Subject: 4.44 vs 4.53 bug ?

From: Bill Schoolcraft <[email-masked]>
Date: Mon, 15 Sep 2003 09:05:25 +0000 (GMT)

Hello,

In using version 4.44 on Linux, when I'd move through my inbox
the whole line would "highlight"

In using 4.53 on FreeBSD-4.8 when I move through my mail in my
inbox only the cursor on the far left hand side moves, the full
line is not highlighted.

Is this a bug in 4.53 or a FreeBSD "TERM" issue?

Thanks for any insight.

|<----------------------"Word-Wrap-At-72-Please"---------------------->|
Bill Schoolcraft
PO Box 210076                 -o)
San Francisco CA 94121         /\
"UNIX, A Way Of Life."        _\_v

-- 
-----------------------------------------------------------------
 For information about this mailing list, and its archives, see: 
 http://www.washington.edu/pine/pine-info/
-----------------------------------------------------------------

---

From: Eduardo Chappa <[email-masked]>
Date: Mon, 15 Sep 2003 09:13:55 -0700 (PDT)

*** Bill Schoolcraft ([email-masked]) wrote in the pine-info list today:

:) In using version 4.44 on Linux, when I'd move through my inbox the
:) whole line would "highlight"
:)
:) In using 4.53 on FreeBSD-4.8 when I move through my mail in my inbox
:) only the cursor on the far left hand side moves, the full line is not
:) highlighted.

Bill,

  If you are sorting your folders by thread, it may be the index display
of it. I recall some bugs in that. You may want to try doing the same in
version 4.58, and if you can reporduce the bug there, we would like to
hear about it again.

Eduardo
http://www.math.washington.edu/~chappa/pine/

---

From: Bill Schoolcraft <[email-masked]>
Date: Mon, 15 Sep 2003 09:36:22 +0000 (GMT)

> version 4.58, and if you can reporduce the bug there, we would like to

Eduardo,

I'm not sorting or doing anything special, just opening my
mailbox, or inbox as you would call in in Pine and when I
normally scroll down with the [down] arrow the whole line would
become highlighted, now only the cursor on the far left side
moves downward when I hit the down arrow.

(A) Could this be a configuration option I missed or...

(B) Could I run my .pinerc off another machine with an earlier
version to see if it's an option not configured in the setup?

---

From: Ron Wickersham <[email-masked]>
Date: Mon, 15 Sep 2003 11:24:16 -0700 (PDT)

On Mon, 15 Sep 2003, Bill Schoolcraft wrote:

---snip---

> (A) Could this be a configuration option I missed or...

check the configuration option "assume-slow-link".   if it is checked
you'll get the cursor-only behavior.

-ron

---

From: Bill Schoolcraft <[email-masked]>
Date: Mon, 15 Sep 2003 11:51:14 +0000 (GMT)

> you'll get the cursor-only behavior.

Thanks Ron, but it's not checked.  I wasn't aware of that
though, thanks for the heads-up on that.

---

From: Eduardo Chappa <[email-masked]>
Date: Mon, 15 Sep 2003 12:06:15 -0700 (PDT)

:) At Mon, 15 Sep 2003 it looks like Ron Wickersham composed:
:)
:) > > now only the cursor on the far left side moves downward when I hit
:) > > the down arrow.
:) > >
:) > > (A) Could this be a configuration option I missed or...
:) >
:) > check the configuration option "assume-slow-link".   if it is checked
:) > you'll get the cursor-only behavior.
:) >
:)
:) Thanks Ron, but it's not checked.  I wasn't aware of that though,
:) thanks for the heads-up on that.

Hmm.. That looks like a good guess of Ron to me. Here's what could be
happening. There is code in Pine that activates this behavior, either if
you have the assume-slow-link feature on or if Pine determines that the
tty is slow. The only way to deactivate this is by modifying the source
code. Specifically, you need to edit the file mailindx.c and change the
line

        if(F_ON(F_FORCE_LOW_SPEED,ps_global) || ps_global->low_speed){

to

        if(F_ON(F_FORCE_LOW_SPEED,ps_global)){

This will solve the problem in the index screen. You need to make similar
changes in the files mailpart.c and mailview.c too.

Eduardo

---

From: "Mike A. Harris" <[email-masked]>
Date: Mon, 15 Sep 2003 23:42:45 -0400 (EDT)

On Mon, 15 Sep 2003, Bill Schoolcraft wrote:

>Date: Mon, 15 Sep 2003 09:05:25 +0000 (GMT)
>From: Bill Schoolcraft <[email-masked]>
>To: Pine Discussion Forum <[email-masked]>
>Content-Type: TEXT/PLAIN; charset=US-ASCII
>Subject: 4.44 vs 4.53 bug ?
>
>Hello,
>

For those who are not aware....

Pine 4.56 and all prior versions have just recently had a major 
security vulnerability reported to bugtraq.  These new 
vulnerabilities have been fixed in pine 4.58 which was released a 
few days ago by the pine team.

If you are not running pine 4.58, then your systems may be 
vulnerable.  The vulnerability allows remote attackers to execute 
arbitrary code as the user ID that pine is running as.

Check to make sure that you are running the latest pine updates
from your OS vendor, and if not, upgrade to their latest updates 
as soon as possible to ensure you are not affected by these 
vulnerabilties.  Some distribution vendors, such as Red Hat, have 
elected to backport the security fixes from pine 4.58 and release 
updated pine 4.44 packages for the supported distribution 
releases, while other vendors/distributions may have chosen to 
update to pine 4.58 instead.

Either way, everyone should upgrade pine to vendor supplied 
updates which patch the security issues, or upgrade to pine 4.58 
as soon as possible.

Some example code was posted to BUGTRAQ today which could be used 
as a worm to exploit these pine vulnerabilities.

If you do not have the proper administrative rights to upgrade 
pine on a given system, be sure that your system administrators 
are aware of this serious security issue by forwarding this email 
to them or pointing them to the advisories available on 
securityfocus.com or http://cve.mitre.org

Let's try to help keep email worms out of Linux-land and keep
them in Windows.  ;o)

-- 
Mike A. Harris     ftp://people.redhat.com/mharris
OS Systems Engineer - XFree86 maintainer - Red Hat