Yellow Dog Linux Security Announcement -------------------------------------- Package: umb-scheme Issue Date: August 10, 2000 Update Date: August 10, 2000 Priority: low Advisory ID: YDU-20000810-3 1. Topic: The umb-scheme package shipped with a permissions problem. 2. Problem: The umb-scheme package included with Champion Server 1.2 included two world-writable files. 3. Solution: a) Updating via yup... We suggest that you use the Yellow Dog Update Program (yup) to keep your system up-to-date. The following command will automatically retrieve and install the fixed version of the umb-scheme onto your system: yup update umb-scheme b) Updating manually... The update can also be retrieved manually from our ftp site below along with the rpm command that should be used to install the update. ftp://ftp.yellowdoglinux.com/pub/yellowdog/updates/champion-1.2/ppc/RPMS/ umb-scheme-3.2-12.ppc.rpm rpm -Fvh umb-scheme-3.2-12.ppc.rpm 4. Verification MD5 checksum Package -------------------------------- ---------------------------- 9c162503ae80e7c653bbc3e39acdf7c8 RPMS/umb-scheme-3.2-12.ppc.rpm 816dda47ea449ea122adeecb81328cae SRPMS/umb-scheme-3.2-12.src.rpm If you wish to verify that each package has not been corrupted or tampered with, examine the md5sum with the following command: rpm --checksig --nogpg filename 5. Misc. Terra Soft has setup a moderated mailing list where these security, bugfix, and package enhancement announcements will be posted. See http://lists.yellowdoglinux.com/ for more information. For information regarding the usage of yup, the Yellow Dog Update Program, see http://http://www.yellowdoglinux.com/support/solutions/ydl_general/yup.shtml