MDKSA-2004:016

Package name

mtools

Date

2004-02-25

Advisory ID

MDKSA-2004:016

Affected versions

9.2 i586 , 9.2 amd64

Problem description

Sebastian Krahmer found that the mformat program, when installed suid root, can create any file with 0666 permissions as root, and that it also does not drop privileges when reading local configuration files. The updated packages remove the suid bit from mformat.

Updated packages

9.2 i586

 92f97fa2f63b3bcb1f657c919152381e  9.2/RPMS/mtools-3.9.9-2.1.92mdk.i586.rpm
4346ec1081a440772fa3f40f9d07632d  9.2/SRPMS/mtools-3.9.9-2.1.92mdk.src.rpm

9.2 amd64

 11cde05b045fcf389c276199589c051d  amd64/9.2/RPMS/mtools-3.9.9-2.1.92mdk.amd64.rpm
4346ec1081a440772fa3f40f9d07632d  amd64/9.2/SRPMS/mtools-3.9.9-2.1.92mdk.src.rpm