Full Disclosure mailing list archives
[TURBOLINUX SECURITY INFO] 17/Feb/2005
From: Turbolinux <security-announce () turbolinux co jp>
Date: Thu, 17 Feb 2005 22:27:30 +0900
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 This is an announcement only email list for the x86 architecture. ============================================================ Turbolinux Security Announcement 17/Feb/2005 ============================================================ The following page contains the security information of Turbolinux Inc. - Turbolinux Security Center http://www.turbolinux.com/security/ (1) postgresql -> Two vulnerabilities have been discovered in Postgresql (2) MySQL -> Multiple vulnerabilities have been discovered in MySQL (3) squid -> Multiple vulnerabilities exist in Squid (4) cups -> Multiple vulnerabilities exist in CUPS =========================================================== * postgresql -> Two vulnerabilities have been discovered in Postgresql =========================================================== More information: PostgreSQL is an advanced Object-Relational database management system. Two vulnerabilities have been found in Posgresql: - The postgresql package's make_oidjoins_check script allows local users to overwrite files via a symlink attack on temporary files. - PostgreSQL allows local users to load arbitrary shared libraries and have loaded code executed via the LOAD extension. Impact: These vulerabilities could allow attackers to overwrite arbitrary files via a symbolic link attack, and/or allow local users to execute arbitrary code. Affected Products: - Turbolinux Appliance Server 1.0 Hosting Edition - Turbolinux Appliance Server 1.0 Workgroup Edition - Turbolinux 10 Server - Turbolinux Home - Turbolinux 10 F... - Turbolinux 10 Desktop - Turbolinux 8 Server - Turbolinux 8 Workstation - Turbolinux 7 Server - Turbolinux 7 Workstation Solution: Please use the turbopkg (zabom) tool to apply the update. --------------------------------------------- [Turbolinux 10 Server, Turbolinux 10 Desktop, Turbolinux 10 F..., Turbolinux Home] # turbopkg or # zabom -u postgresql postgresql-contrib postgresql-devel postgresql-jdbc postgresql-libs \ postgresql-odbc postgresql-perl postgresql-python postgresql-server postgresql-tcl postgresql-tk [other] # turbopkg or # zabom update postgresql postgresql-contrib postgresql-devel postgresql-jdbc postgresql-libs \ postgresql-odbc postgresql-perl postgresql-python postgresql-server postgresql-tcl postgresql-tk --------------------------------------------- <Turbolinux Appliance Server 1.0 Hosting Edition> Source Packages Size: MD5 postgresql-7.2.2-7.src.rpm 9603227 4d25459cb51c0a6026121496f7e30dfa Binary Packages Size: MD5 postgresql-7.2.2-7.i586.rpm 1072487 299c267de70547e6bd8334ebf220bf2a postgresql-contrib-7.2.2-7.i586.rpm 984343 66b8c1de796b03508f67707f8a36c3a5 postgresql-devel-7.2.2-7.i586.rpm 578414 f8c8e69aea9704952c5253840568c664 postgresql-docs-7.2.2-7.i586.rpm 947484 f7a8dcbe81ba59e458151ef99c29b4b1 postgresql-jdbc-7.2.2-7.i586.rpm 378169 797d2d155ea627e606491d81ba82fe8a postgresql-libs-7.2.2-7.i586.rpm 86519 7701096fce66ecf17cb334c7bc282ad6 postgresql-odbc-7.2.2-7.i586.rpm 109387 982a27342c4db0f4f3814c35d44ed5c2 postgresql-perl-7.2.2-7.i586.rpm 59177 6f310d9cd44c408b186ce22720957e1a postgresql-python-7.2.2-7.i586.rpm 66825 300ccfa90d31fa14ee8382cf7179b3b0 postgresql-server-7.2.2-7.i586.rpm 1334176 dc832b4d7742456e93d5eb21bdbf8491 <Turbolinux Appliance Server 1.0 Workgroup Edition> Source Packages Size: MD5 postgresql-7.2.2-7.src.rpm 9603227 58704a255ffb8fe919e656f5328e3fd5 Binary Packages Size: MD5 postgresql-7.2.2-7.i586.rpm 1072207 b903c4989828dfce715c3dddae8d1402 postgresql-contrib-7.2.2-7.i586.rpm 985512 667e9a8c9289e569ff9ce9dbdf797d7d postgresql-devel-7.2.2-7.i586.rpm 578837 d09f8faa5ddad95f17c648f42d257d36 postgresql-docs-7.2.2-7.i586.rpm 947505 194a462800cbd0eb4c574dea209a83f1 postgresql-jdbc-7.2.2-7.i586.rpm 378323 e82da60a6faed46e47a6c4622beea69f postgresql-libs-7.2.2-7.i586.rpm 86703 c3d1937095b63ff8a764c96a80179b2c postgresql-odbc-7.2.2-7.i586.rpm 109560 