Whitebox alert WBSA-2004:174-01 (utempter)

From:
    	     
 
John Morris <jmorris@beau.org>
To:
    	     
 
whitebox-announce@beau.org
Subject:
    	     
 
[Whitebox-announce] [WBSA-2004:174-01] Updated utempter package fixes vulnerability
Date:
    	     
 
Thu, 10 Jun 2004 23:13:16 -0500 (CDT)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ----------------------------------------------------------------------
                   Security Advisory

Synopsis:          Updated utempter package fixes vulnerability
Advisory ID:       [WBSA-2004:174-01]
Issue date:        2004-06-10
Updated on:        2004-06-10
Product:           White Box Enterprise Linux 3.0 (i386)
Keywords:          
Cross references:  
Obsoletes:         
CVE Names:         CAN-2004-0233
- ----------------------------------------------------------------------

Note: This one went to the mirrors on May 31.

An updated utempter package that fixes a potential symlink vulnerability
is now available.

More information is available in Red Hat, Inc's original advisory 
available on their site at:

http://www.redhat.com/archives/enterprise-watch-list/2004-May/msg00008.html

To install this new package on your White Box Enterprise Linux system
use the Up2Date Network or Yum.

Note: Be sure to change the default Up2Date or Yum server from the
initial location to prevent undue load to the whiteboxlinux.org
server, which doesn't have a lot of outbound bandwidth.  The config
files already have entries for mirror sites commented out.

Up2Date's configuration file is at /etc/sysconfig/rhn/sources

Yum's configuration is in /etc/yum.conf


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Made with pgp4pine 1.76

iD8DBQFAyTFiqME6bvnsqA8RAnxJAKC3az52DnewfPpyjKluC8k00HNXCwCeNG0T
h/72SEYur0/nj3F0XskjqLs=
=2RSq
-----END PGP SIGNATURE-----


_______________________________________________
Whitebox-announce mailing list
Whitebox-announce@beau.org
http://beau.org/mailman/listinfo/whitebox-announce