Linux Today: Linux News On Internet Time.

More on LinuxToday

Security Linux News for Sep 24, 2001

  • Debian Security Advisory: slrn command invocation (2001-09-24 05:48:38)
    "Byrial Jensen found a nasty problem in slrn (a threaded news reader). The notice on slrn-announce describes it as follows: When trying to decode binaries, the built-in code executes any shell scripts the article might contain, apparently assuming they would be some kind of self-extracting archive."

  • Debian Security Advisory: squid FTP PUT problem (2001-09-24 05:42:33)
    "Vladimir Ivaschenko found a problem in squid (a popular proxy cache). He discovered that there was a flaw in the code to handle FTP PUT commands: when a mkdir-only request was done squid would detect an internal error and exit. Since squid is configured to restart itself on problems this is not a big problem."