Linux Today - Advisories: March 31, 2005

Linux Today
Enterprise Linux Today
Apache Today
JustLinux.com
Linux Planet
PHPBuilder
All Linux Devices

Technology Jobs

LinuxToday Newsletters

Server Daily
IT Management Daily
Subscribe News
Subscribe PR
Subscribe Security

internet.com

Internet News
Small Business

Advertise
Newsletters
Tech Jobs
E-mail Offers

Current Newswire:

Malware devs embrace open-source

A tale of two distros: Ubuntu and Linux Mint

Raspberry Pi benchmarked against Beagleboard, low price is long term

20 popular Ubuntu Linux apps you may want to try

A Selection of the Very Best Open Source Tutorials and Tools

Android Ice Cream Sandwich ported to x86 tablets, netbooks and notebooks

SECURITY: Google Chrome 17 Improves Security

How to read a CSV file in Perl?

Red Hat Brings Gluster to Amazon Cloud

New Linux kernel fixes power-saving issues

Applications Management Engineer Sr (NYC)
Next Step Systems
US-NY-New York

Post A Job | Post A Resume

:Advisories: March 31, 2005

Advisories: March 31, 2005
Apr 1, 2005, 04 :45 UTC (0 Talkback[s]) (3732 reads)

Conectiva Linux

CONECTIVA LINUX SECURITY ANNOUNCEMENT

PACKAGE : kernel
SUMMARY : Kernel fixes
DATE : 2005-03-31 12:24:00
ID : CLA-2005:945
RELEVANT RELEASES : 10

DESCRIPTION
The Linux kernel is responsible for handling the basic functions of the GNU/Linux operating system.

The following vulnerabilities are being fixed in this update:

CAN-2005-0767[1][2]
Race condition in the Radeon DRI driver for Linux kernel 2.6.8.1 allows local users with DRI privileges to execute arbitrary code as root.
CAN-2005-0209[3][4]
Netfilter in Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) via crafted IP packet fragments.
CAN-2005-0449[5][6]
The netfilter/iptables module in Linux before 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) or bypass firewall rules via crafted packets, which are not properly handled by the skb_checksum_help function.
CAN-2005-0210[7][8][9]
Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a denial of service (memory consumption) via certain packet fragments that are reassembled twice, which causes a data structure to be allocated twice.

These other changes have also been made:

the base kernel has been upgraded to version 2.6.11.
the NVidia driver has been upgraded to version 7167
DRBD has been upgraded to version 0.7.10
the hsfmodem driver has been upgraded to version 7.18.00.03 full
the slmodem driver has been upgraded to version 2.9.10
the ndiswrapper driver has been upgraded to version 1.1
lm_sensors has been upgraded to version 2.9.0[11]

SOLUTION
It is recommended that all Conectiva Linux users perform the upgrade.

IMPORTANT: exercise caution and preparation when upgrading the kernel, since it will require a reboot after the new packages are installed. More detailed instructions are available in Portuguese at our Q&A page[10].

REFERENCES
1.http://linux.bkbits.net:8080/linux-2.6/cset@42088d17CO1mOAfgW4R46WRTm9gkwA
2.http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0767
3.http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0209
4.http://linux.bkbits.net:8080/linux-2.6/gnupatch@41f59581p1swNaow4K1aBglV-q2jfQ
5.http://cve.mitre.org/cgi-bin/cvename.cgi?name=2005-0449
6.http://linux.bkbits.net:8080/linux-2.6/gnupatch@41f8843a8ZMCNuP3meYAYnnXd3CO_g
7.http://cve.mitre.org/cgi-bin/cvename.cgi?name=2005-0210
8.http://linux.bkbits.net:8080/linux-2.5/gnupatch@41fd96c39V0t4MxKFxE1aZn2f4b5UA
9.http://linux.bkbits.net:8080/linux-2.5/gnupatch@41fdb84aBJklcjU85o1N1_dsch6HBw
10.http://www.conectiva.com.br/suporte/pr/sistema.kernel.atualizar.html
11.http://bugzilla.conectiva.com.br/show_bug.cgi?id=13716

