shellutils: uuencode bug (still!!!)

[martin f krafft <madduck@madduck.net>]

Package: shellutils
Version: 2.0.11-11
Severity: grave
Justification: user security hole
Tags: security

http://www.aerasec.de/security/index.html?lang=en&id=ae-200205-037

this is still not patched and over a month old... redhat is the only
distro that patched this. let debian be the second.

-- System Information
Debian Release: 3.0
Architecture: i386
Kernel: Linux machine 2.4.18+machine #1 Sun Mar 24 02:15:23 CET 2002 i686
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8

Versions of packages shellutils depends on:
ii  libc6                        2.2.5-6     GNU C Library: Shared libraries an
ii  login                        20000902-12 System login tools

-- 
martin;              (greetings from the heart of the sun.)
  \____ echo mailto: !#^."<*>"|tr "<*> mailto:"; net@madduck
  
"nothing can cure the soul but the senses,
 just as nothing can cure the senses but the soul."
                                                        -- oscar wilde


-- 
To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org