| |||||||||||||
TSL-2003-0007 - man
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Trustix Secure Linux Bugfix Advisory #2003-0008 Package name: man Summary: Minor bugfix Date: 2003-03-18 Affected versions: TSL 1.5 - -------------------------------------------------------------------------- Package description: The man package includes three tools for finding information and/or documentation about your Linux system: man, apropos and whatis. The man system formats and displays on-line manual pages about commands or functions on your system. Apropos searches the whatis database (containing short descriptions of system commands) for a string. Whatis searches its own database for a complete word. Problem description: man versions earlier than 1.5l contains a bug that could be used to excecute code with a specially formatted man page. The code will of course be executed as the user running the program, and as such requires very special conditions to be a problem. Action: We recommend that all systems with this package installed be upgraded. Please note that if you do not need the functionality provided by this package, you may want to remove it from your system. Location: All TSL updates are available from <URI:http://www.trustix.net/pub/Trustix/updates/> <URI:ftp://ftp.trustix.net/pub/Trustix/updates/> About Trustix Secure Linux: Trustix Secure Linux is a small Linux distribution for servers. With focus on security and stability, the system is painlessly kept safe and up to date from day one using swup, the automated software updater. Automatic updates: Users of the SWUP tool can enjoy having updates automatically installed using 'swup --upgrade'. Get SWUP from: <URI:ftp://ftp.trustix.net/pub/Trustix/software/swup/> Public testing: These packages have been available for public testing for some time. If you want to contribute by testing the various packages in the testing tree, please feel free to share your findings on the tsl-discuss mailinglist. The testing tree is located at <URI:http://www.trustix.net/pub/Trustix/testing/> <URI:ftp://ftp.trustix.net/pub/Trustix/testing/> Questions? Check out our mailing lists: <URI:http://www.trustix.net/support/> Verification: This advisory along with all TSL packages are signed with the TSL sign key. This key is available from: <URI:http://www.trustix.net/TSL-GPG-KEY> The advisory itself is available from the errata pages at <URI:http://www.trustix.net/errata/trustix-1.2/> and <URI:http://www.trustix.net/errata/trustix-1.5/> or directly at <URI:http://www.trustix.net/errata/misc/2003/TSL-2003-0008-man.asc.txt> MD5sums of the packages: - -------------------------------------------------------------------------- 224eea908582817b30be2f914b4f3e9d ./1.5/RPMS/man-1.5l0-1tr.i586.rpm 529e4ec2d992d23462e69f80241a2cd8 ./1.5/SRPMS/man-1.5l0-1tr.src.rpm - -------------------------------------------------------------------------- Trustix Security Team -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE+dynXwRTcg4BxxS0RAh1CAJ4kmoBx+H7BQuqwDuaDdFhRp5wGjQCfdHvP NmjYcmiYVKge02gI0VWDJ/E= =ReFh -----END PGP SIGNATURE----- _______________________________________________ tsl-announce mailing list tsl-announce@trustix.org http://www.trustix.org/mailman/listinfo/tsl-announce (Log in to post comments)
|
|||||||||||||