ADDITIONAL INSTRUCTIONS
The apt tool can be used to perform RPM packages upgrades:

run: apt-get update
after that, execute: apt-get upgrade

Detailed instructions regarding the use of apt and upgrade examples can be found at http://distro.conectiva.com.br/atualizacoes/#apt?idioma=en

All packages are signed with Conectiva's GPG key. The key and instructions on how to import it can be found at
http://distro.conectiva.com.br/seguranca/chave/?idioma=en Instructions on how to check the signatures of the RPM packages can be found at http://distro.conectiva.com.br/seguranca/politica/?idioma=en

All our advisories and generic update instructions can be viewed at http://distro.conectiva.com.br/atualizacoes/?idioma=en

Debian GNU/Linux

Debian Security Advisory DSA 701-1 security@debian.org
http://www.debian.org/security/ Martin Schulze
March 31st, 2005 http://www.debian.org/security/faq

Package : samba
Vulnerability : integer overflows
Problem-Type : remote
Debian-specific: no
CVE ID : CAN-2004-1154
CERT advisory : VU#226184

Greg MacManus discovered an integer overflow in the smb daemon from Samba, a LanManager like file and printer server for GNU/Linux and Unix-like systems. Requesting a very large number of access control descriptors from the server could exploit the integer overflow, which may result in a buffer overflow which could lead to the execution of arbitrary code with root privileges. Upstream developers have discovered more possible integer overflows that are fixed with this update as well.

For the stable distribution (woody) these problems have been fixed in version 2.2.3a-14.2.

For the unstable distribution (sid) these problems have been fixed in version 3.0.10-1.

We recommend that you upgrade your samba packages.

Upgrade Instructions

wget url

will fetch the file for you
dpkg -i file.deb

will install the referenced file.

If you are using the apt-get package manager, use the line for sources.list as given below:

apt-get update

will update the internal database apt-get upgrade

will install corrected packages

You may use an automated update by adding the resources from the footer to the proper configuration.

Debian GNU/Linux 3.0 alias woody

Source archives:

http://security.debian.org/pool/updates/main/s/samba/samba_2.2.3a-14.2.dsc
Size/MD5 checksum: 775 ed6d755e8e623a887796b1f483c09769
http://security.debian.org/pool/updates/main/s/samba/samba_2.2.3a-14.2.diff.gz
Size/MD5 checksum: 130208 cc39bb74c7553dda203d51f6d8c14aa3
http://security.debian.org/pool/updates/main/s/samba/samba_2.2.3a.orig.tar.gz
Size/MD5 checksum: 5460531 b6ec2f076af69331535a82b586f55254

Architecture independent components:

http://security.debian.org/pool/updates/main/s/samba/samba-doc_2.2.3a-14.2_all.deb
Size/MD5 checksum: 2447006 abf6acd83baeb484d105c8eb1101543b

Alpha architecture:

ARM architecture:

Intel IA-32 architecture:

Intel IA-64 architecture:

HP Precision architecture:

Motorola 680x0 architecture:

Big endian MIPS architecture:

Little endian MIPS architecture:

PowerPC architecture:

IBM S/390 architecture:

Sun Sparc architecture:

These files will probably be moved into the stable distribution on its next update.

For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>

Gentoo Linux

Gentoo Linux Security Advisory GLSA 200503-36

http://security.gentoo.org/

Severity: Normal
Title: netkit-telnetd: Buffer overflow
Date: March 31, 2005
Bugs: #87211
ID: 200503-36

Synopsis

The netkit-telnetd telnet client is vulnerable to a buffer overflow, which could allow a malicious telnet server operator to execute arbitrary code.

Background

netkit-telnetd provides standard Linux telnet client and server.

