Yellow Dog Linux Security Announcement -------------------------------------- Package: vsftpd Issue Date: Apr 23,2003 Priority: medium Advisory ID: YDU-20030423-3 1. Topic: Updated vsftpd packages are available. 2. Problem: Earlier versions of the vsftpd were not compiled against the tcp_wrappers. If usage of tcp_wrapper feautures is necessary please be advised to upgrade to these errata packages. 3. Solution: a) Updating via apt... We suggest that you use the apt-get program to keep your system up-to-date. The following command(s) will retrieve and install the fixed version of this update onto your system: apt-get vsftpd apt-get install vsftpd b) Updating manually... Download the updates below and then run the following rpm command. (Please use a mirror site) rpm -Fvh [filenames] Yellow Dog Linux 3.0 ftp://ftp.yellowdoglinux.com/pub/yellowdog/updates/yellowdog-3.0/ ppc/vsftpd-1.1.3-8.ppc.rpm 4. Verification MD5 checksum Package -------------------------------- ---------------------------- [Yellow Dog Linux 3.0] 051d84df5952ba6adf6de3e610668576 SRPMS/vsftpd-1.1.3-8.src.rpm b07cc75168f7dee6024e166c6d2643bb ppc/vsftpd-1.1.3-8.ppc.rpm If you wish to verify that each package has not been corrupted or tampered with, examine the md5sum with the following command: md5sum 5. Misc. Terra Soft has setup a moderated mailing list where these security, bugfix, and package enhancement announcements will be posted. See http://lists.terrasoftsolutions.com/ for more information. For information regarding the usage of apt-get, see: http://www.yellowdoglinux.com/support/solutions/ydl_general/apt-get.shtml