new pine binaries available.
-----BEGIN PGP SIGNED MESSAGE-----
A message was posted to the Bugtraq list on Friday, June 23 describing a
buffer overrun in pine that can be used to gain an sgid mail shell if Pine
is sgid mail. Jaldhar Vyas (unofficial unofficial maintainer) has
released new Pine packages to address this issue in Debian. Binaries for
potato and woody have been added to my Pine mirror at
http://members.mint.net/frodo/pine/
If you're running slink or earlier you should manually chmod -s
/usr/bin/pine.
noah
PGP Public Key available at http://web.morgul.net/~frodo/mail.html
or by `finger -l frodo@morgul.net`
-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 5.0i for non-commercial use
Charset: noconv
iQCVAwUBOVejKodCcpBjGWoFAQFSQAP/a7uH9N0+elJcIhv/eycXliP70qd1ktBc
2nNTCR0v5Nhpgk6JsGOuKnNrewKf8R/RHCcxtaUZnZq+PM8YI1s9Vy7jDV83yABh
3WL1LWUZS+xdpVmUPNrnMdTdex0JOrBdKli6uj7UrMX6shaNEnH/ir7PKFKqRoHZ
CFeOmxM3u9E=
=7LZp
-----END PGP SIGNATURE-----
Reply to: