|
| Current Newswire:
Debian Security Advisory: Mailman exploitabilityAug 07, 2000, 07:06 (0 Talkback[s])(Other stories by Martin Schulze) Date: Sun, 6 Aug 2000 14:23:16 +0200 (CEST) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Debian Security Advisory security@debian.org http://www.debian.org/security/ Martin Schulze August 5, 2000 Package: mailman Former versions of mailman v2.0 came with a security problem, introduced during the 2.0 beta cycle, that could be exploited by clever local users to gain group mailman permission. No exploit does exist at the moment, though. wget url will fetch the file for you dpkg -i file.deb will install the referenced file.Debian GNU/Linux 2.1 alias slink Slink comes with version 1.0 that is not vulnerable. Debian 2.2 alias potato Potato comes with version 1.1 that is not vulnerable. Debian Unstable alias woody This version of Debian is not yet released and reflects the current development release. Fixes are currently available for Intel ia32 and Motorola 680x0. Fixes for other architectures will be available soon. In doubt, please recompile the package from source on your own. Source archives: Intel ia32 architecture: Motorola 680x0 architecture: For apt-get: deb http://security.debian.org/
stable updates -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.1 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE5jVi0W5ql+IAeqTIRAntHAJ4qPqO9uLQirRFsl48T5Uv729A6/QCfUAiJ k+20YJsL9L3+SBCkm2KOxic= =7iAZ -----END PGP SIGNATURE----- |