Support / Security / Advisories / Mandrakelinux 7.2 / MDKSA-2001:010

Package name: inn
Date: 2001-01-10
Advisory ID: MDKSA-2001:010
Affected versions: 6.1 i586 , 6.0 i586 , 7.0 i586 , 7.1 i586 , 7.2 i586

Problem description

WireX discovered a potential temporary file race condition in the inn program. This condition is due partly to the way inn is compiled and configured on some Linux distributions, including Linux-Mandrake, and partly due to the lack of information in the inn package detailing potential security problems if you do not tell inn to use a private temporary directory. The patch supplied by WireX that creates temporary files correctly has been applied, and the temporary directory that inn uses has been moved from /usr/tmp to /var/spool/news/tmp which is available solely to the news user which inn runs as.

Updated packages

6.1 i586

 09b0c500964751218c12ea49919d130b  6.1/RPMS/inews-2.2.3-1.3mdk.i586.rpm
8d13f9b913c747b559208c149b0f840a  6.1/RPMS/inn-2.2.3-1.3mdk.i586.rpm
572b7bb5fdb4dc67289f23606576dd09  6.1/RPMS/inn-devel-2.2.3-1.3mdk.i586.rpm
ecc8e3e782681f98f90ed56e6e6df43a  6.1/SRPMS/inn-2.2.3-1.3mdk.src.rpm

6.0 i586

 b3d6543a36b6892ab47fd0886c5878a5  6.0/RPMS/inews-2.2.3-1.3mdk.i586.rpm
0eb3f23a945f5a3c4e4590f3ad6a4e93  6.0/RPMS/inn-2.2.3-1.3mdk.i586.rpm
16b44139d6e95ecd036657cfb22c2103  6.0/RPMS/inn-devel-2.2.3-1.3mdk.i586.rpm
ecc8e3e782681f98f90ed56e6e6df43a  6.0/SRPMS/inn-2.2.3-1.3mdk.src.rpm

7.0 i586

 47e81d95a38c65f6c24f0cfa9191d010  7.0/RPMS/inews-2.2.3-1.3mdk.i586.rpm
c896dcfaca61f889dba4577df4e6b60f  7.0/RPMS/inn-2.2.3-1.3mdk.i586.rpm
b7ab9c66a1f00dc3352c88698154c549  7.0/RPMS/inn-devel-2.2.3-1.3mdk.i586.rpm
ecc8e3e782681f98f90ed56e6e6df43a  7.0/SRPMS/inn-2.2.3-1.3mdk.src.rpm

7.1 i586

 4de129346319bca43e33ac84c04329c0  7.1/RPMS/inews-2.2.3-1.3mdk.i586.rpm
b5458c670d5a87952bb7ebee3ea498fb  7.1/RPMS/inn-2.2.3-1.3mdk.i586.rpm
acca5e4cc284f8c34aca73a795e611ca  7.1/RPMS/inn-devel-2.2.3-1.3mdk.i586.rpm
ecc8e3e782681f98f90ed56e6e6df43a  7.1/SRPMS/inn-2.2.3-1.3mdk.src.rpm

7.2 i586

 8ef8d2af5d2117bbb922300193602098  7.2/RPMS/inews-2.2.3-1.1mdk.i586.rpm
bb6cae5782ffc98f83f5ed4b49ca2017  7.2/RPMS/inn-2.2.3-1.1mdk.i586.rpm
1633a12236555d36b97d862385cfdbce  7.2/RPMS/inn-devel-2.2.3-1.1mdk.i586.rpm
bccd827c3cba37b0b5168e591f3baa6a  7.2/SRPMS/inn-2.2.3-1.1mdk.src.rpm