COMMAND

    smtp-refuser

SYSTEMS AFFECTED

    Debian Linux

PROBLEM

    Former versions  of the  smtp-refuser package  came with unchecked
    logging facility  to /tmp/log.   This allowed  deleting arbitrary,
    root-owned files by any user who has write access to /tmp.

SOLUTION

    It is recommended you upgrade your smtp-refuser package.

    Debian GNU/Linux 2.1 alias slink
    --------------------------------

        ftp://ftp.debian.org/debian/dists/proposed-updates/smtp-refuser_1.0.1.dsc
        ftp://ftp.debian.org/debian/dists/proposed-updates/smtp-refuser_1.0.1.tar.gz

        ftp://ftp.debian.org/debian/dists/proposed-updates/smtp-refuser_1.0.1_alpha.deb

        ftp://ftp.debian.org/debian/dists/proposed-updates/smtp-refuser_1.0.1_i386.deb

        ftp://ftp.debian.org/debian/dists/proposed-updates/smtp-refuser_1.0.1_m68k.deb

        ftp://ftp.debian.org/debian/dists/proposed-updates/smtp-refuser_1.0.1_sparc.deb

    Debian GNU/Linux unstable alias potato
    --------------------------------------

        ftp://ftp.debian.org/debian/dists/unstable/main/source/mail/smtp-refuser_1.0.1.dsc
        ftp://ftp.debian.org/debian/dists/unstable/main/source/mail/smtp-refuser_1.0.1.tar.gz

        ftp://ftp.debian.org/debian/dists/unstable/main/binary-alpha/mail/smtp-refuser_1.0.1.deb

        ftp://ftp.debian.org/debian/dists/unstable/main/binary-arm/mail/smtp-refuser_1.0.1.deb

        ftp://ftp.debian.org/debian/dists/unstable/main/binary-i386/mail/smtp-refuser_1.0.1.deb

        ftp://ftp.debian.org/debian/dists/unstable/main/binary-m68k/mail/smtp-refuser_1.0.1.deb

        ftp://ftp.debian.org/debian/dists/unstable/main/binary-powerpc/mail/smtp-refuser_1.0.1.deb

        ftp://ftp.debian.org/debian/dists/unstable/main/binary-sparc/mail/smtp-refuser_1.0.1.deb