Public SourceMage Discussion List

[Alan Ross <alan AT rebeluk.com>]

On Monday 03 Mar 2003 17:18, Tom Garland wrote:
> On Mon, 2003-03-03 at 06:24, Jason Flatt wrote:
>
> <snip>
>
> > I submitted a change in the way espgs is built back on about the 17th of
> > February to build shared objects rather than static.  The reason for this
> > is because gsview will only work with a shared object compiled
> > ghostscript.
> >
> > I personally am having no problems using foomatic w/espgs in this manner,
> > but my testbed is rather small, and there may have been conditions in
> > which it doesn't work that I don't have.
> >
> > I suspect this theory less, but as the version of foomatic that our spell
> > is based on is the nightly updates, it could be possible that a recently
> > submitted program change and then a local recompile might have introduced
> > a problem.  Therefore, if you have recompiled foomatic in the last week
> > or so, you might try recompiling foomatic again to see if the problem
> > goes away.
>
> After reviewing this thread, having cups not printing for a while and
> trying to regress versions of cups, gimp-print and espgs with no success
> I found a solution!
>
> The last change to espgs is the cause. By casting codex/stable/espgs,
> codex/test/espgs has already been updated, cups resumed working.
>
> Espgs-7.05.5 in the stable grimoire has a good build function.
> Espgs-7.05.6 in both the test and devel have an updated and cause cups
> to fail. By changing the version in stable to espgs-7.05.6 it cast fine
> and cups worked, of course I ignored the md5 error when casting.
>
> I don't have foomatic installed.
>
> Thanks to everyone who submitted mail about this problem, they gave me
> enough clues to get this fixed for me, I hope it works for others. :)

I cast the espgs spell from the stable codex everything works fine again. 
Thanks for the hint Tom. Espgs is going on hold for the forseeable future. 
Also thanks to everyone else who contributed, it's nice to know this 
distribution has so many committed maintainers and users.

--alan
>From eric AT sandall.us  Mon Mar  3 13:47:10 2003
Return-Path: <eric AT sandall.us>
Delivered-To: sm-discuss AT lists.ibiblio.org
Received: from sandall.us (a052082.dsl.fsr.net [12.32.52.82])
        by happyhouse.metalab.unc.edu (Postfix) with ESMTP id 7142B20035
        for <sm-discuss AT lists.ibiblio.org>;
        Mon,  3 Mar 2003 13:47:10 -0500 (EST)
Received: from sandall.us ([12.32.52.82])
        by sandall.us with smtp (Exim 4.12)
        id 18pvTT-0007XJ-00
        for sm-discuss AT lists.ibiblio.org; Mon, 03 Mar 2003 11:19:43 -0800
Received: from 134.121.46.137
        (SquirrelMail authenticated user sandalle)
        by mail.sandall.us with HTTP;
        Mon, 3 Mar 2003 11:19:43 -0800 (PST)
Message-ID: <33806.134.121.46.137.1046719183.squirrel AT mail.sandall.us>
Date: Mon, 3 Mar 2003 11:19:43 -0800 (PST)
From: "Eric Sandall" <eric AT sandall.us>
To: " Source Mage - Discuss" <sm-discuss AT lists.ibiblio.org>
X-Priority: 3
Importance: Normal
X-Mailer: SquirrelMail (version 1.2.11)
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Subject: [SM-Discuss] Sendmail exploit affects SMGL
X-BeenThere: sm-discuss AT lists.ibiblio.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Public SourceMage Discussion List <sm-discuss.lists.ibiblio.org>
List-Unsubscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-discuss>,
        <mailto:sm-discuss-request AT lists.ibiblio.org?subject=unsubscribe>
List-Archive: <https://lists.ibiblio.org/sympa/arc/sm-discuss>
List-Post: <mailto:sm-discuss AT lists.ibiblio.org>
List-Help: <mailto:sympa AT lists.ibiblio.org?subject=HELP>
List-Subscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-discuss>,
        <mailto:sm-discuss-request AT lists.ibiblio.org?subject=subscribe>
X-List-Received-Date: Mon, 03 Mar 2003 18:47:11 -0000

http://www.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21950

Sendmail 8.12.8 has been released to fix this, or a patch for prior
versions can be downloaded (we have 8.12.7 in devel)

Excerpt from alert:

------
Sendmail urges all users to either upgrade to Sendmail 8.12.8 or apply a
patch
for 8.12.x (or for older versions). Updates can be downloaded from
ftp.sendmail.org or any of its mirrors (try a mirror near to you first), see
http://www.sendmail.org/ for details. Remember to check the PGP signatures of
patches or releases obtained. For those not running the open source version,
check with your vendor for a patch. Sendmail, Inc., the commercial
provider of
the sendmail MTA, is providing a binary patch for their commercial customers.
The patch can be downloaded from Sendmail's Web site at:
http://www.sendmail.com/

Sendmail versions that are patched will record the following log entry when
exploitation is attempted: "Dropped invalid comments from header address".
------

-One of Four
a.k.a. sandalle

-- 
PGP Key 0x5C8D199A5A317214
http://search.keyserver.net:11371/pks/lookup?op=get&search=0x5A317214

Eric Sandall                      |  Source Mage GNU/Linux Developer
eric AT sandall.us                   |  http://www.sourcemage.org/
http://www.sandall.us/~sandalle/  |  SysAdmin @ Inst. Shock Physics @ WSU
http://counter.li.org/  #196285   |  http://www.shock.wsu.edu/