--------------------------------------------------------------------------
Debian Security Advisory DSA 364-2                     security@debian.org 
Debian -- Security Information                              Matt Zimmerman
August 8th, 2003                         Debian -- Debian security FAQ 
--------------------------------------------------------------------------

Package        : man-db

The previous man-db update (DSA-364-1) introduced an error which
resulted in a segmentation fault in the "mandb" command, which runs
part of the daily cron job.  This error was caused by allocating a
memory region which was one byte too small to hold the data written
into it.

For the current stable distribution (woody), these problems have been
fixed in version 2.3.20-18.woody.3.

The unstable distribution (sid) was not affected by this problem.

We recommend that you update your man-db package.

Upgrade Instructions
--------------------

wget url
        will fetch the file for you
dpkg -i file.deb
        will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
        will update the internal database
apt-get upgrade
        will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.

Debian GNU/Linux 3.0 alias woody
--------------------------------

  Source archives:

      
      Size/MD5 checksum:      632 227678648c57982f1f94c68d87e981d5
      
      Size/MD5 checksum:   106656 c97fb4fd035abc8d1b8424473491b898
      
      Size/MD5 checksum:   516391 5021f8a23cba9b14df39aa06407baefb

  Alpha architecture:

      
      Size/MD5 checksum:   543442 ad21bfda434e3a56db351b28811a4519

  ARM architecture:

      
      Size/MD5 checksum:   478496 33f5f7ec1baf4faae4fea10e95d0ae93

  Intel IA-32 architecture:

      
      Size/MD5 checksum:   472870 1cd24fded9ab886c695b4edadebf5246

  Intel IA-64 architecture:

      
      Size/MD5 checksum:   601620 48dc7ae70e91dd0c0f19e22a525150c2

  HP Precision architecture:

      
      Size/MD5 checksum:   521106 0359e7f0549e37fd7e214d0f29e7924b

  Motorola 680x0 architecture:

      
      Size/MD5 checksum:   467820 78e883311d0e79c6081fce9e735764f7

  Big endian MIPS architecture:

      
      Size/MD5 checksum:   516078 7f114851118f566c7804d6fcc083b84b

  Little endian MIPS architecture:

      
      Size/MD5 checksum:   517222 5006637a73f6f128f9499d1d15db482e

  PowerPC architecture:

      
      Size/MD5 checksum:   494048 aefd0057ae510a5224cf5832aade1349

  IBM S/390 architecture:

      
      Size/MD5 checksum:   479140 a2535ea11fc3db9db6e8e563448f56d8

  Sun Sparc architecture:

      
      Size/MD5 checksum:   479340 69bf25dd1287d7902e819dfcf7671669

  These files will probably be moved into the stable distribution on
  its next revision.

---------------------------------------------------------------------------------
For apt-get: deb  Debian -- Security Information  stable/updates main
For dpkg-ftp:    dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show ' and  http://packages.debian.org/

Debian: 'man-db' vulnerability

August 8, 2003
The previous man-db update (DSA-364-1) introduced an error whichresulted in a segmentation fault in the "mandb" command, which runspart of the daily cron job

Summary

The previous man-db update (DSA-364-1) introduced an error which
resulted in a segmentation fault in the "mandb" command, which runs
part of the daily cron job. This error was caused by allocating a
memory region which was one byte too small to hold the data written
into it.

For the current stable distribution (woody), these problems have been
fixed in version 2.3.20-18.woody.3.

The unstable distribution (sid) was not affected by this problem.

We recommend that you update your man-db package.

Upgrade Instructions
--------------------

wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
will update the internal database
apt-get upgrade
will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.

Debian GNU/Linux 3.0 alias woody
--------------------------------

Source archives:


Size/MD5 checksum: 632 227678648c57982f1f94c68d87e981d5

Size/MD5 checksum: 106656 c97fb4fd035abc8d1b8424473491b898

Size/MD5 checksum: 516391 5021f8a23cba9b14df39aa06407baefb

Alpha architecture:


Size/MD5 checksum: 543442 ad21bfda434e3a56db351b28811a4519

ARM architecture:


Size/MD5 checksum: 478496 33f5f7ec1baf4faae4fea10e95d0ae93

Intel IA-32 architecture:


Size/MD5 checksum: 472870 1cd24fded9ab886c695b4edadebf5246

Intel IA-64 architecture:


Size/MD5 checksum: 601620 48dc7ae70e91dd0c0f19e22a525150c2

HP Precision architecture:


Size/MD5 checksum: 521106 0359e7f0549e37fd7e214d0f29e7924b

Motorola 680x0 architecture:


Size/MD5 checksum: 467820 78e883311d0e79c6081fce9e735764f7

Big endian MIPS architecture:


Size/MD5 checksum: 516078 7f114851118f566c7804d6fcc083b84b

Little endian MIPS architecture:


Size/MD5 checksum: 517222 5006637a73f6f128f9499d1d15db482e

PowerPC architecture:


Size/MD5 checksum: 494048 aefd0057ae510a5224cf5832aade1349

IBM S/390 architecture:


Size/MD5 checksum: 479140 a2535ea11fc3db9db6e8e563448f56d8

Sun Sparc architecture:


Size/MD5 checksum: 479340 69bf25dd1287d7902e819dfcf7671669

These files will probably be moved into the stable distribution on
its next revision.

Severity
Package : man-db

Related News