e43221cfae20bd84ef0cf61885a9435c postgresql-perl-7.2.2-7.i586.rpm 59373 e846d88bb935894da0e85f11dca997a4 postgresql-python-7.2.2-7.i586.rpm 66966 4accd75b3eacbe86382ace96de3dbd8c postgresql-server-7.2.2-7.i586.rpm 1334482 1e0157739117671c0da50fe04250d08f postgresql-test-7.2.2-7.i586.rpm 863629 82cd6b401198371cd093f81cb30ce9f5 <Turbolinux 10 Server> Source Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/SRPMS/postgresql-7.4.5-10.src.rpm 14143789 43588176afb02f54951678513d9fc2d9 Binary Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/RPMS/postgresql-7.4.5-10.i586.rpm 1287480 35d2cda9e5c92b64bf7dac4ecf5974fa ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/RPMS/postgresql-contrib-7.4.5-10.i586.rpm 3738840 2a8612bf5e43dbb555d72094d6622c36 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/RPMS/postgresql-devel-7.4.5-10.i586.rpm 856790 1514d441758bd9e68e4f07064ada3b5b ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/RPMS/postgresql-jdbc-7.4.5-10.i586.rpm 695000 1cc039b5ddf0a83d1b6ccc6bae2418dc ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/RPMS/postgresql-libs-7.4.5-10.i586.rpm 121193 245effefeb562c0e6f23279ee670f877 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/RPMS/postgresql-odbc-7.4.5-10.i586.rpm 138063 c1a0d24cf879d212c35a1423cce0b5cb ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/RPMS/postgresql-perl-7.4.5-10.i586.rpm 610255 cc7a4f76e849ad3409b79fb9f90b2db7 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/RPMS/postgresql-python-7.4.5-10.i586.rpm 412521 d9ba910657f82246e1136c0263ea83f3 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/RPMS/postgresql-server-7.4.5-10.i586.rpm 2444206 44dd7d0844a06c5380e20124c07bd36b ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/RPMS/postgresql-tcl-7.4.5-10.i586.rpm 51806 6286d91bb62a98520477dffc9a7f0248 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/RPMS/postgresql-tk-7.4.5-10.i586.rpm 23444 4e5d6a8134ebce11442fa3f2922b2ac0 <Turbolinux 10 Desktop, Turbolinux 10 F..., Turbolinux Home> Source Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/SRPMS/postgresql-7.3-9.src.rpm 11272077 7f25b255a397c30734cabe9a83d95e35 Binary Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/postgresql-7.3-9.i586.rpm 1228261 63a8a3f126437ca6e00e6c77877ef6e3 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/postgresql-contrib-7.3-9.i586.rpm 686523 2369ed64c22eb2f1c442e817d0f0b2c0 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/postgresql-devel-7.3-9.i586.rpm 574087 78d7535f13b78c2adbb194aba488e32a ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/postgresql-docs-7.3-9.i586.rpm 1075341 da9d8e56c147abaf044ee7bb3c473525 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/postgresql-libs-7.3-9.i586.rpm 115975 7a93a0f368fab98167504dcec9e3d601 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/postgresql-odbc-7.3-9.i586.rpm 131441 090f17b09de521269099c8695bab256a ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/postgresql-perl-7.3-9.i586.rpm 3937483 f8f2c80d68be30dbdd2f54ea9d9735c7 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/postgresql-python-7.3-9.i586.rpm 58453 c859942ab777bbea84d548b3adfa75cf ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/postgresql-server-7.3-9.i586.rpm 2267837 d586d35ea89b80cb21ae8dc248e501f3 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/postgresql-tcl-7.3-9.i586.rpm 49702 8f70e8588d9074deaeaeeb00ef319e3a ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/postgresql-test-7.3-9.i586.rpm 908499 0bcf111610088b00259ad8201dabeb27 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/postgresql-tk-7.3-9.i586.rpm 22019 a92b863b69206b9e98b505a9f842a767 <Turbolinux 8 Server> Source Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/SRPMS/postgresql-7.2.2-7.src.rpm 9603227 a925f71f86eb4e38e52c6992408f21f8 Binary Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/postgresql-7.2.2-7.i586.rpm 1072681 fd786864b1e74b57c7de01cac5f5069f ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/postgresql-contrib-7.2.2-7.i586.rpm 985595 bf28ef1a2dd98f47ea5c90ed6649171c ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/postgresql-devel-7.2.2-7.i586.rpm 