hostpc.com
Verified User
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
- --------------------------------------------------------------------------
CONECTIVA LINUX SECURITY ANNOUNCEMENT
- --------------------------------------------------------------------------
PACKAGE : netpbm
SUMMARY : Insecure temporary file creation
DATE : 2004-12-29 14:59:00
ID : CLA-2004:909
RELEVANT
RELEASES : 9, 10
- -------------------------------------------------------------------------
DESCRIPTION
netpbm[1] are tools for manipulating graphic files in many formats.
Utilities provided by the netpbm package prior to the 9.25 version
contain defects[2] in temporary file handling. They create temporary
files with predictable names without checking if the target file
already exists.
SOLUTION
It is recommended that all netpbm users upgrade their packages.
REFERENCES
1.http://netpbm.sourceforge.net/
2.http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0924
UPDATED PACKAGES
ftp://atualizacoes.conectiva.com.br/10/SRPMS/netpbm-9.20-58886U10_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/10/RPMS/libnetpbm9-9.20-58886U10_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/10/RPMS/libnetpbm9-devel-9.20-58886U10_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/10/RPMS/libnetpbm9-devel-static-9.20-58886U10_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/10/RPMS/netpbm-9.20-58886U10_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/9/SRPMS/netpbm-9.20-27817U90_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/9/RPMS/libnetpbm9-9.20-27817U90_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/9/RPMS/libnetpbm9-devel-9.20-27817U90_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/9/RPMS/libnetpbm9-devel-static-9.20-27817U90_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/9/RPMS/netpbm-9.20-27817U90_1cl.i386.rpm
ADDITIONAL INSTRUCTIONS
The apt tool can be used to perform RPM packages upgrades:
- run: apt-get update
- after that, execute: apt-get upgrade
Detailed instructions regarding the use of apt and upgrade examples
can be found at http://distro.conectiva.com.br/atualizacoes/#apt?idioma=en
-
Hash: SHA1
- --------------------------------------------------------------------------
CONECTIVA LINUX SECURITY ANNOUNCEMENT
- --------------------------------------------------------------------------
PACKAGE : netpbm
SUMMARY : Insecure temporary file creation
DATE : 2004-12-29 14:59:00
ID : CLA-2004:909
RELEVANT
RELEASES : 9, 10
- -------------------------------------------------------------------------
DESCRIPTION
netpbm[1] are tools for manipulating graphic files in many formats.
Utilities provided by the netpbm package prior to the 9.25 version
contain defects[2] in temporary file handling. They create temporary
files with predictable names without checking if the target file
already exists.
SOLUTION
It is recommended that all netpbm users upgrade their packages.
REFERENCES
1.http://netpbm.sourceforge.net/
2.http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0924
UPDATED PACKAGES
ftp://atualizacoes.conectiva.com.br/10/SRPMS/netpbm-9.20-58886U10_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/10/RPMS/libnetpbm9-9.20-58886U10_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/10/RPMS/libnetpbm9-devel-9.20-58886U10_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/10/RPMS/libnetpbm9-devel-static-9.20-58886U10_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/10/RPMS/netpbm-9.20-58886U10_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/9/SRPMS/netpbm-9.20-27817U90_1cl.src.rpm
ftp://atualizacoes.conectiva.com.br/9/RPMS/libnetpbm9-9.20-27817U90_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/9/RPMS/libnetpbm9-devel-9.20-27817U90_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/9/RPMS/libnetpbm9-devel-static-9.20-27817U90_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/9/RPMS/netpbm-9.20-27817U90_1cl.i386.rpm
ADDITIONAL INSTRUCTIONS
The apt tool can be used to perform RPM packages upgrades:
- run: apt-get update
- after that, execute: apt-get upgrade
Detailed instructions regarding the use of apt and upgrade examples
can be found at http://distro.conectiva.com.br/atualizacoes/#apt?idioma=en
-