Return-Path: <ghudson@MIT.EDU>
Received: from grand-central-station.mit.edu by po11.mit.edu (8.9.2/4.7) id RAA29901; Wed, 26 Jun 2002 17:54:58 -0400 (EDT)
Received: from melbourne-city-street.mit.edu (MELBOURNE-CITY-STREET.MIT.EDU [18.7.21.86])
	by grand-central-station.mit.edu (8.9.2/8.9.2) with ESMTP id RAA15271
	for <release-announce@MIT.EDU>; Wed, 26 Jun 2002 17:54:10 -0400 (EDT)
Received: from equal-rites.mit.edu (EQUAL-RITES.MIT.EDU [18.18.1.59])
	by melbourne-city-street.mit.edu (8.9.2/8.9.2) with ESMTP id RAA07529
	for <release-announce@MIT.EDU>; Wed, 26 Jun 2002 17:54:10 -0400 (EDT)
Received: (from ghudson@localhost) by equal-rites.mit.edu (8.9.3)
	id RAA01635; Wed, 26 Jun 2002 17:54:10 -0400
Date: Wed, 26 Jun 2002 17:54:10 -0400
Message-Id: <200206262154.RAA01635@equal-rites.mit.edu>
From: Greg Hudson <ghudson@MIT.EDU>
To: release-announce@MIT.EDU
Subject: Security updates for Athena 9.0 and 8.4

Tonight we will be releasing a Linux 9.0 patch release (9.0.28) which
upgrades the Red Hat apache RPM on systems which have it installed.

Next Monday, June 24, we will be releasing an IRIX 9.0 patch release
(9.0.28) to fix an AFS denial of service attack vulnerability, fix a
remote compromise in the native xfsmd service (by turning that service
off), and fix a local security hole in the permissions on an icon.

If you have a Solaris 8.4 machine and don't want to be vulnerable to
the AFS denial of service attack, you can update your /kernel/fs/afs
from the system packs.