Affected packages


     Package                  /  Vulnerable  /              Unaffected

  1  net-misc/netkit-telnetd      < 0.17-r6                 >= 0.17-r6

Description

A buffer overflow has been identified in the slc_add_reply() function of netkit-telnetd client, where a large number of SLC commands can overflow a fixed size buffer.

Impact

Successful explotation would require a vulnerable user to connect to an attacker-controlled host using telnet, potentially executing arbitrary code with the permissions of the telnet user.

Workaround

There is no known workaround at this time.

Resolution

All netkit-telnetd users should upgrade to the latest version:

    # emerge --sync
    # emerge --ask --oneshot --verbose ">=net-misc/netkit-telnetd-0.17-r6"

References

[ 1 ] CAN-2005-0469

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0469

[ 2 ] iDEFENSE Advisory 03-28-05

http://www.idefense.com/application/poi/display?id=220&type=vulnerabilities

Availability

This GLSA and any updates to it are available for viewing at the Gentoo Security Website:

http://security.gentoo.org/glsa/glsa-200503-36.xml

Concerns?

Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at http://bugs.gentoo.org.

License

The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license.

http://creativecommons.org/licenses/by-sa/2.0

Gentoo Linux Security Advisory GLSA 200503-37

http://security.gentoo.org/

Severity: Low
Title: LimeWire: Disclosure of sensitive information
Date: March 31, 2005
Bugs: #85380
ID: 200503-37

Synopsis

Two vulnerabilities in LimeWire can be exploited to disclose sensitive information.

Background

LimeWire is a Java peer-to-peer client compatible with the Gnutella file-sharing protocol.

Affected packages


     Package           /  Vulnerable  /                     Unaffected

  1  net-p2p/limewire       < 4.8.1                           >= 4.8.1

Description

Two input validation errors were found in the handling of Gnutella GET requests (CAN-2005-0788) and magnet requests (CAN-2005-0789).

Impact

A remote attacker can craft a specific Gnutella GET request or use directory traversal on magnet requests to read arbitrary files on the system with the rights of the user running LimeWire.

Workaround

There is no known workaround at this time.

Resolution

All LimeWire users should upgrade to the latest version:

    # emerge --sync
    # emerge --ask --oneshot --verbose ">=net-p2p/limewire-4.8.1"

References

[ 1 ] CAN-2005-0788

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0788

[ 2 ] CAN-2005-0789

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0789

[ 3 ] Secunia Advisory SA14555

http://secunia.com/advisories/14555/

Availability

This GLSA and any updates to it are available for viewing at the Gentoo Security Website:

http://security.gentoo.org/glsa/glsa-200503-37.xml

Concerns?

License

The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license.

http://creativecommons.org/licenses/by-sa/2.0

Mandrakelinux

Mandrakelinux Security Update Advisory

Package name: ipsec-tools
Advisory ID: MDKSA-2005:062
Date: March 31st, 2005
Affected versions: 10.0, 10.1

Problem Description:

A bug was discovered in the way that the racoon daemon handled incoming ISAKMP requests. It is possible that an attacker could crash the racoon daemon by sending a specially crafted ISAKMP packet.

The updated packages have been patched to correct these issues.

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0398

Updated Packages:

Mandrakelinux 10.0:
0336182bba42ed6bbb95a36b9036f49d 10.0/RPMS/ipsec-tools-0.2.5-0.3.100mdk.i586.rpm
290f64f6058c1db3771411593ce0aa9b 10.0/RPMS/libipsec-tools0-0.2.5-0.3.100mdk.i586.rpm
ee71c1f9bf510a353737b78f8cf0799e 10.0/SRPMS/ipsec-tools-0.2.5-0.3.100mdk.src.rpm

