-----BEGIN PGP SIGNED MESSAGE----- A message was posted to the Bugtraq list on Friday, June 23 describing a buffer overrun in pine that can be used to gain an sgid mail shell if Pine is sgid mail. Jaldhar Vyas (unofficial unofficial maintainer) has released new Pine packages to address this issue in Debian. Binaries for potato and woody have been added to my Pine mirror at http://members.mint.net/frodo/pine/
If you're running slink or earlier you should manually chmod -s /usr/bin/pine. noah PGP Public Key available at http://web.morgul.net/~frodo/mail.html or by `finger -l [EMAIL PROTECTED] -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 5.0i for non-commercial use Charset: noconv iQCVAwUBOVejKodCcpBjGWoFAQFSQAP/a7uH9N0+elJcIhv/eycXliP70qd1ktBc 2nNTCR0v5Nhpgk6JsGOuKnNrewKf8R/RHCcxtaUZnZq+PM8YI1s9Vy7jDV83yABh 3WL1LWUZS+xdpVmUPNrnMdTdex0JOrBdKli6uj7UrMX6shaNEnH/ir7PKFKqRoHZ CFeOmxM3u9E= =7LZp -----END PGP SIGNATURE-----
