Alerts This Week
Warning Icon 1 677
Alerts This Week
Warning Icon 1 677

Slackware 9.0, 9.1 -current: SSA:2004-136-01 moderate: mc DoS Risk

slackware
Calendar Grey May 17, 2004
Dist Slackware Esm H88
Users are advised about mc updates addressing potential Denial of Service and code execution vulnerabilities in Slackware 9.0, 9.1, and -current. Apply patches
New mc packages are available for Slackware 9.0, 9.1, and -current to fix security issues that These could lead to a denial of service or the execution of arbitrary code as the use...

Summary

Here are the details from the Slackware 9.1 ChangeLog: Fri May 14 15:11:37 PDT 2004 patches/packages/mc-4.6.0-i486-2.tgz: Patched to fix buffer overflow, format string, and temporary file creation vulnerabilities found by Andrew V. Samoilov and Pavel Roskin. These could lead to a denial of service or the execution of arbitrary code as the user running mc. For more details, see: https://www.cve.org/CVERecord?id=CVE-CAN-2004-0226 https://www.cve.org/CVERecord?id=CVE-CAN-2004-0231 https://www.cve.org/CVERecord?id=CVE-CAN-2004-0232 (* Security fix *)

Where Find New Packages

Updated package for Slackware 9.0:
Updated package for Slackware 9.1:
Updated package for Slackware -current:

MD5 Signatures

Slackware 9.0 package: e74a8dcdd90f2846e4bbac75a154ad39 mc-4.6.0-i386-2.tgz
Slackware 9.1 package: ac580a4f3556aaae92be0fd754866a55 mc-4.6.0-i486-2.tgz
Slackware -current package: ce9b9ab338ee114c5d9038e8420db1e7 mc-4.6.0-i486-2.tgz

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the mc package as root: # upgradepkg mc-4.6.0-i486-2.tgz

Related News

Your message here