- --------------------------------------------------------------------------
Debian-Edu/Skolelinux Security Advisory DESA 2007-007
http://www.skolelinux.org/security/ Steffen Joeris
August 16th, 2007 debian-edu-security@lists.alioth.debian.org
- --------------------------------------------------------------------------
Package : lwat (lwat)
Vulnerability : output handling
Need reboot : no
Debian-Edu-specific : no
Klaus Ade Johnstad discovered that under certain conditions, the
output handling of lwat might cause the storing of sensible information.
For the stable distribution (3.0 codename terra, etch based) this
problem has been fixed in version 0.15-1etch1.
The oldstable distribution (2.0, sarge based) does not contain lwat.
We recommend that you upgrade your lwat packages.
Upgrade Instructions
- --------------------
Make sure the line
deb http://ftp.skolelinux.org/skolelinux/ etch local
is present in your /etc/apt/sources.list and run 'apt-get update' to
update your package lists. Then run
'apt-get upgrade'
to upgrade the package mentioned above. This might upgrade other
packages too, and if you only want to upgrade the package above, you
should run
'apt-get install <pkg1> '
where <pkg1> is the package name in paranthesis from the package section
above.
Debian-Edu/Skolelinux 3.0 alias terra (etch based)
--------------------------------------------------
Source archives:
http://ftp.skolelinux.org/skolelinux/pool/local/l/lwat/lwat_0.15-1etch1.dsc
Size/MD5 checksum: 09846e6469151a8a232f768f63922c22
http://ftp.skolelinux.org/skolelinux/pool/local/l/lwat/lwat_0.15-1etch1.diff.gz
Size/MD5 checksum: f2f7a050fe58e0b9192143fdaf337ca7
http://ftp.skolelinux.org/skolelinux/pool/local/l/lwat/lwat_0.15.orig.tar.gz
Size/MD5 checksum: ef4d4d5c20d56817318b86e58745c749
Architecture independent components:
http://ftp.skolelinux.org/skolelinux/pool/local/l/lwat/lwat_0.15-1etch1_all.deb
Size/MD5 checksum: a5d6b9df5a27501f8333624c6479c1e1
- --------------------------------------------------------------------------
Mailing lists: bruker@skolelinux.no, debian-edu@lists.debian.org,
linuxiskolen@skolelinux.no, user@skolelinux.de,
admin-discuss@skolelinux.org, debian-edu-french@lists.debian.org
Package info: `apt-cache show <pkg>'
Attachment:
signature.asc
Description: This is a digitally signed message part.