[17200] in bugtraq
mod_php3 advisory did not include CL5.1
daemon@ATHENA.MIT.EDU (Andreas Hasenack)
Fri Oct 13 17:03:19 2000
Mail-Followup-To: Andreas Hasenack <andreas@conectiva.com.br>,
lwn@lwn.net, bugtraq@securityfocus.com,
security-alert@linuxsecurity.com, linuxlist@securityportal.com
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Message-Id: <20001013113934.J680@conectiva.com.br>
Date: Fri, 13 Oct 2000 11:39:34 -0200
Reply-To: Andreas Hasenack <andreas@CONECTIVA.COM.BR>
From: Andreas Hasenack <andreas@CONECTIVA.COM.BR>
X-To: lwn@lwn.net, security-alert@linuxsecurity.com,
linuxlist@securityportal.com
To: BUGTRAQ@SECURITYFOCUS.COM
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Our mod_php3 advisory sent out on October 12th incorrectly did not
list Conectiva Linux 5.1 as vulnerable.
Conectiva Linux 5.1 *is* also vulnerable to the mod_php3 problem
reported in that advisory. Due to an operational error, it was not
listed in that email, even though the fixed packages were already
in our ftp area for that specific distro.
The corrected advisory can be found at:
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000324
The correct URLs for Conectiva Linux 5.1 are reproduced below:
ftp://atualizacoes.conectiva.com.br/5.1/SRPMS/mod_php3-3.0.17-1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/5.1/i386/mod_php3-3.0.17-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.1/i386/mod_php3-doc-3.0.17-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.1/i386/mod_php3-gd-3.0.17-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.1/i386/mod_php3-imap-3.0.17-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.1/i386/mod_php3-ldap-3.0.17-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.1/i386/mod_php3-mysql-3.0.17-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.1/i386/mod_php3-pgsql-3.0.17-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.1/i386/mod_php3-xml-3.0.17-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.1/i386/php3-cgi-3.0.17-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.1/i386/php3-cgi-gd-3.0.17-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.1/i386/php3-cgi-imap-3.0.17-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.1/i386/php3-cgi-ldap-3.0.17-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.1/i386/php3-cgi-mysql-3.0.17-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.1/i386/php3-cgi-pgsql-3.0.17-1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/5.1/i386/php3-cgi-xml-3.0.17-1cl.i386.rpm
We apologize for any problems this may have caused.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.3 (GNU/Linux)
Comment: For info see http://www.gnupg.org
iD8DBQE55uac42jd0JmAcZARAl7pAKDMFSIzNSusG7NUKwaD5rTBoD+4eQCePP92
0p05tPOsfzdi3MhwvqXEK1g=
=2lbB
-----END PGP SIGNATURE-----