Date: Wed, 22 Nov 2000 21:53:33 +0100
From: Martin Schulze joey@finlandia.infodrom.north.de
To: Debian Security Announcements
Subject: New version of elvis-tiny released
Debian Security Advisory security@debian.org
http://www.debian.org/security/ Martin Schulze
November 22, 2000
Package : elvis-tiny
Problem type : /tmp-file vulnerability
Debian-specific: no
Topi Miettinen audited elvis-tiny and raised an issue covering the
use and creation of temporary files. Those files are created with a
predictable pattern and O_EXCL flag is not used when opening. This
makes users of elvis-tiny vulnerable to race conditions and/or data
lossage.
This problem has been fixed in version 1.4-10 and we recommend
that you upgrade your elvis-tiny packages immediately.
This problem does not exist in the big elvis package.
wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.
Debian GNU/Linux 2.1 alias slink
Slink is no longer being supported by the Debian Security Team.
We highly recommend an upgrade to the current stable release.
Debian GNU/Linux 2.2 alias potato
Potato was released for the Alpha, ARM, Intel ia32, Motorola
680×0, PowerPC and Sun SPARC architectures. Fixes are available for
all of them and will be included in 2.2r2.
Source archives:
http://security.debian.org/dists/potato/updates/main/source/elvis-tiny_1.4-10.diff.gz
MD5 checksum: d9c3bac777d0981f7ff5e9348dc93a4d
http://security.debian.org/dists/potato/updates/main/source/elvis-tiny_1.4-10.dsc
MD5 checksum: eaec6ff7d7796260ef1a956ce1089bdd
http://security.debian.org/dists/potato/updates/main/source/elvis-tiny_1.4.orig.tar.gz
MD5 checksum: 884cc10828f6a134dfdc218a6cb0cb0e
Alpha architecture:
http://security.debian.org/dists/potato/updates/main/binary-alpha/elvis-tiny_1.4-10_alpha.deb
MD5 checksum: 2590ee56961063492e4ea9042405cff0
ARM architecture:
http://security.debian.org/dists/potato/updates/main/binary-arm/elvis-tiny_1.4-10_arm.deb
MD5 checksum: 7e7d705d069d12f9a6f2aafd887f16d5
Intel ia32 architecture:
http://security.debian.org/dists/potato/updates/main/binary-i386/elvis-tiny_1.4-10_i386.deb
MD5 checksum: 5c53b7b9b8f9f61e64d39f51a57a684c
Motorola 680×0 architecture:
http://security.debian.org/dists/potato/updates/main/binary-m68k/elvis-tiny_1.4-10_m68k.deb
MD5 checksum: c4198630e2860fb4ed0acc3f2d28f3fa
PowerPC architecture:
http://security.debian.org/dists/potato/updates/main/binary-powerpc/elvis-tiny_1.4-10_powerpc.deb
MD5 checksum: e2578f19a8d8ebac6b68e7bccb4a263d
Sun Sparc architecture:
http://security.debian.org/dists/potato/updates/main/binary-sparc/elvis-tiny_1.4-10_sparc.deb
MD5 checksum: 15c862e3debe027092edba3ab4ae62b3
These files will be moved into
ftp://ftp.debian.org/debian/dists/stable/*/binary-$arch/
soon.
Debian GNU/Linux Unstable alias woody
This version of Debian is not yet released.
Fixes are already installed in the archive for Alpha, ARM and
Intel ia32. Fixes for Motorola 680×0, PowerPC, and SPARC will be
made available in the Debian archive over the next several
days.
For not yet released architectures please refer to the
appropriate directory
ftp://ftp.debian.org/debian/dists/sid/binary-$arch/
.
apt-get: deb http://security.debian.org/
stable/updates main
dpkg-ftp: ftp://security.debian.org/debian-security
dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show <pkg>’ and http://packages.debian.org/
<pkg>