[SECURITY] Fedora Core 1 Update: mc-4.6.0-17.fc1

[Jakub Jelinek]

---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-272
2004-09-01
---------------------------------------------------------------------

Product     : Fedora Core 1
Name        : mc
Version     : 4.6.0                      
Release     : 17.fc1                  
Summary     : User-friendly text console file manager and visual shell.
Description :
Midnight Commander is a visual shell much like a file manager, only
with many more features. It is a text mode application, but it also
includes mouse support if you are running GPM. Midnight Commander's
best features are its ability to FTP, view tar and zip files, and to
poke into RPMs for specific files.

---------------------------------------------------------------------
Update Information:

Security fix for http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127973.
CAN-2004-0494 extfs vfs vulnerability in mc
---------------------------------------------------------------------
* Sat Aug 21 2004 Jakub Jelinek <jakub at redhat.com> 4.6.0-17.fc1

- 3 more quoting omissions in a.in

* Sat Aug 21 2004 Jakub Jelinek <jakub at redhat.com> 4.6.0-17

- fix shell quoting in extfs perl scripts
  (Leonard den Ottolander, #127973, CAN-2004-0494)

* Tue Jun 15 2004 Elliot Lee <sopwith at redhat.com>

- rebuilt


---------------------------------------------------------------------
This update can be downloaded from:
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/

49f1c1f5234fc1d81dd3ffa821e04747  SRPMS/mc-4.6.0-17.fc1.src.rpm
78953790d5f583a77788ad4510cd1fe7  x86_64/mc-4.6.0-17.fc1.x86_64.rpm
1a5730f349b0505fac9cc78425402b8d  x86_64/debug/mc-debuginfo-4.6.0-17.fc1.x86_64.rpm
a731762be96fb7a2e00f4c8229f1d8b7  i386/mc-4.6.0-17.fc1.i386.rpm
cbc9a3ba4897d0acc5a7589a8668476b  i386/debug/mc-debuginfo-4.6.0-17.fc1.i386.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.  
---------------------------------------------------------------------
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.fedoraproject.org/pipermail/announce/attachments/20040901/998b2957/attachment.bin