Upgraded ProFTPD packages are available for Slackware 8.1, 9.0 and-current. These fix a security issue where an attacker could gaina root shell by downloading a specially crafted file.
Upgraded WU-FTPD packages are available for Slackware 9.0 and-current. These fix a problem where an attacker could use aspecially crafted filename in conjunction with WU-FTPD'sconversion feature to execute arbitrary commands on the server.
These fix a buffer management error found in versions ofOpenSSH earlier than 3.7. The possibility exists that this errorcould allow a remote exploit, so we recommend all sites runningOpenSSH upgrade to the new OpenSSH package immediately.
To browse through our weekly Linux Advisory Watch newsletters,