Package name
Advisory ID
Affected versions
6.1 i586 , 6.0 i586 , 7.0 i586 , 7.1 i586 , CS1.0 i586

Problem description

WireX discovered a temporary file creation bug in the 2.6.1 release of wu-ftpd. The problem exists in the privatepw helper program. As well, Linux-Mandrake 7.2 users must update to this package as it fixes security problems as discussed in the prior advisory, MDKSA-2000:014, which had not been previously addressed for 7.2. Update: All of the updated packages for Linux Mandrake versions 6.0 through 7.1 and the packages for Corporate Server 1.0.1 had an incorrect dependency on the xinetd package which prevented MandrakeUpdate from installing the updates. Updated packages for these versions have been released that are no longer dependant upon xinetd.

Updated packages

6.1 i586

 bc743a8e6b9e06b630b9e28cce340fe1  6.1/RPMS/wu-ftpd-2.6.1-8.5mdk.i586.rpm
02b2f18883dd5c02d0d041850d6b12cd  6.1/SRPMS/wu-ftpd-2.6.1-8.5mdk.src.rpm

6.0 i586

 a6adb7822d8fea6adb82a2a2e37850fd  6.0/RPMS/wu-ftpd-2.6.1-8.5mdk.i586.rpm
02b2f18883dd5c02d0d041850d6b12cd  6.0/SRPMS/wu-ftpd-2.6.1-8.5mdk.src.rpm

7.0 i586

 9de1d0ccc6c2b0fbc52b77e92f29b9dd  7.0/RPMS/wu-ftpd-2.6.1-8.5mdk.i586.rpm
02b2f18883dd5c02d0d041850d6b12cd  7.0/SRPMS/wu-ftpd-2.6.1-8.5mdk.src.rpm

7.1 i586

 ecc65885ba46ba067158bcce917c87f8  7.1/RPMS/wu-ftpd-2.6.1-8.5mdk.i586.rpm
02b2f18883dd5c02d0d041850d6b12cd  7.1/SRPMS/wu-ftpd-2.6.1-8.5mdk.src.rpm

CS1.0 i586

 ecc65885ba46ba067158bcce917c87f8  1.0.1/RPMS/wu-ftpd-2.6.1-8.5mdk.i586.rpm
02b2f18883dd5c02d0d041850d6b12cd  1.0.1/SRPMS/wu-ftpd-2.6.1-8.5mdk.src.rpm