Jimmy Lim
Operation & Support Team Leader
Tricom
----------Forwarded message ----------
Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 28075 invoked from network); 14 Jan 2002 01:31:30 -0000
Received: from unknown (HELO bob.slackware.com) (207.173.11.34)
by phoenix.tricom.com.ph with SMTP; 14 Jan 2002 01:31:30 -0000
Received: (from daemon@localhost)
by bob.slackware.com (8.11.6/8.11.6) id g0CLZj609360
for slackware-security-outgoing; Sat, 12 Jan 2002 13:35:45 -0800
Received: from localhost (security@localhost)
by bob.slackware.com (8.11.6/8.11.6) with ESMTP id g0CLZj609357
for <[EMAIL PROTECTED]>; Sat, 12 Jan 2002 13:35:45 -0800
Date: Sat, 12 Jan 2002 13:35:45 -0800 (PST)
From: Slackware Security Team <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: [slackware-security] Pine update fixes insecure URL-handling
Message-ID: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: [EMAIL PROTECTED]
Precedence: bulk
Reply-To: Slackware Security Team <[EMAIL PROTECTED]>
Pine 4.44 packages are now available to fix a problem with insecure URL
handling.
Here's the information from the Slackware 8.0 ChangeLog:
Sat Jan 12 13:05:33 PST 2002
patches/packages/pine.tgz: Fix a security problem with pine by upgrading
to pine4.44.
More details from the Pine Announcement List:
This note is to announce the availability of the Pine Message System
version 4.44. The purpose of this release is to fix a security
bug with the treatment of quotes in the URL-handling code. The bug
allows a malicious sender to embed commands in a URL. This bug is
present in all versions of UNIX Pine.
We recommend upgrading Pine as soon as possible.
WHERE TO FIND THE NEW PACKAGE:
------------------------------
Updated pine package for Slackware 8.0:
ftp://ftp.slackware.com/pub/slackware/slackware-8.0/patches/packages/pine.tg
z
MD5 SIGNATURE:
--------------
Here is the md5sum for the package:
9511772027b579c1c2c542b4bb0d85da pine.tgz
INSTALLATION INSTRUCTIONS:
--------------------------
Simply upgrade as root:
# upgradepkg pine.tgz
Remember, it's also a good idea to backup configuration files before
upgrading packages.
- Slackware Linux Security Team
http://www.slackware.com
+------------------------------------------------------------------------+
| HOW TO REMOVE YOURSELF FROM THIS MAILING LIST: |
+------------------------------------------------------------------------+
| Send an email to [EMAIL PROTECTED] with this text in the body of |
| the email message: |
| |
| unsubscribe slackware-security |
| |
| You will get a confirmation message back. Follow the instructions to |
| complete the unsubscription. Do not reply to this message to |
| unsubscribe! |
+------------------------------------------------------------------------+
_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
To subscribe to the Linux Newbies' List: send "subscribe" in the body to
[EMAIL PROTECTED]