578842 eae221a70f778707a15bcea283144734 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/postgresql-docs-7.2.2-7.i586.rpm 947818 509a3bae08a68001047274e76f1975aa ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/postgresql-jdbc-7.2.2-7.i586.rpm 378320 c013ea9ec521a1a778aa43da6ba37e61 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/postgresql-libs-7.2.2-7.i586.rpm 86706 1a13f9c67525b044dd3034e5d2d93605 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/postgresql-odbc-7.2.2-7.i586.rpm 109575 016d3c27986dd22ea2ccb8d83e8940ca ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/postgresql-perl-7.2.2-7.i586.rpm 59375 3307df29d3798266f5873c618bc323ba ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/postgresql-python-7.2.2-7.i586.rpm 67111 6a8a9dd82b8a14cfce23015a63450fc2 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/postgresql-server-7.2.2-7.i586.rpm 1334230 90ffe07a2760f862d085bd6f288be625 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/postgresql-tcl-7.2.2-7.i586.rpm 50485 15b20399b2ae08193a4118f006e4cf51 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/postgresql-test-7.2.2-7.i586.rpm 863377 a3d0432d3a178f60c4cd196d978d6d28 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/postgresql-tk-7.2.2-7.i586.rpm 424089 5ca11bd6619cd0d48f90d9631e29393d <Turbolinux 8 Workstation> Source Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/SRPMS/postgresql-7.2.2-7.src.rpm 9603227 bca94784f2950dcd6d52b29f019155d3 Binary Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/RPMS/postgresql-7.2.2-7.i586.rpm 1071495 da86c61b56042262acfebe32e590992e ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/RPMS/postgresql-contrib-7.2.2-7.i586.rpm 985540 cd874b498b3b504c8280f038adbfe925 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/RPMS/postgresql-devel-7.2.2-7.i586.rpm 579112 fe5a264a08d66ac2fc8168235b1e1e22 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/RPMS/postgresql-docs-7.2.2-7.i586.rpm 947089 753f5c7864bf0839b78bf12cef34bc32 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/RPMS/postgresql-jdbc-7.2.2-7.i586.rpm 378322 ca189f0eff63e1f3df294dee82266dc4 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/RPMS/postgresql-libs-7.2.2-7.i586.rpm 86698 3316e48184c0f3771eae3870f65f6faa ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/RPMS/postgresql-odbc-7.2.2-7.i586.rpm 109574 1567dcdde01e6b368ab39ad13175c0ef ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/RPMS/postgresql-perl-7.2.2-7.i586.rpm 59366 c342ba94c1c79b044cb1ab57706def7d ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/RPMS/postgresql-python-7.2.2-7.i586.rpm 67032 0158c4e3111f260563d497ec93327a56 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/RPMS/postgresql-server-7.2.2-7.i586.rpm 1334301 d2a4b773e94e4f308050eca9492467a6 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/RPMS/postgresql-tcl-7.2.2-7.i586.rpm 50496 3421666423f4788ec2b0cef322282e86 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/RPMS/postgresql-test-7.2.2-7.i586.rpm 863471 0d41b382e5d68ae4a82975e0087e6e4f ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/RPMS/postgresql-tk-7.2.2-7.i586.rpm 424198 4d5c446c4751c53c3525220c6e498d3d <Turbolinux 7 Server> Source Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/SRPMS/postgresql-7.2.2-7.src.rpm 9603227 51174f2adb1d894537ad36155dc3add2 Binary Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/RPMS/postgresql-7.2.2-7.i586.rpm 1069110 7364e49e817c5a65f119898ad7954cfd ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/RPMS/postgresql-contrib-7.2.2-7.i586.rpm 979341 51a0fda22740a9f99fb7bb8b900f52ad ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/RPMS/postgresql-devel-7.2.2-7.i586.rpm 569707 a19cbaf0f4f224d54417c97efd30fbc4 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/RPMS/postgresql-docs-7.2.2-7.i586.rpm 948557 0a2cca0afdd5326df56b39c2be7fecb5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/RPMS/postgresql-jdbc-7.2.2-7.i586.rpm 378309 5ea9b17ce35f80a6ad7518b5e9f9d908 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/RPMS/postgresql-libs-7.2.2-7.i586.rpm 