Subject: [yellowdog-updates] Yellow Dog Linux Security Advisory: YDU-20000810-3
dburcaw@terraplex.com
Date: Thu Aug 10 2000 - 01:02:18 MDT
Yellow Dog Linux Security Announcement
--------------------------------------
Package: umb-scheme
Issue Date: August 10, 2000
Update Date: August 10, 2000
Priority: low
Advisory ID: YDU-20000810-3
1. Topic:
The umb-scheme package shipped with a permissions problem.
2. Problem:
The umb-scheme package included with Champion Server 1.2 included
two world-writable files.
3. Solution:
a) Updating via yup...
We suggest that you use the Yellow Dog Update Program (yup)
to keep your system up-to-date. The following command will
automatically retrieve and install the fixed version of
the umb-scheme onto your system:
yup update umb-scheme
b) Updating manually...
The update can also be retrieved manually from our ftp site
below along with the rpm command that should be used to install
the update.
ftp://ftp.yellowdoglinux.com/pub/yellowdog/updates/champion-1.2/ppc/RPMS/
umb-scheme-3.2-12.ppc.rpm
rpm -Fvh umb-scheme-3.2-12.ppc.rpm
4. Verification
MD5 checksum Package
-------------------------------- ----------------------------
9c162503ae80e7c653bbc3e39acdf7c8 RPMS/umb-scheme-3.2-12.ppc.rpm
816dda47ea449ea122adeecb81328cae SRPMS/umb-scheme-3.2-12.src.rpm
If you wish to verify that each package has not been corrupted or tampered with,
examine the md5sum with the following command: rpm --checksig --nogpg filename
5. Misc.
Terra Soft has setup a moderated mailing list where these security, bugfix, and package
enhancement announcements will be posted. See http://lists.yellowdoglinux.com/ for more
information.
For information regarding the usage of yup, the Yellow Dog Update Program, see
http://devel.yellowdoglinux.com/rp_yup.shtml
This archive was generated by hypermail 2a24 : Thu Aug 10 2000 - 01:03:16 MDT