Mandrakelinux 10.0/AMD64:
822119a2551e440d677a106d7f9cdd82 amd64/10.0/RPMS/ipsec-tools-0.2.5-0.3.100mdk.amd64.rpm
65d3d6542a001829ca5e5b951ec60f7b amd64/10.0/RPMS/lib64ipsec-tools0-0.2.5-0.3.100mdk.amd64.rpm
ee71c1f9bf510a353737b78f8cf0799e amd64/10.0/SRPMS/ipsec-tools-0.2.5-0.3.100mdk.src.rpm

Mandrakelinux 10.1:
0bce942be78598975a598c0d0a5b5b3d 10.1/RPMS/ipsec-tools-0.2.5-2.1.101mdk.i586.rpm
f90499cdac49d4bf28506410f14f9022 10.1/RPMS/libipsec-tools0-0.2.5-2.1.101mdk.i586.rpm
dcc07c273b1de7e48de9fa60e5c18e9e 10.1/SRPMS/ipsec-tools-0.2.5-2.1.101mdk.src.rpm

Mandrakelinux 10.1/X86_64:
70822d25799e0d679423d390c6ad2fe3 x86_64/10.1/RPMS/ipsec-tools-0.2.5-2.1.101mdk.x86_64.rpm
46acf72cc67b18a31349482aade7bdb5 x86_64/10.1/RPMS/lib64ipsec-tools0-0.2.5-2.1.101mdk.x86_64.rpm
dcc07c273b1de7e48de9fa60e5c18e9e x86_64/10.1/SRPMS/ipsec-tools-0.2.5-2.1.101mdk.src.rpm

To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandrakesoft for security. You can obtain the GPG public key of the Mandrakelinux Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandrakelinux at:

http://www.mandrakesoft.com/security/advisories

If you want to report vulnerabilities, please contact

security_linux-mandrake.com

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Linux Mandrake Security Team <security linux-mandrake.com>

Mandrakelinux Security Update Advisory

Package name: htdig
Advisory ID: MDKSA-2005:063
Date: March 31st, 2005
Affected versions: 10.0, 10.1, Corporate 3.0, Corporate Server 2.1

Problem Description:

A cross-site scripting vulnerability in ht://dig was discovered by Michael Krax. The updated packages have been patched to correct this issue.

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0085

Updated Packages:

Mandrakelinux 10.0:
6228437a3ee59911e0473bb587182722 10.0/RPMS/htdig-3.2.0-0.8.1.100mdk.i586.rpm
9e2e6d19c955675b902867ebd4a532ac 10.0/RPMS/htdig-devel-3.2.0-0.8.1.100mdk.i586.rpm
9d2c9514b9f841e29d355f2231fbf2bf 10.0/RPMS/htdig-web-3.2.0-0.8.1.100mdk.i586.rpm
99444f90c5fd587b25a4a22c1766dbf5 10.0/SRPMS/htdig-3.2.0-0.8.1.100mdk.src.rpm

Mandrakelinux 10.0/AMD64:
8dda857b8c800baad5829e9967da79cf amd64/10.0/RPMS/htdig-3.2.0-0.8.1.100mdk.amd64.rpm
a0fc783208512e499dfb35313fae0542 amd64/10.0/RPMS/htdig-devel-3.2.0-0.8.1.100mdk.amd64.rpm
29e335343d2ff49d8ec6114dd575be82 amd64/10.0/RPMS/htdig-web-3.2.0-0.8.1.100mdk.amd64.rpm
99444f90c5fd587b25a4a22c1766dbf5 amd64/10.0/SRPMS/htdig-3.2.0-0.8.1.100mdk.src.rpm

Mandrakelinux 10.1:
a0409063ca738742cad98d32180982cf 10.1/RPMS/htdig-3.2.0-0.8.1.101mdk.i586.rpm
976234e520943c0ce3218dd22a86663e 10.1/RPMS/htdig-devel-3.2.0-0.8.1.101mdk.i586.rpm
84e9b288b4508cfff0b9cabb729818cc 10.1/RPMS/htdig-web-3.2.0-0.8.1.101mdk.i586.rpm
b1939ad4e0ab56c625953a96add55759 10.1/SRPMS/htdig-3.2.0-0.8.1.101mdk.src.rpm

