[cobalt-users] the "joe" editor

[Jeff Lasman <jblists@xxxxxxxxxxxxx>]

Some cobalt users may have downloaded the "joe" editor from our public
ftp site at "ftp.nobaloney.net".  That version is NOT the latest, and
does have the vulnerability recently mentioned at
"http://www.linuxsecurity.com/advisories/redhat_advisory-1182.html";.

The ftp.nobaloney.net anonymous server is now done, and when I start it
up again, it will have the new rpms for "joe" for the i386 platform.

Please note that the vulnerability only exists if you allow shell access
to non-trusted individuals.  If you have my version of "joe" on your
system, and you allow shell access to non-trusted users, you should
immediately update the rpm or remove it from your system.

If you've got a mips-processor-compiled version of joe (also uploadable
from ftp.nobaloney.net), and you allow shell access to non-trusted
individuals, then you should remove it from your system, as there has
been no update published.  I may or may not publish an updated RPM for
mips processors, depending on how many requests I receive (I did NOT
publish the original).

If I installed joe on your system, and you do not feel comfortable with
making any changes yourself, please contact me and I'll be happy to
remove it or update it for you, whichever your prefer.

Please write me directly, as I'm quite behind on reading this list.

Thanks.

Jeff
-- 
Jeff Lasman <jblists@xxxxxxxxxxxxx>
nobaloney.net
P. O. Box 52672
Riverside, CA  92517
voice: (909) 787-8589  *  fax: (909) 782-0205