Fedora: Critical Update 2005-435 Fixes Ncpfs Getuid Vulnerabilities

Ncpfs is a filesystem which understands the Novell NetWare(TM) NCP

protocol. Functionally, NCP is used for NetWare the way NFS is used

in the TCP/IP world. For a Linux system to mount a NetWare

filesystem, it needs a special mount program. The ncpfs package

contains such a mount program plus other tools for configuring and

using the ncpfs filesystem.

Install the ncpfs package if you need to use the ncpfs filesystem

to use Novell NetWare files or services.

- fixed getuid security bug CAN-2005-0014

- fixed security bug CAN-2004-1079

* Mon Apr 11 2005 Jiri Ryska 2.2.4-4.FC3

- fixed getuid security bug CAN-2005-0013

6af0d3c19911051510d951cefd6666ed SRPMS/ncpfs-2.2.4-4.FC3.1.src.rpm

fdc4956a24599f539dc8c70e5060631b x86_64/ncpfs-2.2.4-4.FC3.1.x86_64.rpm

61bbe162ded6e049d87bf08375d7c43d x86_64/ipxutils-2.2.4-4.FC3.1.x86_64.rpm

760a4728c89cbbd94aeb355d74292157

x86_64/debug/ncpfs-debuginfo-2.2.4-4.FC3.1.x86_64.rpm

09dc713963e1af3e68756237fc7fc621 i386/ncpfs-2.2.4-4.FC3.1.i386.rpm

439ec771747839c02362a2c198072d04 i386/ipxutils-2.2.4-4.FC3.1.i386.rpm

20cda6efc8a8b970fdce80140d245a5f

i386/debug/ncpfs-debuginfo-2.2.4-4.FC3.1.i386.rpm

This update can also be installed with the Update Agent; you can

launch the Update Agent with the 'up2date' command.

fedora-announce-list@redhat.com