Mandrakelinux 10.1/X86_64:
ce24c06a0ac118969fd944ae917e3e72 x86_64/10.1/RPMS/htdig-3.2.0-0.8.1.101mdk.x86_64.rpm
c32ff976cb9445350ef5763ae8ab0adb x86_64/10.1/RPMS/htdig-devel-3.2.0-0.8.1.101mdk.x86_64.rpm
1631e0ced4511d6f66cd118bf0a53ddb x86_64/10.1/RPMS/htdig-web-3.2.0-0.8.1.101mdk.x86_64.rpm
b1939ad4e0ab56c625953a96add55759 x86_64/10.1/SRPMS/htdig-3.2.0-0.8.1.101mdk.src.rpm

Corporate Server 2.1:
940eb22faad5b37005a2045030014ca3 corporate/2.1/RPMS/htdig-3.2.0-0.7.1.C21mdk.i586.rpm
0c4292b7c83c327568dc3fc87eb65daa corporate/2.1/RPMS/htdig-devel-3.2.0-0.7.1.C21mdk.i586.rpm
259bb9d4924855da71f188e5a1c9e48e corporate/2.1/RPMS/htdig-web-3.2.0-0.7.1.C21mdk.i586.rpm
c3706f63bdd0d924f5e6582f16097c40 corporate/2.1/SRPMS/htdig-3.2.0-0.7.1.C21mdk.src.rpm

Corporate Server 2.1/X86_64:
b60111b0cccd21d0219e56943872954d x86_64/corporate/2.1/RPMS/htdig-3.2.0-0.7.1.C21mdk.x86_64.rpm
2234c1266e831e9a907bd905cfafe988 x86_64/corporate/2.1/RPMS/htdig-devel-3.2.0-0.7.1.C21mdk.x86_64.rpm
60a05a4fa98a0ed0615d14a966997878 x86_64/corporate/2.1/RPMS/htdig-web-3.2.0-0.7.1.C21mdk.x86_64.rpm
c3706f63bdd0d924f5e6582f16097c40 x86_64/corporate/2.1/SRPMS/htdig-3.2.0-0.7.1.C21mdk.src.rpm

Corporate 3.0:
6c581ad824ed274ecbfa95d3cb4b3f21 corporate/3.0/RPMS/htdig-3.2.0-0.8.1.C30mdk.i586.rpm
8c1e110d09016bbebc6a8705c63b3c52 corporate/3.0/RPMS/htdig-devel-3.2.0-0.8.1.C30mdk.i586.rpm
effe6251329eedb8aaaefa16852737a5 corporate/3.0/RPMS/htdig-web-3.2.0-0.8.1.C30mdk.i586.rpm
e2d122279a783d148c7535b6e69f1914 corporate/3.0/SRPMS/htdig-3.2.0-0.8.1.C30mdk.src.rpm

Corporate 3.0/X86_64:
5c643cf858ab77ef76c50c156b4c97f8 x86_64/corporate/3.0/RPMS/htdig-3.2.0-0.8.1.C30mdk.x86_64.rpm
6a2bb83857fdfcf7e88de032bbb36722 x86_64/corporate/3.0/RPMS/htdig-devel-3.2.0-0.8.1.C30mdk.x86_64.rpm
ae1d1d19a94c5ab808033794499a7d2f x86_64/corporate/3.0/RPMS/htdig-web-3.2.0-0.8.1.C30mdk.x86_64.rpm
e2d122279a783d148c7535b6e69f1914 x86_64/corporate/3.0/SRPMS/htdig-3.2.0-0.8.1.C30mdk.src.rpm

To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandrakesoft for security. You can obtain the GPG public key of the Mandrakelinux Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandrakelinux at:

http://www.mandrakesoft.com/security/advisories

If you want to report vulnerabilities, please contact

security_linux-mandrake.com

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Linux Mandrake Security Team <security linux-mandrake.com>

Mandrakelinux Security Update Advisory

Package name: libexif
Advisory ID: MDKSA-2005:064
Date: March 31st, 2005
Affected versions: 10.0, 10.1, Corporate 3.0

Problem Description:

A buffer overflow was discovered in the way libexif parses EXIF tags. An attacker could exploit this by creating a special EXIF image file which could cause image viewers linked against libexif to crash.

