----------------------------------------------------------------------- Immunix OS Security Advisory Packages updated: vim Affected products: Immunix OS 6.2, 7.0-beta, and 7.0 Bugs Fixed: immunix/1521 Date: March 28, 2001 Advisory ID: IMNX-2001-70-011-01 Author: Greg Kroah-Hartman <[EMAIL PROTECTED]> ----------------------------------------------------------------------- Description: An attacker could embed malicious VIM control codes into a file, and as soon as any user opened that file in vim-enhanced or vim-X11 with the status line option enabled in .vimrc, the commands would be executed as that user. For more information on this see http://groups.yahoo.com/group/vim/message/17299 Packages have been created and released that fix these problems. Package names and locations: Precompiled binary packages for Immunix 6.2 are available at: http://immunix.org/ImmunixOS/6.2/updates/RPMS/vim-X11-5.7-0.6x_StackGuard.i3 86.rpm http://immunix.org/ImmunixOS/6.2/updates/RPMS/vim-common-5.7-0.6x_StackGuard .i386.rpm http://immunix.org/ImmunixOS/6.2/updates/RPMS/vim-enhanced-5.7-0.6x_StackGua rd.i386.rpm http://immunix.org/ImmunixOS/6.2/updates/RPMS/vim-minimal-5.7-0.6x_StackGuar d.i386.rpm Source package for Immunix 6.2 is available at: http://immunix.org/ImmunixOS/6.2/updates/SRPMS/vim-5.7-0.6x_StackGuard.src.r pm Precompiled binary packages for Immunix 7.0-beta and 7.0 are available at: http://immunix.org/ImmunixOS/7.0/updates/RPMS/vim-X11-5.7-8_imnx.i386.rpm http://immunix.org/ImmunixOS/7.0/updates/RPMS/vim-common-5.7-8_imnx.i386.rpm http://immunix.org/ImmunixOS/7.0/updates/RPMS/vim-enhanced-5.7-8_imnx.i386.r pm http://immunix.org/ImmunixOS/7.0/updates/RPMS/vim-minimal-5.7-8_imnx.i386.rp m Source package for Immunix 7.0-beta and 7.0 is available at: http://immunix.org/ImmunixOS/7.0/updates/SRPMS/vim-5.7-8_imnx.src.rpm md5sums of the packages: e67b0e47c0f9951100d29961008e120c vim-X11-5.7-0.6x_StackGuard.i386.rpm 2153e3c0cb891e5cc1040bc3f6b21db4 vim-common-5.7-0.6x_StackGuard.i386.rpm 02a2fcab853fa1138f01777f9bb97948 vim-enhanced-5.7-0.6x_StackGuard.i386.rpm 20481bbbfe07a7eeb9eca16be74aeb6c vim-minimal-5.7-0.6x_StackGuard.i386.rpm 442d3198d10d42e164fa792f3696ac94 vim-5.7-0.6x_StackGuard.src.rpm e60540c7e159ee6c989a3f51436bb4b9 vim-X11-5.7-8_imnx.i386.rpm 23780ce98f4482d4ff1b80c6df23b1a3 vim-common-5.7-8_imnx.i386.rpm 47de143756db2a52d84e54b55b28ef0a vim-enhanced-5.7-8_imnx.i386.rpm 6ad7c0aecef55646c2c7e3ce28c6f786 vim-minimal-5.7-8_imnx.i386.rpm 786e710e03f43da5336e083f7c06847b vim-5.7-8_imnx.src.rpm Online version of all Immunix 6.2 updates and advisories: http://immunix.org/ImmunixOS/6.2/updates/ Online version of all Immunix 7.0-beta updates and advisories: http://immunix.org/ImmunixOS/7.0-beta/updates/ Online version of all Immunix 7.0 updates and advisories: http://immunix.org/ImmunixOS/7.0/updates/ NOTE: Ibiblio is graciously mirroring our updates, so if the links above are slow, please try: ftp://ftp.ibiblio.org/pub/Linux/distributions/immunix/ or one of the many mirrors available at: http://www.ibiblio.org/pub/Linux/MIRRORS.html -------------------------------------------------------------------------- Utk berhenti langganan, kirim email ke [EMAIL PROTECTED] Informasi arsip di http://www.linux.or.id/milis.php3 Pengelola dapat dihubungi lewat [EMAIL PROTECTED]
