Subject: bugtraq-digest V2 #23
From: [email-masked] (bugtraq-digest)
To: [email-masked]

bugtraq-digest          Monday, May 24 1999          Volume 02 : Number 023

In this issue:

    [Fwd: [SECURITY] new inn RPMS available]

See the end of this digest for information about bugtraq-digest.

----------------------------------------------------------------------

Date: Fri, 21 May 1999 18:28:44 -0400
From: "Andrew E. Mileski" <[email-masked]>
Subject: [Fwd: [SECURITY] new inn RPMS available]

This is a multi-part message in MIME format.
- --------------059426AA327CA3400046ECE1
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

- --
Andrew E. Mileski - Software Engineer [OS Team Leader]
Rebel.com  http://www.rebel.com/
- --------------059426AA327CA3400046ECE1
Content-Type: message/rfc822
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Resent-Date: 21 May 1999 22:40:31 -0000
Resent-Cc: recipient list not shown: ;
MBOX-Line: From [email-masked]  Fri May 21 18:40:31 1999
Date: Fri, 21 May 1999 17:19:54 -0400 (EDT)
From: Davin Milun <[email-masked]>
To: [email-masked]
Subject: Re: [SECURITY] new inn RPMS available
Forwarding: Mail from 'Bill Nottingham <[email-masked]>'
     dated: Fri, 21 May 1999 15:55:25 -0400
Resent-Message-ID: <"xEaAk1.0.Ay5.V3UHt"@lists.redhat.com>
Resent-From: [email-masked]
Reply-To: [email-masked]
Resent-Sender: [email-masked]

As has often been the case recently (unfortunately), the files on are
rh-mirror, but the ls-lR files have not yet been updated.
Which means that my mirror (and many others) have not picked up the new files
yet (and will not do so, until the ls-lR files are rebuilt).

Davin.

- ---------- Begin Forwarded Message ----------
>From [email-masked] Fri May 21 17:14 EDT 1999
Date: Fri, 21 May 1999 15:55:25 -0400
From: Bill Nottingham <[email-masked]>
To: [email-masked]
Subject: [SECURITY] new inn RPMS available

Security problems have been found with the version of INN that shipped
with Red Hat Linux 6.0.  By editing the inn.conf file, or changing the
INNCONF environment variable, the 'news' user could execute arbitrary
code as root. Thanks to the users of BUGTRAQ for noting this problem.
It is recommended that users of INN under Red Hat Linux 6.0 upgrade
to the new packages.

This vulnerability does not affect the INN that shipped in previous
versions of Red Hat Linux.

Red Hat Linux 6.0:
==================

alpha:
rpm -Uvh ftp://updates.redhat.com/6.0/alpha/inn-2.2-9.alpha.rpm
rpm -Uvh ftp://updates.redhat.com/6.0/alpha/inn-devel-2.2-9.alpha.rpm
rpm -Uvh ftp://updates.redhat.com/6.0/alpha/inews-2.2-9.alpha.rpm

i386:
rpm -Uvh ftp://updates.redhat.com/6.0/i386/inn-2.2-9.i386.rpm
rpm -Uvh ftp://updates.redhat.com/6.0/i386/inn-devel-2.2-9.i386.rpm
rpm -Uvh ftp://updates.redhat.com/6.0/i386/inews-2.2-9.i386.rpm

sparc:
rpm -Uvh ftp://updates.redhat.com/6.0/sparc/inn-2.2-9.sparc.rpm
rpm -Uvh ftp://updates.redhat.com/6.0/sparc/inn-devel-2.2-9.sparc.rpm
rpm -Uvh ftp://updates.redhat.com/6.0/sparc/inews-2.2-9.sparc.rpm

Source rpm:
rpm -Uvh ftp://updates.redhat.com/6.0/SRPMS/inn-2.2-9.src.rpm

- -- 
         To unsubscribe: mail [email-masked] with 
                       "unsubscribe" as the Subject.

- -- 
To unsubscribe:
mail -s unsubscribe [email-masked] < /dev/null

- ----------- End Forwarded Message -----------

- -- 
To unsubscribe: mail -s unsubscribe [email-masked] < /dev/null

- --------------059426AA327CA3400046ECE1--

- --
This list is run automagically by Majordomo 1.94.4
Please send email questions to [email-masked]
To UNSUBSCRIBE: email [email-masked] with
"unsubscribe bugtraq" as the body of your message.

------------------------------

End of bugtraq-digest V2 #23
****************************

--
This list is run automagically by Majordomo 1.94.4
Please send email questions to [email-masked]
To UNSUBSCRIBE: email [email-masked] with
"unsubscribe bugtraq-digest" as the body of your message.