84591 8ffa63c598940f94fb0b022e69b5b427 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/RPMS/postgresql-odbc-7.2.2-7.i586.rpm 107197 b3bd1087417e7b980a04e6b581aac0cd ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/RPMS/postgresql-perl-7.2.2-7.i586.rpm 87226 89ee4f4454d37561d37186382f786e93 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/RPMS/postgresql-python-7.2.2-7.i586.rpm 66186 e88b11b1d8cf9ca0084cdf51c085d52f ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/RPMS/postgresql-server-7.2.2-7.i586.rpm 1309776 408da25fa65e7c8ef782ab3d63e7a93f ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/RPMS/postgresql-tcl-7.2.2-7.i586.rpm 50834 b0ba2e1c842d473efdc71c3c5298ac5e ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/RPMS/postgresql-test-7.2.2-7.i586.rpm 863977 accd2b0028b7341a92f3fda7fdc3b5a6 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/RPMS/postgresql-tk-7.2.2-7.i586.rpm 424712 db1d9465ddef5c2bb4932050dc125ea0 <Turbolinux 7 Workstation> Source Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/7/updates/SRPMS/postgresql-7.1.3-7.src.rpm 8313832 9883fb3458958e96515681bf317e4992 Binary Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/7/updates/RPMS/postgresql-7.1.3-7.i586.rpm 962715 0f3516fc6a275fd1c3804225b254a115 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/7/updates/RPMS/postgresql-contrib-7.1.3-7.i586.rpm 540147 80f500996f4f80fb3d6ec5ec1dbcf8e6 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/7/updates/RPMS/postgresql-devel-7.1.3-7.i586.rpm 536020 f4b9c2af98c03a59f632b3cbea57419b ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/7/updates/RPMS/postgresql-docs-7.1.3-7.i586.rpm 708650 36cb4497c49898bd22472eaa48b8f8eb ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/7/updates/RPMS/postgresql-jdbc-7.1.3-7.i586.rpm 113648 835cd55d8079911ed4c3556e778f9b3e ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/7/updates/RPMS/postgresql-libs-7.1.3-7.i586.rpm 78133 dadf547465d487336bbaacb62e44beca ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/7/updates/RPMS/postgresql-odbc-7.1.3-7.i586.rpm 89488 9cb374599df1c444dd094785ca4c777a ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/7/updates/RPMS/postgresql-perl-7.1.3-7.i586.rpm 85804 83d460c54d057089432966091990458c ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/7/updates/RPMS/postgresql-python-7.1.3-7.i586.rpm 79513 9406a2e271c1bf0964b615852b978771 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/7/updates/RPMS/postgresql-server-7.1.3-7.i586.rpm 1251989 180089486b02727e3606f23d1f74bc65 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/7/updates/RPMS/postgresql-tcl-7.1.3-7.i586.rpm 44035 1c68dc21dfb73441d599435254f33099 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/7/updates/RPMS/postgresql-test-7.1.3-7.i586.rpm 847874 ddef5a75524694eb39cdae76317bb369 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/7/updates/RPMS/postgresql-tk-7.1.3-7.i586.rpm 424351 3551c794c955b5b9e3000964aa42a98a References: CVE [CAN-2004-0977] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0977 [CAN-2005-0227] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0227 =========================================================== * MySQL -> Multiple vulnerabilities have been discovered in MySQL =========================================================== More information: MySQL is a true multi-user, multi-threaded SQL database server. Multiple vulnerabilities have been discovered in MySQL: - A vulnerability exists MySQL's temporary file handling. - MySQL checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation; this could allow attackers unauthorized access. - A buffer overflow exists in MySQL's mysql_real_connect function. - MySQL allows attackers to cause a denial of service via multiple threads that simultaneously alter MERGE table UNIONs. - A local user is granted privileges to a database with a name containing an underscore ("_"). Impact: These vulnerabilities could allow attackers to overwrite arbitrary files via a symbolic link attack, and/or allow users to circumvent certain database access