The updated packages have been patched to correct these issues.

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0664

Updated Packages:

Mandrakelinux 10.0:
7f98f8c823d04b1aec8ec8bf3082e540 10.0/RPMS/libexif9-0.5.12-3.1.100mdk.i586.rpm
784f8431abd3cbda25abc8294682c96b 10.0/RPMS/libexif9-devel-0.5.12-3.1.100mdk.i586.rpm
2423d8e2cc1e3e8c71066d21d17d72a7 10.0/SRPMS/libexif-0.5.12-3.1.100mdk.src.rpm

Mandrakelinux 10.0/AMD64:
8f83a355fabca8f769d1c9dad47d0702 amd64/10.0/RPMS/lib64exif9-0.5.12-3.1.100mdk.amd64.rpm
81d7acb71bd8e37dbc0fe5d9973d4863 amd64/10.0/RPMS/lib64exif9-devel-0.5.12-3.1.100mdk.amd64.rpm
2423d8e2cc1e3e8c71066d21d17d72a7 amd64/10.0/SRPMS/libexif-0.5.12-3.1.100mdk.src.rpm

Mandrakelinux 10.1:
e7c6cba5d064421751f62fe97a27a246 10.1/RPMS/libexif9-0.5.12-3.1.101mdk.i586.rpm
12f5698199b00e594a7b839415fc34ce 10.1/RPMS/libexif9-devel-0.5.12-3.1.101mdk.i586.rpm
d610996df4ade2cd8379ede0246624ba 10.1/SRPMS/libexif-0.5.12-3.1.101mdk.src.rpm

Mandrakelinux 10.1/X86_64:
62a6bd730ed477e3eaad9cbcc1fafcd7 x86_64/10.1/RPMS/lib64exif9-0.5.12-3.1.101mdk.x86_64.rpm
737f9820611343813338fa5135f7ec2e x86_64/10.1/RPMS/lib64exif9-devel-0.5.12-3.1.101mdk.x86_64.rpm
d610996df4ade2cd8379ede0246624ba x86_64/10.1/SRPMS/libexif-0.5.12-3.1.101mdk.src.rpm

Corporate 3.0:
1f6db50292973824440d2c5018fda499 corporate/3.0/RPMS/libexif9-0.5.12-3.1.C30mdk.i586.rpm
efa51f02a658c456a1a78f5d72eff888 corporate/3.0/RPMS/libexif9-devel-0.5.12-3.1.C30mdk.i586.rpm
062ba77c9d11fae7e66c9d7c6ba2b4d7 corporate/3.0/SRPMS/libexif-0.5.12-3.1.C30mdk.src.rpm

Corporate 3.0/X86_64:
6372fdf5cf79f247869e5c3087fb8ecf x86_64/corporate/3.0/RPMS/lib64exif9-0.5.12-3.1.C30mdk.x86_64.rpm
6fc1cb6724795624d8c4569834487039 x86_64/corporate/3.0/RPMS/lib64exif9-devel-0.5.12-3.1.C30mdk.x86_64.rpm
062ba77c9d11fae7e66c9d7c6ba2b4d7 x86_64/corporate/3.0/SRPMS/libexif-0.5.12-3.1.C30mdk.src.rpm

To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandrakesoft for security. You can obtain the GPG public key of the Mandrakelinux Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandrakelinux at:

http://www.mandrakesoft.com/security/advisories

If you want to report vulnerabilities, please contact

security_linux-mandrake.com

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Linux Mandrake Security Team <security linux-mandrake.com>