Bill Jonas on Thu, 23 Nov 2000 09:27:56 -0500 (EST) |
Happy Thanksgiving to everybody that celebrates it. Well, it seems it's been a busy week for vulnerability announcements. Starting on Sunday, there have been 11 security postings on debian-security-announce. The affected packages are cupsys, modutils, tcpdump, joe, ethereal, ncurses, xmcd, elvis-tiny, koules (actually, there's a vulnerability in the package, but Debian's not affected because it's not installed SUID), modutils, and ghostscript. I just wanted to remind everyone that if you use Debian, you should have the following line in your /etc/apt/sources.list: deb http://security.debian.org stable/updates main contrib non-free Then, of course, you'll need to run the command "apt-get update" and "apt-get dist-upgrade". If you use another distribution, it would be an excellent idea to visit the security or errata page and download any packages they have there that you have installed (it'd also be a good idea to verify that you *don't* have any of the others installed). Note also that last week vulnerabilities in vixie-cron and openssh were announced. Anyway, the Debian security announcements are available for viewing at <http://lists.debian.org/debian-security-announce-00/maillist.html>. It's been a busy week for security. -- Bill Jonas | "If you haven't gotten where you're going, bill@billjonas.com | you aren't there yet." --George Carlin http://www.billjonas.com/ | http://www.harrybrowne.org/ ______________________________________________________________________ Philadelphia Linux Users Group - http://www.phillylinux.org Announcements-http://lists.phillylinux.org/mail/listinfo/plug-announce General Discussion - http://lists.phillylinux.org/mail/listinfo/plug
|
|