Subject: Bug#4153: recent mount/umount vulnerability

From: Michael Meskes <[email-masked]>
Date: Thu, 15 Aug 1996 15:58:58 +0200 (MET DST)

Alexander O. Yuriev writes:
> 	I trust you are all aware of the information released to
> bugtraq/linux-security and linux-alert mailing lists about the vulnerability
> of mount/umount utilities in Linux.
> 	I'd really appreciate if you provide some official information on
> your distribution specific fixes for the upcoming Linux Security FAQ
> Update...

So who's going to answer this report officially?

Note, that the RedHat fix was already announced.

Michael
-- 
Michael Meskes                   |    _____ ________ __  ____
[email-masked] |   / ___// ____/ // / / __ \___  __________
[email-masked]                  |   \__ \/ /_  / // /_/ /_/ / _ \/ ___/ ___/
[email-masked]                |  ___/ / __/ /__  __/\__, /  __/ /  (__  )
Use Debian Linux!                | /____/_/      /_/  /____/\___/_/  /____/

---

From: Guy Maor <[email-masked]>
Date: Thu, 22 Aug 1996 17:43:27 -0500 (CDT)

> your distribution specific fixes for the upcoming Linux Security FAQ

Hmmm, it appears that everybody was expecting somebody else to
officially answer this.

Anyway, after rapid installations of mount 2.5j-1.1, mount 2.5k-1,
Debian 1.1.6 contains the latest: mount 2.5l-1.

Debian users can upgrade by simply pointing the dpkg-ftp method of
dselect at `ftp.debian.org:/debian/stable'.

Alternatively they can download the file
`ftp.debian.org:/debian/stable/binary-i386/base/mount_2.5l-1.deb' and
install it by hand with `dpkg -i mount_2.5l-1.deb'.

Alex, in the future please direct these questions to
[email-masked]'.

(closing the bug)