[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[cobalt-users] Corrupt PKG's



Just a few moments our brand new raq4r arrived. When trying to install the
patches which were released i get an error saying that this packagefile is
corrupt.
(http://ftp.cobalt.com/pub/packages/raq4/eng/RaQ4-All-Security-1.0.1-8747.pk
g Security: ncurses Update 1.0.1 HTTP RaQ4-All-Security-1.0.1-8747.pkg
Posted: January 25, 2001  FTP Point your FTP client to ftp://ftp.cobalt.com
Size: 1,038,655 bytes There used to be an overflowable buffer in the part of
the ncurses library handling cursor movement. Attackers can force a
privileged application to use their own termcap file containing a special
terminal entry which will trigger the ncurses vulnerability, allowing them
to execute arbitrary code with the privileges of the exploited binary. )
is there anyway to get a working version of this patch ?


Furthermore I need to know wheter I can continue with installing the rest of
the released updates ??

I would to thank you in advance for your answer.

Robbert