OpenPKG CVS Repository
http://cvs.openpkg.org/
____________________________________________________________________________
Server: cvs.openpkg.org Name: Thomas Lotterer
Root: /v/openpkg/cvs Email: [EMAIL PROTECTED]
Module: openpkg-web Date: 23-Jun-2005 16:29:09
Branch: HEAD Handle: 2005062315290900
Modified files:
openpkg-web/security OpenPKG-SA-2005.011-shtool.txt
Log:
from the supported releases, only 2.3 is affected
Summary:
Revision Changes Path
1.3 +8 -10 openpkg-web/security/OpenPKG-SA-2005.011-shtool.txt
____________________________________________________________________________
patch -p0 <<'@@ .'
Index: openpkg-web/security/OpenPKG-SA-2005.011-shtool.txt
============================================================================
$ cvs diff -u -r1.2 -r1.3 OpenPKG-SA-2005.011-shtool.txt
--- openpkg-web/security/OpenPKG-SA-2005.011-shtool.txt 23 Jun 2005
14:05:19 -0000 1.2
+++ openpkg-web/security/OpenPKG-SA-2005.011-shtool.txt 23 Jun 2005
14:29:09 -0000 1.3
@@ -105,8 +105,8 @@
Solution:
Select the updated source RPM appropriate for your OpenPKG release
- [6][7], fetch it from the OpenPKG FTP service [8][9] or a mirror
- location, verify its integrity [10], build a corresponding binary RPM
+ [6], fetch it from the OpenPKG FTP service [7] or a mirror
+ location, verify its integrity [8], build a corresponding binary RPM
from it [3] and update your OpenPKG installation by applying the
binary RPM [5]. For the most recent release OpenPKG 2.3, perform the
following operations to permanently fix the security problem (for
@@ -117,10 +117,10 @@
ftp> cd release/2.3/UPD
ftp> get shtool-2.0.2-2.3.1.src.rpm
ftp> bye
- $ <prefix>/bin/openpkg rpm -v --checksig shtool-1.2.3-2.2.1.src.rpm
- $ <prefix>/bin/openpkg rpm --rebuild shtool-1.2.3-2.2.1.src.rpm
+ $ <prefix>/bin/openpkg rpm -v --checksig shtool-2.0.1-2.3.1.src.rpm
+ $ <prefix>/bin/openpkg rpm --rebuild shtool-2.0.1-2.3.1.src.rpm
$ su -
- # <prefix>/bin/openpkg rpm -Fvh <prefix>/RPM/PKG/shtool-1.2.3-2.2.1.*.rpm
+ # <prefix>/bin/openpkg rpm -Fvh <prefix>/RPM/PKG/shtool-2.0.1-2.3.1.*.rpm
Additionally, we recommend that you rebuild and reinstall
all dependent packages (see above), if any, too [4][5].
@@ -133,11 +133,9 @@
[3] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-1759
[4] http://www.openpkg.org/tutorial.html#regular-source
[5] http://www.openpkg.org/tutorial.html#regular-binary
- [6] ftp://ftp.openpkg.org/release/2.2/UPD/shtool-1.2.3-2.2.1.src.rpm
- [7] ftp://ftp.openpkg.org/release/2.1/UPD/shtool-1.2.2-2.1.1.src.rpm
- [8] ftp://ftp.openpkg.org/release/2.2/UPD/
- [9] ftp://ftp.openpkg.org/release/2.1/UPD/
- [10] http://www.openpkg.org/security.html#signature
+ [6] ftp://ftp.openpkg.org/release/2.3/UPD/shtool-2.0.1-2.3.1.src.rpm
+ [7] ftp://ftp.openpkg.org/release/2.3/UPD/
+ [8] http://www.openpkg.org/security.html#signature
________________________________________________________________________
For security reasons, this advisory was digitally signed with the
@@ .
______________________________________________________________________
The OpenPKG Project www.openpkg.org
CVS Repository Commit List [email protected]
