drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Pufferüberlauf in fetchmail
Name: |
Pufferüberlauf in fetchmail
|
|
ID: |
SSA:2005-203-05 |
|
Distribution: |
Slackware |
|
Plattformen: |
Slackware -current, Slackware 8.1, Slackware 9.0, Slackware 9.1, Slackware 10.0, Slackware 10.1 |
|
Datum: |
Sa, 23. Juli 2005, 13:00 |
|
Referenzen: |
Keine Angabe |
|
Applikationen: |
Fetchmail |
|
Originalnachricht |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
[slackware-security] fetchmail (SSA:2005-203-05)
New fetchmail packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, and -current to fix security issues. Connecting to a malicious or compromised POP3 server may overflow fetchmail's stack causing a crash or the execution of arbitrary code.
For more information about this issue, see: http://fetchmail.berlios.de/fetchmail-SA-2005-01.txt
Here are the details from the Slackware 10.1 ChangeLog: +--------------------------+ patches/packages/fetchmail-6.2.5.2-i486-1.tgz: Upgraded to fetchmail-6.2.5.2. This fixes an overflow by which malicious or compromised POP3 servers may overflow fetchmail's stack. For more information, see: http://fetchmail.berlios.de/fetchmail-SA-2005-01.txt (* Security fix *) +--------------------------+
Where to find the new packages: +-----------------------------+
Updated package for Slackware 8.1: fetchmail-6.2.5.2-i386-1.tgz
Updated package for Slackware 9.0: fetchmail-6.2.5.2-i386-1.tgz
Updated package for Slackware 9.1: fetchmail-6.2.5.2-i486-1.tgz
Updated package for Slackware 10.0: fetchmail-6.2.5.2-i486-1.tgz
Updated package for Slackware 10.1: fetchmail-6.2.5.2-i486-1.tgz
Updated package for Slackware -current: fetchmail-6.2.5.2-i486-1.tgz
MD5 signatures: +-------------+
Slackware 8.1 package: 5c146fba82f2aef039e56336eefdb58a fetchmail-6.2.5.2-i386-1.tgz
Slackware 9.0 package: 3294b7f7bd8e3c87cb9651dc599226de fetchmail-6.2.5.2-i386-1.tgz
Slackware 9.1 package: dfba7d4c4621265cb5ed95ebd7098bad fetchmail-6.2.5.2-i486-1.tgz
Slackware 10.0 package: ec892e656e164089cb7166b81880bd75 fetchmail-6.2.5.2-i486-1.tgz
Slackware 10.1 package: 46cc7c918e9ffaff726f37a4083ec0f9 fetchmail-6.2.5.2-i486-1.tgz
Slackware -current package: a8273535ee8af6f7acad0f9626f4c819 fetchmail-6.2.5.2-i486-1.tgz
Installation instructions: +------------------------+
Upgrade the package as root: # upgradepkg fetchmail-6.2.5.2-i486-1.tgz
+-----+
Slackware Linux Security Team http://slackware.com/gpg-key security@slackware.com
+------------------------------------------------------------------------+ | To leave the slackware-security mailing list: | +------------------------------------------------------------------------+ | Send an email to majordomo@slackware.com with this text in the body of | | the email message: | | | | unsubscribe slackware-security | | | | You will get a confirmation message back containing instructions to | | complete the process. Please do not reply to this email address. | +------------------------------------------------------------------------+
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.7 (GNU/Linux)
iD8DBQFC4WE4akRjwEAQIjMRAtrLAJ49AIOF/PfkFuPT3MV/LZ+l8e1nEgCfTMvN 5wFyHedHWylPTgtYSvazBi0= =nRZM -----END PGP SIGNATURE-----
|
|
|
|