Bill Jonas on Thu, 23 Nov 2000 09:27:56 -0500 (EST)


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

[PLUG] Security updates


Happy Thanksgiving to everybody that celebrates it.

Well, it seems it's been a busy week for vulnerability announcements.
Starting on Sunday, there have been 11 security postings on
debian-security-announce.  The affected packages are cupsys, modutils,
tcpdump, joe, ethereal, ncurses, xmcd, elvis-tiny, koules (actually,
there's a vulnerability in the package, but Debian's not affected because
it's not installed SUID), modutils, and ghostscript.  I just wanted to
remind everyone that if you use Debian, you should have the following line
in your /etc/apt/sources.list:
deb http://security.debian.org stable/updates main contrib non-free
Then, of course, you'll need to run the command "apt-get update" and
"apt-get dist-upgrade".  If you use another distribution, it would be an
excellent idea to visit the security or errata page and download any
packages they have there that you have installed (it'd also be a good idea
to verify that you *don't* have any of the others installed).  Note also
that last week vulnerabilities in vixie-cron and openssh were announced.

Anyway, the Debian security announcements are available for viewing at
<http://lists.debian.org/debian-security-announce-00/maillist.html>.  It's
been a busy week for security.

-- 
Bill Jonas                | "If you haven't gotten where you're going,
bill@billjonas.com        |  you aren't there yet." --George Carlin
http://www.billjonas.com/ |  http://www.harrybrowne.org/


______________________________________________________________________
Philadelphia Linux Users Group       -      http://www.phillylinux.org
Announcements-http://lists.phillylinux.org/mail/listinfo/plug-announce
General Discussion  -  http://lists.phillylinux.org/mail/listinfo/plug