controls. Affected Products: - Turbolinux Appliance Server 1.0 Hosting Edition - Turbolinux Appliance Server 1.0 Workgroup Edition - Turbolinux Home - Turbolinux 10 F... - Turbolinux 10 Desktop - Turbolinux 8 Server - Turbolinux 8 Workstation Solution: Please use the turbopkg (zabom) tool to apply the update. --------------------------------------------- [Turbolinux 10 Desktop, Turbolinux 10 F..., Turbolinux Home] # turbopkg or # zabom -u MySQL MySQL-bench MySQL-client MySQL-devel MySQL-shared [other] # turbopkg or # zabom update MySQL-bench MySQL-client MySQL-devel MySQL-shared --------------------------------------------- <Turbolinux Appliance Server 1.0 Hosting Edition> Source Packages Size: MD5 MySQL-3.23.58-7.src.rpm 12048247 32fe957b1c4acc9bd01a77039457b78e Binary Packages Size: MD5 MySQL-3.23.58-7.i586.rpm 5046840 b8a1fcfc558e440f0a07c0ce61db1f6c MySQL-bench-3.23.58-7.i586.rpm 611947 e923cdf47556e3ea42962dff52eb2f96 MySQL-client-3.23.58-7.i586.rpm 156405 bae19dc4a5f703c13ba95465dc1b16bb MySQL-devel-3.23.58-7.i586.rpm 1149508 a196fd9ee1340980689fbc76671ca4b5 MySQL-shared-3.23.58-7.i586.rpm 193329 6e50795b138056da9f26ebb9bb11661b <Turbolinux Appliance Server 1.0 Workgroup Edition> Source Packages Size: MD5 MySQL-3.23.58-7.src.rpm 12048247 9a99a4a8e8062df09795ab0dcae7529a Binary Packages Size: MD5 MySQL-3.23.58-7.i586.rpm 5048276 1485c2dd87037b4cc4675e42ab952aff MySQL-bench-3.23.58-7.i586.rpm 612132 e7bb1c67e1954f393d88502f23ce07e5 MySQL-client-3.23.58-7.i586.rpm 156517 6a2be06605032250997ea0b6852b816c MySQL-devel-3.23.58-7.i586.rpm 1149308 c55edeff863945491f0c8a35525740a9 MySQL-shared-3.23.58-7.i586.rpm 193502 f03ee6839e621431ba2ed047f295328e <Turbolinux 10 Desktop, Turbolinux 10 F..., Turbolinux Home> Source Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/SRPMS/MySQL-3.23.58-7.src.rpm 12048247 536fd33d744f09ff1dc04f629be0e818 Binary Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/MySQL-3.23.58-7.i586.rpm 4978887 26602263ff6b0f533d4ddac7f5508996 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/MySQL-bench-3.23.58-7.i586.rpm 624881 90bd5cb4280e2e2fd958a2471a7fef41 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/MySQL-client-3.23.58-7.i586.rpm 161068 3c6245ecede5ea768ab52272ab404b8f ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/MySQL-devel-3.23.58-7.i586.rpm 1071911 505742fe3028d9884e4540d347bdbe8b ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/MySQL-shared-3.23.58-7.i586.rpm 169446 8266872152b86b46e0194035e99e2504 <Turbolinux 8 Server> Source Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/SRPMS/MySQL-3.23.58-7.src.rpm 12048247 3bda39554e3da2e212c093724d6a39c8 Binary Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/MySQL-3.23.58-7.i586.rpm 5047782 3cca48015777e95a23c2f0a565a807e9 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/MySQL-bench-3.23.58-7.i586.rpm 612535 513e29d33525b483519823b7ac9b85b1 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/MySQL-client-3.23.58-7.i586.rpm 156621 8b461aee025a899a36093f0d21be625c ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/MySQL-devel-3.23.58-7.i586.rpm 1149922 23fe70670db13067f490c16a206f5fc8 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/MySQL-shared-3.23.58-7.i586.rpm 193493 b27113e6da06fdf089e35523fcf8d11d <Turbolinux 8 Workstation> Source Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/SRPMS/MySQL-3.23.58-7.src.rpm 12048247 c0772127ecc7dda3786194142a937a68 Binary Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/RPMS/MySQL-3.23.58-7.i586.rpm 5047657 d99d7f89c16f9b952c7ff135bc2f0b60 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/RPMS/MySQL-bench-3.23.58-7.i586.rpm 612194 e2ae0038409c395d872bb9eecee1fb30 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/RPMS/MySQL-client-3.23.58-7.i586.rpm 156486 c1da923719efc4d390f564de866f5069 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/RPMS/MySQL-devel-3.23.58-7.i586.rpm 1149781 6f83416b15748e516e03f1a9b1cdc951 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/RPMS/MySQL-shared-3.23.58-7.i586.rpm 193503 a3d160bc1bd2ee3a5041ae1f92ac854e <Turbolinux 7 