[1395] in linux-security and linux-alert archive
[linux-alert] new version of wu-ftpd available
daemon@ATHENA.MIT.EDU (Erik Troan)
Fri Jan 17 18:15:01 1997
Date: Fri, 17 Jan 1997 17:46:47 -0500 (EST)
From: Erik Troan <ewt@redhat.com>
Reply-To: redhat-list@redhat.com
To: redhat-announce-list@redhat.com
Resent-From: linux-alert@redhat.com
The signal handling code in wu-ftpd has some security problems which
allows users to read all files on your system. A new version of wu-ftpd
is now available for Red Hat 4.0 which Red Hat suggests installing
on all of your systems. This new version uses the same fix posted to
redhat-list@redhat.com earlier today by Savochkin Andrey Vladimirovich.
Users of Red Hat Linux versions earlier then 4.0 should upgrade to 4.0
and then apply all available security packages.
Users whose computers have direct internet connections may apply
this update by using one of the following commands:
Intel:
rpm -Uvh ftp://ftp.redhat.com/updates/4.0/i386/wu-ftpd-2.4.2b11-9.i386.rpm
Alpha:
rpm -Uvh ftp://ftp.redhat.com/updates/4.0/axp/wu-ftpd-2.4.2b11-9.axp.rpm
SPARC:
rpm -Uvh ftp://ftp.redhat.com/updates/4.0/sparc/wu-ftpd-2.4.2b11-9.sparc.rpm
All of these packages have been signed with Red Hat's PGP key.
Erik
-------------------------------------------------------------------------------
| I told you I'm not very bright -- Sugar in "Some Like It Hot" |
| "RPM is the greatest thing since swap-space" - Bryan C. Andregg
| |
| Erik Troan = ewt@redhat.com = ewt@sunsite.unc.edu |
