Visit our newest sister site!
Hundreds of free aircraft flight manuals
Civilian • Historical • Military • Declassified • FREE!

TUCoPS :: Linux :: Slackware :: hack0652.htm

mc (SSA:2004-136-01)
[slackware-security] mc (SSA:2004-136-01)

Hash: SHA1

[slackware-security]  mc (SSA:2004-136-01)

New mc packages are available for Slackware 9.0, 9.1, and -current to
fix security issues that These could lead to a denial of service or the
execution of arbitrary code as the user running mc.

Sites that use mc should upgrade to the new mc package.

More details about this issue may be found in the Common
Vulnerabilities and Exposures (CVE) database: 

Here are the details from the Slackware 9.1 ChangeLog:
Fri May 14 15:11:37 PDT 2004
patches/packages/mc-4.6.0-i486-2.tgz:  Patched to fix buffer overflow,
  format string, and temporary file creation vulnerabilities found by
  Andrew V. Samoilov and Pavel Roskin.  These could lead to a denial of
  service or the execution of arbitrary code as the user running mc.
  For more details, see: 
  (* Security fix *)

Where to find the new packages:

Updated package for Slackware 9.0: es/mc-4.6.0-i386-2.tgz

Updated package for Slackware 9.1: es/mc-4.6.0-i486-2.tgz

Updated package for Slackware -current: p/mc-4.6.0-i486-2.tgz

MD5 signatures:

Slackware 9.0 package:
e74a8dcdd90f2846e4bbac75a154ad39  mc-4.6.0-i386-2.tgz

Slackware 9.1 package:
ac580a4f3556aaae92be0fd754866a55  mc-4.6.0-i486-2.tgz

Slackware -current package:
ce9b9ab338ee114c5d9038e8420db1e7  mc-4.6.0-i486-2.tgz

Installation instructions:

Upgrade the mc package as root:
# upgradepkg mc-4.6.0-i486-2.tgz


Slackware Linux Security Team 

| To leave the slackware-security mailing list:                          |
| Send an email to with this text in the body of |
| the email message:                                                     |
|                                                                        |
|   unsubscribe slackware-security                                       |
|                                                                        |
| You will get a confirmation message back containing instructions to    |
| complete the process.  Please do not reply to this email address.      |

Version: GnuPG v1.2.4 (GNU/Linux)


TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2015 AOH