Server> Source Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/SRPMS/MySQL-3.23.58-7.src.rpm 12048247 9c716f5e2e9df6e3dc66d9962fdd9c0f Binary Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/RPMS/MySQL-3.23.58-7.i586.rpm 4964388 c11f3169796d015c8adfa705a7086881 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/RPMS/MySQL-bench-3.23.58-7.i586.rpm 612961 5a4005fa5875211c32990fe4d49e4e7c ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/RPMS/MySQL-client-3.23.58-7.i586.rpm 152282 3207c699ecfe572ed4fd58e85471ff28 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/RPMS/MySQL-devel-3.23.58-7.i586.rpm 1087051 912f37de05a16a0cb31b68f2c31d38bd ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/RPMS/MySQL-shared-3.23.58-7.i586.rpm 186771 07c744509dba108abf676e4190e31260 <Turbolinux 7 Workstation> Source Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/7/updates/SRPMS/MySQL-3.23.58-7.src.rpm 12048247 1f6192113b02e8a9d5c31672e33ecf7f Binary Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/7/updates/RPMS/MySQL-3.23.58-7.i586.rpm 4963029 9af2f84fc2571641f06744d5a9a25223 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/7/updates/RPMS/MySQL-bench-3.23.58-7.i586.rpm 612392 fb342f4adc900f223023b63540085a9e ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/7/updates/RPMS/MySQL-client-3.23.58-7.i586.rpm 152287 2a33103761066d0ef0567781eda096b6 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/7/updates/RPMS/MySQL-devel-3.23.58-7.i586.rpm 1087150 0fe89c621e15fac938840d5248120fb5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/7/updates/RPMS/MySQL-shared-3.23.58-7.i586.rpm 186756 7d30521372ba13cbcdefb5be5732b8f8 References: CVE [CAN-2004-0381] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0381 [CAN-2004-0388] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0388 [CAN-2004-0457] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0457 [CAN-2004-0835] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0835 [CAN-2004-0836] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0836 [CAN-2004-0837] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0837 [CAN-2004-0957] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0957 =========================================================== * squid -> Multiple vulnerabilities exist in Squid =========================================================== More information: Squid is a high-performance proxy caching server for web clients, supporting FTP, gopher and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Multiple vulnerabilities have been discovered in Squid: - A buffer overflow vulnerability exists in the gopherToHTML function in the Gopher reply parser. - A integer overflow vulnerability exists in the WCCP message parsing code. - Squid's squid_ldap_auth function allows remotely authenticated users to bypass username-based Access Control Lists (ACLs) via a username with a space at the beginning or end, which is ignored by the LDAP server. - Squid may be susceptible to cache pollution via a HTTP reponse splitting attack. - The meaning of the access controls becomes somewhat confusing if any of the referenced ACLs is declared empty, without any members. - The length argument of the WCCP recvfrom() call is larger than it should be. An attacker could send a larger-than-normal WCCP packet and overflow the buffer. Impact: These vulnerabilities could allow remote attackers to cause a denial of service, possibly execute arbitrary code, and/or allow remote users to bypass access control rules. Affected Products: - Turbolinux Appliance Server 1.0 Hosting Edition - Turbolinux Appliance Server 1.0 Workgroup Edition - Turbolinux 10 Server - Turbolinux 8 Server - Turbolinux 8 Workstation - Turbolinux 7 Server - Turbolinux 7 Workstation Solution: Please use the turbopkg (zabom) tool to apply the update. --------------------------------------------- [Turbolinux 10 Server] # turbopkg or # zabom -u squid [other] # turbopkg or # zabom update squid --------------------------------------------- <Turbolinux Appliance Server 1.0 Hosting Edition> Source Packages Size: MD5 squid-2.5.STABLE6-18.src.rpm 1545346 da5e8ad41c39a640afebbc7ea6e63845 Binary Packages Size: MD5 squid-2.5.STABLE6-18.i586.rpm 826797 b5a0c5da75747102c15752375f6720a7 <Turbolinux Appliance Server 1.0 Workgroup Edition> Source Packages Size: MD5 squid-2.5.STABLE6-18.src.rpm 1545346 a590dd93ca013f6e9beeb58d8e553848 Binary Packages Size: MD5 squid-2.5.STABLE6-18.i586.rpm 827336 510dd7c2069bee38d006ec7a4b45b117 <Turbolinux 10 Server> Source Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/SRPMS/squid-2.5.STABLE6-18.src.rpm 1545346 13699916235bbca763232aa19564a4c0 Binary Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/RPMS/squid-2.5.STABLE6-18.i586.rpm 851753 ec47db25d577aeff5abb6a6b7ca22e24 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/RPMS/squid-debug-2.5.STABLE6-18.i586.rpm 1498631 2cd294de7c725273658b705ddd83f0e4 <Turbolinux 8 Server> Source Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/SRPMS/squid-2.5.STABLE6-18.src.rpm 1545346 95bcbc52502fac9cc3778cd8d244d586 Binary Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/squid-2.5.STABLE6-18.i586.rpm 827344 a4113c23521606f97bfff52543672716 <Turbolinux 8 Workstation> Source Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/SRPMS/squid-2.5.STABLE6-18.src.rpm 1545346 56932beaa952e1743b59c47e2d912d2c Binary Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/RPMS/squid-2.5.STABLE6-18.i586.rpm 827576 3e50a92f64d9b02bb0f165662651f9e4 <Turbolinux 7 Server> Source Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/SRPMS/squid-2.5.STABLE6-18.src.rpm 1545346 915d08646b9360fd1b9707b905009c00 Binary Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/RPMS/squid-2.5.STABLE6-18.i586.rpm 830770 7e8c4fe51b9c2dbf4547164327ed2a9c <Turbolinux 7 Workstation> Source Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/7/updates/SRPMS/squid-2.5.STABLE6-18.src.rpm 1545346 ffe6da08068a188f87ee63d750428f67 Binary Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/7/updates/RPMS/squid-2.5.STABLE6-18.i586.rpm 831084 b9224b5fdf1b2b08cb42dba309c17556 References: CVE [CAN-2005-0094] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0094 [CAN-2005-0095] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0095 [CAN-2005-0173] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0173 [CAN-2005-0175] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0175 [CAN-2005-0194] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0194 [CAN-2005-0211] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0211 =========================================================== * cups -> Multiple vulnerabilities exist in CUPS =========================================================== More information: The Common UNIX Printing System provides a portable printing layer for UNIX operating systems. It has been developed by Easy Software Products to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces. Multiple vulnerabilities exist in CUPS: - A buffer overflow vulnerability in hpgltops's ParseCommand function. - The lppasswd command can corrupt the CUPS password file. Impact: The vulnerability can allow remote attackers to cause a denial of service or possibly execute arbitrary code. An attacker could use lppasswd to corrupt the CUPS password file. Affected Products: - Turbolinux Appliance Server 1.0 Hosting Edition - Turbolinux Appliance Server 1.0 Workgroup Edition - Turbolinux 10 Server - Turbolinux Home - Turbolinux 10 F... - Turbolinux 10 Desktop - Turbolinux 8 Server - Turbolinux 8 Workstation Solution: Please use the turbopkg (zabom) tool to apply the update. --------------------------------------------- [Turbolinux 10 Server, Turbolinux 10 Desktop, Turbolinux 10 F..., Turbolinux Home] # turbopkg or # zabom -u cups cups-devel cups-libs [other] # turbopkg or # zabom update cups cups-devel cups-libs --------------------------------------------- <Turbolinux Appliance Server 1.0 Hosting Edition> Source Packages Size: MD5 cups-1.1.19-24.src.rpm 4198430 b41dc5402e78e386dd5461580762a0fd Binary Packages Size: MD5 cups-1.1.19-24.i586.rpm 2497610 afde590331f0515ada00c1007208f384 cups-libs-1.1.19-24.i586.rpm 92911 02785e423cc09b7a83999911f56d0fa0 <Turbolinux Appliance Server 1.0 Workgroup Edition> Source Packages Size: MD5 cups-1.1.19-24.src.rpm 4198430 de315bdc0aa4f2dd15ee59fcd86b0a79 Binary Packages Size: MD5 cups-1.1.19-24.i586.rpm 2497362 e0d2bb643eac572c92b0f7927f998c4f cups-libs-1.1.19-24.i586.rpm 93112 1f226f121f3d20906a807f5bff9e5c7c <Turbolinux 10 Server> Source Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/SRPMS/cups-1.1.20-4.src.rpm 4209480 1893c42f2d988289b7f3efcfaa8f92fd Binary Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/RPMS/cups-1.1.20-4.i586.rpm 2509495 d4e6a2bfe4f970891500391b18a8ee6a ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/RPMS/cups-devel-1.1.20-4.i586.rpm 126141 16eab584bfaef5716e6bdb94c05af1b6 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/RPMS/cups-libs-1.1.20-4.i586.rpm 86996 23b51c6f77c3369ab5479a19560a2254 <Turbolinux 10 Desktop, Turbolinux 10 F..., Turbolinux Home> Source Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/SRPMS/cups-1.1.19-24.src.rpm 4198430 6d978664a252ad2ad73030697789011d Binary Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/cups-1.1.19-24.i586.rpm 2510322 23991c4ef019c61d756937916cbeafa3 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/cups-devel-1.1.19-24.i586.rpm 117551 cd92457effa1e339d2894795fb3ada25 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/cups-libs-1.1.19-24.i586.rpm 87167 32a6aff812664aed652c5e47775adc5d <Turbolinux 8 Server> Source Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/SRPMS/cups-1.1.19-24.src.rpm 4198430 9d5699a0bf796d2190fed35976e44d42 Binary Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/cups-1.1.19-24.i586.rpm 2497921 efa944844e207022dadf226cf079bde7 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/cups-devel-1.1.19-24.i586.rpm 115420 51098c8793c272287bd35851084c5a17 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/cups-libs-1.1.19-24.i586.rpm 93056 e9f1c20a3fe7c9c420d88ffb5feee521 <Turbolinux 8 Workstation> Source Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/SRPMS/cups-1.1.19-24.src.rpm 4198430 af495b77c88e199e5dc40f8b841006ab Binary Packages Size: MD5 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/RPMS/cups-1.1.19-24.i586.rpm 2497951 af0beae7781931d40ea3ae42a9b4c3f2 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/RPMS/cups-devel-1.1.19-24.i586.rpm 115417 2aa0e31903151332316ae9ba7eb811d4 ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/RPMS/cups-libs-1.1.19-24.i586.rpm 93129 1bdeb0d1c65f061fffac6907c54e6b9d References: CVE [CAN-2004-1267] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-1267 [CAN-2004-1268] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-1268 [CAN-2004-1269] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-1269 [CAN-2004-1270] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-1270 * You may need to update the turbopkg tool before applying the update. Please refer to the following URL for detailed information. http://www.turbolinux.com/download/zabom.html http://www.turbolinux.com/download/zabomupdate.html Package Update Path http://www.turbolinux.com/update/ ============================================================ * To obtain the public key Here is the public key http://www.turbolinux.com/security/ * To unsubscribe from the list If you ever want to remove yourself from this mailing list, you can send a message to <server-users-e-ctl () turbolinux co jp> with the word `unsubscribe' in the body (don't include the quotes). unsubscribe * To change your email address If you ever want to chage email address in this mailing list, you can send a message to <server-users-e-ctl () turbolinux co jp> with the following command in the message body: chaddr 'old address' 'new address' If you have any questions or problems, please contact <supp_info () turbolinux co jp> Thank you! -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.7 (GNU/Linux) iD8DBQFCFJvGK0LzjOqIJMwRAqyAAJ9AHUF8B1FccmSRQog055fS/o3mmACeMcA9 25RJMzQo5t+Cf61/eCeewgw= =8d/2 -----END PGP SIGNATURE----- _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- [TURBOLINUX SECURITY INFO] 17/Feb/2005 Turbolinux (Feb 17)