLE3-3.7.92mdk.amd64.rpm
1d6372f63bcccb66a348b7cca51588bd amd64/9.2/SRPMS/squid-2.5.STABLE3-3.7.92mdk.src.rpm


To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandrakesoft for security. You can obtain the GPG public key of the Mandrakelinux Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandrakelinux at:

http://www.mandrakesoft.com/security/advisories

If you want to report vulnerabilities, please contact

security_linux-mandrake.com

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Linux Mandrake Security Team <security linux-mandrake.com>


Mandrakelinux Security Update Advisory


Package name: uim
Advisory ID: MDKSA-2005:046
Date: February 24th, 2005
Affected versions: 10.1


Problem Description:

Takumi ASAKI discovered that uim always trusts environment variables which can allow a local attacker to obtain elevated privileges when libuim is linked against an suid/sgid application. This problem is only exploitable in 'immodule for Qt' enabled Qt applications.

The updated packages are patched to fix the problem.


References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0503
http://lists.freedesktop.org/pipermail/uim/2005-February/000996.html


Updated Packages:

Mandrakelinux 10.1:
5477bc5c4be9e4c34944d69f558d1562 10.1/RPMS/libuim0-0.4.5.1-0.1.101mdk.i586.rpm
40e98fd3aba12bf634eb5c492ddc73ed 10.1/RPMS/libuim0-devel-0.4.5.1-0.1.101mdk.i586.rpm
c4f44fbe1f4986ab191f6def69805cdf 10.1/RPMS/uim-0.4.5.1-0.1.101mdk.i586.rpm
03dffbf84de9c95bd6edee1515a83b66 10.1/RPMS/uim-applet-0.4.5.1-0.1.101mdk.i586.rpm
178aafea38d8c35beb9ade48ec4e8417 10.1/SRPMS/uim-0.4.5.1-0.1.101mdk.src.rpm

Mandrakelinux 10.1/X86_64:
6efd482e3618c59b37e8197f50fb5ef6 x86_64/10.1/RPMS/lib64uim0-0.4.5.1-0.1.101mdk.x86_64.rpm
26924174a640903a3767247ec3d12d93 x86_64/10.1/RPMS/lib64uim0-devel-0.4.5.1-0.1.101mdk.x86_64.rpm
5477bc5c4be9e4c34944d69f558d1562 x86_64/10.1/RPMS/libuim0-0.4.5.1-0.1.101mdk.i586.rpm
178aafea38d8c35beb9ade48ec4e8417 x86_64/10.1/SRPMS/uim-0.4.5.1-0.1.101mdk.src.rpm


To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandrakesoft for security. You can obtain the GPG public key of the Mandrakelinux Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandrakelinux at:

http://www.mandrakesoft.com/security/advisories

If you want to report vulnerabilities, please contact

security_linux-mandrake.com

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Linux Mandrake Security Team <security linux-mandrake.com>