Bug 9921
| Summary: | security bug in nmh | ||
|---|---|---|---|
| Product: | [Retired] Red Hat Linux | Reporter: | Healfdene Goguen <hhg> |
| Component: | nmh | Assignee: | Florian La Roche <laroche> |
| Status: | CLOSED ERRATA | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | 5.2 | ||
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| URL: | ftp://ftp.mhost.com/pub/nmh/nmh-1.0.3.tar.gz | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2000-03-02 17:30:40 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
nmh wasn't shipped in 4.2. changed to nmh component and more reasonable version. This was fixed in errata released on 06-Mar-2000. Commit pushed to master at https://github.com/openshift/openshift-docs https://github.com/openshift/openshift-docs/commit/6e6afe2b0d3454e61c517e372c484371ec015bee Merge pull request #10657 from openshift/revert-10656-Issue9921 Revert "Change info for options field" |
Here follows the text of a security bug in nmh posted on comp.mail.mh Subject: nmh security update Date: 28 Feb 2000 18:38:56 +0100 From: Ruud de Rooij <*@spam.ruud.org> Organization: ruud.org Newsgroups: comp.mail.mh -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Versions prior to 1.0.3 of the nmh package contained a vulnerability where incoming mail messages with carefully designed MIME headers could cause nmh's mhshow command to execute arbitrary shell code. This bug has been fixed in nmh 1.0.3 and we encourage you to upgrade immediately. The fixed package is available at ftp://ftp.mhost.com/pub/nmh/nmh-1.0.3.tar.gz The MD5sum of nmh-1.0.3.tar.gz is 02519bf8f7ff8590ecfbee9f9500ea07. For the nmh authors, Ruud de Rooij. - -- ruud de rooij | ruud | ruud | http://ruud.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.1 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE4uq60gWpMJ0LP/ksRAohGAJ90IJAVvyF+ouPkWEFbi5bEFJrhZwCg2yoz XhNPTGQCtLHmKGcMsEuOUCE= =jZwy -----END PGP SIGNATURE-----