-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 --------------------------------------------------------------------------
   Turbolinux Security Advisory TLSA-2005-28
   http://www.turbolinux.co.jp/security/
                                             security-team@turbolinux.co.jp
 --------------------------------------------------------------------------

 Original released date: 24 Feb 2005
 Last revised: 24 Feb 2005

 Package: mc

 Summary: Multiple vulnerabilities exist in mc

 More information:
    Midnight Commander is a visual shell much like a file manager, only with many more features.

 Impact:
    Please refer to the "References" section.

 Affected Products:
    - Turbolinux 8 Server
    - Turbolinux 8 Workstation
    - Turbolinux 7 Server
    - Turbolinux 7 Workstation

 Solution:
    Please use the turbopkg (zabom) tool to apply the update. 
 ---------------------------------------------
 # turbopkg
 or
 # zabom update mc
 ---------------------------------------------


 <Turbolinux 8 Server>

   Source Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/SRPMS/mc-4.5.54-7.src.rpm
      5031778 a468d3f6b37762eef7330220e323e637

   Binary Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/RPMS/mc-4.5.54-7.i586.rpm
      1212924 0b78b5e31b3d4bfcc4bf4077acc62ec3

 <Turbolinux 8 Workstation>

   Source Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/SRPMS/mc-4.5.54-7.src.rpm
      5031778 6e402a0b291a9bbe518bda846911d9e3

   Binary Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/RPMS/mc-4.5.54-7.i586.rpm
      1213355 3f07f6545c4c508ec7a7e3946e3e2d41

 <Turbolinux 7 Server>

   Source Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/SRPMS/mc-4.5.54-7.src.rpm
      5031778 d15b6adda6fa80e467c0f670ea07c696

   Binary Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/RPMS/mc-4.5.54-7.i586.rpm
      1206494 30c85664c55af8a14c5e356feea6d8a0

 <Turbolinux 7 Workstation>

   Source Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/7/updates/SRPMS/mc-4.5.54-7.src.rpm
      5031778 e8d63890c07596713638d31338de0fb7

   Binary Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/7/updates/RPMS/mc-4.5.54-7.i586.rpm
      1206064 eb96f4e80bb6035155413bdd67772523


 References:

 CVE
   [CAN-2004-1004]
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-1004
   [CAN-2004-1005]
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-1005
   [CAN-2004-1009]
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-1009
   [CAN-2004-1090]
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-1090
   [CAN-2004-1091]
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-1091
   [CAN-2004-1092]
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-1092
   [CAN-2004-1093]
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-1093
   [CAN-2004-1174]
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-1174
   [CAN-2004-1175]
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-1175
   [CAN-2004-1176]
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-1176

 --------------------------------------------------------------------------
 Revision History
    24 Feb 2005 Initial release
 --------------------------------------------------------------------------

 Copyright(C) 2005 Turbolinux, Inc. All rights reserved. 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.7 (GNU/Linux)

iD8DBQFCHVICK0LzjOqIJMwRAvZQAJ4vTXc9WERMsaCdWGdGS3sVc/i9HgCfcRhP
Vtept5RS0RW1WKgu8FI+Bf0=
=V7q4
-----END PGP SIGNATURE-----